last executing test programs: 27m28.032999639s ago: executing program 32 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 27m9.28810323s ago: executing program 33 (id=160): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$binfmt_misc(r4, &(0x7f0000001940)="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", 0xedd) 26m51.719107914s ago: executing program 34 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x68040200) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 26m46.073454915s ago: executing program 35 (id=186): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x0, 0x0, @dev}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000500)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e207f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 26m15.94397237s ago: executing program 36 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 25m3.660498264s ago: executing program 37 (id=294): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 24m27.722906593s ago: executing program 38 (id=343): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x143, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000280)='fdinfo/4\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet6(r5, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c0000000", 0x1b, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r6, 0x0, 0x0, 0x1001f0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) fallocate(r6, 0x3, 0xf00, 0x10000) copy_file_range(r6, 0x0, r6, &(0x7f00000000c0)=0xc615, 0x39ea, 0x0) 21m8.439563061s ago: executing program 39 (id=572): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) shutdown(r0, 0x1) 20m8.597288735s ago: executing program 40 (id=644): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x1}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r2 = getpgrp(0xffffffffffffffff) wait4(r2, 0x0, 0x20000000, &(0x7f0000000480)) preadv(r1, &(0x7f0000000e40)=[{&(0x7f0000000880)=""/122, 0x7a}], 0x1, 0x68000, 0x40000004) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x220200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x200800, &(0x7f0000000400)={[{@utf8}, {@zero_size_dir}, {@keep_last_dots}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@errors_remount}, {@zero_size_dir}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}, 0x9, 0x1524, &(0x7f0000002280)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yX8vb31fu/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVtwuyok7RHlRQbR2lUQlUVm0cVXE3aKqqCqqieqihqgpaopaopaoLWqLOqKOqCvqinriIVFf9MJ++Ii40JlGYjA2FkOwiWgq5KVPsJZiGLYSrUUb8ZQYgcOxnWjpksSzor0YjR3EX8QYfF50EuOws3hRdBFdRTfxkuguWrkeoqeYhL1EbzEV+4i+op/oL2ZgdfEBzs5ZQ7wuUsRgMUS8Iebjm2KYeEsMFyPESPG2GCXeEaPFGDFWjBOpYryYIN4VE8V7YpKYLKaIqSJNTBPTxftihpgpZokPxGzxoZgj5op5Yr5IFx+JBWKhyBAfi0XiE5EpFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iU7FTfCZ2id1ij/hc7BVfiH3iS7FffCUOiK9FlvhGHBTfikPiO3FYfC+OiB/EUXFMHBc/ihPiJ3FSnBKnxRlxVvwszolfxHnhBUiUQkqpZCBjZA4ZK3PKOHmNzCWDS8/u9TJe3iDzyBtlXplP5pcFZIIsKAtJLY20kmQoC8siMipvkkXlzbKYLC5LyJLSyVIyUd4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJxH9VkdVlD1pT3ymS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hmZJJ+V7aW/9BJ5XnaSL8jO8kXZRXaV3eQv8rz0sofsKaEXyN7yFdlH9pX9ZH85QL4qB8rX5CD5ukyRg+UQ+YYcKt+Uw+RbcrgcIUfKt+Uo+Y4cLcfIsXKcTJXj5QT5rpwo35OT5GQ5RU6VaXKa7HdppllS/sP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zF6rB6nU/V4PUG/qyfq9/QkPVlP0VN1mp6mp+v39Qw9U8/SH+jZ+kM9R8/V8/R8na4/0gv0Qp2hP9aL9Cc6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Kd6p/5M79K79R79ud6rv9D79Jd6v/5KH9Bf6yz9jT6ov9WH9Hf6sP5eH9E/6KP6mD6uf9Qn9E/6pD6lT+sz+qz+WZ/Tv+jz2l84ub/w9W6UUSbGxJhYE2viTJzJZXKZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZC8iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWjuNHeau8xd5m5zt7nH3GOqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl54UTVvGNGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+S9+X3sTanDbOXmNz2Wttbnud/ds4vy1gE2xBW8hqm9fm+01srLXFbHFbwpa0zpayifaW38XlbQVb0Vayd9rK9i5b5XdxLXufrW3vt3XsA7amvfc3cV37oK1nH7P1EQFsU9vQNreN7GO2sX3cNrFNbTPb3La1T9t29hmbZJ+17e1zv4sX2IV2lV1t19i1dpfdbU/bM/aQ/c6etT/bHranHWBftQPta3aQfd2m2MG/i0fat+0o+44dbcfYsXbc7+IpdqpNs9PsdPu+nWFn/i5Otx/Z2TbDzrFz7Tw7/9f4Qk0Z9mO7yH5iM20AS+xSu8wutyvsyv9f61K73m6wG+1O+5ndYrfabXa73XH5RNjutnvs53av/cIetN/a/fYre8Aetln2m1/jC8d32H5vj9gf7FF7zB63P9oT9id1OfvCsf9of7HnrbdASECSFAUUQzkolnJSHF1Duehayk3XUYSup3i6gfLQjZSX8lF+KkAJVJAKkSZDlohCKkxFKEo30eXySlBJclSKEukWKk23Uhm6jcrS7VSO7qDyVIEqUiW6kyrTXVSF7qaqdA9Vo+pUg2rSvVSL7qPadD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJpTC3qCWtKT1IpaUxt6itrS09SOnqEkepba03PUgf5CHel56kQvUGd6kbpQV+pGL1F3epl6UE9Kpl7Um16hPtSX+lF/GkCv0kB6jQbR65RCg2kIvUFD6U0aRm/RcBpBI+ltGkXv0GgaQ2NpHKXSeJpA79JEeo8m0WSaQlMpjabRdHqfZtBMmkUf0Gz6kObQXJpH8ymdPqIFtJAy6GNaRJ9QJi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Td0kL6lQ/QdHabvfU/6gY7SMTpOP9IJ+olO0ik6TWfoLP1M5+gXOk+eIMRQhDJUYRDGhDnC2DBnGBdeE+YKrw1zh9eFkfD6MD68IcwT3hjmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeFNYNLw5LBYWD0uEJUMXlgoTw1vC0uGtYZnwtrBseHtYLrwjLB9WCB97oFJ4Z1g5vCusEt4dVg3vCauF1cMaYc3w3rBWeF9YO7w/rBM+EJYJHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2Dh8PGwSNg2bhc3DFuETYcvwybBV2DpsEz4Vtg2fDtuFz4RJ4bNh+/C5X9c/uPDvr08Oe4W9w1fCV0Lv75fzovOj6dGPoguiC6MZ0Y+ji6KfRDOji6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfMAQ6dcNIpF7gYl8PFupwuzl3jcrlrXW53nYu46128u8HlcTe6vC6fy+8KuARX0BVy2hlnHbnQFXZFXNTd5Iq6m10xV9yVcCWdc6VcomvuWrgWrqV70rVyrV0b95R7yj3tnnbPuGfcs669e851cH9xHd3zrpN7wb3gXnRdXFfXzb3kurvxuS++J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55sW9zHFz3Dw3z6W7dLfAXThnzHCL3CKX6TLdErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29wOt8PtdDvdLn/dxUndXrfP7XP73X53wH3tstw37qD71h1y37nD7nt3xP3gjrpj7rj70Z1wP7mT7pQ77c64s+5nd8794s4771Ij4yMTIu9GJkbei0yKTI5MiUyNpEWmRaZH3o/MiMyMzIp8EJkd+TAyJzI3Mi8yP5Ie+SiyILIwkhH5OLIo8kkkM7I4siSyNLIssjzifcEtoS/si/iov8kX9Tf7Yr64L+FLeudL+UR/iy/tb/Vl/G2+rL/dl/N3+PK+gq/oH/dNfFPfzDf3LfwTvqV/0rfyrX0b/5Rv65/27fwzPsk/69v753wH/xff0T/vO/kXfGf/ou/iu/pu/iXf3b/se/iePtn38r39K76P7+v7+f5+gH/VD/Sv+UH+dZ/iB/sh/g0/1L/ph/m3/HA/wo+MeduPunyJDON8qh/vJ/h3/UT/np/kJ/spfqpP89P8dP++n+Fn+ln+Az/bf+jn+Ll+np/v0/1HfoFf6DP8x36R/8Rn+sWXbyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+U7/Tf+Z3+d1+j//c7/Vf+H3+S7/ff+UP+K99lv/GH/Tf+kP+O3/Yf++P+B/8UX/MH/c/+hP+J3/Sn/Kn/Rl/1v/sz/lf/Hn+nTXGGGOMsX/K+CtD8ds1F2/n9/qDHPFXG/cGgGu3Fsj66/UXzijX5b047isS2kYA4NmenR+5vFSrlpycfGnbTAlBkbkAl/8n6IIYuBIvhjbwNCRBayj9h/X3FV3P0j+YP3o7QNxf5cTClfjK/F8CYPIfzP/EUyMXlAtPx/8X888FKFbkSk5OuBIvhja/3l9pDWX+Tv35Wv6D+nN+lQrQ6q9ycsGV+Er9ifAkPAdJv9mSMcYYY4wxxhi7qK+o2PHy9efln/j8o+vzBHUlJwdcif/R9TljjDHGGGOMMcauvue7dnvmiaSk1h3/9UGV/1bWPz1oDP9TM/PgDwfeA1x+RAHAvzkhwIWB/E8exeb/yL5SLr11/nbVsjM+gP8drfwzBlf5g4kxxhhjjDH2p7ty0v/bx9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9IVQM5") getdents64(0xffffffffffffffff, &(0x7f0000001dc0)=""/4113, 0x55d) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x226, &(0x7f0000000300)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2DkhDiGQXemnQFvNxPUzOLKquzEnJzUouIzDKjmT2bcz6TICFJ35u/V4AeMdgzdsQyMDHIb/NUWf/sjVblxU33k9KqImqndTTeXro9j2Kb/94qJ1PuJGWH/HxwS1LLIy/8wT0bp++aGOR9q6p6YOHY2Ks/lb7389937mNriBDWmx+JdhWz8CW5aNZ+cndwsH89Nr27fUqy4ICvNZeKxqRf/Jhxfy8Aw+cITW/2aM4fiFWM4pdwq58bcdYsX5Fqmfr7uDQPDwajPExkYlzPuZ2JgmBm2cw+yv8oboJHBwMzAwKDCwMDAxMDCkJaZk2rgwcDIwAzlGLJAVcFUMzFwgCX0kvNzUtoZGMFJAKxtOQML3AzDxwyscI4RMsfYogFqEkM7lFaB0h5QejmUfgyl5dGSDUsDKKr6oTyNBgYGNoaKxJKSIkM2BgYoCy5mBBczEoDbzAS1dS4TqueOMzGMglEwCkbBKBgFo2AUjIJRMApGwUgGgAAAAP//Nfi4SQ==") open(&(0x7f0000000080)='./file0/file0\x00', 0x103000, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0x6, 0x81f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) 19m0.303222758s ago: executing program 41 (id=712): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x1}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r2 = getpgrp(0xffffffffffffffff) wait4(r2, 0x0, 0x20000000, &(0x7f0000000480)) preadv(r1, &(0x7f0000000e40)=[{&(0x7f0000000880)=""/122, 0x7a}], 0x1, 0x68000, 0x40000004) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x220200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x200800, &(0x7f0000000400)={[{@utf8}, {@zero_size_dir}, {@keep_last_dots}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@errors_remount}, {@zero_size_dir}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}, 0x9, 0x1524, &(0x7f0000002280)="$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") getdents64(0xffffffffffffffff, &(0x7f0000001dc0)=""/4113, 0x55d) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x226, &(0x7f0000000300)="$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") open(&(0x7f0000000080)='./file0/file0\x00', 0x103000, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) 18m59.899141844s ago: executing program 42 (id=714): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 18m59.695331577s ago: executing program 43 (id=715): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x1}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r2 = getpgrp(0xffffffffffffffff) wait4(r2, 0x0, 0x20000000, &(0x7f0000000480)) preadv(r1, &(0x7f0000000e40)=[{&(0x7f0000000880)=""/122, 0x7a}], 0x1, 0x68000, 0x40000004) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x220200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001dc0)=""/4113, 0x55d) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x226, &(0x7f0000000300)="$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") open(&(0x7f0000000080)='./file0/file0\x00', 0x103000, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0x6, 0x81f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) 17m19.25090229s ago: executing program 44 (id=809): unshare(0x6a040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) pread64(r1, &(0x7f0000002180)=""/217, 0xd9, 0xdba3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x1, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}}, 0xb8}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) sendmsg$kcm(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921", 0x20}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x35c1, 0xe, 0x2, 0xfc, 0x10001]}, &(0x7f0000000200)=0x54) 16m59.56908286s ago: executing program 45 (id=829): unshare(0x6a040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) pread64(r1, &(0x7f0000002180)=""/217, 0xd9, 0xdba3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x1, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}}, 0xb8}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) sendmsg$kcm(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921", 0x20}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x35c1, 0xe, 0x2, 0xfc, 0x10001]}, &(0x7f0000000200)=0x54) 16m23.582131813s ago: executing program 46 (id=872): unshare(0x6a040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) pread64(r1, &(0x7f0000002180)=""/217, 0xd9, 0xdba3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x1, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}}, 0xb8}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) sendmsg$kcm(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921", 0x20}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x35c1, 0xe, 0x2, 0xfc, 0x10001]}, &(0x7f0000000200)=0x54) 16m11.19688983s ago: executing program 5 (id=908): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x4bfa, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x749381, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r4, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r3, 0x7) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) 16m9.433344805s ago: executing program 5 (id=910): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) 16m8.928808422s ago: executing program 47 (id=910): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) 15m44.062142267s ago: executing program 48 (id=914): unshare(0x6a040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) pread64(r1, &(0x7f0000002180)=""/217, 0xd9, 0xdba3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921", 0x20}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x35c1, 0xe, 0x2, 0xfc, 0x10001]}, &(0x7f0000000200)=0x54) 14m56.308296498s ago: executing program 49 (id=963): unshare(0x6a040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) pread64(r1, &(0x7f0000002180)=""/217, 0xd9, 0xdba3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) sendmsg$kcm(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921", 0x20}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x35c1, 0xe, 0x2, 0xfc, 0x10001]}, &(0x7f0000000200)=0x54) 13m20.609963522s ago: executing program 7 (id=1077): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10080, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x6, 0x6ac, &(0x7f0000001980)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000300)={0x6, 'nr0\x00', {}, 0x100}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'geneve1\x00', {0x3}, 0xfff9}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f000025a000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x9c0c7000) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000700)={[&(0x7f0000000500)='//\x00', &(0x7f0000000540)='&\'.\xad,^%,-!:\',!\\\x00']}, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) getpid() r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13m19.159109312s ago: executing program 7 (id=1079): unshare(0x6a040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(0xffffffffffffffff, &(0x7f0000002180)=""/217, 0xd9, 0xdba3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) sendmsg$kcm(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921", 0x20}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x35c1, 0xe, 0x2, 0xfc, 0x10001]}, &(0x7f0000000200)=0x54) 13m7.40951077s ago: executing program 7 (id=1090): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000080)='./file0/file0\x00', 0x10c42, &(0x7f0000000300)=ANY=[], 0x1, 0x293, &(0x7f0000000940)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x6) r1 = getpid() openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbef3, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314e5ff29bd7000fedbdf250900020073017a31000000000800410072786500140033006c6f", @ANYBLOB="b5e94b455b3734b376e14d0c5e90354c3dc0d5e3f065e92ee56de0d9711f80451764740c69d6ad786d6f43cc160d6b54f5be729062798df1f0250938c19ca71ba3bb0d2bca9c60632717d292b0e0ef38f9797b2c4247c82323d90d17c75f3a1a784d9da006484962d44862c2aa91c003f042d5e8067e910707b01c0b68d6c1c78b93c7e85157a3f8c0efd0a46fa7ea68ad5ec45edc058d71f18d9192a07a10a5f73f7b6d75164531bdb292d58fde0821caf06eaa7983b38a3fb7c5080aac1801388cb767bb1be3"], 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x890) r6 = socket$nl_rdma(0x10, 0x3, 0x14) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000ccaf4d59a528b90f30a391ac1778a957ec6cf18d3d5651ca6b6700b6b3a4afc099b68c0031e249c008e0ee7d"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) socket$inet(0x2, 0x2, 0xad4f) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r7, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) 12m56.605693054s ago: executing program 7 (id=1099): unshare(0x6a040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) pread64(r1, &(0x7f0000002180)=""/217, 0xd9, 0xdba3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x1, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}}, 0xb8}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) sendmsg$kcm(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921", 0x20}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x35c1, 0xe, 0x2, 0xfc, 0x10001]}, &(0x7f0000000200)=0x54) 12m49.054209872s ago: executing program 7 (id=1105): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0xfc01, 0x1000f4) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 12m46.298401461s ago: executing program 7 (id=1107): unshare(0x6a040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(0xffffffffffffffff, &(0x7f0000002180)=""/217, 0xd9, 0xdba3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) sendmsg$kcm(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921", 0x20}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x35c1, 0xe, 0x2, 0xfc, 0x10001]}, &(0x7f0000000200)=0x54) 12m30.90790447s ago: executing program 50 (id=1107): unshare(0x6a040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(0xffffffffffffffff, &(0x7f0000002180)=""/217, 0xd9, 0xdba3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) sendmsg$kcm(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921", 0x20}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x35c1, 0xe, 0x2, 0xfc, 0x10001]}, &(0x7f0000000200)=0x54) 12m13.257815952s ago: executing program 2 (id=1134): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x4010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e21, @rand_addr=0x401}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x2, 0x0, &(0x7f0000000280)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@dev, 0x0, 0x2}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000140)=""/70, 0x46}], 0x1, 0x3c, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f0000000140)={0x10, 0x30, 0x3, {0x0, 0x0, {0x2, 0x0, 0x0, @mcast1, 0x1}}}, 0x38) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x5, 0xf04, &(0x7f0000000f40)="$eJzs3U9sHNX9APA367+JTbwGfmDgR0ihFYGCHZJITW9BoB4Rl95BIaERhqKGHoiAmB4QlRBFQpwqDlRcKJVSpCKBKlWop7anVr31hHqhUpVKQT20SImr2G/Wuy/72PXYnrV3Px/p67dv3ux8v2M7zszs7NsAjKzG2tfjxxeKEN759O1HX36q+Pjasrtaaxxa+1rEXjOEMNHWL5LtfR4XXLn80qlubRGOrn0t++GxS63nzoQQVsKh8Flohg+Xlr/84N1HDn/02vQtb55/5pUd2v2WdD8AAGAYXfzT8t/u+8cfH5j/6uLBk2Gqtbw8Pm/G/kw87j8SD5TL4+VG6OwXbdFuMllvLEYjWW8sWW88yTOeyTeRbGcis95kj3xjbcu67ScAAADsReV5bTMUjcWOfqOxuLh+3n/N53OTxeJzZ5fPnBtQoQAAAEBl/76wdtOtEEIIIYQQQgghhjhW5wZ9BQIAAAAYNel8YddZ2d6Zulpba/aX/9LDje7Ph21Q9+//1+efHnD+LkY8//uv+osDAEB1w3o0We5XeRxdzmOQziM4ljxvs8f/jWQ745usMzev4F6ZbzBXZ/p93a1y9W/25zgoufrT+TB3q1z96Tydu1Wu/qma66gqV3+XKz+7Uq7+fTXXUVWu/v0111FVrv6ZmuuoKlf/bM11VJWr/4aa66gqV/+BmuuoKlf/XrmtNld/s+Y6qsrVP19zHVXl6r+x5jqqytV/U811VJWr/+aa6xiUO2Nbfh8OZtab6XJOt1fO8QAAAGDU/df8f0IIIUR7rN8CMfg6hBBCCCG2NS4M+gIEAAAAMHDl+wLKd72vRuX4WI/x8fbx6Y0VyvGJHs+f7DE+1WMcAAAACOG3r5+57a1iY767rc6HV84btS98fDVUmMconY9ws/m3Ou/ZVvPvlXnLAAAAGC3F9z67ev+j770w/9XFgyfbzn6vxvPdch7Q8Xht4JPYL+8LmE36RXkOfbIzTyOzXnp94Ibc9h7f4o4CAADACCvP35uhaCy2nXc3Q6OxuLhxPr4QJoozZ5dPH4n98vNZ/jA3MXVt+UM11w0AAAD0b+N8v/v5f/k5vgthslh87uzymXPr/dnW8olG+3WBuY3lRft1gWay/Ghm+bHYLz+/8wdz+9aWL5764fJT273zAAAAMCLOvXj+mSeXl0//yAMPPPCg9WDQf5kAAIDt9sUXb0/8+Njs79bf/78x/93V+OBQ7Dfj3H5/jsvL+wTK9wFc9379JzrzzOXWe75zvWay3liMqaTu6bbthLX5BjufN5/L1+zczmQm30ySbzbJl85TMJ6sX3SZSzB0mZ+wXG8uWZ7Owzie5CiS/Hd3yQUAAAClpReefX7p3IvnHzz77JNPn3769HPHjp747okTRx76zkNLa/f1L7Xf3Q8AAADsRRs3/Q66EgAAAAAAAAAAAAAAAAAAABhddXyc2KD3EQAAAEbdvy6EEFaEyET5AYODrkPs5lidGnwNwx3Bv0MhhBBCbDGc94mVEFZX00+aBwAAANhZVy6/dKq9vc5Ksa35WltrrjdXY96ynX3wr/PXolzt0sOd10v2b2s1jLq6f//l3635p7qOv//q9uafDht/+0Jff/8anRs42dHb12/ee5d+udDKH0K4fbzP/On+P95vxk6Hk/z3hv7yr76X5H+io9foN/99Sf79fea/bv+f7zdjp/tj/oXYP3xPv/k7d7H8LS33o99fgG8n+/9U6Dd/sv/NPhMmHoj5AWAUtf43X70w2EK2WXmUUB5Pz8R+ub/xcDOkdz9s9vi/kWxnfMuVd263PA66NfanW3V05i1ttv7y+zIb2xsq1pnaK3eV5Orfrp/jTsvVP1FzHVXl6p+suY6qcvV3P3vffXL1T9dcR1W5+vu+EDFgufr3ynXlXP0zNddRVa7+2ZrrqCpX/2b/Hx+UXP0Haq6jqlz9czXXUVWu/oqX1WqXq3++5jqqytV/Y811VJWr/6aa66gqV//NNdcxKHfENnc+XJ5/zsWxst9M+lNdvpd9vxgCAAAA7Kh/7sp5INquHAy8FiGEEEIIIYY//rO6btB1CCF2LlZXB3n1gUHb2XczA7Bb+fs/2vz8R5uf/2jz8+frlK/EF0m/NNZjfLzH+ESP8clkPP19neoxflOy3dXyumZ0c4/x/4t7kBs/0OP5t/YYX+gxfluP8dt7jN/RYxwAAIDRcEtsnR8CAADA8Hr5V5+88Zt7n7g8/9XFgyfD5HXzzh+J/an42vrrsZ/Oe1+aiK/5/yT2fxHb38f278n67j8BAACAnVd+TozX/wEAAGB4lZ9T6vwfAAAAhtd8bJ3/AwAAwPC6MbbO/wEAAGCIFdPdF8e2vC5wd2z7ndcPANj9/j+2d8b2YGzviu03YlseB9wT22/WVB8AsH1+/v2fnnir2Jjv/1gyfiUuL9vrrKxfKSganTP574vt/th+q8960s8D6Dd/6UCfeXYq/9wW8wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6Ox9vX48YUihHc+ffvRn02+8Zdry+5qrXFo7WsRe80QwkTreeXoRv/XccUrl1861d5ejW0RjoYiFK3l4bFLrUwzIYSVcCh8Fprhw6XlLz9495HDH702fcub5595ZQe/BR37BwAAAMPofwEAAP//fccg7g==") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 12m8.710122947s ago: executing program 2 (id=1137): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x4bfa, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x749381, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r4, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r3, 0x7) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) 12m7.159281919s ago: executing program 2 (id=1138): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x6, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0xfc5e) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x5f616d3c5bbebcbc) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8410) 12m4.194355412s ago: executing program 2 (id=1141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 12m2.92317828s ago: executing program 2 (id=1142): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0xfc01, 0x1000f4) sched_setscheduler(0x0, 0x2, 0x0) 11m59.195701123s ago: executing program 2 (id=1146): unshare(0x6a040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) pread64(r1, &(0x7f0000002180)=""/217, 0xd9, 0xdba3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x1, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}}, 0xb8}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) sendmsg$kcm(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921", 0x20}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x35c1, 0xe, 0x2, 0xfc, 0x10001]}, &(0x7f0000000200)=0x54) 11m43.492143427s ago: executing program 51 (id=1146): unshare(0x6a040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) pread64(r1, &(0x7f0000002180)=""/217, 0xd9, 0xdba3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x1, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}}, 0xb8}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) sendmsg$kcm(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921", 0x20}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x35c1, 0xe, 0x2, 0xfc, 0x10001]}, &(0x7f0000000200)=0x54) 5m33.044269179s ago: executing program 4 (id=1535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = syz_mount_image$fuse(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x28805, &(0x7f0000000f80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c6c6f775f6f746865722c616c6c6f775f6f746865722c580eaef2552b969cfa05ea60bbbb64656661756c745f7065726d697373616f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d307866cc8d6666666666666666666666666666662c64656661756c745f7065726d697373696f6e732c646f6e745f6d6561737572652c6f626a5f757365723d76657468305f6d616376746170002c6673636f6e746578743d756e636f6e66696e65645f752c7063723d30303030303030303030303030303030303031322c736d61636b6673726f6f743d2c646f6e745f68617368"], 0x1, 0x0, &(0x7f0000000ac0)="0f1e0505f66f687dca1c38cf0debb0be8560d7e98dd5932a6d3169a0fc20a6649b5f023e2540a48d792aadaebea5d8553ec4c7dfec4b4b6038884f163ec03b0275f2b28b7559012a926409dfd587094062144c3374ed1e2775bf94fd4cf1ff49873d7ef3655e47bf07de87b4b53222aa270a632b2193f6071444e029a8af46aaeb071b7e5c7d1f97e5a09e52cc502653e20ab0f7385d84bc3eef6a8515974e32e8cd8b63eeced0657554d4d365588e311cff8ed10e1f3bde9f18a2168e28b7e434e9fd7ad783d331f52c8cfc") r7 = syz_create_resource$binfmt(&(0x7f0000000bc0)='./file1\x00') execveat$binfmt(r6, r7, &(0x7f0000000cc0)={[&(0x7f0000000c00)=']}!/^&\xee\x00', &(0x7f0000000c80)='T[)(,\x00']}, &(0x7f0000000f00)={[&(0x7f0000000d00)='@\x00', &(0x7f0000000d40)='&\x9a$\x00', &(0x7f0000000d80)=')-&@ ^\'\x00', &(0x7f0000000dc0)='\'\x1d-\x00', &(0x7f0000000e00)='REDIRECT\x00', &(0x7f0000000e40)='-\xcd+\x00', &(0x7f0000000e80)='\x00', &(0x7f0000000ec0)='team0\x00']}, 0x1000) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000c40)='./file0\x00', 0x810c11, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x2, 0x1e2, &(0x7f00000006c0)="$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") prctl$PR_SET_DUMPABLE(0x4, 0x0) umount2(&(0x7f0000000280)='./file1\x00', 0x0) r8 = semget(0x3, 0x1, 0x100) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x8, 0x5, 0x4e0, 0x0, 0x0, 0xffffffff, 0x320, 0x320, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv6=@empty, @gre_key}}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @common=@hl={{0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @gre_key, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0x2, 0x0]) 5m32.060076073s ago: executing program 4 (id=1537): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x84, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x26}}}}}) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000f1a000/0x2000)=nil, 0x2000, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd, 0x73b, &(0x7f00000002c0)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x126) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r4, 0x0, 0x0) unlink(&(0x7f0000000040)='./file1\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x1000d, 0x0, 0x0, 0x41100, 0x21, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) 5m29.45251728s ago: executing program 4 (id=1541): io_uring_setup(0x3eae, &(0x7f0000003b00)={0x0, 0xc95e, 0x200, 0x1}) sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r4, &(0x7f0000006e40), 0x0, 0x40012061, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) open(0x0, 0x1a1142, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x30004c0, &(0x7f0000002bc0)=ANY=[@ANYBLOB="71756965742c63726561746f723dd4675f162c696f636861727365743d69736f383835392d322c71756965742c636f6465706167653d63703933362c00b24530a1a1e51b95228246cc65c972358b611490e09004a315011a4fe58392211f22a42390912061adb25c406e20585d9fa4109c4a2b201f39c5e48b745085abecadfbfbbcd03215c2cdd68151829c12d7be50cdd55aa9e506d9e28ad8ce2951dd1f560961e92e8d198954d737b45262a26cc3bb46b70e1ad909d3b0c2d7fb8053f47884a9cc46a9d32ce04b2d00544c47d94d5a91538c024918965b", @ANYRESDEC, @ANYRESOCT], 0x11, 0x2b7, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 5m27.559949327s ago: executing program 4 (id=1542): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x84, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x26}}}}}) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000f1a000/0x2000)=nil, 0x2000, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd, 0x73b, &(0x7f00000002c0)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x126) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r5 = open(&(0x7f0000000240)='./bus\x00', 0x66842, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x1000d, 0x0, 0x0, 0x41100, 0x21, '\x00', r0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) 5m25.976670089s ago: executing program 4 (id=1545): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x84, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x26}}}}}) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000f1a000/0x2000)=nil, 0x2000, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd, 0x73b, &(0x7f00000002c0)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x126) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') r5 = open(&(0x7f0000000240)='./bus\x00', 0x66842, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x1000d, 0x0, 0x0, 0x41100, 0x21, '\x00', r0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 5m22.867526754s ago: executing program 4 (id=1548): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000dd4ecc33d4ae0a235b7f329b0e96144e3f"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) 5m7.619328141s ago: executing program 52 (id=1548): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000dd4ecc33d4ae0a235b7f329b0e96144e3f"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) 3m31.264314964s ago: executing program 5 (id=1572): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000080)='./file0/file0\x00', 0x10c42, &(0x7f0000000300)=ANY=[], 0x1, 0x293, &(0x7f0000000940)="$eJzs3MFr03AUwPG3rtu6jq09qKAgPvSil7DVP0CKbCAWlLmKehAyl2ppbEZTJhVxu3nx4N8xPHoT1KOXXbx597aL4GWgWEmWbemWDZ1mP7XfD2x5TfLa92uS8hJI1m+9eNio+VbNbksmp5IRWZENkWIQRQaiaSaMhyVuRS6Mffk4KCJXy5XK9KzqTHnuYklVJ868efTk5dl37bGbryZej8ha8e7659KntRNrJ9e/zz2o+1r3tem11dZ5z2vb866jC3W/Yaledx3bd7Te9J1Wz/Ka6y0udtRuLoznF1uO76vd7GjD6Wjb03aro/Z9u95Uy7J0PC9INrQdVVdnZ+2y0WKQnpxkg0mrVbaDI3R0zwrVVRNlAQAAs+L9vxy6/z994/adNPr/oGs5uP9fof//DUn9/3tTxSAlQf+fj47fXvT/AAAAAAAAAAAAAAAAAAAAAAD8Cza63UK32y1sTbf+RsLbh0W2XpuuE+lg+/e32I17ORH32VJ1qSriDgT/A+Wa1MUVRyalIN/C/SGyGc9cqUxPaqgob93lKH95qTrYmz8lBSkm509t5mtv/pDk4/klKcix5PxSYv6wnD8Xy7ekIB/uiSeuLIT79U7+0ynVy9cqu/JHw/UAAAAAAPgfWLot8fzdsvZbvpn/C9cHdp1fZ+VU1uzYAQAAAADoF37nccN2XadlJvgaXSwwXMZfHhwXkUOlX4o99XVnUXbPnD8dPPdMf3XB+MxvuMQgJyLbc4Z/bltMyAFvOJrKSM38HgEAAABIz07Tb7oSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD611E88Gyfj84c8VABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA434EAAD//36bH1k=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbef3, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314e5ff29bd7000fedbdf250900020073017a31000000000800410072786500140033006c6f", @ANYBLOB="b5e94b455b3734b376e14d0c5e90354c3dc0d5e3f065e92ee56de0d9711f80451764740c69d6ad786d6f43cc160d6b54f5be729062798df1f0250938c19ca71ba3bb0d2bca9c60632717d292b0e0ef38f9797b2c4247c82323d90d17c75f3a1a784d9da006484962d44862c2aa91c003f042d5e8067e910707b01c0b68d6c1c78b93c7e85157a3f8c0efd0a46fa7ea68ad5ec45edc058d71f18d9192a07a10a5f73f7b6d75164531bdb292d58fde0821caf06eaa7983b38a3fb7c5080aac1801388cb767bb1be3"], 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x890) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000ccaf4d59a528b90f30a391ac1778a957ec6cf18d3d5651ca6b6700b6b3a4afc099b68c0031e249c008e0ee7d"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) socket$inet(0x2, 0x2, 0xad4f) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r6, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) 3m26.929694465s ago: executing program 5 (id=1722): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 3m24.880506644s ago: executing program 5 (id=1730): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x2, 0x0, 0x6, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000140), 0x2, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000040)) 3m21.272843336s ago: executing program 5 (id=1738): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(0x0, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 3m5.933724703s ago: executing program 53 (id=1738): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(0x0, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 2m6.820499901s ago: executing program 6 (id=1919): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6, 0x0, 0x3}, 0x18) r7 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000380)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000400)={0x8f, 0x0, 0xa}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) read$alg(r3, &(0x7f0000000240)=""/4096, 0xfffffdef) 2m4.649294183s ago: executing program 6 (id=1923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) close(0x3) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x44}}, 0x0) sendmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000f00)="c856", 0x2}], 0x1}}], 0x1, 0x4000) 2m3.469176949s ago: executing program 6 (id=1933): syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f0000000340), 0xff, 0x102) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, &(0x7f0000000700)={0x80000000, 0x0, &(0x7f0000000780)}) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008841}, 0x10) tkill(0x0, 0xb) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="e02584eeb69ae6b342b68d8be5414b8bad9da292edc320246d439cbe99d5435fcc9f629a115737", 0x27}], 0x1, &(0x7f00000006c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x2004001) io_setup(0xff, 0x0) io_submit(0x0, 0x0, &(0x7f0000001440)) socket$alg(0x26, 0x5, 0x0) 2m1.593078226s ago: executing program 6 (id=1934): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 2m0.59173083s ago: executing program 6 (id=1941): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)}, 0x20000000}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x20, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m0.225017465s ago: executing program 6 (id=1944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000200)=@ll={0x27, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) 1m59.799714591s ago: executing program 54 (id=1944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000200)=@ll={0x27, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) 9.904905109s ago: executing program 0 (id=2330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r2, 0x0, 0x8000002b) 9.801747961s ago: executing program 9 (id=2331): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60b03, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 9.337225568s ago: executing program 9 (id=2335): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b41) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 8.345083942s ago: executing program 0 (id=2342): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000280)={r6, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, [], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) 8.258471033s ago: executing program 3 (id=2343): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 8.162572254s ago: executing program 9 (id=2344): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="89e7ee2c78daddb4b473fec988ca", 0xe}], 0x1) 7.791533099s ago: executing program 8 (id=2345): ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x20, 0x9, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084) 7.705079331s ago: executing program 9 (id=2346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_GET_NAME(0x25, &(0x7f0000000000)=""/25) 7.497286364s ago: executing program 8 (id=2347): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) socket$nl_generic(0x10, 0x3, 0x10) 7.361124045s ago: executing program 9 (id=2349): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe7) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) 7.233243837s ago: executing program 8 (id=2350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.853332073s ago: executing program 8 (id=2351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000080)) 6.649106636s ago: executing program 0 (id=2353): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)={0x2, 0x2, 0xbb, 0x8, 0x34, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2d, 0x34ff}, @sadb_x_sec_ctx={0x14, 0x18, 0xb, 0x6, 0x93, "b4bdc216ccbfee60b11ca4d51a4908b1a7a68ced34ede7e5c570dd1ab74c311165afffb745ff723cf8c7789a96d82ae52195d275fffe0bcd7ef87da5540447585bbb2c010ea49434fe156f1d8d175654ee81ed0c3cb36566a2f6dd85d997158581282d434353323dc1925fe18e30d9974708d39ddff96a02efec1e99a877db50f1b8320223a04aea02147d9f2de3169291c4df"}, @sadb_ident={0x2, 0xb, 0x9, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x4d4, 0xf2, 0x3, 0x76, 0x1, 0x1}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x6e6bb2, 0x5, {0x6, 0x32, 0x4, 0x0, 0x0, 0x1, 0x0, @in6=@remote, @in6=@private2}}, @sadb_address={0x5, 0x7, 0x33, 0x80, 0x0, @in6={0xa, 0x4e20, 0x7, @empty, 0x1000}}, @sadb_lifetime={0x4, 0x2, 0xff, 0xbb, 0x2, 0x7}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}]}, 0x1a0}}, 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0) setresgid(0x0, 0xee00, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000200000000000000f800000065600900f0ffffff852000000300000018520000100000000000000000000000950000000000000095000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000007c0)=[{0x4, 0x1, 0x10, 0x9}, {0x0, 0x5, 0x3, 0x3}, {0x0, 0x4, 0xd, 0x6}, {0x3, 0x1, 0xf, 0x4}, {0x2, 0x2, 0x3, 0x1}, {0x1, 0x4, 0xc, 0x4}, {0x1, 0x3, 0xc, 0x4}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6.597843157s ago: executing program 8 (id=2354): socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r5) 4.515071966s ago: executing program 0 (id=2356): mkdir(&(0x7f00000020c0)='./file0\x00', 0x12) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x64) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 3.617120549s ago: executing program 9 (id=2357): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="89e7ee2c78daddb4b473fec988ca", 0xe}], 0x1) 3.49728157s ago: executing program 3 (id=2358): socket(0x1e, 0x1, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 3.379335912s ago: executing program 0 (id=2359): ioperm(0x0, 0xf4, 0x10000007f) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) rt_sigqueueinfo(0x0, 0xb, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121801) r2 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r2, 0x207a98, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x190, 0x1, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x4a, 0x6, "d23e08489c33ff2db4d85b049b7531600f52576477645a78baa0a011e653bbb1e6ee8336b9a49c172d22a6a97b829e73ce839f6beab8ec8195a52e7e850239d536db1ca35212"}, @NFTA_TABLE_USERDATA={0x96, 0x6, "768d24bd1c7b635352fd2dd2dd90218e9c3e1fcc52b1cdca435047be361f023f00f12a905be955738b93de256ae21d9cd8dbad5982a850aaebffdbcf0fd135c8cf85bacb33367b00a077ffd51bfac912a72e32eddbd64091672fed5095caa334d2319c430da037731b9a1a73d8742775c77268ca37292bec74ccc01761f2b37bbe2d896440a7d41c797b167fb8a517beeeaf"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x7b, 0x6, "04ad420ebe5934292da102f33b3f199e7b31c94b7df5620feb21ac61b1b1a502902c8f41220ebfecb22ea28b3b1c0825f31ba3326a57498e9ec7001fe82cfb8cda2a47076d49c8a03354538cd96c7a07d6511b87939edc247d4bf1a2ea2ab7f15f3910fea441ceade7f5dcb692e6b64360bd0c2b420ccd"}, @NFTA_TABLE_USERDATA={0xf, 0x6, "9350d90d36ff41b680b0c4"}]}, 0x190}, 0x1, 0x0, 0x0, 0x80051}, 0x40000) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x40) 3.201318584s ago: executing program 0 (id=2361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x10) 3.201026515s ago: executing program 3 (id=2362): ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000000)={0x9, {0x0, 0xe, 0x0, 0x800000}}) 2.932423758s ago: executing program 3 (id=2363): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000380)='source\xcf\x87\x86\x1bY\x0f\xde\xd6\xcd\xc0\x01\xd3\x19>K\x04\xfe\x86YG\xa5\x0f\xed\xa0\x9f\x1e\x14R\x9e\x04\xfa\xed\xd0TG&\x88\xeaz\x9aD\xf8Tt\x8c\x00{\x1fm\xfe\x9c\xf6_h\x9e\xfc\'', &(0x7f00000001c0)='sou\x01ce', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, 0x0, &(0x7f00000008c0)) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_crypto(0x10, 0x3, 0x15) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x141000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000140)={0xa, 0x0, 0x1, 0x0, 'syz0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) alarm(0x1) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) tkill(0x0, 0xb) 2.175026049s ago: executing program 1 (id=2364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000080)) 1.917222083s ago: executing program 8 (id=2365): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xe2, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0xfe1e}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40040) 1.917035183s ago: executing program 1 (id=2366): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x28}}, 0x0) 1.503200049s ago: executing program 1 (id=2367): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xeea390, 0x0, 0xfffc}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x1, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'}) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) 466.748594ms ago: executing program 1 (id=2368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x215, 0x3, 0x0, 0x0, 0x10}}, 0x50) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000040601040000000000000000050000040500010007000000050001000700000005000100070000000900020073797a320000000005000100070000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 329.224745ms ago: executing program 3 (id=2369): unshare(0x20020680) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e40)={0xffffffffffffffff}) r1 = io_uring_setup(0x3920, &(0x7f0000000140)={0x0, 0xfc3, 0x1, 0x0, 0x7}) dup3(r0, r1, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) 202.823767ms ago: executing program 1 (id=2370): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf00001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000080), 0x404000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x22000, 0x28) syz_open_dev$I2C(&(0x7f0000000000), 0x5, 0x80) r1 = syz_io_uring_setup(0x23a, &(0x7f0000000900)={0x0, 0xd9e6, 0x10101}, &(0x7f0000000100), &(0x7f00000008c0)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x62c, 0x0, 0x18c, 0x203, 0x340, 0x19030000, 0x564, 0x2e0, 0x2e0, 0x564, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2f8, 0x340, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x4}, {0x4}, {}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x8}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x4754884}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0x1000}, {}, {0x100}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}]}}, @inet=@rpfilter={{0x24}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0x1dc, 0x224, 0x0, {}, [@common=@rt={{0x138}, {0x101, [0x484, 0x80000000], 0x6, 0x39, 0x6, [@private2, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @mcast2, @empty, @rand_addr=' \x01\x00', @local, @local, @private0, @loopback, @empty], 0x9}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x688) io_uring_enter(r1, 0x2f6a, 0x4000, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r4, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 30.152899ms ago: executing program 3 (id=2371): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) sendmmsg$sock(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)=@phonet={0x23, 0x2, 0x3}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="c582f8483b93bcef2a2ee2b87fd97b8683c1c8af25504a9111e07c3d97fe440448c4ee63958e554ed3f19c01e1db0abe7fdc3d789a3a0deb01ebc73c7a1e049e625e41d44db70003fdf0d9ee88de3b0ef17d4647d7a02bfa9c99db4365cd5240ce07fb7a1140", 0x66}, {&(0x7f0000000100)="4b6472d1db5991c3bb2ea85f968246c2c475814dbea7b99b39811a5b459b16c302930eb335b45a08daa8e12758b4b56a2a2071e1d2b4b6ad2025c36610d2655e9860ddf2e85165df16ed3d96eb91884dcba3a8b076bfc661d6690814c3f79f22688d786aadfb9b1f55a6b81be4723674289c9dadd1684b83b04d75ecaab50e545e228a59b459a7fa790cdbd6b6eb", 0x8e}, {&(0x7f0000000200)="83c0f528036674b4ecb400ef25ceb5258b01825e3aa140d37095c5aa86ce", 0x1e}, {&(0x7f0000000240)}, {&(0x7f0000000300)="099018", 0x3}, {&(0x7f0000000340)="e1d9a5edb22a65415e12a33d1ced9c30ac224988e8438199d79602e0b1da0b20e5c3d574bee72e6db2de31c6dd919e0ba0187c05e9f3965274512885f5f486cafe3cacaa53ba5efa341c0ace295d8493ed37eda2278ec1c117ac27ab1715fe488d5619d36089dc830fcea42d7d460f71be388833bc3422f7c7449dcc1c1305ac0b62f11f6dee2f6703b8324d401ab2ada20483035de70c4510dcbb31831aca4e612ebb38cf6321a1836683074975688df7aae87ecac871288dcc3491ad1d496c29b7cc267aab50c653", 0xc9}, {&(0x7f0000000440)="328df66611ed37215c800c6493245054d5b3f932184f403d84605d8ac1f1246485d7733f86bd746eedd41857f20791906223e140d280e9fd60695d867e09c77e1266ea4c827d1326070e6f01572115374bcf22508bb5fdf269109c364e41c1235193adbfd793e4fa3724f801d2117791a4cf79f070802e694280df27dbc21dcb2e", 0x81}, {&(0x7f0000000500)="915f1215b3687d559957849846930b7f2f0d8c935b437333f88bd5c448c4e76693100766484c339192642cc6b7d6fa6918b9b1950f92eb0d8442f1afd1219d031e71aa10a32e", 0x46}], 0x8, &(0x7f00000005c0)=[@txtime={{0x14, 0x1, 0x3d, 0x9}}, @timestamping={{0x10, 0x1, 0x25, 0xfffffffc}}, @mark={{0x10, 0x1, 0x24, 0x797a}}, @txtime={{0x14, 0x1, 0x3d, 0x9}}, @mark={{0x10, 0x1, 0x24, 0x400}}], 0x58}}], 0x1, 0x40011) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 1 (id=2372): mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r1 = socket(0x9, 0x3, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000002e40)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd74) r6 = syz_io_uring_setup(0x917, &(0x7f0000000300)={0x0, 0x400, 0x1, 0x1000001, 0xf7fffffc}, &(0x7f0000000180), &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff27, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0xd5, 0x0, &(0x7f00000003c0)="048add0c1d1582a6729988f0fb4e1169bff719d1e73ba3413591c19b754c4a37bf2a449737eccbf5b1341eac3c94438130abdf4fb1fdd7ee276222a2ba82baafb6f2da0645c95f3799ec8496eaa57de8ee64589061d63f61222307ca161335c58448fdd7b093b4deb714e34b098feb281e05c1921b0731cf01abb834673c1645e607efd6b907a781a2ef1ac9e0ccffcdc412d310a49479211bbd1d734a66efe26d69109367f1258f88fc2f5d8cae721901f7215c8e29503d442c94551395dfa1f1a9239d330dd90e049fa272750866ac606b179ea8", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x40000000}, 0x4c) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x20, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe, 0x9f, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4000010, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): : veth0: link becomes ready [ 1463.584192][T14022] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.034455][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1464.051855][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1464.078357][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.085569][ T4442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.124765][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1464.149801][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1464.176170][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.183393][ T4442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.348979][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1464.369181][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1464.407142][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1464.456455][T14256] loop3: detected capacity change from 0 to 32768 [ 1464.470698][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1464.497627][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1464.545034][T14256] jfs_strtoUCS: char2uni returned -22. [ 1464.559311][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1464.568583][T14256] charset = cp950, char = 0xd4 [ 1465.474390][T14053] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1465.577069][T14268] loop4: detected capacity change from 0 to 512 [ 1465.691770][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1465.738439][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1465.762917][T14268] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1465.768406][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1465.780982][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1465.789616][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1465.798405][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1465.807834][T14053] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1465.823374][T14268] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1465.834672][ T4884] device hsr_slave_0 left promiscuous mode [ 1465.890612][ T4884] device hsr_slave_1 left promiscuous mode [ 1465.924993][ T4884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1466.270587][T14284] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1467.245296][ T4884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.319881][ T4884] device bridge_slave_1 left promiscuous mode [ 1467.353596][ T4884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.418134][ T4884] device bridge_slave_0 left promiscuous mode [ 1467.427732][ T4884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.499856][ T9780] EXT4-fs (loop4): unmounting filesystem. [ 1468.149701][ T4884] device veth1_vlan left promiscuous mode [ 1468.228286][ T4884] device veth0_vlan left promiscuous mode [ 1470.836652][T14296] loop0: detected capacity change from 0 to 32768 [ 1470.870238][T14296] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1512 (14296) [ 1470.940743][T14296] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1470.983731][T14296] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1471.022330][T14296] BTRFS info (device loop0): enabling auto defrag [ 1471.028865][T14296] BTRFS info (device loop0): doing ref verification [ 1471.052657][T14296] BTRFS info (device loop0): max_inline at 0 [ 1471.080628][T14296] BTRFS info (device loop0): force clearing of disk cache [ 1471.101542][T14296] BTRFS info (device loop0): turning on sync discard [ 1471.108401][T14296] BTRFS info (device loop0): disabling free space tree [ 1471.287694][T14296] BTRFS info (device loop0): enabling ssd optimizations [ 1471.311918][T14296] BTRFS info (device loop0): rebuilding free space tree [ 1471.341684][T14296] BTRFS info (device loop0): disabling free space tree [ 1471.349494][T14296] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1471.378127][T14296] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1471.549779][ T4884] team0 (unregistering): Port device team_slave_1 removed [ 1471.725271][ T4884] team0 (unregistering): Port device team_slave_0 removed [ 1471.766951][T12631] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1471.988764][ T4884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1472.152313][ T4884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.743670][T14326] loop0: detected capacity change from 0 to 32768 [ 1472.846303][T14326] jfs_strtoUCS: char2uni returned -22. [ 1472.861238][T14326] charset = cp950, char = 0xd4 [ 1473.617003][ T4884] bond0 (unregistering): Released all slaves [ 1474.008053][T14022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1474.086693][T14053] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1474.249699][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1511'. [ 1474.444489][T14053] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1474.548620][T14337] loop3: detected capacity change from 0 to 512 [ 1474.561859][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1514'. [ 1474.610286][T14339] loop4: detected capacity change from 0 to 128 [ 1474.672262][T14337] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1474.704851][T12402] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1474.708393][T14337] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1475.123105][T14351] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1475.139316][T14351] siw: device registration error -23 [ 1476.502480][T14053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.579061][T11374] EXT4-fs (loop3): unmounting filesystem. [ 1476.592014][T11708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1476.805201][T11708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1476.906135][T14364] loop4: detected capacity change from 0 to 64 [ 1477.557966][T14361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1517'. [ 1477.648109][T14053] 8021q: adding VLAN 0 to HW filter on device team0 [ 1477.859536][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1477.940680][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1477.949503][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.956690][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1478.063531][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1478.083617][T14373] loop3: detected capacity change from 0 to 64 [ 1479.039760][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1479.049479][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1479.058256][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.065480][ T4442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1479.074211][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1479.135170][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1479.176898][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1479.249157][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1479.294066][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1479.999928][T14382] loop0: detected capacity change from 0 to 64 [ 1480.021119][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1480.030016][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1480.092308][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1480.117690][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1480.343376][T14381] loop4: detected capacity change from 0 to 64 [ 1480.412849][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1480.420416][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1480.493084][T14022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1480.500724][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1480.694747][T14393] loop0: detected capacity change from 0 to 32768 [ 1480.714928][T14393] jfs_strtoUCS: char2uni returned -22. [ 1480.720419][T14393] charset = cp950, char = 0xd4 [ 1480.777368][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1481.457432][T14053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1482.402226][T14412] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1526'. [ 1484.283711][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1484.299084][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1484.330660][T14053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1484.616171][T14405] loop4: detected capacity change from 0 to 40427 [ 1484.641728][T14405] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1484.686002][T14405] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1484.697507][T14437] loop0: detected capacity change from 0 to 128 [ 1484.748718][T14405] F2FS-fs (loop4): invalid crc value [ 1484.982447][T14405] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1485.259694][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1485.307567][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1485.389950][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1485.422189][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1485.458379][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1485.474557][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1485.536553][T14022] device veth0_vlan entered promiscuous mode [ 1485.579362][T14022] device veth1_vlan entered promiscuous mode [ 1486.036730][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1486.112916][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1486.285535][T14022] device veth0_macvtap entered promiscuous mode [ 1486.392773][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1486.562859][T14022] device veth1_macvtap entered promiscuous mode [ 1486.613078][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1486.623886][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.634531][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1486.645474][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.655603][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1486.666402][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.680093][T14022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1486.697830][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1486.742171][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1486.799958][T14455] loop4: detected capacity change from 0 to 2048 [ 1486.808317][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.830519][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.862801][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.890887][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.903401][T14458] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1486.941522][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1487.064766][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.140604][T14022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1487.151587][T14022] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.160351][T14022] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.169152][T14022] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.178909][T14022] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.201999][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1487.213608][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1487.365874][T14460] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 1487.383731][T14460] Remounting filesystem read-only [ 1487.701744][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1487.748553][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1487.921740][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1487.930402][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1487.967176][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1487.992319][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1488.128156][T14053] device veth0_vlan entered promiscuous mode [ 1488.203914][T14053] device veth1_vlan entered promiscuous mode [ 1489.198043][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1489.212632][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1489.256852][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1489.278614][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1489.315812][T14053] device veth0_macvtap entered promiscuous mode [ 1489.326218][ T5825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1489.351575][ T5825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1489.374628][T14053] device veth1_macvtap entered promiscuous mode [ 1489.389700][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1489.397972][T14468] loop4: detected capacity change from 0 to 16 [ 1489.401849][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1489.404987][T14468] erofs: Unknown parameter '0xffffffffffffffff' [ 1489.418967][T12416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1489.449535][T10366] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1489.497328][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.510408][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.521009][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.532033][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.551133][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.571932][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.605481][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.614084][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.625241][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.630929][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.671551][T14053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.705824][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1489.721666][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1489.754875][ T4827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1489.758513][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.803860][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.807636][ T4827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1489.831724][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.857192][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.878790][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.900303][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.928934][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.951249][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.968658][T14053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1489.991032][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1489.999937][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1490.014648][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1490.033669][T14053] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.041983][T14470] loop0: detected capacity change from 0 to 2048 [ 1490.059610][T14053] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.083170][T14053] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.092212][T14053] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.121516][T14471] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1490.431004][T14474] loop9: detected capacity change from 0 to 128 [ 1490.487017][ T5825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.621987][T14478] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1490.780660][T14478] Remounting filesystem read-only [ 1491.085014][T12402] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1491.518308][T14483] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1491.533456][T14483] siw: device registration error -23 [ 1492.212732][ T5825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.245742][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1493.268501][ T4884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.316000][ T4884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.349576][T14490] loop9: detected capacity change from 0 to 4096 [ 1493.379426][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1493.721983][T14497] loop4: detected capacity change from 0 to 64 [ 1494.442750][T14490] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1494.550625][T14499] loop6: detected capacity change from 0 to 512 [ 1494.825821][T14499] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1118: casefold flag without casefold feature [ 1494.889348][T14499] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1118: couldn't read orphan inode 15 (err -117) [ 1494.961757][T14499] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1496.769295][T14053] EXT4-fs (loop6): unmounting filesystem. [ 1496.825219][T14022] EXT4-fs (loop9): unmounting filesystem. [ 1501.773629][T14533] loop9: detected capacity change from 0 to 512 [ 1502.075205][T14533] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1502.159282][T14533] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1504.635718][T14557] loop0: detected capacity change from 0 to 40427 [ 1504.861952][T14560] loop6: detected capacity change from 0 to 4096 [ 1505.474054][T14557] F2FS-fs (loop0): invalid crc value [ 1505.498261][T14557] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1505.528347][T14557] F2FS-fs (loop0): Start checkpoint disabled! [ 1505.592971][T14557] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1505.698531][T14562] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1505.750629][T14022] EXT4-fs (loop9): unmounting filesystem. [ 1507.375946][ T4442] kworker/u4:10: attempt to access beyond end of device [ 1507.375946][ T4442] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1507.699588][T14573] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1560'. [ 1507.868307][ T4442] kworker/u4:10: attempt to access beyond end of device [ 1507.868307][ T4442] loop0: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 1510.332377][T14591] loop3: detected capacity change from 0 to 1024 [ 1510.350327][T14591] EXT4-fs: Ignoring removed bh option [ 1511.000261][T14591] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1511.317738][T11374] EXT4-fs (loop3): unmounting filesystem. [ 1511.355127][T14599] loop6: detected capacity change from 0 to 1024 [ 1511.422319][T14599] EXT4-fs: Ignoring removed bh option [ 1511.538126][T14599] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1513.044328][T14053] EXT4-fs (loop6): unmounting filesystem. [ 1514.511640][T14609] loop6: detected capacity change from 0 to 40427 [ 1514.529422][T14609] F2FS-fs (loop6): invalid crc value [ 1514.547715][T14609] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1514.613943][T14609] F2FS-fs (loop6): Start checkpoint disabled! [ 1514.639063][T14609] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1514.710631][T14615] loop0: detected capacity change from 0 to 128 [ 1514.993939][T12402] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1515.465915][T14625] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1515.479819][T14625] siw: device registration error -23 [ 1517.425129][ T4442] kworker/u4:10: attempt to access beyond end of device [ 1517.425129][ T4442] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1517.659456][ T4442] kworker/u4:10: attempt to access beyond end of device [ 1517.659456][ T4442] loop6: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 1517.870115][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1517.881590][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1517.890522][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1517.898399][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1517.906413][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1517.915472][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1518.006651][T14630] lo speed is unknown, defaulting to 1000 [ 1520.010974][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 1520.641665][T14652] loop3: detected capacity change from 0 to 1024 [ 1520.726745][T14652] EXT4-fs: Ignoring removed bh option [ 1520.764604][T14630] chnl_net:caif_netlink_parms(): no params data found [ 1520.965851][T14652] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1522.141525][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 1522.440939][T11374] EXT4-fs (loop3): unmounting filesystem. [ 1523.660500][T14666] loop6: detected capacity change from 0 to 4096 [ 1524.077447][T14671] loop9: detected capacity change from 0 to 16 [ 1524.089889][T14671] erofs: Unknown parameter '0xffffffffffffffff' [ 1524.155212][T14669] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1524.341395][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 1525.075152][ T5825] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.745660][T14678] loop3: detected capacity change from 0 to 40427 [ 1525.777985][T14682] loop0: detected capacity change from 0 to 64 [ 1526.006241][T14678] F2FS-fs (loop3): invalid crc value [ 1526.014634][T14678] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1526.057140][T14678] F2FS-fs (loop3): Start checkpoint disabled! [ 1526.068197][T14678] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1526.357879][T14688] loop9: detected capacity change from 0 to 4096 [ 1526.401160][ T8014] Bluetooth: hci2: command 0x0419 tx timeout [ 1526.464791][T14689] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1526.617777][ T5825] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.862062][T14630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.941872][T14630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.309992][T14695] loop0: detected capacity change from 0 to 2048 [ 1527.341843][T14630] device bridge_slave_0 entered promiscuous mode [ 1527.679614][T14698] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1527.704930][T14695] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1527.717495][ T5825] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.782024][T14695] Remounting filesystem read-only [ 1527.851215][T12416] kworker/u4:4: attempt to access beyond end of device [ 1527.851215][T12416] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1527.877066][T14700] loop6: detected capacity change from 0 to 512 [ 1527.889902][T14630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.921313][T14630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.946077][T12416] kworker/u4:4: attempt to access beyond end of device [ 1527.946077][T12416] loop3: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 1528.002504][T14630] device bridge_slave_1 entered promiscuous mode [ 1528.127352][T14700] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1528.156628][ T5825] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.181128][T14700] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1528.256785][T14705] loop0: detected capacity change from 0 to 128 [ 1528.654030][T14630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.769027][T14713] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1528.783293][T14713] siw: device registration error -23 [ 1529.238199][T14708] loop3: detected capacity change from 0 to 40427 [ 1529.262911][T14708] F2FS-fs (loop3): invalid crc value [ 1529.303192][T14708] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1529.344939][T14708] F2FS-fs (loop3): Start checkpoint disabled! [ 1529.427331][T14630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1529.620139][T14708] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1530.498496][T14053] EXT4-fs (loop6): unmounting filesystem. [ 1530.538511][T14630] team0: Port device team_slave_0 added [ 1530.732797][T14630] team0: Port device team_slave_1 added [ 1530.816005][T14720] loop0: detected capacity change from 0 to 40427 [ 1530.841992][T14720] F2FS-fs (loop0): invalid crc value [ 1530.855179][ T2929] kworker/u4:5: attempt to access beyond end of device [ 1530.855179][ T2929] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1530.932769][T14720] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1530.975153][T14720] F2FS-fs (loop0): Start checkpoint disabled! [ 1530.984846][T14720] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1531.028900][ T2929] kworker/u4:5: attempt to access beyond end of device [ 1531.028900][ T2929] loop3: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 1531.185231][T14630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1532.349619][T14730] loop6: detected capacity change from 0 to 4096 [ 1532.671056][T14731] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1532.770894][T14630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1532.937383][T14630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1532.958493][ T4827] kworker/u4:16: attempt to access beyond end of device [ 1532.958493][ T4827] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1533.021271][T14630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1533.064995][ T4827] kworker/u4:16: attempt to access beyond end of device [ 1533.064995][ T4827] loop0: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 1533.079511][T14630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1533.327209][T14630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.285182][T14746] loop9: detected capacity change from 0 to 128 [ 1537.458364][T10122] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1537.680696][T14750] loop0: detected capacity change from 0 to 128 [ 1538.639157][T14757] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1538.654198][T14757] siw: device registration error -23 [ 1539.544846][T14630] device hsr_slave_0 entered promiscuous mode [ 1539.571526][T14630] device hsr_slave_1 entered promiscuous mode [ 1539.677944][T14630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1540.028514][T14768] loop6: detected capacity change from 0 to 4096 [ 1540.328256][T14769] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1540.334722][T14630] Cannot create hsr debugfs directory [ 1542.989030][T14779] loop6: detected capacity change from 0 to 4096 [ 1543.421026][T14781] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1543.705673][T14783] loop3: detected capacity change from 0 to 2048 [ 1543.829544][T14784] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1544.279696][T14791] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1545.655580][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1605'. [ 1545.986522][T14791] Remounting filesystem read-only [ 1547.162846][T14801] loop3: detected capacity change from 0 to 4096 [ 1547.500940][T14803] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1547.539028][ T3624] udevd[3624]: worker [10366] terminated by signal 33 (Unknown signal 33) [ 1547.566558][ T3624] udevd[3624]: worker [10366] failed while handling '/devices/virtual/block/loop3' [ 1548.128307][T14808] loop9: detected capacity change from 0 to 2048 [ 1548.482757][T14814] loop0: detected capacity change from 0 to 16 [ 1548.495431][T14814] erofs: Unknown parameter '0xffffffffffffffff' [ 1548.842841][T14816] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1550.506177][T14818] NILFS error (device loop9): nilfs_lookup: deleted inode referenced: 12 [ 1550.832564][T14821] loop6: detected capacity change from 0 to 4096 [ 1551.068391][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.075990][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.203837][T14818] Remounting filesystem read-only [ 1551.549652][T10122] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1551.551578][T14822] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1551.979664][T14827] loop9: detected capacity change from 0 to 16 [ 1551.986883][T14827] erofs: Unknown parameter '0xffffffffffffffff' [ 1554.332028][T14832] loop0: detected capacity change from 0 to 64 [ 1554.354834][T14837] loop9: detected capacity change from 0 to 64 [ 1556.095841][T14846] loop6: detected capacity change from 0 to 2048 [ 1556.371115][T14849] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1556.807058][T14853] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 12 [ 1558.046255][T14853] Remounting filesystem read-only [ 1558.129992][T14630] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1558.439929][ T5825] device hsr_slave_0 left promiscuous mode [ 1558.492722][ T5825] device hsr_slave_1 left promiscuous mode [ 1558.534461][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1558.577977][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.915229][T14859] loop6: detected capacity change from 0 to 40427 [ 1558.973513][T14863] loop3: detected capacity change from 0 to 16 [ 1558.982342][T14863] erofs: Unknown parameter '0xffffffffffffffff' [ 1558.999882][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1559.161859][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1560.154739][T14859] F2FS-fs (loop6): invalid crc value [ 1560.203264][ T5825] device bridge_slave_1 left promiscuous mode [ 1560.211606][T14859] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1560.253517][T14859] F2FS-fs (loop6): Start checkpoint disabled! [ 1560.291678][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.299957][T14859] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1560.497908][ T5825] device bridge_slave_0 left promiscuous mode [ 1560.517885][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.789944][T14870] loop0: detected capacity change from 0 to 2048 [ 1561.208630][T14873] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1562.685730][T14877] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1562.711702][T14877] Remounting filesystem read-only [ 1562.818758][ T5825] device veth1_macvtap left promiscuous mode [ 1562.909110][ T5825] device veth0_macvtap left promiscuous mode [ 1562.962565][ T5825] device veth1_vlan left promiscuous mode [ 1562.968481][ T5825] device veth0_vlan left promiscuous mode [ 1563.055437][T11708] kworker/u4:0: attempt to access beyond end of device [ 1563.055437][T11708] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1563.361082][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 1563.367334][ T8014] Bluetooth: hci3: command 0x0406 tx timeout [ 1564.065329][T11708] kworker/u4:0: attempt to access beyond end of device [ 1564.065329][T11708] loop6: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 1564.288480][T14884] loop3: detected capacity change from 0 to 40427 [ 1564.302968][T14884] F2FS-fs (loop3): invalid crc value [ 1564.386390][T14884] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1564.450576][T14884] F2FS-fs (loop3): Start checkpoint disabled! [ 1564.502252][T14884] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1565.891031][T14891] loop9: detected capacity change from 0 to 40427 [ 1565.903220][T14891] F2FS-fs (loop9): invalid crc value [ 1565.915658][T14891] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1565.945148][T14891] F2FS-fs (loop9): Start checkpoint disabled! [ 1565.970954][T14891] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1566.219894][T11708] kworker/u4:0: attempt to access beyond end of device [ 1566.219894][T11708] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1568.483121][T14907] loop0: detected capacity change from 0 to 4096 [ 1568.694033][T14908] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1568.927537][T11708] kworker/u4:0: attempt to access beyond end of device [ 1568.927537][T11708] loop3: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 1569.164249][ T4733] kworker/u4:14: attempt to access beyond end of device [ 1569.164249][ T4733] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1569.235388][ T4733] kworker/u4:14: attempt to access beyond end of device [ 1569.235388][ T4733] loop9: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 1569.571721][T14910] loop3: detected capacity change from 0 to 128 [ 1572.488801][ T5825] team0 (unregistering): Port device team_slave_1 removed [ 1572.569733][ T5825] team0 (unregistering): Port device team_slave_0 removed [ 1572.649482][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1572.752302][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1573.972422][ T5825] bond0 (unregistering): Released all slaves [ 1574.134217][T14630] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1574.301273][T14630] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1574.336362][T14630] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1574.414426][T14921] fuse: Bad value for 'fd' [ 1574.982080][T14930] loop0: detected capacity change from 0 to 64 [ 1575.451993][T14933] loop3: detected capacity change from 0 to 4096 [ 1575.904364][T14929] loop9: detected capacity change from 0 to 1024 [ 1575.926360][T14929] EXT4-fs: Ignoring removed bh option [ 1575.967562][T14934] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1576.077827][T14929] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1576.290638][T14941] loop6: detected capacity change from 0 to 2048 [ 1576.433585][T14942] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1576.494392][T14022] EXT4-fs (loop9): unmounting filesystem. [ 1577.046347][T14947] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 12 [ 1577.126477][T14947] Remounting filesystem read-only [ 1577.699187][T14949] loop9: detected capacity change from 0 to 2048 [ 1578.260724][T14957] loop0: detected capacity change from 0 to 64 [ 1578.784461][T14956] loop6: detected capacity change from 0 to 4096 [ 1579.679010][T14958] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1580.067248][T14959] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1580.563072][T14965] NILFS error (device loop9): nilfs_lookup: deleted inode referenced: 12 [ 1581.255148][T14967] loop6: detected capacity change from 0 to 4096 [ 1581.495654][T14965] Remounting filesystem read-only [ 1581.881970][T14970] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1583.851378][T14985] fuse: Unknown parameter '0x0000000000000004' [ 1583.941587][ T8014] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1583.957214][ T8014] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1583.966019][ T8014] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1583.984563][ T8014] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1584.009181][ T8014] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1584.016630][ T8014] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1585.237947][T14993] loop6: detected capacity change from 0 to 1024 [ 1585.341867][T14993] EXT4-fs: Ignoring removed bh option [ 1585.416477][T14986] lo speed is unknown, defaulting to 1000 [ 1585.448941][T14997] loop9: detected capacity change from 0 to 1024 [ 1585.457131][T14997] EXT4-fs: Ignoring removed bh option [ 1585.496162][T14993] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1585.507690][T14997] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1586.080965][ T8014] Bluetooth: hci0: command 0x0409 tx timeout [ 1586.521775][T14053] EXT4-fs (loop6): unmounting filesystem. [ 1587.921711][T15011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1653'. [ 1588.161150][ T8014] Bluetooth: hci0: command 0x041b tx timeout [ 1588.629793][T14986] chnl_net:caif_netlink_parms(): no params data found [ 1589.095303][T14022] EXT4-fs (loop9): unmounting filesystem. [ 1589.141371][T15017] loop0: detected capacity change from 0 to 2048 [ 1589.218007][T15018] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1589.558036][T15025] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1589.574820][T15025] Remounting filesystem read-only [ 1590.245653][ T8014] Bluetooth: hci0: command 0x040f tx timeout [ 1590.356040][T14986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.383952][T14986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.455071][T14986] device bridge_slave_0 entered promiscuous mode [ 1590.573178][T14986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.580351][T14986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.615977][T14986] device bridge_slave_1 entered promiscuous mode [ 1590.835406][T14986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1590.883139][T15043] mmap: syz.0.1664 (15043) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1590.927770][T14986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.166261][T14986] team0: Port device team_slave_0 added [ 1591.204829][T14986] team0: Port device team_slave_1 added [ 1591.455866][T14986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1591.466912][T14986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.494546][T14986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1591.542489][T14986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1591.551477][T14986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.804618][T15061] capability: warning: `syz.6.1669' uses deprecated v2 capabilities in a way that may be insecure [ 1591.936500][T14986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1592.320935][ T8014] Bluetooth: hci0: command 0x0419 tx timeout [ 1592.662624][T14986] device hsr_slave_0 entered promiscuous mode [ 1592.680283][T14986] device hsr_slave_1 entered promiscuous mode [ 1592.700552][T14986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1592.758319][T14986] Cannot create hsr debugfs directory [ 1592.919561][ T4762] device hsr_slave_0 left promiscuous mode [ 1592.983191][ T4762] device hsr_slave_1 left promiscuous mode [ 1593.031294][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1593.062524][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1593.101630][ T4762] device bridge_slave_1 left promiscuous mode [ 1593.161242][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.319291][ T4762] device bridge_slave_0 left promiscuous mode [ 1593.325933][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.783150][T15086] binder_alloc: binder_alloc_mmap_handler: 15082 200000ffc000-200000ffd000 already mapped failed -16 [ 1593.963917][T15089] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1594.342329][ T4762] team0 (unregistering): Port device team_slave_1 removed [ 1594.478818][ T4762] team0 (unregistering): Port device team_slave_0 removed [ 1594.599719][ T4762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1594.786041][ T4762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.049820][ T4762] bond0 (unregistering): Released all slaves [ 1596.568273][T15111] device vti0 entered promiscuous mode [ 1596.937998][T15120] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 1597.859115][T14986] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1597.899827][T14986] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1597.973539][T14986] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1598.065150][T14986] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1598.866900][T14986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1599.131890][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1599.182832][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1599.422937][T14986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1599.469677][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1599.641778][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1599.711225][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.718390][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1599.770202][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1599.796633][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1599.822230][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1599.845231][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.852419][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1599.906720][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1599.954623][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1600.063611][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1600.115968][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1600.212044][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1600.261708][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1600.311713][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1600.353667][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1600.405303][T14986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1601.041033][T15146] kAFS: No cell specified [ 1601.562417][T14986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1601.596214][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1601.611094][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1601.639657][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1603.963919][T15164] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 1603.970591][T15164] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1604.067504][T15164] vhci_hcd vhci_hcd.0: Device attached [ 1604.116203][T15164] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1604.183638][T15173] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(16) [ 1604.190341][T15173] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1604.234622][T15173] vhci_hcd vhci_hcd.0: Device attached [ 1604.261153][ T8736] vhci_hcd: vhci_device speed not set [ 1604.280120][T15173] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(18) [ 1604.286789][T15173] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1604.321233][T15164] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(20) [ 1604.321258][T15173] vhci_hcd vhci_hcd.0: Device attached [ 1604.327872][T15164] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1604.333651][ T8736] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 1604.418241][T15164] vhci_hcd vhci_hcd.0: Device attached [ 1604.447682][T15182] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(24) [ 1604.454345][T15182] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1604.516971][T15164] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1604.591069][T15182] vhci_hcd vhci_hcd.0: Device attached [ 1604.603131][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1604.610709][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1604.615477][T15164] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1604.681379][T14986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1604.691794][T15173] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1604.744830][T15183] vhci_hcd: connection closed [ 1604.745243][ T4889] vhci_hcd: stop threads [ 1604.756534][T15179] vhci_hcd: connection closed [ 1604.757030][T15177] vhci_hcd: connection closed [ 1604.757197][T15174] vhci_hcd: connection closed [ 1604.777447][T15168] vhci_hcd: connection reset by peer [ 1604.816646][ T4889] vhci_hcd: release socket [ 1604.836835][ T4889] vhci_hcd: disconnect device [ 1604.871634][ T4889] vhci_hcd: stop threads [ 1604.876045][ T4889] vhci_hcd: release socket [ 1604.902549][ T4889] vhci_hcd: disconnect device [ 1604.930078][ T4889] vhci_hcd: stop threads [ 1604.944387][ T4889] vhci_hcd: release socket [ 1604.970516][ T4889] vhci_hcd: disconnect device [ 1604.992113][ T4889] vhci_hcd: stop threads [ 1604.996435][ T4889] vhci_hcd: release socket [ 1605.031352][ T4889] vhci_hcd: disconnect device [ 1605.060339][ T4889] vhci_hcd: stop threads [ 1605.075706][ T4889] vhci_hcd: release socket [ 1605.096517][ T4889] vhci_hcd: disconnect device [ 1606.493893][T15212] lo speed is unknown, defaulting to 1000 [ 1607.238531][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1607.260002][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1607.335129][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1607.365471][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1607.404514][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1607.470619][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1607.509436][T14986] device veth0_vlan entered promiscuous mode [ 1607.586460][T14986] device veth1_vlan entered promiscuous mode [ 1607.828675][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1607.878489][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1607.912197][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1607.950696][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1607.993401][T14986] device veth0_macvtap entered promiscuous mode [ 1608.151941][T15225] 9pnet_fd: Insufficient options for proto=fd [ 1608.171511][T14986] device veth1_macvtap entered promiscuous mode [ 1608.244420][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1608.281412][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1608.392439][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1608.430917][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.458933][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1608.488281][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.513460][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1608.529435][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.549811][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1608.566709][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.643272][T14986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1608.679001][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1608.708932][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1608.751860][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.792649][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.839665][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.886588][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.927698][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.984589][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1609.027040][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1609.127989][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1609.238620][T14986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1609.285427][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1609.332630][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1609.412560][T14986] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.464478][T14986] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.546327][T14986] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.614317][T14986] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.681707][ T8736] vhci_hcd: vhci_device speed not set [ 1609.786025][T15240] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1610.219645][ T5825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.255159][ T5825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.432081][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1610.737240][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.747214][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.816215][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1611.382814][T15254] loop5: detected capacity change from 0 to 128 [ 1611.949326][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1723'. [ 1612.486392][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.492795][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.608502][T15264] siw: device registration error -23 [ 1612.769728][T15256] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.295935][T15256] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.735962][T15256] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.921876][ T26] audit: type=1800 audit(2000000008.230:280): pid=15278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1719" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 1614.185061][T15256] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.524557][T15280] batman_adv: batadv0: Adding interface: dummy0 [ 1614.531059][ T8201] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1614.540406][T15280] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1614.627353][T15280] batman_adv: batadv0: Interface activated: dummy0 [ 1614.676545][T15283] batadv0: mtu less than device minimum [ 1614.713454][T15283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.725846][T15283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.737446][T15283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.749044][T15283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.760650][T15283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.772259][T15283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.783950][T15283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.795574][T15283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.807242][T15283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.862876][ T8201] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1614.876618][ T8201] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1614.912610][ T8201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.944060][ T8201] usb 7-1: Product: syz [ 1614.960211][ T8201] usb 7-1: Manufacturer: syz [ 1614.980222][ T8201] usb 7-1: SerialNumber: syz [ 1615.576265][T15256] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.636399][T15256] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.663829][T15256] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.698323][ T8201] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1615.733083][T15256] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.800953][ T5244] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1615.917924][T15293] tipc: Started in network mode [ 1615.923881][T15293] tipc: Node identity 4, cluster identity 4711 [ 1615.939161][T15293] tipc: Node number set to 4 [ 1615.992939][ T5244] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1616.032194][ T5244] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1616.084783][ T5244] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1616.149841][ T5244] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1616.192153][ T5244] usb 6-1: Product: syz [ 1616.196384][ T5244] usb 6-1: Manufacturer: syz [ 1616.219698][ T5244] usb 6-1: SerialNumber: syz [ 1616.236880][ T5244] usb 6-1: config 0 descriptor?? [ 1616.271075][ T4302] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1616.314523][ T5244] usb 6-1: selecting invalid altsetting 0 [ 1616.492862][ T4302] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1616.573668][ T5244] usb 6-1: USB disconnect, device number 2 [ 1616.699303][ T4302] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1616.711092][ T4302] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1616.720377][ T4302] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1616.731609][ T4302] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1616.762208][ T4302] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1616.776237][ T4302] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1616.786764][ T4302] usb 10-1: Product: syz [ 1616.794253][ T4302] usb 10-1: Manufacturer: syz [ 1616.833237][ T4302] cdc_wdm 10-1:1.0: skipping garbage [ 1616.838856][ T4302] cdc_wdm 10-1:1.0: skipping garbage [ 1616.880133][ T4302] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 1616.905251][ T4302] cdc_wdm 10-1:1.0: Unknown control protocol [ 1617.016299][T14974] udevd[14974]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1617.356981][ T4302] usb 7-1: USB disconnect, device number 2 [ 1617.386022][ T4302] usblp0: removed [ 1618.040916][ T4302] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1618.260915][ T4302] usb 6-1: Using ep0 maxpacket: 8 [ 1618.268554][ T4302] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1618.312060][ T4302] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1618.353641][ T4302] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1618.397538][ T4302] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1618.456781][ T4302] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1618.493235][ T4302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.729910][ T4302] usb 6-1: GET_CAPABILITIES returned 0 [ 1618.735624][ T4302] usbtmc 6-1:16.0: can't read capabilities [ 1619.036260][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1619.046770][ T8014] Bluetooth: hci0: command 0x0405 tx timeout [ 1619.231022][ T8201] usb 10-1: USB disconnect, device number 2 [ 1619.900589][T15328] binder_alloc: binder_alloc_mmap_handler: 15327 200000ffc000-200000ffd000 already mapped failed -16 [ 1620.053690][T15330] net_ratelimit: 10 callbacks suppressed [ 1620.053704][T15330] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1620.736402][ T22] usb 6-1: USB disconnect, device number 3 [ 1625.761430][T15385] binder_alloc: binder_alloc_mmap_handler: 15384 200000ffc000-200000ffd000 already mapped failed -16 [ 1625.907084][T15386] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1626.732457][T15398] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1628.795289][T15414] sctp: failed to load transform for md5: -4 [ 1629.821154][T15435] tmpfs: Unknown parameter 'grpquota' [ 1630.510916][T15435] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1759'. [ 1631.606570][T15439] lo speed is unknown, defaulting to 1000 [ 1633.704887][T15456] syz.3.1764 uses obsolete (PF_INET,SOCK_PACKET) [ 1634.505097][T15461] lo speed is unknown, defaulting to 1000 [ 1636.837746][T15486] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1637.552173][ T8014] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1637.576605][ T8014] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1637.585768][ T8014] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1637.595510][ T8014] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1637.607286][ T8014] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1637.615033][ T8014] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1637.729879][T15490] lo speed is unknown, defaulting to 1000 [ 1638.231687][T15495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1777'. [ 1639.054827][T15490] chnl_net:caif_netlink_parms(): no params data found [ 1639.088336][T15506] loop6: detected capacity change from 0 to 512 [ 1639.631122][T15506] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1780: casefold flag without casefold feature [ 1639.681160][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 1639.781093][T15506] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1780: couldn't read orphan inode 15 (err -117) [ 1639.844473][T15506] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1640.178798][T15490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.241476][T15490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.250370][T15490] device bridge_slave_0 entered promiscuous mode [ 1640.604151][ T4889] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.698153][T15490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.717801][T15490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.768467][T15490] device bridge_slave_1 entered promiscuous mode [ 1641.034934][ T4889] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.456134][ T4889] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.652068][T15490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1641.761027][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 1641.945189][T15490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1642.070155][ T4889] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.382954][T15490] team0: Port device team_slave_0 added [ 1643.433102][T15490] team0: Port device team_slave_1 added [ 1643.611602][T15490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1643.618603][T15490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1643.840969][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 1643.860044][T15490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1643.948863][T15490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1643.971514][T15490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1644.050974][T15490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1644.347384][T15490] device hsr_slave_0 entered promiscuous mode [ 1644.518448][T15490] device hsr_slave_1 entered promiscuous mode [ 1644.535650][T15490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1644.579624][T15490] Cannot create hsr debugfs directory [ 1645.057714][T14053] EXT4-fs (loop6): unmounting filesystem. [ 1645.620869][ T8736] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1645.902801][ T8736] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1645.931102][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 1645.954952][ T8736] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1645.978208][ T8736] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1645.989989][ T8736] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.012870][T15565] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1646.800113][ T8201] usb 7-1: USB disconnect, device number 3 [ 1648.343496][ T26] audit: type=1326 audit(2000000042.660:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.0.1804" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8464f8e969 code=0x0 [ 1649.016633][T15596] fuse: Bad value for 'fd' [ 1649.045957][T15490] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1649.066547][T15490] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1649.115225][T15490] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1649.599984][T15490] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1649.736131][ T4889] device hsr_slave_0 left promiscuous mode [ 1649.799495][ T4889] device hsr_slave_1 left promiscuous mode [ 1649.839753][ T4889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1649.869911][ T4889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.926334][ T4889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1649.950268][ T4889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.989092][ T4889] device bridge_slave_1 left promiscuous mode [ 1650.015919][ T4889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.039731][ T4889] device bridge_slave_0 left promiscuous mode [ 1650.910423][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.041733][ T4889] device veth1_macvtap left promiscuous mode [ 1651.047956][ T4889] device veth0_macvtap left promiscuous mode [ 1651.054424][ T4889] device veth1_vlan left promiscuous mode [ 1651.060823][ T4889] device veth0_vlan left promiscuous mode [ 1651.401193][ T22] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1651.602792][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 1651.612581][ T22] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1651.632055][ T22] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1651.654259][ T22] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1651.676705][ T22] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1651.705941][ T22] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1651.730064][ T22] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1651.767589][ T22] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1651.781404][ T22] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1651.800180][ T22] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1651.815150][ T22] usb 7-1: string descriptor 0 read error: -22 [ 1651.851422][ T22] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1651.871731][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.917557][ T22] adutux 7-1:168.0: interrupt endpoints not found [ 1652.272697][ T22] usb 7-1: USB disconnect, device number 4 [ 1654.565882][ T4889] team0 (unregistering): Port device team_slave_1 removed [ 1654.801579][ T4889] team0 (unregistering): Port device team_slave_0 removed [ 1655.031233][ T4889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1655.228962][ T4889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.162347][ T4889] bond0 (unregistering): Released all slaves [ 1657.321104][T15633] netlink: 'syz.6.1818': attribute type 21 has an invalid length. [ 1657.695664][T15490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1657.800226][T15490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1657.861290][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1657.869981][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1657.962652][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1657.998638][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1658.068389][ T4827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.075599][ T4827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1658.161732][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1658.231225][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1658.270097][ T4827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.277301][ T4827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1658.368193][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1658.420217][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1658.463135][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1658.523194][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1658.635076][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1658.684670][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1658.731743][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1658.787296][T15490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1658.825434][T15490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1658.906416][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1659.692223][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1659.872671][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1659.925966][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1659.972586][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1660.129642][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1660.225780][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1825'. [ 1660.289032][T15658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1660.887242][T15658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.178181][T15651] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1662.691742][T15651] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1662.755791][T15651] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1662.769516][T15651] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1662.783208][T15651] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1662.790147][T15651] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1662.810202][T15651] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1662.820082][T15651] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1662.846880][T15651] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1662.856896][T15651] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1662.867138][T15651] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1662.876776][T15651] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1662.894782][T15651] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1662.906030][T15651] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1662.913760][T15651] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1663.000078][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1663.043775][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1663.201142][ T4268] Bluetooth: hci5: command 0x0c1a tx timeout [ 1663.314346][T15490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1664.801147][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 1664.842042][T15707] lo speed is unknown, defaulting to 1000 [ 1664.881100][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 1664.881268][ T4266] Bluetooth: hci1: command 0x0c1a tx timeout [ 1664.961313][ T4266] Bluetooth: hci2: command 0x0c1a tx timeout [ 1665.280856][ T4266] Bluetooth: hci5: command 0x0406 tx timeout [ 1665.557591][T15715] lo speed is unknown, defaulting to 1000 [ 1665.585945][T15715] lo speed is unknown, defaulting to 1000 [ 1665.646101][T15715] lo speed is unknown, defaulting to 1000 [ 1665.935583][T15715] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1666.233270][T15715] lo speed is unknown, defaulting to 1000 [ 1666.314728][T15715] lo speed is unknown, defaulting to 1000 [ 1666.450909][ T5244] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1666.663739][T15715] lo speed is unknown, defaulting to 1000 [ 1666.678993][T15715] lo speed is unknown, defaulting to 1000 [ 1666.730953][T15715] lo speed is unknown, defaulting to 1000 [ 1666.759858][T15715] lo speed is unknown, defaulting to 1000 [ 1666.880950][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 1666.903627][ T5244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1666.960960][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 1666.967121][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 1666.977141][ T5244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1667.003444][ T5244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1667.014505][ T5244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1667.041207][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 1667.355132][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1667.391406][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1667.483643][T15490] device veth0_vlan entered promiscuous mode [ 1667.555932][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1667.598142][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1667.645733][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1667.738756][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1667.815138][T15490] device veth1_vlan entered promiscuous mode [ 1667.915365][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1668.068208][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1668.107060][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1668.146855][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1668.209674][T15490] device veth0_macvtap entered promiscuous mode [ 1668.263060][T15490] device veth1_macvtap entered promiscuous mode [ 1668.371194][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1668.400057][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1668.436188][T15490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1668.471442][T15490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.526329][T15490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1668.573434][T15490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.633103][T15490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1668.686032][T15490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.737736][T15490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1668.776035][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1668.798237][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1668.854485][T15490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1668.912186][T15490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.975640][T15490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1669.047368][T15490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1669.104009][T15490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1669.173799][T15490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1669.225554][T15490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1669.287084][T15490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1669.329370][T15490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1669.404263][ T5244] usb 4-1: string descriptor 0 read error: -71 [ 1669.410548][ T5244] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1669.453139][ T5244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.498204][T15740] ubi31: attaching mtd0 [ 1669.521548][ T5244] usb 4-1: config 0 descriptor?? [ 1669.531009][ T5244] usb 4-1: can't set config #0, error -71 [ 1669.537948][T15740] ubi31: scanning is finished [ 1669.543380][T15740] ubi31: empty MTD device detected [ 1669.568521][ T5244] usb 4-1: USB disconnect, device number 2 [ 1669.582130][T15742] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1845'. [ 1669.801087][T15740] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1669.837807][T15740] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1669.860346][T15740] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1669.894438][T15740] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1669.911075][T15740] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1669.958690][T15740] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1669.981396][T15740] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2888561043 [ 1670.026234][T15740] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1670.058718][T15746] ubi31: background thread "ubi_bgt31d" started, PID 15746 [ 1670.166117][T15750] 9pnet_virtio: no channels available for device syz [ 1670.607149][T15753] exFAT-fs (nullb0): invalid boot record signature [ 1670.649563][T15753] exFAT-fs (nullb0): failed to read boot sector [ 1670.669681][T15753] exFAT-fs (nullb0): failed to recognize exfat type [ 1670.991023][ T4305] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1671.216314][ T4305] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1671.233881][ T4305] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1671.248020][ T4305] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1671.263194][ T4305] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1671.278065][ T4305] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1671.330979][ T4305] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1671.348228][ T4305] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1671.358217][ T4305] usb 1-1: Product: syz [ 1671.368774][ T4305] usb 1-1: Manufacturer: syz [ 1671.407990][ T4305] cdc_wdm 1-1:1.0: skipping garbage [ 1671.422102][ T4305] cdc_wdm 1-1:1.0: skipping garbage [ 1671.462975][ T4305] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1671.469050][ T4305] cdc_wdm 1-1:1.0: Unknown control protocol [ 1672.287903][ T5671] usb 1-1: USB disconnect, device number 2 [ 1673.933248][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.939669][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.639524][T15779] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1677.082520][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1677.098605][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1677.141942][T15490] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.150711][T15490] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.180940][T15490] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.215047][T15490] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.555085][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.604479][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1677.701901][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1677.756778][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.825620][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1677.899799][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1678.578227][T15814] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1678.675203][T15817] autofs4:pid:15817:autofs_fill_super: called with bogus options [ 1680.331730][T15805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.340733][T15805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.400015][T15832] Falling back ldisc for ttynull. [ 1681.744375][T15805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1681.836328][T15805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1682.662374][T15805] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.671433][T15805] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.680344][T15805] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.690352][T15805] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.939677][ T8737] lo speed is unknown, defaulting to 1000 [ 1682.956570][T15838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 1683.023169][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1683.063570][T15843] batman_adv: batadv0: Interface deactivated: dummy0 [ 1683.150890][T15843] batman_adv: batadv0: Removing interface: dummy0 [ 1683.183010][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1683.195775][T15805] syz.6.1865 (15805) used greatest stack depth: 20448 bytes left [ 1683.262860][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1683.296894][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1683.338418][T15843] device bridge_slave_0 left promiscuous mode [ 1683.348836][T15843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.378490][T15843] device bridge_slave_1 left promiscuous mode [ 1683.392970][T15843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.457248][T15843] bond0: (slave bond_slave_0): Releasing backup interface [ 1684.585941][T15843] bond0: (slave bond_slave_1): Releasing backup interface [ 1684.712836][T15843] team0: Port device team_slave_0 removed [ 1684.768822][T15843] team0: Port device team_slave_1 removed [ 1684.814251][T15843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1684.861352][T15843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1684.885027][T15843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1684.897364][T15843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1685.528748][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'. [ 1685.905078][T15876] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1883'. [ 1685.915300][T15872] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1883'. [ 1686.095299][ T26] audit: type=1326 audit(2000000080.410:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15874 comm="syz.9.1886" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26ae58e969 code=0x0 [ 1686.095510][T15881] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1687.934854][T15894] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1893'. [ 1688.076247][T15894] device vlan2 entered promiscuous mode [ 1688.102797][T15894] device bridge0 entered promiscuous mode [ 1693.281946][T15949] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1695.021647][T15963] device wg1 entered promiscuous mode [ 1695.129658][ T26] audit: type=1326 audit(2000000089.440:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15965 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e118e969 code=0x7ffc0000 [ 1695.227152][ T26] audit: type=1326 audit(2000000089.470:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15965 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e118e969 code=0x7ffc0000 [ 1695.298331][T15970] syz.8.1917[15970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1695.298489][T15970] syz.8.1917[15970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1695.362875][T15972] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 808 [ 1695.386718][T15973] netlink: 'syz.8.1917': attribute type 10 has an invalid length. [ 1695.459918][ T26] audit: type=1326 audit(2000000089.470:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15965 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99e118e969 code=0x7ffc0000 [ 1695.535394][ T26] audit: type=1326 audit(2000000089.470:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15965 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e118e969 code=0x7ffc0000 [ 1695.561971][ T26] audit: type=1326 audit(2000000089.470:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15965 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e118e969 code=0x7ffc0000 [ 1695.588686][ T26] audit: type=1326 audit(2000000089.490:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15965 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99e118e969 code=0x7ffc0000 [ 1695.632260][ T26] audit: type=1326 audit(2000000089.490:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15965 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e118e969 code=0x7ffc0000 [ 1695.682976][ T26] audit: type=1326 audit(2000000089.490:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15965 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e118e969 code=0x7ffc0000 [ 1695.707422][ T26] audit: type=1326 audit(2000000089.490:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15965 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99e118e969 code=0x7ffc0000 [ 1695.732111][ T26] audit: type=1326 audit(2000000089.490:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15965 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e118e969 code=0x7ffc0000 [ 1695.869732][T15973] team0: Device ipvlan1 failed to register rx_handler [ 1703.293098][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1703.333951][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1703.347151][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1703.379856][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1703.392518][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1703.400234][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1703.447456][T16069] lo speed is unknown, defaulting to 1000 [ 1703.455118][T16069] lo speed is unknown, defaulting to 1000 [ 1703.846391][T16069] chnl_net:caif_netlink_parms(): no params data found [ 1704.240175][T16069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.275630][T16069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.305183][T16069] device bridge_slave_0 entered promiscuous mode [ 1704.355891][T16069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.393998][T16069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.457233][T16069] device bridge_slave_1 entered promiscuous mode [ 1704.716871][T16069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1704.826594][T16069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1705.142087][T16069] team0: Port device team_slave_0 added [ 1705.198217][T16069] team0: Port device team_slave_1 added [ 1705.334888][T16069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1705.375465][T16069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1705.440968][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 1705.674041][T16069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1705.754158][T16069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1705.771934][T16069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1706.013203][T16069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.194853][T16102] sp0: Synchronizing with TNC [ 1706.236154][T16109] device batadv0 entered promiscuous mode [ 1706.305213][T16109] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1706.395441][T16109] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1706.538286][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1963'. [ 1706.852755][T16124] 9pnet_virtio: no channels available for device syz [ 1707.105799][T16069] device hsr_slave_0 entered promiscuous mode [ 1707.147034][T16069] device hsr_slave_1 entered promiscuous mode [ 1707.277704][T16069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1707.300843][T16069] Cannot create hsr debugfs directory [ 1707.521137][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 1707.631100][ C1] vcan0: j1939_simple_recv: Received already invalidated message [ 1709.040222][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1977'. [ 1709.601156][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 1709.980984][ T4303] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1710.311004][ T4303] usb 1-1: Using ep0 maxpacket: 16 [ 1710.332534][ T4303] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1710.535792][ T4303] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1710.555434][T16165] overlayfs: failed to decode file handle (len=5, type=196859, flags=0, err=-22) [ 1710.586855][ T4303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.645518][ T4303] usb 1-1: config 0 descriptor?? [ 1710.695885][ T4303] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 1710.718135][T16165] device sit1 entered promiscuous mode [ 1710.786152][T16069] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1710.867602][T16069] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1710.894536][T16159] input: syz0 as /devices/virtual/input/input17 [ 1710.972075][T16069] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1711.023722][T16069] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1711.515362][T16069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1711.642939][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1711.663096][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1711.680884][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 1711.706687][T16069] 8021q: adding VLAN 0 to HW filter on device team0 [ 1711.796813][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1711.821896][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1711.931682][ T7297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.938892][ T7297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1712.059675][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1712.091947][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1712.148847][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1712.188000][ T7297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.195272][ T7297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1712.250228][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1712.275802][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1712.300276][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1712.328918][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1712.525498][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1712.591185][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1712.653094][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1713.046483][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1713.291948][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1713.360435][ T3609] bcm5974 1-1:0.0: could not read from device [ 1713.369132][T16069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1713.424339][ T3609] bcm5974 1-1:0.0: could not read from device [ 1713.431059][ T4303] usb 1-1: USB disconnect, device number 3 [ 1713.443654][ T3609] bcm5974 1-1:0.0: could not read from device [ 1713.459047][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1713.481466][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1713.544417][T16195] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1713.550499][T16195] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1713.571698][T16195] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1713.591826][T16195] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1713.633978][T16195] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1713.671595][T16195] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1713.706637][T16195] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1713.735731][T16195] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1713.811081][T16195] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1713.858854][T16195] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1713.877045][T16195] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1713.906286][T16195] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1713.948417][T16195] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1713.957556][T16195] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1713.984690][T16195] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1715.447460][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1715.468127][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1715.521419][ T4268] Bluetooth: hci5: command 0x0c1a tx timeout [ 1715.611182][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 1715.648161][T16069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1715.760958][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 1715.840930][ T4268] Bluetooth: hci2: command 0x0c1a tx timeout [ 1716.000861][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 1717.218601][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1717.248589][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1717.410085][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1717.430095][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1717.470386][T16069] device veth0_vlan entered promiscuous mode [ 1717.493049][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1717.562343][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1717.601281][ T4268] Bluetooth: hci5: command 0x0406 tx timeout [ 1717.614232][T16069] device veth1_vlan entered promiscuous mode [ 1717.688386][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 1717.797555][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1717.823082][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1717.840973][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 1717.921311][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 1718.002025][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1718.054490][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1718.091334][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 1719.483715][T16069] device veth0_macvtap entered promiscuous mode [ 1719.494847][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2012'. [ 1719.560960][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1719.572767][T16069] device veth1_macvtap entered promiscuous mode [ 1719.704795][T16069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.739829][T16069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.758354][T16271] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1719.803099][T16069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.868039][T16069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.892888][T16069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1719.912263][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1719.936303][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1719.966612][T16069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.007134][T16069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.037656][T16069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.075691][T16069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.113627][T16069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.147140][T16069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.220910][T16069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1720.249424][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1720.264107][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1720.295692][T16069] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.325445][T16069] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.359382][T16069] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.370386][T16069] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.840174][ T7297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.930324][ T7297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.533367][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1721.573236][ T5825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.603562][ T5825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.662257][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1722.130914][ T4303] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1722.332220][ T4303] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1722.360499][ T4303] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1722.438035][ T4303] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1722.518320][ T4303] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1722.641846][ T4303] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1722.775164][ T4303] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1722.847121][ T4303] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1722.927393][ T4303] usb 2-1: Product: syz [ 1722.948212][ T4303] usb 2-1: Manufacturer: syz [ 1722.987925][ T4303] cdc_wdm 2-1:1.0: skipping garbage [ 1723.007042][ T4303] cdc_wdm 2-1:1.0: skipping garbage [ 1723.037830][ T4303] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1723.055879][ T4303] cdc_wdm 2-1:1.0: Unknown control protocol [ 1724.826050][T16300] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2024'. [ 1724.974378][ T4244] usb 2-1: USB disconnect, device number 7 [ 1729.897805][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1729.897822][ T26] audit: type=1804 audit(2000000124.210:299): pid=16378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2045" name="/newroot/111/bus/file1" dev="overlay" ino=2 res=1 errno=0 [ 1730.354097][ T4305] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1730.553317][ T4305] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1730.574519][ T4305] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1730.631018][ T4305] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1730.670442][ T4305] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1730.719572][ T4305] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1730.754375][ T4305] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1730.789274][ T4305] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1730.819747][ T4305] usb 2-1: Product: syz [ 1730.834376][ T4305] usb 2-1: Manufacturer: syz [ 1731.001735][ T4305] cdc_wdm 2-1:1.0: skipping garbage [ 1731.027867][ T4305] cdc_wdm 2-1:1.0: skipping garbage [ 1731.054011][ T4305] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1731.064484][ T4305] cdc_wdm 2-1:1.0: Unknown control protocol [ 1733.298217][ T5671] usb 2-1: USB disconnect, device number 8 [ 1733.880819][ T5671] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1734.010903][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1734.072661][ T5671] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1734.108402][ T5671] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1734.128919][ T5671] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1734.179699][ T5671] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.205399][ T22] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1734.223486][T16413] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1734.235288][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.280318][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1734.306984][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1734.527214][ T4303] usb 4-1: USB disconnect, device number 3 [ 1735.110673][ T22] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1735.120231][ T22] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1735.191150][ T22] usb 1-1: Manufacturer: syz [ 1735.200251][ T22] usb 1-1: config 0 descriptor?? [ 1735.376934][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.415884][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.680611][ T22] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 1735.697362][ T22] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 1735.785318][ T22] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1736.249561][ T22] usb 1-1: USB disconnect, device number 4 [ 1736.360804][ T5671] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1736.482446][T16442] fido_id[16442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1736.573209][ T5671] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1736.592856][ T5671] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1736.631455][ T5671] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1736.643495][ T5671] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1736.703192][ T5671] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1736.806317][ T5671] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1736.828377][ T5671] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1736.887919][ T5671] usb 10-1: Product: syz [ 1737.036682][ T5671] usb 10-1: Manufacturer: syz [ 1737.068136][ T5671] cdc_wdm 10-1:1.0: skipping garbage [ 1737.084856][ T5671] cdc_wdm 10-1:1.0: skipping garbage [ 1737.093184][ T5671] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1737.099250][ T5671] cdc_wdm 10-1:1.0: Unknown control protocol [ 1738.550869][ T5243] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1738.751062][ T5243] usb 4-1: Using ep0 maxpacket: 8 [ 1738.758708][ T5243] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 1738.816997][ T5243] usb 4-1: config 0 has no interface number 0 [ 1738.860937][ T5243] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1738.930819][ T5243] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 1738.987783][ T5243] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1739.067870][ T5243] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1739.130850][ T5243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.141997][ T5243] usb 4-1: Product: syz [ 1739.146297][ T5243] usb 4-1: Manufacturer: syz [ 1739.162923][ T22] usb 10-1: USB disconnect, device number 3 [ 1739.219052][ T5243] usb 4-1: SerialNumber: syz [ 1739.261795][ T5243] usb 4-1: config 0 descriptor?? [ 1739.288316][ T5243] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 1740.245500][T16502] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1740.443289][T16502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1740.529202][T16502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1740.624142][T16502] device bridge_slave_0 left promiscuous mode [ 1740.724785][T16502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.965446][T16502] device bridge_slave_1 left promiscuous mode [ 1741.277951][ T4303] usb 4-1: USB disconnect, device number 4 [ 1741.291164][T16502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.471542][T16502] bond0: (slave bond_slave_0): Releasing backup interface [ 1741.668626][T16502] bond0: (slave bond_slave_1): Releasing backup interface [ 1742.003428][T16502] team0: Port device team_slave_0 removed [ 1742.136467][T16502] team0: Port device team_slave_1 removed [ 1742.152073][T16502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1742.175097][T16502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1742.212885][T16502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1742.254120][T16502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.454223][T16502] bond0: (slave macvlan2): Releasing backup interface [ 1742.499320][T16502] device batadv0 left promiscuous mode [ 1742.590441][T16520] Falling back ldisc for ttynull. [ 1742.639598][T16506] bridge0: port 1(vlan3) entered blocking state [ 1742.691020][T16506] bridge0: port 1(vlan3) entered disabled state [ 1742.729688][T16506] device vlan3 entered promiscuous mode [ 1742.749464][T16506] device bond0 entered promiscuous mode [ 1743.624402][T16527] 9pnet_fd: Insufficient options for proto=fd [ 1744.939762][T16551] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2100'. [ 1745.241092][ T5243] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1745.444652][ T5243] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1745.461750][ T5243] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1745.546881][ T5243] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1745.614090][ T5243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1745.680901][ T5243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1745.741143][ T5243] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1745.783044][ T5243] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1745.825287][ T5243] usb 2-1: Product: syz [ 1745.848050][ T5243] usb 2-1: Manufacturer: syz [ 1745.905941][ T5243] cdc_wdm 2-1:1.0: skipping garbage [ 1745.940266][ T5243] cdc_wdm 2-1:1.0: skipping garbage [ 1745.975774][ T5243] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1746.004162][ T5243] cdc_wdm 2-1:1.0: Unknown control protocol [ 1746.304964][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1746.506279][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1746.512953][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1746.522526][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1746.529187][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1746.538175][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1746.544923][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1746.551328][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1746.557959][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1746.564453][ T5243] usb 2-1: USB disconnect, device number 9 [ 1746.571452][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1746.578093][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1746.584201][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1750.561620][ T5428] device hsr_slave_0 left promiscuous mode [ 1750.588283][ T5428] device hsr_slave_1 left promiscuous mode [ 1750.637211][ T5428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1750.724702][ T5428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1750.796499][ T5428] device bridge_slave_1 left promiscuous mode [ 1750.836791][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.896791][ T5428] device bridge_slave_0 left promiscuous mode [ 1750.924954][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.012230][ T5428] bond1 (unregistering): Released all slaves [ 1755.910365][ T5428] team0 (unregistering): Port device team_slave_1 removed [ 1756.055496][ T5428] team0 (unregistering): Port device team_slave_0 removed [ 1756.192982][T16633] overlayfs: failed to clone upperpath [ 1756.493944][ T5428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1756.570460][ T5428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1758.203003][ T5428] bond0 (unregistering): Released all slaves [ 1758.426772][T16604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2118'. [ 1758.442627][T16610] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2119'. [ 1759.337545][ T5243] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1759.552623][ T5243] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1759.606262][ T5243] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1759.665324][ T5243] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1759.758228][ T5243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1759.874383][T16654] random: crng reseeded on system resumption [ 1760.638127][ T5243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1760.668587][ T5243] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1760.684158][ T5243] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1760.708737][ T5243] usb 2-1: Product: syz [ 1760.733885][T16657] lo speed is unknown, defaulting to 1000 [ 1760.741860][T16657] lo speed is unknown, defaulting to 1000 [ 1760.877228][T16657] lo speed is unknown, defaulting to 1000 [ 1761.090479][T16657] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1761.169389][ T5243] usb 2-1: Manufacturer: syz [ 1761.196322][T16657] lo speed is unknown, defaulting to 1000 [ 1761.276176][T16657] lo speed is unknown, defaulting to 1000 [ 1761.323930][T16657] lo speed is unknown, defaulting to 1000 [ 1761.374530][T16657] lo speed is unknown, defaulting to 1000 [ 1761.399249][T16657] lo speed is unknown, defaulting to 1000 [ 1761.646635][ T5243] cdc_wdm 2-1:1.0: skipping garbage [ 1761.719686][ T5243] cdc_wdm 2-1:1.0: skipping garbage [ 1761.737722][ T5243] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1761.758406][ T5243] cdc_wdm 2-1:1.0: Unknown control protocol [ 1763.040940][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 1763.157423][T16687] 9pnet_fd: Insufficient options for proto=fd [ 1763.208360][ T22] usb 2-1: USB disconnect, device number 10 [ 1763.560939][ T9201] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1763.752841][ T9201] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1763.797298][ T9201] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1763.871931][ T9201] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1763.940908][ T9201] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1763.976743][ T9201] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1764.028938][ T9201] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1764.089231][ T9201] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1764.119564][ T9201] usb 10-1: Product: syz [ 1764.138297][ T9201] usb 10-1: Manufacturer: syz [ 1764.200975][ T9201] cdc_wdm 10-1:1.0: skipping garbage [ 1764.206475][ T9201] cdc_wdm 10-1:1.0: skipping garbage [ 1764.262085][ T9201] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1764.288489][ T9201] cdc_wdm 10-1:1.0: Unknown control protocol [ 1764.846331][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2155'. [ 1764.874492][T16715] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1764.881090][T16715] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1764.890844][T16715] vhci_hcd vhci_hcd.0: Device attached [ 1764.899033][T16717] vhci_hcd: connection closed [ 1764.900188][ T4762] vhci_hcd: stop threads [ 1764.939985][ T4762] vhci_hcd: release socket [ 1764.950116][ T4762] vhci_hcd: disconnect device [ 1765.569433][ T4302] usb 10-1: USB disconnect, device number 4 [ 1767.054697][T16756] lo speed is unknown, defaulting to 1000 [ 1767.062419][T16756] lo speed is unknown, defaulting to 1000 [ 1767.585478][T16764] tipc: Started in network mode [ 1767.643780][T16764] tipc: Node identity 76e6d5ab2f11, cluster identity 4711 [ 1767.684857][T16764] tipc: Enabled bearer , priority 0 [ 1767.877977][T16766] device syzkaller0 entered promiscuous mode [ 1767.904621][T16766] tipc: Resetting bearer [ 1767.955863][T16769] sp0: Synchronizing with TNC [ 1767.970630][T16763] tipc: Resetting bearer [ 1768.813217][ T9201] tipc: Node number set to 1509414315 [ 1777.085072][T16763] tipc: Disabling bearer [ 1778.458346][ T26] audit: type=1326 audit(2000000172.770:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0238e969 code=0x7ffc0000 [ 1778.569350][ T26] audit: type=1326 audit(2000000172.770:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0238e969 code=0x7ffc0000 [ 1778.910559][ T26] audit: type=1326 audit(2000000172.770:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9a0238e969 code=0x7ffc0000 [ 1779.186629][ T26] audit: type=1326 audit(2000000172.770:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0238e969 code=0x7ffc0000 [ 1779.479837][ T26] audit: type=1326 audit(2000000172.770:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0238e969 code=0x7ffc0000 [ 1779.512527][T16834] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1779.531321][T16834] overlayfs: failed to set xattr on upper [ 1779.541443][T16834] overlayfs: ...falling back to index=off,metacopy=off. [ 1779.632347][T16834] overlayfs: failed to resolve './file1/file0': -2 [ 1779.726149][ T26] audit: type=1326 audit(2000000172.770:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9a0238e969 code=0x7ffc0000 [ 1779.849740][ T26] audit: type=1326 audit(2000000172.770:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0238e969 code=0x7ffc0000 [ 1779.906758][T16844] fuse: Bad value for 'fd' [ 1779.951010][ T26] audit: type=1326 audit(2000000172.770:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0238e969 code=0x7ffc0000 [ 1780.053062][ T26] audit: type=1326 audit(2000000172.770:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f9a0238e969 code=0x7ffc0000 [ 1780.082386][ T26] audit: type=1326 audit(2000000172.770:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0238e969 code=0x7ffc0000 [ 1780.969763][T16860] lo speed is unknown, defaulting to 1000 [ 1781.071966][T16860] lo speed is unknown, defaulting to 1000 [ 1781.141561][T16870] 9pnet_fd: p9_fd_create_tcp (16870): problem connecting socket to 127.0.0.1 [ 1781.214487][T16869] tipc: Started in network mode [ 1781.270567][T16869] tipc: Node identity 02c34d2050f4, cluster identity 4711 [ 1781.363458][T16869] tipc: Enabled bearer , priority 0 [ 1782.244237][T16871] device syzkaller0 entered promiscuous mode [ 1782.251295][T16871] tipc: Resetting bearer [ 1782.396411][T16868] tipc: Resetting bearer [ 1782.402525][ T8201] tipc: Node number set to 1379355936 [ 1782.644763][T16888] usb usb8: usbfs: process 16888 (syz.1.2212) did not claim interface 0 before use [ 1783.604394][T16905] Illegal XDP return value 4294967294 on prog (id 262) dev N/A, expect packet loss! [ 1788.288083][ T52] block nbd1: Attempted send on invalid socket [ 1788.295923][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1788.309442][T16935] XFS (nbd1): SB validate failed with error -5. [ 1795.032256][T16868] tipc: Disabling bearer [ 1795.740970][ T9201] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1795.980545][ T9201] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1796.110155][ T9201] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1796.599110][ T9201] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1796.645520][ T9201] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1796.803256][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.812187][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.194669][ T9201] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1797.327024][ T9201] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1797.436440][ T9201] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1797.500551][ T9201] usb 10-1: Product: syz [ 1797.539185][ T9201] usb 10-1: Manufacturer: syz [ 1797.603350][ T9201] cdc_wdm 10-1:1.0: skipping garbage [ 1797.648060][ T9201] cdc_wdm 10-1:1.0: skipping garbage [ 1797.716988][ T9201] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1797.769070][ T9201] cdc_wdm 10-1:1.0: Unknown control protocol [ 1799.261099][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1800.455381][ T9201] usb 10-1: USB disconnect, device number 5 [ 1800.933797][T17047] tmpfs: Unknown parameter 'usrquota' [ 1802.357780][T17063] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1802.542056][T17063] batman_adv: batadv0: Adding interface: gretap1 [ 1802.600903][T17063] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1802.698408][T17063] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1803.047952][ T4268] Bluetooth: hci0: unexpected event for opcode 0x040e [ 1804.525184][T17093] random: crng reseeded on system resumption [ 1808.822091][T17159] sp0: Synchronizing with TNC [ 1810.210547][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2308'. [ 1810.907530][T17195] sp0: Synchronizing with TNC [ 1811.443103][T17210] tipc: Enabling of bearer rejected, failed to enable media [ 1812.200025][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1812.200042][ T26] audit: type=1804 audit(2000000206.510:315): pid=17227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2326" name="/newroot/242/bus/file1" dev="overlay" ino=1486 res=1 errno=0 [ 1812.595646][T17242] tipc: Enabling of bearer rejected, failed to enable media [ 1814.090998][T17267] overlayfs: failed to clone upperpath [ 1814.247037][T17271] tipc: Enabled bearer , priority 0 [ 1814.312368][T17270] tipc: Disabling bearer [ 1817.341879][T17305] siw: device registration error -23 [ 1818.721175][ T4268] Bluetooth: hci0: command 0x0405 tx timeout [ 1818.733662][ T26] audit: type=1804 audit(2000000213.050:316): pid=17312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2356" name="/newroot/246/bus/file1" dev="overlay" ino=1518 res=1 errno=0 [ 1818.889177][T17313] device syzkaller0 entered promiscuous mode [ 1819.852182][ T8201] libceph: connect (1)[c::]:6789 error -101 [ 1819.893750][ T8201] libceph: mon0 (1)[c::]:6789 connect error [ 1819.932807][T17325] Falling back ldisc for ttynull. [ 1819.965368][ T8201] libceph: connect (1)[c::]:6789 error -101 [ 1819.981711][ T8201] libceph: mon0 (1)[c::]:6789 connect error [ 1820.264637][ T8201] libceph: connect (1)[c::]:6789 error -101 [ 1820.271049][ T8201] libceph: mon0 (1)[c::]:6789 connect error [ 1820.781251][ T8736] libceph: connect (1)[c::]:6789 error -101 [ 1820.791123][ T8736] libceph: mon0 (1)[c::]:6789 connect error [ 1821.272985][T17329] ceph: No mds server is up or the cluster is laggy [ 1821.858748][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'. [ 1822.987553][T17364] [ 1822.989923][T17364] ====================================================== [ 1822.996968][T17364] WARNING: possible circular locking dependency detected [ 1823.003994][T17364] 6.1.138-syzkaller #0 Not tainted [ 1823.009096][T17364] ------------------------------------------------------ [ 1823.016109][T17364] syz.1.2372/17364 is trying to acquire lock: [ 1823.022179][T17364] ffff88801f6641b0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 1823.032934][T17364] [ 1823.032934][T17364] but task is already holding lock: [ 1823.040293][T17364] ffff88807a4ecc58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 1823.050342][T17364] [ 1823.050342][T17364] which lock already depends on the new lock. [ 1823.050342][T17364] [ 1823.060757][T17364] [ 1823.060757][T17364] the existing dependency chain (in reverse order) is: [ 1823.069789][T17364] [ 1823.069789][T17364] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 1823.077396][T17364] down_read_killable+0x4c/0x340 [ 1823.082900][T17364] mmap_read_lock_killable+0x1d/0x60 [ 1823.088745][T17364] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1823.094501][T17364] do_user_addr_fault+0x2db/0xb10 [ 1823.100084][T17364] exc_page_fault+0x60/0x100 [ 1823.105237][T17364] asm_exc_page_fault+0x22/0x30 [ 1823.110651][T17364] fault_in_readable+0x13e/0x1f0 [ 1823.116149][T17364] fault_in_iov_iter_readable+0xbb/0x2e0 [ 1823.122353][T17364] generic_perform_write+0x1d2/0x560 [ 1823.128204][T17364] __generic_file_write_iter+0x172/0x430 [ 1823.134404][T17364] generic_file_write_iter+0xab/0x2e0 [ 1823.140345][T17364] vfs_write+0x44c/0x960 [ 1823.145144][T17364] ksys_write+0x143/0x240 [ 1823.150028][T17364] do_syscall_64+0x4c/0xa0 [ 1823.155007][T17364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1823.161468][T17364] [ 1823.161468][T17364] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 1823.170204][T17364] __lock_acquire+0x2cf8/0x7c50 [ 1823.175621][T17364] lock_acquire+0x1b4/0x490 [ 1823.180689][T17364] down_write+0x36/0x60 [ 1823.185398][T17364] process_measurement+0x33c/0x1a10 [ 1823.191151][T17364] ima_file_mmap+0x104/0x150 [ 1823.196308][T17364] __se_sys_remap_file_pages+0x53e/0x770 [ 1823.202512][T17364] do_syscall_64+0x4c/0xa0 [ 1823.207490][T17364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1823.213964][T17364] [ 1823.213964][T17364] other info that might help us debug this: [ 1823.213964][T17364] [ 1823.224221][T17364] Possible unsafe locking scenario: [ 1823.224221][T17364] [ 1823.231693][T17364] CPU0 CPU1 [ 1823.237078][T17364] ---- ---- [ 1823.242459][T17364] lock(&mm->mmap_lock); [ 1823.246818][T17364] lock(&sb->s_type->i_mutex_key#12); [ 1823.254845][T17364] lock(&mm->mmap_lock); [ 1823.261738][T17364] lock(&sb->s_type->i_mutex_key#12); [ 1823.267233][T17364] [ 1823.267233][T17364] *** DEADLOCK *** [ 1823.267233][T17364] [ 1823.275391][T17364] 1 lock held by syz.1.2372/17364: [ 1823.280525][T17364] #0: ffff88807a4ecc58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 1823.291031][T17364] [ 1823.291031][T17364] stack backtrace: [ 1823.296964][T17364] CPU: 0 PID: 17364 Comm: syz.1.2372 Not tainted 6.1.138-syzkaller #0 [ 1823.305147][T17364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1823.315239][T17364] Call Trace: [ 1823.318560][T17364] [ 1823.321533][T17364] dump_stack_lvl+0x168/0x22e [ 1823.326254][T17364] ? load_image+0x3b0/0x3b0 [ 1823.330794][T17364] ? show_regs_print_info+0x12/0x12 [ 1823.336032][T17364] ? print_circular_bug+0x12b/0x1a0 [ 1823.341280][T17364] check_noncircular+0x274/0x310 [ 1823.346264][T17364] ? add_chain_block+0x940/0x940 [ 1823.351236][T17364] ? lockdep_lock+0xdc/0x1e0 [ 1823.355864][T17364] ? _find_first_zero_bit+0xcf/0x100 [ 1823.361188][T17364] __lock_acquire+0x2cf8/0x7c50 [ 1823.366090][T17364] ? ima_match_policy+0x104/0x2100 [ 1823.371243][T17364] ? verify_lock_unused+0x140/0x140 [ 1823.376485][T17364] ? ima_match_policy+0x207a/0x2100 [ 1823.381724][T17364] ? __schedule+0x10b7/0x40d0 [ 1823.386443][T17364] lock_acquire+0x1b4/0x490 [ 1823.390992][T17364] ? process_measurement+0x33c/0x1a10 [ 1823.396411][T17364] ? __might_sleep+0xd0/0xd0 [ 1823.401047][T17364] ? __schedule+0x10f1/0x40d0 [ 1823.405754][T17364] ? read_lock_is_recursive+0x10/0x10 [ 1823.411181][T17364] ? ima_get_action+0x71/0xa0 [ 1823.415895][T17364] down_write+0x36/0x60 [ 1823.420088][T17364] ? process_measurement+0x33c/0x1a10 [ 1823.425493][T17364] process_measurement+0x33c/0x1a10 [ 1823.430732][T17364] ? ima_file_mmap+0x150/0x150 [ 1823.435533][T17364] ? aa_file_perm+0x117/0xec0 [ 1823.440259][T17364] ? mtree_load+0xeb/0xa40 [ 1823.444712][T17364] ? mtree_load+0x90a/0xa40 [ 1823.449247][T17364] ? aa_get_current_label+0x110/0x1d0 [ 1823.454653][T17364] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 1823.460843][T17364] ima_file_mmap+0x104/0x150 [ 1823.465461][T17364] ? ima_file_free+0x3e0/0x3e0 [ 1823.470251][T17364] ? common_file_perm+0x171/0x1c0 [ 1823.475310][T17364] ? bpf_lsm_mmap_file+0x5/0x10 [ 1823.480196][T17364] ? security_mmap_file+0x11b/0x180 [ 1823.485441][T17364] __se_sys_remap_file_pages+0x53e/0x770 [ 1823.491118][T17364] ? __se_sys_futex+0x14a/0x440 [ 1823.496025][T17364] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 1823.501790][T17364] ? lock_chain_count+0x20/0x20 [ 1823.506679][T17364] ? lockdep_hardirqs_on+0x94/0x140 [ 1823.511933][T17364] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 1823.517705][T17364] do_syscall_64+0x4c/0xa0 [ 1823.522166][T17364] ? clear_bhb_loop+0x45/0xa0 [ 1823.526874][T17364] ? clear_bhb_loop+0x45/0xa0 [ 1823.531589][T17364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1823.537534][T17364] RIP: 0033:0x7fcd4a38e969 [ 1823.542000][T17364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1823.561650][T17364] RSP: 002b:00007fcd4a1ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1823.570105][T17364] RAX: ffffffffffffffda RBX: 00007fcd4a5b6160 RCX: 00007fcd4a38e969 [ 1823.578116][T17364] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 1823.586125][T17364] RBP: 00007fcd4a410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1823.594128][T17364] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 1823.602133][T17364] R13: 0000000000000000 R14: 00007fcd4a5b6160 R15: 00007ffc804ac8c8 [ 1823.610145][T17364] [ 1823.873693][T17357] orangefs_mount: mount request failed with -4 [ 1827.271250][T17345] netlink: 'syz.8.2365': attribute type 4 has an invalid length. [ 1827.334043][T17346] netlink: 'syz.8.2365': attribute type 4 has an invalid length. [ 1827.374475][ T5671] lo speed is unknown, defaulting to 1000 [ 1827.380329][ T4244] lo speed is unknown, defaulting to 1000 [ 1829.600749][ T4266] Bluetooth: hci0: command 0x0406 tx timeout