last executing test programs: 9.072146651s ago: executing program 0 (id=557): socket$inet(0xa, 0x801, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0xd2, 0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) 6.720070967s ago: executing program 0 (id=560): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='6\x00'/12, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c736"], 0x20) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) pipe(&(0x7f0000000880)) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000300000004000100050000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764beb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.084159571s ago: executing program 0 (id=568): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="b011d0cfce62e9195a2a2d9c41189f5896679b21a1f6a2c8a136d01bf5c619a4", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)}, 0x81}], 0x2, 0x0, 0x0) 5.023743961s ago: executing program 0 (id=573): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x59) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.819954227s ago: executing program 4 (id=576): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="005b4aa3d49100dc50ecc3b4000082", 0xf) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0xfb, 0x3, 0x2, 0x0, 0x3, 0x25dfdbfe}, 0x10}}, 0x4000) 4.052006084s ago: executing program 0 (id=578): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x24}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$inet6(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0xe, 0xfffff800, 0x31384142, 0x33363248, [0x4, 0xa], [0x58e3, 0x741], 0x1}}) close_range(r8, 0xffffffffffffffff, 0x0) 3.9008631s ago: executing program 4 (id=580): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='6\x00'/12, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c736"], 0x20) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) pipe(&(0x7f0000000880)) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000300000004000100050000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764beb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.522385719s ago: executing program 5 (id=585): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="b011d0cfce62e9195a2a2d9c41189f5896679b21a1f6a2c8a136d01bf5c619a4", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x81}], 0x2, 0x0, 0x0) 3.43173911s ago: executing program 2 (id=586): r0 = socket$igmp6(0xa, 0x3, 0x2) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) 3.414904177s ago: executing program 3 (id=587): socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendto$unix(0xffffffffffffffff, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571c4cf752fefd3607634e97c95c0ce2253a7d9322c7e510fe3eae9a6737a04e5253e90a4eb00b56b6f5498211454d0547d5708a19372841a3f", 0x4d, 0x0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r4, &(0x7f0000000780)="72a9aa0490741f008e31e0e66b75411ad5aca5de7218cdd79f408a38ee76c99b0a5819d7d834863dd3b5d062c7e043624f475d1e6e474eb1b26b9d46a7878ba6a7fda03a685d315fed33dd87c8850f506ba8e2e0", &(0x7f0000000600)=""/91}, 0x20) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.232068095s ago: executing program 4 (id=588): socket$inet(0xa, 0x801, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) 3.231797413s ago: executing program 5 (id=589): r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000140)=0x74eb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) chown(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 3.230199839s ago: executing program 1 (id=590): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x5) close(r2) writev(r1, &(0x7f0000000240)=[{&(0x7f00000004c0)="6494815c05", 0x5}], 0x1) 2.931662017s ago: executing program 3 (id=591): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1d) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x4040c0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='huge=always']) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) 2.905493746s ago: executing program 2 (id=592): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="005b4aa3d49100dc50ecc3b4000082", 0xf) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0xfb, 0x3, 0x2, 0x0, 0x3, 0x25dfdbfe}, 0x10}}, 0x4000) 2.818134715s ago: executing program 4 (id=593): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000fe225874112376afa80e2fc9eb93a91bfed8559c45337e6aca38b0cc6008b9908075d1bb34c7b24c7f", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf251600000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802"], 0x28}, 0x1, 0x0, 0x0, 0xc814}, 0x8000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000640)={0x0, 0x6, 0x1, "af"}, 0x9) ioprio_set$pid(0x1, 0x0, 0x4007) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) memfd_create(0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x1000f) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x26c0}}, 0x4010) 2.68380068s ago: executing program 1 (id=594): socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendto$unix(0xffffffffffffffff, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571c4cf752fefd3607634e97c95c0ce2253a7d9322c7e510fe3eae9a6737a04e5253e90a4eb00b56b6f5498211454d0547d5708a19372841a3f00000000a44c9b9228", 0x56, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r4, &(0x7f0000000780)="72a9aa0490741f008e31e0e66b75411ad5aca5de7218cdd79f408a38ee76c99b0a5819d7d834863dd3b5d062c7e043624f475d1e6e474eb1b26b9d46a7878ba6a7fda03a685d315fed33dd87c8850f506ba8e2e0", &(0x7f0000000600)=""/91}, 0x20) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.534728963s ago: executing program 2 (id=595): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='6\x00'/12, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b49"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.450643938s ago: executing program 3 (id=596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, 0x0, 0x20044002) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 1.449894124s ago: executing program 5 (id=597): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000005000000000600150002000000140016801000"], 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 946.230788ms ago: executing program 1 (id=598): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x1000}) 826.340536ms ago: executing program 3 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0503000000000000000007000000080003", @ANYRES32=r2], 0x1c}}, 0x20008040) 825.611318ms ago: executing program 2 (id=600): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) 778.31359ms ago: executing program 4 (id=601): syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2a0085e, &(0x7f0000000080)=ANY=[], 0x1, 0x229, &(0x7f0000000140)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 727.531034ms ago: executing program 5 (id=602): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendto$unix(0xffffffffffffffff, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571", 0x15, 0x0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000780)="72a9aa0490741f008e31e0e66b75411ad5aca5de7218cdd79f408a38ee76c99b0a5819d7d834863dd3b5d062c7e043624f475d1e6e474eb1b26b9d46a7878ba6a7fda03a685d315fed33dd87c8850f506ba8e2e0076b97aee2f7a6fc0106b351558c39688f2880aa54e140231c6a8dfb85835967759752d3e334828c64bc81b271fb55d53de73536cc55f079184772f3d019c3d3ff6d7ac4a10b683562dd4ae5466394fed18aad", &(0x7f0000000600)=""/91}, 0x20) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 685.002559ms ago: executing program 1 (id=603): socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendto$unix(0xffffffffffffffff, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571c4cf752fefd3607634e97c95c0ce2253a7d9322c7e510fe3eae9a6737a04e5253e90a4eb00b56b6f5498211454d0547d5708a19372841a3f", 0x4d, 0x0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r4, &(0x7f0000000780)="72a9aa0490741f008e31e0e66b75411ad5aca5de7218cdd79f408a38ee76c99b0a5819d7d834863dd3b5d062c7e043624f475d1e6e474eb1b26b9d46a7878ba6a7fda03a685d315fed33dd87c8850f506ba8e2e0", &(0x7f0000000600)=""/91}, 0x20) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 572.054372ms ago: executing program 3 (id=604): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x3d18, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 451.977459ms ago: executing program 2 (id=605): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='6\x00'/12, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b"], 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) pipe(&(0x7f0000000880)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 410.78156ms ago: executing program 5 (id=606): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x73622a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 376.047568ms ago: executing program 1 (id=607): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="005b4aa3d49100dc50ecc3b4000082", 0xf) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0xfb, 0x3, 0x2, 0x0, 0x3, 0x25dfdbfe}, 0x10}}, 0x4000) 278.565862ms ago: executing program 3 (id=608): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1d) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x4040c0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='huge=always']) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) 166.230752ms ago: executing program 2 (id=609): r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000140)=0x74eb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r0, 0x0, 0x0) fchdir(r6) chown(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 141.946104ms ago: executing program 1 (id=610): socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendto$unix(0xffffffffffffffff, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571c4cf752fefd3607634e97c95c0ce2253a7d9322c7e510fe3eae9a6737a04e5253e90a4eb00b56b6f5498211454d0547d5708a19372841a3f00000000a44c9b9228", 0x56, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r4, &(0x7f0000000780)="72a9aa0490741f008e31e0e66b75411ad5aca5de7218cdd79f408a38ee76c99b0a5819d7d834863dd3b5d062c7e043624f475d1e6e474eb1b26b9d46a7878ba6a7fda03a685d315fed33dd87c8850f506ba8e2e0", &(0x7f0000000600)=""/91}, 0x20) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 141.289028ms ago: executing program 5 (id=611): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r2 = syz_open_dev$video4linux(&(0x7f0000002d80), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0x80405600, &(0x7f0000002dc0)={0x8, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x3, 0x0, 0x0, 0x0, 0x10, 0x4, "e6035a2f"}, 0x4}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_crash_loaded', 0x0, 0x1a) getdents(r3, &(0x7f0000000140)=""/177, 0xb1) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000300)={0x1, 0x0, &(0x7f00000002c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={0x0, r5, 0x1, 0x0, 0x3a9e9908}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f00000000c0)={r5}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 61.23861ms ago: executing program 0 (id=612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x7351, 0x8001) ioctl$FITRIM(r3, 0x40406f06, &(0x7f00000000c0)={0x86, 0x7e4000, 0x100}) sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(&(0x7f0000000300)=@md0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)='v7\x00', 0x20e012, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) mkdir(&(0x7f00000004c0)='./file0\x00', 0x11) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532322c00c2d782bf211d540c9173951b94fe0a3d3fac46539a1e61021e272a0e23058b5596103200516ba1a0c7f94f16a6ab18c53d45582b69a59ea0d8853a0415f8fe7f957b294642bf5741b75fe165f54559db753ef16fae6ab98c1ce55169e6a85e9d1414a3d3ce6b370df4fc280e2048f6bcf1598b4098cf092fabfa430b5f47a7f6ec21e12c05797d468373eff12efef1b5dda500404b05000103a6c8fcce2f600ef2dad3c83cb3f92adef0582906488d3945ea1a103b0218ecf9c0ea2c5bee923adf9c119feadab481cf12b6b2e6e127"]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000090000000060a010400000000000000000100000008000b400000000068000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c0002800800018000000000340001800c000100626974776973650024000280080003400000000408000240000000000800064000000000080001400000002009"], 0x104}}, 0x0) 0s ago: executing program 4 (id=613): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000fe225874112376afa80e2fc9eb93a91bfed8559c45337e6aca38b0cc6008b9908075d1bb34c7b24c7f", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf251600000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802"], 0x28}, 0x1, 0x0, 0x0, 0xc814}, 0x8000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000640)={0x0, 0x6, 0x1, "af"}, 0x9) ioprio_set$pid(0x1, 0x0, 0x4007) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3"], 0x25c}}, 0x0) memfd_create(0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x1000f) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a7260180"], 0x26c0}}, 0x4010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 84.183225][ T5810] cgroup: Unknown subsys name 'net' [ 84.294539][ T5810] cgroup: Unknown subsys name 'cpuset' [ 84.304241][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.906666][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.357241][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.365966][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.374082][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.382817][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.399861][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.491302][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.500774][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.510207][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.529839][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.539059][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.583678][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.592603][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.603647][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.620522][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.629136][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.672939][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.688147][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.712295][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.739795][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.757774][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.765912][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.774855][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.785142][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.800134][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.808390][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.816808][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.849552][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.865265][ T5134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.875519][ T5134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.890865][ T5134] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.164212][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 91.165893][ T52] cfg80211: failed to load regulatory.db [ 91.516913][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.524476][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.533300][ T5822] bridge_slave_0: entered allmulticast mode [ 91.541561][ T5822] bridge_slave_0: entered promiscuous mode [ 91.552308][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.559782][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.566986][ T5822] bridge_slave_1: entered allmulticast mode [ 91.575336][ T5822] bridge_slave_1: entered promiscuous mode [ 91.686830][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.743048][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 91.777345][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.918661][ T5822] team0: Port device team_slave_0 added [ 91.928595][ T5822] team0: Port device team_slave_1 added [ 91.935588][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 92.022783][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 92.133693][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.140988][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.167401][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.222821][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.232603][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.241514][ T5827] bridge_slave_0: entered allmulticast mode [ 92.251951][ T5827] bridge_slave_0: entered promiscuous mode [ 92.267430][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.274928][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.283410][ T5827] bridge_slave_1: entered allmulticast mode [ 92.294668][ T5827] bridge_slave_1: entered promiscuous mode [ 92.317880][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.324946][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.351244][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.399946][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 92.440362][ T5134] Bluetooth: hci0: command tx timeout [ 92.490632][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 92.516989][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.597773][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.609591][ T5134] Bluetooth: hci1: command tx timeout [ 92.635523][ T5822] hsr_slave_0: entered promiscuous mode [ 92.642380][ T5822] hsr_slave_1: entered promiscuous mode [ 92.679530][ T5134] Bluetooth: hci2: command tx timeout [ 92.687437][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.694711][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.702343][ T5832] bridge_slave_0: entered allmulticast mode [ 92.710945][ T5832] bridge_slave_0: entered promiscuous mode [ 92.728402][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.736202][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.743591][ T5832] bridge_slave_1: entered allmulticast mode [ 92.751581][ T5832] bridge_slave_1: entered promiscuous mode [ 92.823295][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.830607][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.837807][ T5829] bridge_slave_0: entered allmulticast mode [ 92.844569][ T5134] Bluetooth: hci4: command tx timeout [ 92.852964][ T5829] bridge_slave_0: entered promiscuous mode [ 92.861599][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.868849][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.876703][ T5829] bridge_slave_1: entered allmulticast mode [ 92.884802][ T5829] bridge_slave_1: entered promiscuous mode [ 92.919922][ T5134] Bluetooth: hci5: command tx timeout [ 92.919962][ T55] Bluetooth: hci3: command tx timeout [ 92.955095][ T5827] team0: Port device team_slave_0 added [ 93.030495][ T5827] team0: Port device team_slave_1 added [ 93.056306][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.069918][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.115471][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.218287][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.228469][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.241813][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.249118][ T5831] bridge_slave_0: entered allmulticast mode [ 93.257625][ T5831] bridge_slave_0: entered promiscuous mode [ 93.273660][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.280751][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.307576][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.322965][ T5829] team0: Port device team_slave_0 added [ 93.374012][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.381411][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.388630][ T5831] bridge_slave_1: entered allmulticast mode [ 93.398117][ T5831] bridge_slave_1: entered promiscuous mode [ 93.425499][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.432678][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.458809][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.480304][ T5829] team0: Port device team_slave_1 added [ 93.574977][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.582376][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.590096][ T5833] bridge_slave_0: entered allmulticast mode [ 93.597677][ T5833] bridge_slave_0: entered promiscuous mode [ 93.608369][ T5832] team0: Port device team_slave_0 added [ 93.620579][ T5832] team0: Port device team_slave_1 added [ 93.638390][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.649928][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.656945][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.684023][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.695522][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.702937][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.710562][ T5833] bridge_slave_1: entered allmulticast mode [ 93.718177][ T5833] bridge_slave_1: entered promiscuous mode [ 93.798062][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.808609][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.816357][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.842512][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.879806][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.886785][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.913404][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.926268][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.934317][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.960451][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.977455][ T5827] hsr_slave_0: entered promiscuous mode [ 93.984217][ T5827] hsr_slave_1: entered promiscuous mode [ 93.991147][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.998903][ T5827] Cannot create hsr debugfs directory [ 94.138893][ T5831] team0: Port device team_slave_0 added [ 94.148244][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.162633][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.203026][ T5831] team0: Port device team_slave_1 added [ 94.358811][ T5829] hsr_slave_0: entered promiscuous mode [ 94.366063][ T5829] hsr_slave_1: entered promiscuous mode [ 94.373108][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.381242][ T5829] Cannot create hsr debugfs directory [ 94.413804][ T5832] hsr_slave_0: entered promiscuous mode [ 94.420705][ T5832] hsr_slave_1: entered promiscuous mode [ 94.426932][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.434672][ T5832] Cannot create hsr debugfs directory [ 94.446754][ T5833] team0: Port device team_slave_0 added [ 94.456741][ T5833] team0: Port device team_slave_1 added [ 94.487581][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.494828][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.521205][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.531829][ T55] Bluetooth: hci0: command tx timeout [ 94.619321][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.627764][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.653780][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.679788][ T55] Bluetooth: hci1: command tx timeout [ 94.703453][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.710532][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.737723][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.759525][ T55] Bluetooth: hci2: command tx timeout [ 94.816098][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.823659][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.849884][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.920741][ T55] Bluetooth: hci4: command tx timeout [ 94.999497][ T55] Bluetooth: hci3: command tx timeout [ 94.999955][ T5134] Bluetooth: hci5: command tx timeout [ 95.008384][ T5831] hsr_slave_0: entered promiscuous mode [ 95.017301][ T5831] hsr_slave_1: entered promiscuous mode [ 95.023781][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.032448][ T5831] Cannot create hsr debugfs directory [ 95.051385][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.126570][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.159275][ T5833] hsr_slave_0: entered promiscuous mode [ 95.166346][ T5833] hsr_slave_1: entered promiscuous mode [ 95.173203][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.181285][ T5833] Cannot create hsr debugfs directory [ 95.232734][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.246226][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.505771][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.518479][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.564441][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.620923][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.743772][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.765783][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.795663][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.837622][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.920908][ T5832] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.948060][ T5832] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.962497][ T5832] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.000124][ T5832] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.083547][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.101187][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.115434][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.126922][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.187435][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.286684][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.307623][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.319126][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.353101][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.388363][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.406357][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.430320][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.447152][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.454535][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.532239][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.539636][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.551924][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.559131][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.597822][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.605069][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.612770][ T5134] Bluetooth: hci0: command tx timeout [ 96.657146][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.702263][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.759610][ T5134] Bluetooth: hci1: command tx timeout [ 96.769294][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.785112][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.792357][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.837464][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.844437][ T5134] Bluetooth: hci2: command tx timeout [ 96.889254][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.896497][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.967550][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.974856][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.997618][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.004885][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.009554][ T5134] Bluetooth: hci4: command tx timeout [ 97.082204][ T5134] Bluetooth: hci5: command tx timeout [ 97.087718][ T5134] Bluetooth: hci3: command tx timeout [ 97.166599][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.244486][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.382392][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.408568][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.443450][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.457510][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.464815][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.488921][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.546268][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.553538][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.687477][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.768868][ T5827] veth0_vlan: entered promiscuous mode [ 97.785385][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.792633][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.831099][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.848534][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.855740][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.875991][ T5822] veth0_vlan: entered promiscuous mode [ 97.905557][ T5827] veth1_vlan: entered promiscuous mode [ 97.923671][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.962798][ T5822] veth1_vlan: entered promiscuous mode [ 98.152155][ T5827] veth0_macvtap: entered promiscuous mode [ 98.208525][ T5822] veth0_macvtap: entered promiscuous mode [ 98.262566][ T5822] veth1_macvtap: entered promiscuous mode [ 98.277429][ T5827] veth1_macvtap: entered promiscuous mode [ 98.404052][ T5829] veth0_vlan: entered promiscuous mode [ 98.444837][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.476447][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.492640][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.508395][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.548404][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.562788][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.574782][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.590161][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.620361][ T5829] veth1_vlan: entered promiscuous mode [ 98.636216][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.644853][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.654535][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.663350][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.672269][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.681661][ T5134] Bluetooth: hci0: command tx timeout [ 98.694601][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.703737][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.713345][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.723875][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.805318][ T5832] veth0_vlan: entered promiscuous mode [ 98.833392][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.849865][ T5134] Bluetooth: hci1: command tx timeout [ 98.899227][ T5829] veth0_macvtap: entered promiscuous mode [ 98.918252][ T5832] veth1_vlan: entered promiscuous mode [ 98.923962][ T5134] Bluetooth: hci2: command tx timeout [ 98.945829][ T5829] veth1_macvtap: entered promiscuous mode [ 99.080159][ T5134] Bluetooth: hci4: command tx timeout [ 99.121224][ T5832] veth0_macvtap: entered promiscuous mode [ 99.133762][ T5832] veth1_macvtap: entered promiscuous mode [ 99.154466][ T5831] veth0_vlan: entered promiscuous mode [ 99.161350][ T5134] Bluetooth: hci3: command tx timeout [ 99.166794][ T5134] Bluetooth: hci5: command tx timeout [ 99.211562][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.219766][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.229531][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.256075][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.259424][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.266947][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.286520][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.297631][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.313863][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.325119][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.336453][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.346960][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.358009][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.370306][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.391868][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.401832][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.407933][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.422879][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.432977][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.443874][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.455336][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.466610][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.477668][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.488183][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.501090][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.511113][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.521707][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.535642][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.570382][ T5831] veth1_vlan: entered promiscuous mode [ 99.578358][ T5832] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.587239][ T5832] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.596926][ T5832] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.605817][ T5832] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.660942][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.670312][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.679037][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.688031][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.729916][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.739641][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.752702][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.775849][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.866530][ T5833] veth0_vlan: entered promiscuous mode [ 99.878567][ T5831] veth0_macvtap: entered promiscuous mode [ 99.907700][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.907700][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.004911][ T5833] veth1_vlan: entered promiscuous mode [ 100.045858][ T5831] veth1_macvtap: entered promiscuous mode [ 100.165929][ T5925] loop2: detected capacity change from 0 to 1024 [ 100.200671][ T5925] ======================================================= [ 100.200671][ T5925] WARNING: The mand mount option has been deprecated and [ 100.200671][ T5925] and is ignored by this kernel. Remove the mand [ 100.200671][ T5925] option from the mount to silence this warning. [ 100.200671][ T5925] ======================================================= [ 100.234214][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.262351][ T5925] EXT4-fs: quotafile must be on filesystem root [ 100.279668][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.353914][ T5833] veth0_macvtap: entered promiscuous mode [ 100.403103][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.409859][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.420535][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.434946][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.441896][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.455715][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.476837][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.506058][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.516217][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.527572][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.558240][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.605535][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.642371][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.652912][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.665061][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.675817][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.698389][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.709318][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.720046][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.731964][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.089740][ T5833] veth1_macvtap: entered promiscuous mode [ 101.366012][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.397990][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.409935][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.420452][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.430393][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.440883][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.450781][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.461674][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.493919][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.510413][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.541460][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.565850][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.599775][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.608543][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.634067][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.652631][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.676333][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.701357][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.759612][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.779534][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.792234][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.795771][ T5940] loop2: detected capacity change from 0 to 256 [ 101.819598][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.839505][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.850249][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.861198][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.867888][ T5940] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 101.877922][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.899592][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.900277][ T5940] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 101.915099][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.958647][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.974130][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.995892][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.005836][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.017109][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.027254][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.243254][ T5936] loop1: detected capacity change from 0 to 32768 [ 102.352452][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.382647][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.534347][ T5936] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 102.645045][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.701383][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.718815][ T30] audit: type=1800 audit(1746103876.808:2): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 102.852776][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.894567][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.946858][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.013574][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.293138][ T5827] ocfs2: Unmounting device (7,1) on (node local) [ 103.433406][ T5967] loop3: detected capacity change from 0 to 128 [ 103.520051][ T5970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 103.556487][ T5968] warning: `syz.2.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.610323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.619121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.628277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.638232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 103.648325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.991120][ T5942] loop5: detected capacity change from 0 to 32768 [ 103.999810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.040068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.141580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.429830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.479956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.907497][ T5942] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,promote_target=invalid device 15,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 104.907497][ T5942] allowing incompatible features above 0.0: (unknown version) [ 104.973879][ T5942] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 104.987862][ T5942] bcachefs (loop5): Version upgrade required: [ 104.987862][ T5942] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 104.987862][ T5942] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 104.987862][ T5942] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 105.094339][ T5942] bcachefs (loop5): dropping and reconstructing all alloc info [ 105.228267][ T5942] bcachefs (loop5): accounting_read... done [ 105.376359][ T5942] bcachefs (loop5): alloc_read... done [ 105.399810][ T5942] bcachefs (loop5): snapshots_read... done [ 105.442323][ T5942] bcachefs (loop5): done starting filesystem [ 105.657868][ T5832] bcachefs (loop5): shutting down [ 105.953552][ T5832] bcachefs (loop5): shutdown complete [ 108.604138][ T6033] netlink: 60 bytes leftover after parsing attributes in process `syz.3.35'. [ 108.858921][ T6041] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 108.887899][ T6043] loop0: detected capacity change from 0 to 2048 [ 108.930191][ C1] Illegal XDP return value 16128 on prog (id 3) dev lo, expect packet loss! [ 109.024559][ T6043] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 109.174601][ T6015] loop4: detected capacity change from 0 to 32768 [ 109.273448][ T6015] bcachefs (/dev/loop4): error validating superblock: Invalid option metadata_replicas: too big (max 4) [ 110.450562][ T6015] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_big [ 110.917496][ T6066] netlink: 'syz.3.43': attribute type 4 has an invalid length. [ 112.153408][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.414996][ T6079] smc: net device bond0 applied user defined pnetid SYZ0 [ 113.107204][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.125591][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.160862][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.187463][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.196685][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.272628][ T9] usb 3-1: config 0 descriptor?? [ 113.442153][ T30] audit: type=1800 audit(1746103887.508:3): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.52" name="bus" dev="overlay" ino=58 res=0 errno=0 [ 113.469552][ T5882] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.642296][ T5882] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 113.681666][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.722233][ T6094] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.729286][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 113.752311][ T5882] usb 4-1: config 0 descriptor?? [ 113.772541][ T6094] fuse: Bad value for 'fd' [ 113.842573][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 115.066819][ C0] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 115.124267][ T52] usb 3-1: USB disconnect, device number 2 [ 115.317033][ T5882] usb 4-1: Cannot set autoneg [ 115.329914][ T5882] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 116.475993][ T5882] usb 4-1: USB disconnect, device number 2 [ 116.564376][ T6124] loop2: detected capacity change from 0 to 1024 [ 117.913104][ T6136] loop3: detected capacity change from 0 to 8 [ 117.927938][ T6136] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 117.954114][ T6136] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 117.960911][ T6136] PKCS7: Only support pkcs7_signedData type [ 118.329901][ T6136] loop3: detected capacity change from 0 to 4096 [ 118.481287][ T6136] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 118.519425][ T6136] ntfs3(loop3): ino=19, mi_enum_attr [ 118.525014][ T6136] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 121.507688][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 121.819722][ T6004] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.847781][ T5882] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.938362][ T6173] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.001789][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 122.003010][ T6004] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 122.070126][ T6004] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 122.081194][ T5882] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 122.111574][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 122.120579][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.142134][ T6004] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 122.149524][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 122.162492][ T5882] usb 3-1: config 0 descriptor?? [ 122.169757][ T6004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.178608][ T6174] veth1_vlan: entered allmulticast mode [ 122.188299][ T6004] usb 4-1: Product: syz [ 122.213065][ T6004] usb 4-1: Manufacturer: syz [ 122.225088][ T6004] usb 4-1: SerialNumber: syz [ 122.341649][ T6004] usb 4-1: config 0 descriptor?? [ 122.822411][ T6004] usb 4-1: Firmware: major: 92, minor: 158, hardware type: UNKNOWN (125) [ 123.143503][ T6004] usb 4-1: Read permanent extended address 5a:0d:dc:5c:41:13:71:3e from device [ 123.152999][ T6004] usb 4-1: atusb_probe: initialization failed, error = -524 [ 123.162084][ T6004] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 123.874908][ T5882] usb 3-1: Cannot set autoneg [ 123.879958][ T5882] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 124.084424][ T6004] usb 4-1: USB disconnect, device number 3 [ 124.424675][ T6199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.89'. [ 124.433769][ T6199] Zero length message leads to an empty skb [ 125.136339][ T6203] syz.5.90 (6203) used greatest stack depth: 19992 bytes left [ 126.242877][ T6004] usb 3-1: USB disconnect, device number 3 [ 126.680767][ T6229] netlink: 68 bytes leftover after parsing attributes in process `syz.3.99'. [ 127.805202][ T6246] loop0: detected capacity change from 0 to 22 [ 127.820301][ T6246] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 127.887291][ T6246] romfs: bad initial checksum on dev loop0. [ 127.902579][ T6241] netlink: 'syz.1.105': attribute type 10 has an invalid length. [ 129.886092][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.895783][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.205854][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.213147][ T6241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.221827][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.229067][ T6241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.300287][ T6241] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 130.496842][ T6263] loop0: detected capacity change from 0 to 1024 [ 130.517978][ T6256] loop4: detected capacity change from 0 to 4096 [ 130.610241][ T6263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.669549][ T5882] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.698645][ T6256] ntfs3(loop4): try to read out of volume at offset 0x3fffffc7000 [ 131.653557][ T5882] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 132.127717][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.134589][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.233837][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.283738][ T5882] usb 4-1: config 0 descriptor?? [ 134.336164][ T5882] usb 4-1: Cannot set autoneg [ 134.341365][ T5882] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 135.199555][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.580620][ T6300] process 'syz.1.122' launched '/dev/iommu' with NULL argv: empty string added [ 136.349757][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.361087][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.371800][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.376964][ T9] usb 4-1: USB disconnect, device number 4 [ 136.384841][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.402309][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.429640][ T24] usb 5-1: config 0 descriptor?? [ 136.584768][ T6302] netlink: 'syz.1.123': attribute type 10 has an invalid length. [ 136.643466][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.651969][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.877244][ T24] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 137.045846][ T24] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 137.205206][ T24] usb 5-1: USB disconnect, device number 2 [ 138.606484][ T6327] netlink: 40 bytes leftover after parsing attributes in process `syz.5.133'. [ 139.040212][ T6345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.140'. [ 141.739614][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.034929][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.276836][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.593569][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.700721][ T6383] netlink: 40 bytes leftover after parsing attributes in process `syz.5.149'. [ 142.779514][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.788625][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.815709][ T9] usb 4-1: config 0 descriptor?? [ 143.117383][ T6393] loop4: detected capacity change from 0 to 128 [ 143.234156][ T6393] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 143.273119][ T6393] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 143.280208][ T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 143.570761][ T6397] macvtap1: entered allmulticast mode [ 143.576262][ T6397] veth0_macvtap: entered allmulticast mode [ 144.003147][ T6397] syz.0.152 (6397) used greatest stack depth: 19672 bytes left [ 144.144819][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 144.150324][ T6401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.156'. [ 144.160587][ T9] usb 4-1: USB disconnect, device number 5 [ 144.656862][ T6417] netlink: 40 bytes leftover after parsing attributes in process `syz.5.163'. [ 144.956677][ T6418] loop4: detected capacity change from 0 to 40427 [ 144.979318][ T6418] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 144.987366][ T6418] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 145.021537][ T6418] F2FS-fs (loop4): invalid crc value [ 145.155581][ T6418] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 145.163063][ T6418] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.475336][ T6435] futex_wake_op: syz.0.169 tries to shift op by 144; fix this program [ 146.635160][ T6441] netlink: 48 bytes leftover after parsing attributes in process `syz.1.172'. [ 146.829731][ T5902] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.011212][ T5902] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.042350][ T5902] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 147.070491][ T5902] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.105031][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.254592][ T6437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.374105][ T5902] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.418898][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.177'. [ 147.484290][ T6453] netlink: 'syz.1.176': attribute type 11 has an invalid length. [ 148.646654][ T6454] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 148.661078][ T6454] loop5: detected capacity change from 0 to 8 [ 148.735034][ T5902] usb 4-1: USB disconnect, device number 6 [ 149.884036][ T6464] binder: 6463:6464 ioctl c0306201 2000000003c0 returned -14 [ 150.610616][ T6475] netlink: 'syz.4.182': attribute type 10 has an invalid length. [ 150.618862][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.626687][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.764202][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.771550][ T6475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.780317][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.787532][ T6475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.918701][ T6473] loop3: detected capacity change from 0 to 40427 [ 150.932019][ T6473] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 150.941609][ T6473] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 150.960791][ T6473] F2FS-fs (loop3): invalid crc value [ 150.968921][ T6475] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 151.141003][ T6473] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 151.150212][ T6473] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 152.084975][ T6493] loop4: detected capacity change from 0 to 1024 [ 152.140709][ T6493] EXT4-fs: Ignoring removed nobh option [ 152.146334][ T6493] EXT4-fs: Ignoring removed bh option [ 152.288719][ T6493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.477885][ T30] audit: type=1800 audit(1746103926.558:4): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.188" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 153.345261][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.191072][ T6515] binder: 6514:6515 ioctl c0306201 2000000003c0 returned -14 [ 154.259766][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 154.389312][ T6502] loop0: detected capacity change from 0 to 32768 [ 154.501808][ T6502] bcachefs (/dev/loop0): error reading default superblock: Unsupported superblock version 0.8: (unknown version) (min 0.9: (unknown version), max 1.25: extent_flags) [ 154.582012][ T6502] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section replicas_v0: invalid device 11 in entry btree: 1/1 [11] [ 154.582012][ T6502] replicas_v0 (size 24): [ 154.582012][ T6502] btree: 1 [11] journal: 1 [0] user: 1 [0] [ 154.582012][ T6502] [ 154.731502][ T6502] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry [ 156.317223][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.205'. [ 156.943510][ T6554] binder: 6553:6554 ioctl c0306201 2000000003c0 returned -14 [ 157.159047][ T6561] binder: 6558:6561 ioctl 4018620d 0 returned -22 [ 157.366828][ T6566] loop0: detected capacity change from 0 to 512 [ 157.449492][ T6566] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 157.525461][ T6572] binder: BINDER_SET_CONTEXT_MGR already set [ 157.575605][ T6572] binder: 6571:6572 ioctl 4018620d 200000000040 returned -16 [ 157.606924][ T6566] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.933896][ T6566] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.216: bg 0: block 384: padding at end of block bitmap is not set [ 158.726672][ T6566] EXT4-fs (loop0): Remounting filesystem read-only [ 158.756887][ T6566] EXT4-fs (loop0): 1 truncate cleaned up [ 158.775269][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 158.816484][ T6566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.849237][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 159.054006][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.228837][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 159.257865][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 159.313900][ T6597] binder: 6595:6597 ioctl c0306201 2000000003c0 returned -14 [ 159.725216][ T6605] binder: 6604:6605 ioctl 4018620d 0 returned -22 [ 160.626058][ T6614] binder: BINDER_SET_CONTEXT_MGR already set [ 160.639866][ T6614] binder: 6613:6614 ioctl 4018620d 200000000040 returned -16 [ 162.038401][ T6641] binder: 6636:6641 ioctl c0306201 2000000003c0 returned -14 [ 162.092877][ T6641] binder_alloc: 6636: binder_alloc_buf, no vma [ 163.399685][ T30] audit: type=1326 audit(1746103937.478:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfd18e969 code=0x7fc00000 [ 163.525146][ T30] audit: type=1326 audit(1746103937.478:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdfd18e969 code=0x7fc00000 [ 163.652595][ T30] audit: type=1326 audit(1746103937.478:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfd18e969 code=0x7fc00000 [ 163.707544][ T6674] binder: 6672:6674 ioctl c0306201 0 returned -14 [ 163.756539][ T30] audit: type=1326 audit(1746103937.478:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfd18e969 code=0x7fc00000 [ 163.758893][ T6674] binder: 6672:6674 ioctl c0306201 2000000003c0 returned -14 [ 163.903991][ T30] audit: type=1326 audit(1746103937.478:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfd18e969 code=0x7fc00000 [ 164.127931][ T30] audit: type=1326 audit(1746103937.478:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfd18e969 code=0x7fc00000 [ 164.169478][ T30] audit: type=1326 audit(1746103937.478:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfd18e969 code=0x7fc00000 [ 164.230027][ T30] audit: type=1326 audit(1746103937.478:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfd18e969 code=0x7fc00000 [ 164.331840][ T30] audit: type=1326 audit(1746103937.478:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfd18e969 code=0x7fc00000 [ 164.450235][ T30] audit: type=1326 audit(1746103937.478:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfd18e969 code=0x7fc00000 [ 164.678173][ T6694] tipc: Started in network mode [ 164.719821][ T6694] tipc: Node identity ac1414aa, cluster identity 4711 [ 164.729682][ T6694] tipc: Enabled bearer , priority 10 [ 165.202690][ T6710] loop3: detected capacity change from 0 to 22 [ 165.212837][ T6710] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 165.957199][ T970] tipc: Node number set to 2886997162 [ 165.999250][ T6710] romfs: bad initial checksum on dev loop3. [ 166.894360][ T6694] tipc: Enabled bearer , priority 0 [ 170.024002][ T6737] loop4: detected capacity change from 0 to 32768 [ 171.103193][ T6737] [ 171.103193][ T6737] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.103193][ T6737] [ 171.243797][ T6737] ERROR: (device loop4): diWrite: ixpxd invalid [ 171.243797][ T6737] [ 171.271148][ T6737] ERROR: (device loop4): remounting filesystem as read-only [ 171.278901][ T6737] ERROR: (device loop4): txCommit: [ 171.278901][ T6737] [ 171.378538][ T6739] netlink: 'syz.4.277': attribute type 7 has an invalid length. [ 171.441119][ T6739] : entered promiscuous mode [ 171.839950][ T6737] read_mapping_page failed! [ 171.844655][ T6737] diRead: read_metapage failed [ 171.849554][ T6737] jfs_lookup: iget failed on inum 32 [ 172.734939][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 173.370561][ T6768] binder: 6766:6768 ioctl c0306201 0 returned -14 [ 173.399296][ T6768] binder: 6766:6768 ioctl c0306201 2000000003c0 returned -14 [ 174.492670][ T6791] loop5: detected capacity change from 0 to 512 [ 174.562863][ T6791] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 174.619494][ T6791] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.295: bad orphan inode 17 [ 174.635158][ T6791] EXT4-fs (loop5): Remounting filesystem read-only [ 174.642028][ T6791] ext4_test_bit(bit=16, block=4) = 1 [ 174.647472][ T6791] is_bad_inode(inode)=0 [ 174.651786][ T6791] NEXT_ORPHAN(inode)=2147418128 [ 174.656719][ T6791] max_ino=32 [ 174.660177][ T6791] i_nlink=0 [ 174.678039][ T6791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.112974][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.226925][ T6798] loop4: detected capacity change from 0 to 256 [ 175.271567][ T6798] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 175.511615][ T6808] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.303' sets config #0 [ 176.630263][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 176.950047][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.995624][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.028932][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.904675][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.939478][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.011746][ T9] usb 6-1: config 0 descriptor?? [ 178.935397][ T9] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 178.973374][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 179.760210][ T6834] binder: 6831:6834 ioctl c0306201 0 returned -14 [ 179.828165][ T9] usb 6-1: USB disconnect, device number 2 [ 180.946573][ T5134] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 180.956590][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: kworker/u9:1 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 180.956622][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 180.956637][ T5134] Workqueue: hci4 hci_rx_work [ 180.956673][ T5134] Call Trace: [ 180.956682][ T5134] [ 180.956692][ T5134] dump_stack_lvl+0x189/0x250 [ 180.956732][ T5134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.956766][ T5134] ? __pfx__printk+0x10/0x10 [ 180.956790][ T5134] ? kernfs_path_from_node+0x2b/0x260 [ 180.956824][ T5134] ? kernfs_path_from_node+0x2b/0x260 [ 180.956854][ T5134] ? kernfs_path_from_node+0x2b/0x260 [ 180.956888][ T5134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.956915][ T5134] ? kernfs_path_from_node+0x216/0x260 [ 180.956952][ T5134] sysfs_create_dir_ns+0x259/0x280 [ 180.956989][ T5134] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 180.957023][ T5134] ? do_raw_spin_unlock+0x122/0x240 [ 180.957057][ T5134] kobject_add_internal+0x59f/0xb40 [ 180.957099][ T5134] kobject_add+0x155/0x220 [ 180.957128][ T5134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.957161][ T5134] ? __pfx_kobject_add+0x10/0x10 [ 180.957191][ T5134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.957217][ T5134] ? _raw_spin_unlock+0x28/0x50 [ 180.957238][ T5134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.957270][ T5134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.957296][ T5134] ? get_device_parent+0x366/0x3a0 [ 180.957329][ T5134] device_add+0x408/0xb50 [ 180.957361][ T5134] hci_conn_add_sysfs+0xd5/0x1e0 [ 180.957394][ T5134] le_conn_complete_evt+0xc3a/0x1220 [ 180.957459][ T5134] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 180.957499][ T5134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.957525][ T5134] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 180.957558][ T5134] ? __asan_memcpy+0x40/0x70 [ 180.957585][ T5134] ? __pfx___mutex_lock+0x10/0x10 [ 180.957613][ T5134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.957639][ T5134] ? skb_pull_data+0xfb/0x200 [ 180.957681][ T5134] hci_le_conn_complete_evt+0x187/0x450 [ 180.957727][ T5134] hci_event_packet+0x7a5/0x1270 [ 180.957765][ T5134] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 180.957803][ T5134] ? __pfx_hci_event_packet+0x10/0x10 [ 180.957837][ T5134] ? kcov_remote_start+0x4d3/0x7f0 [ 180.957866][ T5134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.957892][ T5134] ? lockdep_hardirqs_on+0x20/0x150 [ 180.957922][ T5134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.957949][ T5134] ? hci_send_to_monitor+0xd7/0x4f0 [ 180.957978][ T5134] hci_rx_work+0x46a/0xe80 [ 180.958019][ T5134] ? process_scheduled_works+0x9ec/0x17a0 [ 180.958060][ T5134] process_scheduled_works+0xade/0x17a0 [ 180.958135][ T5134] ? __pfx_process_scheduled_works+0x10/0x10 [ 180.958182][ T5134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.958219][ T5134] worker_thread+0x8a0/0xda0 [ 180.958247][ T5134] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 180.958283][ T5134] ? __kthread_parkme+0x7b/0x200 [ 180.958320][ T5134] kthread+0x711/0x8a0 [ 180.958352][ T5134] ? __pfx_worker_thread+0x10/0x10 [ 180.958375][ T5134] ? __pfx_kthread+0x10/0x10 [ 180.958402][ T5134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.958430][ T5134] ? __pfx_kthread+0x10/0x10 [ 180.958466][ T5134] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.958488][ T5134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.958515][ T5134] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.958542][ T5134] ? __pfx_kthread+0x10/0x10 [ 180.958570][ T5134] ret_from_fork+0x4e/0x80 [ 180.958594][ T5134] ? __pfx_kthread+0x10/0x10 [ 180.958623][ T5134] ret_from_fork_asm+0x1a/0x30 [ 180.958666][ T5134] [ 180.958809][ T5134] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 181.369658][ T5134] Bluetooth: hci4: failed to register connection device [ 181.471369][ T6861] fuse: Unknown parameter 'fd0x0000000000000009' [ 181.832033][ T6875] loop5: detected capacity change from 0 to 1024 [ 181.910966][ T6875] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.770268][ T6886] loop2: detected capacity change from 0 to 40427 [ 183.778383][ T6886] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 183.786251][ T6886] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 183.835413][ T6886] F2FS-fs (loop2): invalid crc value [ 183.958861][ T6886] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 183.966353][ T6886] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.020216][ T970] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 184.254381][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.632569][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 184.896821][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.906932][ T970] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.919908][ T970] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.928977][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.987366][ T970] usb 1-1: config 0 descriptor?? [ 185.239552][ T6918] netlink: 'syz.3.337': attribute type 1 has an invalid length. [ 185.292910][ T6918] netlink: 224 bytes leftover after parsing attributes in process `syz.3.337'. [ 185.450154][ T970] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 185.494055][ T970] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 186.741365][ C0] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 187.469688][ T6951] fuse: Unknown parameter 'fd0x0000000000000009' [ 187.690863][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 187.731653][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 187.840591][ T6958] netlink: 'syz.4.350': attribute type 10 has an invalid length. [ 187.848631][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.856079][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.370624][ T6966] loop3: detected capacity change from 0 to 40427 [ 188.391990][ T6966] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 188.399903][ T6966] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 188.411546][ T24] usb 1-1: USB disconnect, device number 2 [ 188.445292][ T6966] F2FS-fs (loop3): invalid crc value [ 188.548254][ T6966] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 188.557820][ T6966] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 189.653196][ T6990] netlink: 'syz.5.364': attribute type 1 has an invalid length. [ 189.852609][ T6990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.965872][ T6998] bond1: (slave gretap1): making interface the new active one [ 189.996055][ T6998] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 190.739485][ T5954] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 190.936601][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 190.972655][ T5954] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 190.993186][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.028309][ T5954] usb 5-1: config 0 descriptor?? [ 191.084280][ T5954] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 191.888963][ T5954] gspca_nw80x: reg_w err -71 [ 192.065701][ T5954] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 192.076269][ T5954] usb 5-1: USB disconnect, device number 3 [ 192.375347][ T7053] netlink: 80 bytes leftover after parsing attributes in process `syz.2.389'. [ 192.552375][ T7059] binder: 7058:7059 ioctl c0306201 2000000003c0 returned -14 [ 192.581234][ T7057] loop3: detected capacity change from 0 to 512 [ 192.612894][ T7057] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 192.857456][ T7057] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 193.551502][ T7057] EXT4-fs (loop3): 1 truncate cleaned up [ 193.571750][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.623915][ T7057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.358376][ T7083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.111730][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.529248][ T7107] netlink: 80 bytes leftover after parsing attributes in process `syz.5.407'. [ 196.571514][ T7111] binder: 7105:7111 ioctl c0306201 2000000003c0 returned -14 [ 198.261568][ T7144] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[7144] [ 198.302968][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 198.381947][ T7146] netlink: del zone limit has 4 unknown bytes [ 198.880038][ T7150] netlink: 80 bytes leftover after parsing attributes in process `syz.2.424'. [ 199.016968][ T7152] binder: 7151:7152 ioctl c0306201 2000000003c0 returned -14 [ 199.876033][ T7148] binder: 7145:7148 ioctl 4018620d 0 returned -22 [ 199.996953][ T7148] binder: 7145:7148 ioctl c0306201 0 returned -14 [ 201.103650][ T7183] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[7183] [ 201.116693][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 201.163529][ T7183] netlink: del zone limit has 4 unknown bytes [ 201.244474][ T7187] binder: 7186:7187 ioctl 4018620d 0 returned -22 [ 201.282263][ T7187] binder: 7186:7187 ioctl c0306201 2000000003c0 returned -14 [ 203.287708][ T7232] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[7232] [ 203.357996][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'. [ 204.488976][ T7224] binder: 7222:7224 ioctl 4018620d 0 returned -22 [ 204.651167][ T7224] binder: 7222:7224 ioctl c0306201 0 returned -14 [ 204.665784][ T7219] loop5: detected capacity change from 0 to 32768 [ 204.821789][ T7255] loop3: detected capacity change from 0 to 22 [ 204.832266][ T7255] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 204.850928][ T7255] romfs: bad initial checksum on dev loop3. [ 205.926813][ T7219] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 205.928701][ T7219] (syz.5.453,7219,0):ocfs2_initialize_super:2226 ERROR: status = -12 [ 206.260235][ T7219] (syz.5.453,7219,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 206.881943][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 206.954714][ T7277] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[7277] [ 206.965840][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 207.482110][ T55] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 207.491215][ T55] Bluetooth: hci3: Injecting HCI hardware error event [ 207.522308][ T55] Bluetooth: hci3: hardware error 0x00 [ 210.689173][ T7317] loop2: detected capacity change from 0 to 22 [ 210.701910][ T7317] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 211.469525][ T55] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 211.572870][ T7317] romfs: bad initial checksum on dev loop2. [ 213.339972][ T7328] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[7328] [ 213.350996][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 213.566784][ T7338] tipc: Enabling of bearer rejected, already enabled [ 213.577533][ T7338] tipc: Enabling of bearer rejected, already enabled [ 216.126427][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 216.136542][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 216.136879][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 216.147171][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 217.474575][ T7375] fuse: Unknown parameter 'fd0x0000000000000009' [ 217.487578][ T7375] netlink: 'syz.4.498': attribute type 1 has an invalid length. [ 218.530673][ T7379] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[7379] [ 218.542924][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 219.785882][ T7375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.876072][ T7382] bond1: (slave gretap1): making interface the new active one [ 220.092204][ T7382] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 220.473721][ T7411] loop5: detected capacity change from 0 to 1024 [ 220.530990][ T7411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.051108][ T7428] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[7428] [ 221.095683][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 222.134799][ T7439] tipc: Started in network mode [ 222.150358][ T7439] tipc: Node identity ac1414aa, cluster identity 4711 [ 222.180079][ T7439] tipc: Enabled bearer , priority 10 [ 222.283392][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.301226][ T7439] tipc: Enabled bearer , priority 0 [ 222.834775][ T7450] loop0: detected capacity change from 0 to 256 [ 223.347734][ T7461] fuse: Unknown parameter 'fd0x0000000000000009' [ 223.363054][ T7461] netlink: 'syz.5.522': attribute type 1 has an invalid length. [ 223.480081][ T9] tipc: Node number set to 2886997162 [ 224.480592][ T7461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.611515][ T7472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.534'. [ 224.783957][ T7464] bond2: (slave gretap2): making interface the new active one [ 224.805658][ T7464] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 225.007736][ T7477] loop3: detected capacity change from 0 to 1024 [ 225.015363][ T7477] EXT4-fs: quotafile must be on filesystem root [ 226.251348][ T7483] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[7483] [ 226.459131][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 227.358963][ T7509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 227.605934][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.552'. [ 227.677616][ T7519] loop5: detected capacity change from 0 to 1024 [ 227.767911][ T7519] EXT4-fs: Ignoring removed nobh option [ 227.801327][ T7519] EXT4-fs: Ignoring removed bh option [ 227.879993][ T7519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.029849][ T7529] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[7529] [ 228.120019][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 228.366952][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 228.366974][ T30] audit: type=1800 audit(1746104002.408:56): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.551" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 230.230500][ T7542] tipc: Enabling of bearer rejected, already enabled [ 230.283655][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.342831][ T7539] tipc: Enabling of bearer rejected, already enabled [ 230.745677][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.563'. [ 230.852146][ T7560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.566'. [ 232.186723][ T7584] netlink: 'syz.0.573': attribute type 1 has an invalid length. [ 232.300955][ T7586] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[7586] [ 232.435179][ T7584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.326184][ T7605] tipc: Enabling of bearer rejected, already enabled [ 233.451761][ T7605] tipc: Enabling of bearer rejected, already enabled [ 235.562474][ T7639] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[7639] [ 235.607899][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 236.407289][ T7659] loop4: detected capacity change from 0 to 64 [ 236.552354][ T7659] syz.4.601: attempt to access beyond end of device [ 236.552354][ T7659] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 236.612342][ T7659] Buffer I/O error on dev loop4, logical block 512, async page read [ 236.680698][ T7659] syz.4.601: attempt to access beyond end of device [ 236.680698][ T7659] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 236.769900][ T7659] Buffer I/O error on dev loop4, logical block 56576, async page read [ 238.266981][ T7680] loop0: detected capacity change from 0 to 32768 [ 238.369985][ T7680] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 238.398677][ T7680] [ 238.401063][ T7680] ====================================================== [ 238.408098][ T7680] WARNING: possible circular locking dependency detected [ 238.415132][ T7680] 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 Not tainted [ 238.422253][ T7680] ------------------------------------------------------ [ 238.429296][ T7680] syz.0.612/7680 is trying to acquire lock: [ 238.435189][ T7680] ffff88805cb31800 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{4:4}, at: __ocfs2_move_extents_range+0x1a68/0x3370 [ 238.448456][ T7680] [ 238.448456][ T7680] but task is already holding lock: [ 238.455827][ T7680] ffff88805bc7d100 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{4:4}, at: __ocfs2_move_extents_range+0x1374/0x3370 [ 238.469099][ T7680] [ 238.469099][ T7680] which lock already depends on the new lock. [ 238.469099][ T7680] [ 238.479521][ T7680] [ 238.479521][ T7680] the existing dependency chain (in reverse order) is: [ 238.488535][ T7680] [ 238.488535][ T7680] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{4:4}: [ 238.499086][ T7680] lock_acquire+0x120/0x360 [ 238.504140][ T7680] down_write+0x96/0x1f0 [ 238.508920][ T7680] __ocfs2_flush_truncate_log+0x33c/0x10e0 [ 238.515265][ T7680] ocfs2_flush_truncate_log+0x4f/0x70 [ 238.521175][ T7680] ocfs2_sync_fs+0x116/0x310 [ 238.526290][ T7680] sync_filesystem+0x1cf/0x230 [ 238.531586][ T7680] generic_shutdown_super+0x6f/0x2c0 [ 238.537393][ T7680] kill_block_super+0x44/0x90 [ 238.542596][ T7680] deactivate_locked_super+0xbc/0x130 [ 238.548490][ T7680] cleanup_mnt+0x425/0x4c0 [ 238.553454][ T7680] task_work_run+0x1d4/0x260 [ 238.558584][ T7680] resume_user_mode_work+0x5e/0x80 [ 238.564228][ T7680] syscall_exit_to_user_mode+0x9a/0x120 [ 238.570301][ T7680] do_syscall_64+0x103/0x210 [ 238.575420][ T7680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.581838][ T7680] [ 238.581838][ T7680] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{4:4}: [ 238.592388][ T7680] validate_chain+0xb9b/0x2140 [ 238.597681][ T7680] __lock_acquire+0xaac/0xd20 [ 238.602902][ T7680] lock_acquire+0x120/0x360 [ 238.607944][ T7680] down_write+0x96/0x1f0 [ 238.612720][ T7680] __ocfs2_move_extents_range+0x1a68/0x3370 [ 238.619142][ T7680] ocfs2_move_extents+0x378/0x960 [ 238.624694][ T7680] ocfs2_ioctl_move_extents+0x53e/0x710 [ 238.630771][ T7680] ocfs2_ioctl+0x191/0x750 [ 238.635719][ T7680] __se_sys_ioctl+0xfc/0x170 [ 238.640833][ T7680] do_syscall_64+0xf6/0x210 [ 238.645862][ T7680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.652284][ T7680] [ 238.652284][ T7680] other info that might help us debug this: [ 238.652284][ T7680] [ 238.662512][ T7680] Possible unsafe locking scenario: [ 238.662512][ T7680] [ 238.669970][ T7680] CPU0 CPU1 [ 238.675332][ T7680] ---- ---- [ 238.680688][ T7680] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4); [ 238.687988][ T7680] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 238.697816][ T7680] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4); [ 238.707654][ T7680] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 238.714965][ T7680] [ 238.714965][ T7680] *** DEADLOCK *** [ 238.714965][ T7680] [ 238.723128][ T7680] 5 locks held by syz.0.612/7680: [ 238.728148][ T7680] #0: ffff888143ff6420 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x60/0x200 [ 238.737951][ T7680] #1: ffff88805cb35100 (&sb->s_type->i_mutex_key#22){+.+.}-{4:4}, at: ocfs2_move_extents+0x1a2/0x960 [ 238.748959][ T7680] #2: ffff88805cb34da0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_move_extents+0x36b/0x960 [ 238.760045][ T7680] #3: ffff88805bc7ed80 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x45f0 [ 238.773753][ T7680] #4: ffff88805bc7d100 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{4:4}, at: __ocfs2_move_extents_range+0x1374/0x3370 [ 238.787461][ T7680] [ 238.787461][ T7680] stack backtrace: [ 238.793350][ T7680] CPU: 0 UID: 0 PID: 7680 Comm: syz.0.612 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 238.793376][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 238.793389][ T7680] Call Trace: [ 238.793399][ T7680] [ 238.793410][ T7680] dump_stack_lvl+0x189/0x250 [ 238.793447][ T7680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.793480][ T7680] ? __pfx__printk+0x10/0x10 [ 238.793508][ T7680] ? print_lock_name+0xde/0x100 [ 238.793544][ T7680] print_circular_bug+0x2ee/0x310 [ 238.793568][ T7680] check_noncircular+0x134/0x160 [ 238.793592][ T7680] validate_chain+0xb9b/0x2140 [ 238.793611][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.793638][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.793664][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.793688][ T7680] ? look_up_lock_class+0x74/0x170 [ 238.793712][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.793736][ T7680] ? register_lock_class+0x51/0x320 [ 238.793763][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.793790][ T7680] __lock_acquire+0xaac/0xd20 [ 238.793822][ T7680] ? __ocfs2_move_extents_range+0x1a68/0x3370 [ 238.793846][ T7680] lock_acquire+0x120/0x360 [ 238.793873][ T7680] ? __ocfs2_move_extents_range+0x1a68/0x3370 [ 238.793902][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.793928][ T7680] down_write+0x96/0x1f0 [ 238.793954][ T7680] ? __ocfs2_move_extents_range+0x1a68/0x3370 [ 238.793977][ T7680] ? __pfx_down_write+0x10/0x10 [ 238.794003][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.794027][ T7680] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 238.794055][ T7680] __ocfs2_move_extents_range+0x1a68/0x3370 [ 238.794096][ T7680] ? __pfx___ocfs2_move_extents_range+0x10/0x10 [ 238.794123][ T7680] ? __pfx_ocfs2_read_blocks+0x10/0x10 [ 238.794156][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.794179][ T7680] ? __lock_acquire+0xaac/0xd20 [ 238.794213][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.794237][ T7680] ? ocfs2_read_inode_block+0x11d/0x190 [ 238.794264][ T7680] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 238.794291][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.794316][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.794340][ T7680] ? do_raw_spin_unlock+0x122/0x240 [ 238.794365][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.794391][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.794418][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.794441][ T7680] ? __lock_acquire+0xaac/0xd20 [ 238.794474][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.794509][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.794532][ T7680] ? down_write+0x162/0x1f0 [ 238.794558][ T7680] ? __pfx_down_write+0x10/0x10 [ 238.794583][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.794609][ T7680] ? do_raw_spin_unlock+0x122/0x240 [ 238.794635][ T7680] ocfs2_move_extents+0x378/0x960 [ 238.794658][ T7680] ? __pfx_ocfs2_move_extents+0x10/0x10 [ 238.794681][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.794710][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.794734][ T7680] ? __brelse+0x59/0xa0 [ 238.794759][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.794783][ T7680] ? ocfs2_validate_and_adjust_move_goal+0x323/0x460 [ 238.794811][ T7680] ocfs2_ioctl_move_extents+0x53e/0x710 [ 238.794838][ T7680] ? __pfx_ocfs2_ioctl_move_extents+0x10/0x10 [ 238.794864][ T7680] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 238.794897][ T7680] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.794936][ T7680] ocfs2_ioctl+0x191/0x750 [ 238.794965][ T7680] ? __pfx_ocfs2_ioctl+0x10/0x10 [ 238.794991][ T7680] ? __lock_acquire+0xaac/0xd20 [ 238.795029][ T7680] ? __fget_files+0x2a/0x420 [ 238.795059][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.795082][ T7680] ? __fget_files+0x3a0/0x420 [ 238.795108][ T7680] ? __fget_files+0x2a/0x420 [ 238.795135][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.795159][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.795183][ T7680] ? __pfx_ocfs2_ioctl+0x10/0x10 [ 238.795211][ T7680] __se_sys_ioctl+0xfc/0x170 [ 238.795233][ T7680] do_syscall_64+0xf6/0x210 [ 238.795258][ T7680] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.795282][ T7680] ? exc_page_fault+0x91/0x110 [ 238.795304][ T7680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.795324][ T7680] RIP: 0033:0x7f3f0f98e969 [ 238.795342][ T7680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.795359][ T7680] RSP: 002b:00007f3f107cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.795379][ T7680] RAX: ffffffffffffffda RBX: 00007f3f0fbb5fa0 RCX: 00007f3f0f98e969 [ 238.795395][ T7680] RDX: 00002000000000c0 RSI: 0000000040406f06 RDI: 0000000000000004 [ 238.795408][ T7680] RBP: 00007f3f0fa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 238.795421][ T7680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.795433][ T7680] R13: 0000000000000000 R14: 00007f3f0fbb5fa0 R15: 00007ffc8e91c4c8 [ 238.795456][ T7680] [ 239.860741][ T7690] sctp: [Deprecated]: syz.5.611 (pid 7690) Use of int in maxseg socket option. [ 239.860741][ T7690] Use struct sctp_assoc_value instead [ 239.882530][ T7698] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[7698] [ 239.965694][ T7698] netlink: del zone limit has 4 unknown bytes [ 240.495133][ T5829] ocfs2: Unmounting device (7,0) on (node local)