last executing test programs: 28m13.264217355s ago: executing program 32 (id=18): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000180)=ANY=[], 0x9, 0x6dd, &(0x7f00000020c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x208008de, &(0x7f0000001d80)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="f9e3299eda3cf0dbe925328efe8b1e9ac76ff572d191ec3f87b74213e70ac53fc67895b0283311287d2e519e7092fd808f04a83d0bdad6789203edf3ee69774eb29d339402fb80315ee3d417cfde23d1724d2c8ae8bdb4b3097650911c79f589efe6933cf472e7882e57d2a23d50eb35eb5aa8162be5670f27221c38d6066a378ac939a2f5d116eaea915806e96c3b53225efa474b35afbfbea55f6cf3ddb49db312ff2854047d2a93b16a8fd2a5405f01beaa0671762c52a48af51a1c1d5830c1b0cbd33e5dcb32f0ed2ae8cb7b2dca721c1889ce61f12041d745be3fa10410315fae578b45516476d2f6002670083d16c60b8c0307e773", @ANYRES8, @ANYRES64=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200440c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x138, 0x11, 0x148, 0x0, 0x0, 0x238, 0x2a8, 0x2a8, 0x238, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x2000, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@ecn={{0x28}, {0x50}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r4 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f0000001c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r6, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={0x0, 0x1230}, 0x1, 0x0, 0x0, 0x8000010}, 0x200400c0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001ac0)=0x14) 27m40.779437846s ago: executing program 1 (id=104): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a0000000300000008000000010000000000000099cc9f3981e281739bad04f6692987ff2c79a1911b18018da48afa6c76e7b1bcc176d4394ac0cb60796e74ece300b382790579b6", @ANYRES32, @ANYBLOB='\x00'/17], 0x48) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x1c04b, &(0x7f0000000580), 0x1, 0x751, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000340), 0x140, 0x0) 27m39.613707985s ago: executing program 1 (id=105): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x83c, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x81c, 0x4, 0x0, 0x1, [{0x818, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x808, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_DATA={0x20c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfc, 0x1, "d6adc0c77ce55bef91da45fa1d0159943593948a2fddd382b1e7420333f42d889f1cba8aa0d3784b4b3b8d5a0488f66d2549284c265cde1518aa533760c8996fe47b4df5f9a09b40daf597dc2d04215beefc63c374022e922b57ab0d788411f3bf8395ad438cfe30f72190b737e8f97cddf122c43853efbfe2a396bc645cb226e5daf6dac8eb892a62c5e9a872a20c81d40ad2549403413560667cb97e21bdf10faa2f19f77caf3dea15a202d3f26da1290e33a539ca9965e2aae93545e3b7b878d55d46e32bbea6811cd84eff5e20f93d0822313ed0973adc49455ba6a65d6d72165f49ed68881aa823e020d544ee43f3f1c974cab82914"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x31}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x29, 0x1, "140c7aaab76f0469ca848092ba458d2ee2b38f657d2420b5ee01fbe6f7e6fa0da543729e30"}, @NFTA_DATA_VALUE={0x13, 0x1, "b4fa87105ab3dc02c2dc35d0349417"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_BITWISE_MASK={0xd8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd2, 0x1, "4baf9f2fa5a1717d98cbd973ef32c3d5f90d67903efa9c63f7aa85de5fcf6680b4df7e90c0b727b4c6901652eb7a73563aa5be205424de97ce64e22cebb6c349a4c5b45b247fd1f259123e9444eacf2e70768961b127c97e5d9b9bf7eee2ad4ce2f5d47599d59b60ad0b799ff3e0bb2bc6a899993c0d7deef67c2373e1cb1919568a42d6dc8fc32811c69f619b93c2afebb5d13b0ba69589dec4d0c14572e213c19247bfca8f6e2bb814b96c21bdb1e08140292fe45b8e566bb435fb2a284154b402e8249238cb5d2115fb94deb3"}]}, @NFTA_BITWISE_MASK={0xf8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf1, 0x1, "0b488993ec2254eb7fbcb1dee429f089e16068c183392a423112ec5ffce7ad2b05bcc169c018637e166641b6673a4eb2ecbb0d62ab39fd9fe2ea7c79ebfd1724f6394b894e7bb13e82270fb41f1b72a8e6ee79cf29443038ddf3f753ffbb23a7bb670edaf2336cedd58f6f835cfde73047af28cfa9efba292b6f6a1ab606f97900acb0c04aea959a6254225c4541e9e2ab80233a8784bd454b043bb5739b6684439510857e3f41b020a5f131d83bbdd94cb9196fad8a83de20d47cadb1e77bd17077f5a6992766b69c7fb701560f039c3796f9e4f1815f9cebf0900026b4833832bf71db26267b6501d2e37572"}]}, @NFTA_BITWISE_XOR={0x3f8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "b0e9df0b8d4570a193b32c93199cb452cf055a37e80ebdf2efcd25be6321b66bb328bb69d3b4442d1812fb556ab18a958f72d7be510beabc4155ee28f589912241e3b564a2e642c872c19ce6e1674928ef5321ce0f"}, @NFTA_DATA_VALUE={0xfa, 0x1, "54e6be4b30054c6936d1b68f30e79a3e0cc0a1dbde429206a9ba480928f14ecbe05b468a2cad701d5bd2b0caaaffa137308f773a6ac95a150c8b339ec552749be38420e4a201f3921df9a93994688adff3a007399cc3dcc5f3dd2762f79a96808bf9d579e66f40f916106f0a22bb78a5cf33f72f48927bf9fc7fa4418d1004bcdf76c798dc40fe30dfcbd46c9f382f85db923e645571608a669b87618eb1d1b2519751ed24fe9b0ff1f36180ed2d6efb7e3a6434ba9886c56fceb5573740f54ec055c8886a240b1100cd71ec82c2b01397a077e249b373f34ad7ff6c59e78433b8074b32cbbebf57324da7779ff23d7f1769493e940a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x86, 0x1, "e1590937d1401790bb2fc5ae00ce1d5fa97073be66c24f75dec45614f89f52d1e4484ebfee205ab7fd96af02791d4139c1c507ca0b62fb31625a7621b4b7181f5b6a0c604f83b059ac16fd01020ba424c2573190d8020dcaf0cce72cb03acca746dda909bd42558e143477564a87c7af359ce8e7bb7f24eadb0d670fd00d2419bc95"}, @NFTA_DATA_VALUE={0x3d, 0x1, "437319fe5a379e1858605adf83b0349ea235c9bcbeb172b9a55ecaf5999fee7dea710234a0a09a0bf099b9ecc946f7a0e3d813e496179424dd"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "1aaa13b082aa9765ea0db728c06c2a8accb949926fbf933a9706dfa29ff30815d7c6fa59e9b5cd0921e3a13e6fb5d5a44927afad63eec38054205b481fa2ff4e0b1499eb468c1f9ff32463f9a63ba44d50070abf714ec307dc5737d3f6454c1611a03905d5d18811b41b97d797cc6c1512b08098bf221bbbd83c7c6f45549e9727427d55852ec3a90fa160e9e970cbaaf7abcca7aecfad94292b3cacdee0b523982e2a53377543593fb78bd8e09059b0ef8275336a02b1e4a584d118da453775864ee77759d0e7f3f8fd6efed7dcb644ac10a59c3f33d7fa3aeb871b16f3e4ea44f6541eeb6cf93782c87230aedc"}]}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}]}, 0x83c}, 0x1, 0x0, 0x0, 0x40080}, 0x4001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0xffbffffe, 0x0, [0x0], [0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x8], [0x0, 0x100000000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r11}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r12) 27m34.402549405s ago: executing program 33 (id=88): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r2 = socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x84}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x10, 0x9, 0x2, 0xa, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x0, 0x80000000, {0x6, 0x32, 0x4, 0x4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty}}]}, 0x50}}, 0x2000c800) syz_emit_vhci(&(0x7f00000009c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xf8, 0xc9, @none, 0x2, 0xa, 0x6, 0x5, 0x74, 0x2}}}, 0x14) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 27m34.394091689s ago: executing program 1 (id=112): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x83c, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x81c, 0x4, 0x0, 0x1, [{0x818, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x808, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_DATA={0x20c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfc, 0x1, "d6adc0c77ce55bef91da45fa1d0159943593948a2fddd382b1e7420333f42d889f1cba8aa0d3784b4b3b8d5a0488f66d2549284c265cde1518aa533760c8996fe47b4df5f9a09b40daf597dc2d04215beefc63c374022e922b57ab0d788411f3bf8395ad438cfe30f72190b737e8f97cddf122c43853efbfe2a396bc645cb226e5daf6dac8eb892a62c5e9a872a20c81d40ad2549403413560667cb97e21bdf10faa2f19f77caf3dea15a202d3f26da1290e33a539ca9965e2aae93545e3b7b878d55d46e32bbea6811cd84eff5e20f93d0822313ed0973adc49455ba6a65d6d72165f49ed68881aa823e020d544ee43f3f1c974cab82914"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x31}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x29, 0x1, "140c7aaab76f0469ca848092ba458d2ee2b38f657d2420b5ee01fbe6f7e6fa0da543729e30"}, @NFTA_DATA_VALUE={0x13, 0x1, "b4fa87105ab3dc02c2dc35d0349417"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_BITWISE_MASK={0xd8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd2, 0x1, "4baf9f2fa5a1717d98cbd973ef32c3d5f90d67903efa9c63f7aa85de5fcf6680b4df7e90c0b727b4c6901652eb7a73563aa5be205424de97ce64e22cebb6c349a4c5b45b247fd1f259123e9444eacf2e70768961b127c97e5d9b9bf7eee2ad4ce2f5d47599d59b60ad0b799ff3e0bb2bc6a899993c0d7deef67c2373e1cb1919568a42d6dc8fc32811c69f619b93c2afebb5d13b0ba69589dec4d0c14572e213c19247bfca8f6e2bb814b96c21bdb1e08140292fe45b8e566bb435fb2a284154b402e8249238cb5d2115fb94deb3"}]}, @NFTA_BITWISE_MASK={0xf8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf1, 0x1, "0b488993ec2254eb7fbcb1dee429f089e16068c183392a423112ec5ffce7ad2b05bcc169c018637e166641b6673a4eb2ecbb0d62ab39fd9fe2ea7c79ebfd1724f6394b894e7bb13e82270fb41f1b72a8e6ee79cf29443038ddf3f753ffbb23a7bb670edaf2336cedd58f6f835cfde73047af28cfa9efba292b6f6a1ab606f97900acb0c04aea959a6254225c4541e9e2ab80233a8784bd454b043bb5739b6684439510857e3f41b020a5f131d83bbdd94cb9196fad8a83de20d47cadb1e77bd17077f5a6992766b69c7fb701560f039c3796f9e4f1815f9cebf0900026b4833832bf71db26267b6501d2e37572"}]}, @NFTA_BITWISE_XOR={0x3f8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "b0e9df0b8d4570a193b32c93199cb452cf055a37e80ebdf2efcd25be6321b66bb328bb69d3b4442d1812fb556ab18a958f72d7be510beabc4155ee28f589912241e3b564a2e642c872c19ce6e1674928ef5321ce0f"}, @NFTA_DATA_VALUE={0xfa, 0x1, "54e6be4b30054c6936d1b68f30e79a3e0cc0a1dbde429206a9ba480928f14ecbe05b468a2cad701d5bd2b0caaaffa137308f773a6ac95a150c8b339ec552749be38420e4a201f3921df9a93994688adff3a007399cc3dcc5f3dd2762f79a96808bf9d579e66f40f916106f0a22bb78a5cf33f72f48927bf9fc7fa4418d1004bcdf76c798dc40fe30dfcbd46c9f382f85db923e645571608a669b87618eb1d1b2519751ed24fe9b0ff1f36180ed2d6efb7e3a6434ba9886c56fceb5573740f54ec055c8886a240b1100cd71ec82c2b01397a077e249b373f34ad7ff6c59e78433b8074b32cbbebf57324da7779ff23d7f1769493e940a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x86, 0x1, "e1590937d1401790bb2fc5ae00ce1d5fa97073be66c24f75dec45614f89f52d1e4484ebfee205ab7fd96af02791d4139c1c507ca0b62fb31625a7621b4b7181f5b6a0c604f83b059ac16fd01020ba424c2573190d8020dcaf0cce72cb03acca746dda909bd42558e143477564a87c7af359ce8e7bb7f24eadb0d670fd00d2419bc95"}, @NFTA_DATA_VALUE={0x3d, 0x1, "437319fe5a379e1858605adf83b0349ea235c9bcbeb172b9a55ecaf5999fee7dea710234a0a09a0bf099b9ecc946f7a0e3d813e496179424dd"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "1aaa13b082aa9765ea0db728c06c2a8accb949926fbf933a9706dfa29ff30815d7c6fa59e9b5cd0921e3a13e6fb5d5a44927afad63eec38054205b481fa2ff4e0b1499eb468c1f9ff32463f9a63ba44d50070abf714ec307dc5737d3f6454c1611a03905d5d18811b41b97d797cc6c1512b08098bf221bbbd83c7c6f45549e9727427d55852ec3a90fa160e9e970cbaaf7abcca7aecfad94292b3cacdee0b523982e2a53377543593fb78bd8e09059b0ef8275336a02b1e4a584d118da453775864ee77759d0e7f3f8fd6efed7dcb644ac10a59c3f33d7fa3aeb871b16f3e4ea44f6541eeb6cf93782c87230aedc"}]}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}]}, 0x83c}, 0x1, 0x0, 0x0, 0x40080}, 0x4001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0xffbffffe, 0x0, [0x0], [0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x8], [0x0, 0x100000000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r11}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r12) 27m19.284653526s ago: executing program 34 (id=112): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x83c, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x81c, 0x4, 0x0, 0x1, [{0x818, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x808, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_DATA={0x20c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfc, 0x1, "d6adc0c77ce55bef91da45fa1d0159943593948a2fddd382b1e7420333f42d889f1cba8aa0d3784b4b3b8d5a0488f66d2549284c265cde1518aa533760c8996fe47b4df5f9a09b40daf597dc2d04215beefc63c374022e922b57ab0d788411f3bf8395ad438cfe30f72190b737e8f97cddf122c43853efbfe2a396bc645cb226e5daf6dac8eb892a62c5e9a872a20c81d40ad2549403413560667cb97e21bdf10faa2f19f77caf3dea15a202d3f26da1290e33a539ca9965e2aae93545e3b7b878d55d46e32bbea6811cd84eff5e20f93d0822313ed0973adc49455ba6a65d6d72165f49ed68881aa823e020d544ee43f3f1c974cab82914"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x31}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x29, 0x1, "140c7aaab76f0469ca848092ba458d2ee2b38f657d2420b5ee01fbe6f7e6fa0da543729e30"}, @NFTA_DATA_VALUE={0x13, 0x1, "b4fa87105ab3dc02c2dc35d0349417"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_BITWISE_MASK={0xd8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd2, 0x1, "4baf9f2fa5a1717d98cbd973ef32c3d5f90d67903efa9c63f7aa85de5fcf6680b4df7e90c0b727b4c6901652eb7a73563aa5be205424de97ce64e22cebb6c349a4c5b45b247fd1f259123e9444eacf2e70768961b127c97e5d9b9bf7eee2ad4ce2f5d47599d59b60ad0b799ff3e0bb2bc6a899993c0d7deef67c2373e1cb1919568a42d6dc8fc32811c69f619b93c2afebb5d13b0ba69589dec4d0c14572e213c19247bfca8f6e2bb814b96c21bdb1e08140292fe45b8e566bb435fb2a284154b402e8249238cb5d2115fb94deb3"}]}, @NFTA_BITWISE_MASK={0xf8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf1, 0x1, "0b488993ec2254eb7fbcb1dee429f089e16068c183392a423112ec5ffce7ad2b05bcc169c018637e166641b6673a4eb2ecbb0d62ab39fd9fe2ea7c79ebfd1724f6394b894e7bb13e82270fb41f1b72a8e6ee79cf29443038ddf3f753ffbb23a7bb670edaf2336cedd58f6f835cfde73047af28cfa9efba292b6f6a1ab606f97900acb0c04aea959a6254225c4541e9e2ab80233a8784bd454b043bb5739b6684439510857e3f41b020a5f131d83bbdd94cb9196fad8a83de20d47cadb1e77bd17077f5a6992766b69c7fb701560f039c3796f9e4f1815f9cebf0900026b4833832bf71db26267b6501d2e37572"}]}, @NFTA_BITWISE_XOR={0x3f8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "b0e9df0b8d4570a193b32c93199cb452cf055a37e80ebdf2efcd25be6321b66bb328bb69d3b4442d1812fb556ab18a958f72d7be510beabc4155ee28f589912241e3b564a2e642c872c19ce6e1674928ef5321ce0f"}, @NFTA_DATA_VALUE={0xfa, 0x1, "54e6be4b30054c6936d1b68f30e79a3e0cc0a1dbde429206a9ba480928f14ecbe05b468a2cad701d5bd2b0caaaffa137308f773a6ac95a150c8b339ec552749be38420e4a201f3921df9a93994688adff3a007399cc3dcc5f3dd2762f79a96808bf9d579e66f40f916106f0a22bb78a5cf33f72f48927bf9fc7fa4418d1004bcdf76c798dc40fe30dfcbd46c9f382f85db923e645571608a669b87618eb1d1b2519751ed24fe9b0ff1f36180ed2d6efb7e3a6434ba9886c56fceb5573740f54ec055c8886a240b1100cd71ec82c2b01397a077e249b373f34ad7ff6c59e78433b8074b32cbbebf57324da7779ff23d7f1769493e940a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x86, 0x1, "e1590937d1401790bb2fc5ae00ce1d5fa97073be66c24f75dec45614f89f52d1e4484ebfee205ab7fd96af02791d4139c1c507ca0b62fb31625a7621b4b7181f5b6a0c604f83b059ac16fd01020ba424c2573190d8020dcaf0cce72cb03acca746dda909bd42558e143477564a87c7af359ce8e7bb7f24eadb0d670fd00d2419bc95"}, @NFTA_DATA_VALUE={0x3d, 0x1, "437319fe5a379e1858605adf83b0349ea235c9bcbeb172b9a55ecaf5999fee7dea710234a0a09a0bf099b9ecc946f7a0e3d813e496179424dd"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "1aaa13b082aa9765ea0db728c06c2a8accb949926fbf933a9706dfa29ff30815d7c6fa59e9b5cd0921e3a13e6fb5d5a44927afad63eec38054205b481fa2ff4e0b1499eb468c1f9ff32463f9a63ba44d50070abf714ec307dc5737d3f6454c1611a03905d5d18811b41b97d797cc6c1512b08098bf221bbbd83c7c6f45549e9727427d55852ec3a90fa160e9e970cbaaf7abcca7aecfad94292b3cacdee0b523982e2a53377543593fb78bd8e09059b0ef8275336a02b1e4a584d118da453775864ee77759d0e7f3f8fd6efed7dcb644ac10a59c3f33d7fa3aeb871b16f3e4ea44f6541eeb6cf93782c87230aedc"}]}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}]}, 0x83c}, 0x1, 0x0, 0x0, 0x40080}, 0x4001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0xffbffffe, 0x0, [0x0], [0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x8], [0x0, 0x100000000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r11}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r12) 20m23.618351599s ago: executing program 35 (id=602): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c0050890e1d2cc1bbbdf08d08fe06ff2766758d8955927fab01a7ccdecfc59b2041a9461723f1db971e775e0e358c03b00c510998283ed6f1dba0502d352e58b65a28492b0a7053e14eccd84ac5b3452602d77c0ca0"], 0x1, 0x442a, &(0x7f0000008940)="$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") r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000140)=@full={0xb, @remote, @netrom, 0x0, [@null, @bcast, @remote, @default, @remote, @netrom]}, 0x0, 0x80000) bind$rose(r0, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettfilter={0x34, 0x2e, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0xb, 0x2}, {0xfff1, 0xd}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}]}, 0x34}}, 0x40000) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000) unshare(0x10400) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000400)=""/102400, 0x19000) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x3a, 0x20000, 0x3, 0x20000000, 0x3, 0xfffffffffffffffe, 0x0, 0x2b980000}, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20m23.226801441s ago: executing program 36 (id=597): mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000000)) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4800) connect$l2tp6(r2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x809b000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000700)=""/89, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x6302}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) 20m23.093379915s ago: executing program 37 (id=600): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002f9b0000000000000000b50000000f004083c5000000a0000a4095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r3}, 0x2a) syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0x20000020, 0x10100, 0x1, 0xfffffffd}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x4800) 17m55.542100488s ago: executing program 9 (id=793): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = dup(r0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r5, &(0x7f00000004c0)=""/185, 0xb9) epoll_pwait(r4, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, 0x0, &(0x7f00000021c0)) accept4$packet(r1, 0x0, 0x0, 0x800) 17m53.043718921s ago: executing program 9 (id=799): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x58}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}], {0x14}}, 0xc4}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r2}}, 0x48) 17m49.4731872s ago: executing program 9 (id=804): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0xce9e1000) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000180)={[{@subsystem='hugetlb'}, {@cpuset_v2_mode}, {@subsystem='cpuacct'}]}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) setreuid(0xee01, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000600), &(0x7f0000000640)}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b0500000000000904"], 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511881, 0x96) 17m43.563719625s ago: executing program 9 (id=812): socket(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5", 0x85}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f1", 0x6a}], 0x2}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev, 0x9}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x800) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 17m41.072981763s ago: executing program 9 (id=816): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0xfffffffffffffcc5) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/dev\x00') syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @remote, @void, {@arp={0x806, @generic={0x324, 0x6558, 0x6, 0x0, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, "", @local}}}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05"], 0x0) 17m36.16358468s ago: executing program 9 (id=826): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x6827e, 0x124) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file4\x00', 0x141042, 0x0) write$cgroup_type(r0, &(0x7f0000000440), 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000004c0)='syzkaller1\x00') syz_usb_connect$cdc_ncm(0x3, 0x4c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x6}, 0x8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@sg0, &(0x7f00000000c0)='./file4\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x8002, 0x0) 17m35.901007323s ago: executing program 3 (id=828): ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) 17m35.267468764s ago: executing program 3 (id=832): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x6827e, 0x124) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file4\x00', 0x141042, 0x0) write$cgroup_type(r0, &(0x7f0000000440), 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000004c0)='syzkaller1\x00') syz_usb_connect$cdc_ncm(0x3, 0x4c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x6}, 0x8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@sg0, &(0x7f00000000c0)='./file4\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x8002, 0x0) 17m31.24987893s ago: executing program 3 (id=839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) bpf$ITER_CREATE(0x1d, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x0, 0x4000}) 17m25.407469306s ago: executing program 38 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x101a001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000380)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x8e]}, &(0x7f0000000400)=0x50) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000104000000000046f8e7ff000000", @ANYRES32=r8, @ANYBLOB="0301000000000000140003006272696467655f736c6176655f300000"], 0x34}}, 0x0) 17m24.544062941s ago: executing program 3 (id=849): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000002340), 0x1, 0x73e, &(0x7f0000000800)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}}, {@in, 0x0, 0x32}, @in6=@loopback, {0xa9}, {0x0, 0x0, 0x0, 0xffffffffffbfffff}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0xfffffffd}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x1c0}}]}, 0x158}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x80000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f00000000c0)) 17m22.763915475s ago: executing program 3 (id=853): epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 17m20.771959551s ago: executing program 39 (id=826): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x6827e, 0x124) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file4\x00', 0x141042, 0x0) write$cgroup_type(r0, &(0x7f0000000440), 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000004c0)='syzkaller1\x00') syz_usb_connect$cdc_ncm(0x3, 0x4c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x6}, 0x8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@sg0, &(0x7f00000000c0)='./file4\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x8002, 0x0) 17m20.767006073s ago: executing program 3 (id=856): syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000104000140600fe880000000000000000000000000001fe8000"/51, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="733bd50090780000"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000010000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x19) readv(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 17m5.123376654s ago: executing program 40 (id=856): syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000104000140600fe880000000000000000000000000001fe8000"/51, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="733bd50090780000"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000010000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x19) readv(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 16m38.296776178s ago: executing program 8 (id=916): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x46, 0xa0000) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) timer_create(0xa, 0x0, 0x0) r1 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000080)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x70]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\x03+souru/', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r2}}, 0x48) 16m35.492155955s ago: executing program 8 (id=919): fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000400)=0x1) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x4}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4400, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x2, &(0x7f0000000040)=[{0xe0d, 0x3d, 0x4, 0xfd}, {0x7, 0x4, 0x0, 0x1}]}) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16m33.576400215s ago: executing program 1 (id=846): r0 = io_uring_setup(0x178e, &(0x7f00000000c0)={0x0, 0x52c1}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x148) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000340)='./file0\x00', 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='W', 0x1}, {&(0x7f00000002c0)="592eb75b3ad6fbbf04a8cdb64a61fce6", 0x10}], 0x2}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x80000) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f00000001c0)={0x1}) ftruncate(r7, 0x57) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x40, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xa}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x359}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}, 0x40}, 0x1, 0x0, 0x0, 0x80010}, 0x24004040) close_range(r0, 0xffffffffffffffff, 0x0) 16m32.071459103s ago: executing program 8 (id=923): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xa, 0xd}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0xc, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16m32.068940578s ago: executing program 1 (id=924): r0 = io_uring_setup(0x178e, &(0x7f00000000c0)={0x0, 0x52c1}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x148) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000340)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='W', 0x1}, {&(0x7f00000002c0)="592eb75b3ad6fbbf04a8cdb64a61fce6", 0x10}], 0x2}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x80000) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f00000001c0)={0x1}) ftruncate(r7, 0x57) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) sendfile(r4, r7, 0x0, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 16m31.671618023s ago: executing program 8 (id=926): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) socket$key(0xf, 0x3, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) epoll_create(0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 16m30.624512957s ago: executing program 1 (id=927): socket(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5", 0x85}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f1", 0x6a}], 0x2}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 16m30.584553395s ago: executing program 8 (id=928): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x58}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r2}}, 0x48) 16m14.967360583s ago: executing program 41 (id=928): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x58}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r2}}, 0x48) 16m14.677866503s ago: executing program 42 (id=927): socket(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5", 0x85}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f1", 0x6a}], 0x2}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 7m48.853382996s ago: executing program 5 (id=1627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x6c, r1}, 0x38) socket$inet(0x2, 0x3, 0x8d) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40010) socket$netlink(0x10, 0x3, 0x8000000005) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x41, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000001180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0xee01, 0x0) 7m43.823296046s ago: executing program 5 (id=1635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f00000002c0)={0x20, 0x0, 0x0}) syz_mount_image$cramfs(&(0x7f00000001c0), &(0x7f0000000180)='./file2\x00', 0x10080, &(0x7f00000006c0)=ANY=[], 0x2, 0x15d, &(0x7f0000000440)="$eJzsjz9rWlEchp97r39Kq/VCLdgObaFDLxXr9YrdStFSqVB7oaVLh1Kot7SgVRSKY5OQLUM+gIOJkEkcQsYMicliohDM5xAyBBwTzj0SkjXzeZbDed73/M45799MLEwwkLyr1xpNr9XyKs8+u+Xil+2d3fvChzG54zdqjaYoV2R/Lw+/xRqA2ZLUB1H49afqvfpZr4r9LA8WULgnvI6N7N4VLi672sJZz2H4UDrHd/oNl130HgegEJNOzLvYgBeAjnQZ4ByC7U5y0D/6NB6VUi+3vhuslpJPH2ggveH7J96aU3zUiyRWgMNN/5vtzml6lDpJD/rTybj80S27k6zjvM7aGdvOTd3jcSn3f53Ah8g/+HY1T94TCgFfYVmDjgZ9P5/ta1Fg2J27tVg4Dpz9NUGTiTjSncO1RLzjRyLYexs3dQwLDYVCoVAoFAqFQqFQKG7JZQAAAP//78Rlhw==") getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@empty, @empty, 0x0}, &(0x7f0000000240)=0xc) madvise(&(0x7f00008b1000/0x2000)=nil, 0x2000, 0x14) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x5}, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000008800000088000000040000000f00000000000001000000004a00010a0d000000000000120200000006000000050000930c0000000200000009000000010000000500000001800000000000000400000006000000060000000e000000810000007f0000000600000003000000f15175b3040000000100008404000000100000000500000000000080030000000000000b0400000000305f00a79231aa1fd031194de4ef6d7f16585b793cf186aeaf84e59f6be132f73d6f9b7739659e70f9dfe714e91d7bae9d20b639493441b31a7d01dcc36f4fab55a67882d8256376475c40eff155c38b611b69864b75acbfc645ba64b729d7d7e9dfbb9dfb1f33db278601cc5ba19214b2ccfb"], &(0x7f00000005c0)=""/202, 0xa4, 0xca, 0x0, 0xf, 0x10000, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="100042"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', r5, 0x0, r7, 0x8, &(0x7f00000003c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) 7m36.042185741s ago: executing program 5 (id=1651): sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m35.779303218s ago: executing program 5 (id=1654): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40480, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0xb040, 0x1, 0x2}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000000c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fanotify_mark(0xffffffffffffffff, 0x1, 0x6ba4a2a6f8406bc9, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x1146, 0x4) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x2, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) socket(0x1e, 0x4, 0x0) 7m33.003345387s ago: executing program 5 (id=1657): fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000540), 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000000)=0x91d2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4400, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000100)) dup(r0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r4, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 7m27.964656121s ago: executing program 5 (id=1665): socket$kcm(0x10, 0x2, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x86, 0x8000008001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100000000000200a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x800400000bce) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x6c40) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000080)={0x4000000}) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$getflags(r5, 0x401) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009"], 0x184}}, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000, @rand_addr=0x64010101}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 7m12.219013877s ago: executing program 43 (id=1665): socket$kcm(0x10, 0x2, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x86, 0x8000008001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100000000000200a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x800400000bce) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x6c40) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000080)={0x4000000}) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$getflags(r5, 0x401) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009"], 0x184}}, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000, @rand_addr=0x64010101}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 6m3.1082045s ago: executing program 2 (id=1793): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000eb8964d4a23c23f3ca10ffffffb66a22ef12174032d3b79bdb2cdccd8e4d9527c1ded253ce6a5a5992ee34e45e573b09009753868261783636ed387bb398ede939799e1c1096b55668b84ae724a77258dcb996d96bf81c18cf7cb32e36a620d46a3950d8484845ff0abc4a6855d2a2ebb44d1297be2499c40a9709e5a8d1167b6787596561610ec13efdf03d7b23c6760900000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000002ec0)={0x1, @vbi={0xfffffffc, 0x6, 0x33524742, 0x32314742, [0xa, 0x8], [0x5, 0x7], 0x108}}) r6 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0xc0045543, 0x0) 6m1.614993194s ago: executing program 2 (id=1796): keyctl$dh_compute(0x17, &(0x7f0000000180), 0x0, 0x4000, &(0x7f0000000040)={0x0}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="c5c3442e25f30600aa773888c21c000000000002"], 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000240)={0x0, 0xfffb, 0x30, 0x7, 0xffffffff}, &(0x7f0000000440)=0x18) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 5m58.795291252s ago: executing program 2 (id=1800): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10148, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e20, 0x4, @mcast2={0xff, 0x5}, 0x3ff}, r5}}, 0x48) close_range(r3, 0xffffffffffffffff, 0x0) 5m56.934053406s ago: executing program 2 (id=1803): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) ftruncate(r0, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 5m54.014817371s ago: executing program 2 (id=1808): open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) dup(r0) pipe(&(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000"], 0x40}}, 0x0) 5m51.335793432s ago: executing program 2 (id=1813): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001800)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b15001ef40c6bae537614ffff", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x280088c0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x2, &(0x7f0000000240)=[{0x8, 0xf5, 0xc, 0x7}, {0x7, 0x40, 0x8, 0x9}]}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x732}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5m35.627345624s ago: executing program 44 (id=1813): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001800)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b15001ef40c6bae537614ffff", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x280088c0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x2, &(0x7f0000000240)=[{0x8, 0xf5, 0xc, 0x7}, {0x7, 0x40, 0x8, 0x9}]}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x732}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 25.302805989s ago: executing program 0 (id=2302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket$kcm(0x10, 0x400000002, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0xcd, 0x81, 0x3, 0x2}]}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 24.791621518s ago: executing program 0 (id=2305): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002dc0)=@delchain={0x6b4, 0x65, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x4, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x684, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x40}, @TCA_ROUTE4_ACT={0x678, 0x6, [@m_simple={0x21c, 0x1f, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8401, 0x2, 0x1, 0x2, 0x8}}, @TCA_DEF_DATA={0x2d, 0x3, '@-^[\xa5&,.\x00pe\xe9\xb9\xf1Q+=\xdf\xacqd\xb4\xd3\rj6\xb4\xa6fz\x91\xa6\xe9\xdfy\xef\xbcY\xbb[a'}, @TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x403, 0xfffffffffffffffe, 0x4, 0x2}}, @TCA_DEF_DATA={0x7, 0x3, '\xfc}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x0, 0x4, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, 'j\xbf!*{$\x00'}]}, {0x159, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x184, 0x4, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x200, 0x8, 0x9, 0xff}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfffffffb, 0x10000000, 0x6357cdec, 0x10000}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x6d7, 0x5, 0x4, 0x8001}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe0, 0x7, 0xcdb3da5a94de4674, 0x3, 0x1}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x81, 0x10000000, 0x1, 0xc}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x0, 0x0, 0x0, 0x7}, 0x4d}}]}, {0xad, 0x6, "1dc7479808d6c90250d523862380873363ee290289ff44e789cde40973e125f404b7dae756d1e8a04bcc9637b40abe50f02f62b2e8308eb77b659a331ac115d87d73e6232de8f9dad91575b3d6c8cd6762d5298b996754ad8dcb555bf914140ac84d95a4d4a501b1b4ba7c7fba20a003d5334fc0342357ea596bc8072803118c8dbf3be88e493ab4f40b7b3789b7b297cc61ef1488f4c28dbcf2e92f3b73fa308167e351366a76093f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x60, 0xc, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x30a}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4e9}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb35}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x715}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8a7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x84, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x55, 0x6, "b785195954bf29eb39a865c5695a7ac46cec065f7db06dbdba2e8cf062693312261bf71915b2d84a074fd931b04b8440933794ba3bc0c3d3302773efdb92a216873b53281af4671231b5fff52cece35cfe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x144, 0x1b, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xf6a, 0x50, 0x2, 0x2}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x7, 0x20000000, 0x0, 0xffffffff}}]}, {0xed, 0x6, "8d3fe574fbc1ca49b619a269038c45853e95bcebaf7809e37533e03d9655c6e3661b66380f0ea5b4dc2df75af2fc5a96b1bcd59b6a7cf20122ebfae4e633f1f61bdf6b44c90c272314e5d9d2042b89088234fdf2e4fb09989c12df538c477b6f5603235328c12c550a6001ad6984c698c84439349bcc53589560f99227ad7bee24787059ac8319efe501f8c325dadd8a36e79e9ea85aa1fd6bc411fd4cec3509d4f3d04f2f8dfc0e5054c21d75cfc4f2585e1407e24c35443d10570147ad700dd5d0059aaf7705bec631dbe6824c17afc7ea430a2915527f9ddaa5841295de7668f10fbd200b45b7af"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0xac, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x7d, 0x6, "bc1ad3229b696b64631b982f1ae9cf411c2b1e5fdff6242d8695a1ed156c80531bcbd658d1eea2abd881689e410b142d3051cdb54d04700ae8760c4554a295a0dc065e7a467f52ac1406a7c414dea141de52ea6b5ad19c69da24e696a9a9f2d1afa4e45f037f6415a6c384c6d7ac9ab597d537b40239955cdf"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 15.893779493s ago: executing program 4 (id=2316): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x7800, 0x8, 0x40, 0x7, {{0x15, 0x4, 0x0, 0x37, 0x54, 0x65, 0x0, 0x4, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@noop, @end, @timestamp_prespec={0x44, 0x3c, 0x33, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@broadcast, 0x4}, {@multicast2, 0x2}, {@private=0xa010102, 0x7fffffff}, {@multicast1, 0xd}, {@local}, {@remote, 0x9}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, &(0x7f00000023c0)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=0x0, @ANYRES64, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x9) 14.724018474s ago: executing program 4 (id=2318): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x46, 0xa0000) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', 0x0, 0x0, 0x0, 0x0) timer_create(0xa, 0x0, 0x0) r1 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000080)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x70]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\x03+souru/', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) 10.991540523s ago: executing program 0 (id=2324): openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000000c0)="aa", 0x1, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 10.245901338s ago: executing program 4 (id=2325): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = dup(r0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r5, &(0x7f00000004c0)=""/185, 0xb9) epoll_pwait(r4, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, 0x0, &(0x7f00000021c0)) accept4$packet(r1, 0x0, 0x0, 0x800) 9.683653084s ago: executing program 0 (id=2326): socket$kcm(0x10, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x86, 0x8000008001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100000000000200a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x800400000bce) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x4000000}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000, @rand_addr=0x64010101}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 9.636594649s ago: executing program 7 (id=2327): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) timerfd_gettime(r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x6e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000004c0), &(0x7f0000000240)=0xfe29) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000200)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@remote, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x1, 0x400, 0x0, 0x26, r2}) 9.310133532s ago: executing program 6 (id=2328): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x7800, 0x8, 0x40, 0x7, {{0x15, 0x4, 0x0, 0x37, 0x54, 0x65, 0x0, 0x4, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@noop, @end, @timestamp_prespec={0x44, 0x3c, 0x33, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@broadcast, 0x4}, {@multicast2, 0x2}, {@private=0xa010102, 0x7fffffff}, {@multicast1, 0xd}, {@local}, {@remote, 0x9}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, &(0x7f00000023c0)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=0x0, @ANYRES64, @ANYBLOB="c0803157dafd5459436e2f81c7d0472848e239f3383cfd42bcb91fb4ffae1f9f0ff4dcb95ade33918ffb15046a7358c8aea9b723122312323c40b0738779f6910a187d4ffb4f3f570061b62f47f637c62674fd738786dc95bdb2d96ed059f57dfa0eefc38c18464a2f8e6d570ef62b202bd3e4eb97bc59c0949daa436f48b1efe5433f5da7232285d7c5455788f9fe521f021535e6312e0e2d369476822235680f6c081bffdd536edaedc9657c4d830a8303d85d299cd4f4a792ff38980d076f2a07df2f75cf0c56a6872eb412ddffdc455fe9476bbebeb1e599674255879421ba65db5ddac381eddacf17418ae195bb3d839fb202b42e68e808536f1cfdf412de57cee45a7d03cb57a0ce3078b3b117de83ba13310ddfb48ec3f1d1cfa98d9764df23a0ef9d7bb162470e1337a9b3b28337128de91151203b458fafc41a9aceccaa821e3d273b21e936acb04d86e1e00ad6f2983a11c782c998df431738ca8e612646921b320d9871871276b843917e17abf11eee972377d0c4525956f8c7057526be06f8e66a584bd8c88825ddffab1b3f1a1d45b96d2daf0d6116c116bf6a0cbf96e7582d522c704bb0958533b610154be1a9b6d791a6f34128b43961a4bf5ee9acc52bac6d5f903cec0d3e7df70ca68058086d56803e1b72326fac50665464a68644fbd25df7d9bd74c19814095b98e702be14fb3f30dfa678b0702f86e263281773090fdcfdbca038fba2fe75712f44e8632b989e054edf7589700c7a530b9fde1a4be809290064027b196b31bffa44b6c22bf6a8c35333ac54fdf90a76f71272e69ed232a444b7e6db79bf5c3a698cadb4f3d19aa698762dbd180b82a2613c2dcc958f6a0bf1f81aa6145f6113719a197fce1975ca52903b1225d8e3a072f3654cfd2229b372e6c9bccdaec076af2d49d0290b19a699fb4c4f021b6f0ac4988f156d85116e8f653da90cf9dde6de09321e6e34c20fde4aba81ee7bb0b11f050e6dc1fc22c034619837ab6582cf9342d44482856c01fc3a7f5b55ef6ddc50e6ddff2b90db570361cabb68aba3865679db6d7529e18a2d6e34f7e4cd7c18c7a102029c676a1a1ea80bf4fdf43a0ae53c85410fde03848fbbd9d108a96e9f790f745d3238ef448d7c9488666fe9c0b3f5e649d80999eec268a75702ae8deb24d5a29185ace482936b75363692b548fa96c4759bcd3a1bad982603d86ed23b9137700831f79df14666a7a570ca2361261b4f5fda7543f9cee2cae94fa1f6c6f2943a081c4acbd71261a373bbd98b66d885814e5e4e4264f901968ed7687d8d21324b87f7652d02dd45ab99d5e4fc7ae0b631c9263508da066ea854e2d7883e0c259b4e507ccd3497f1c072c47ffac85c1123fd04e574f38586bbef2f726bf8f55148cd2becdeb7dac5c2a538559b881c6a0322b999bd8b6565778cd22815af46ed61349bc85651d5de03b92a9add9263a94bb9d92e0d5d5b465d4556a2b399f49201b0ed7c3d94c17bc8174e00b6151fd217e1b3b3760ab7bfeb41d9cdc44d66393ae21c350073ac372a3f6b0b0926d22794b78dc5dcc3290b1be666bd741970120ace8478caf6bce693c9014edf017f799a9ca1d0fcebd1bcef18b1eb1d2f0004369b47e49e445ed05ee4558061f10ba95766ffc50e1e0bbeb5a06dc55082794b6c202090f3871be0dd104e33a2e619cfe63f59920bc5790a03c4a558865db60e83c7599140f9d32015bcb343eaf9d926a46a68c64620c4d203e64ba7206dbbc25e211f2d98e7d94e43889eefe91a253f2272d9449277b22614c4c1a85f5f21ab8071a8cb074df0a20e8385af0ef4b9790bd0695ed7359b8f5ff234db4bfd9772160db5fcef42bef47d08aad97146dbc8d68336597d39ce41d61e07bbdd06fbfdd143718f0a7a6c817b54ec7c541bc742a6b00cfdc02ee1e02e0e0ce723d1c8d52a311ef7dffa6c340019daa1c75a55f55419ac88fc59b295b79c7370ee5810f3d7cdd490148967654556889babd124e74e0ea4e1d361ad05276092e36c86c7ad3adc12e447a18981f5ec33230e4a193dc007ed5baba01f42e3b67e206e331e8ad71836f684522c21b0748ec9b9ac79066d5d3c9c8b0fdc9d0a645eaa09dc8e142fc1b4339d59816746bfbfd60ef9f23d10bc70629291e970dc1af01b7c0a4c71c71ad7064770bd5ebfeaa9bd2240155275a7a6b0a50dbc99f6f05a0dee1b1955c85c4c37926e265c0223712fa3a80ebb6f1bf22aef74c979e3ad7b15d167982496026f141158fe91e60f73a244fa70fe208bdd2f1a70dfe30d4d7c012c9a082910e74bc00be322289a58a9ea7a877a138e045f2c543b41c97957bb8d3abbed56a64196e91cbed57aad069c29850e2a28d58b804b9bcc4953a61e234ce8120b5fca6b44a5547f98d844936b9b093fae5b65c8a2eea771ada4675ca9a83c7e5d230c457fb8516786b30be5045e21eeadb92679e833e1560e1b39625facf8bab1afa1b542dbe1e9e03a815fe5c09b1485e57a2f86c251a9183708b3850f5987445f5d314d63e9ae72c7802a4e930196d933b020ade3cbc17bc12265432f1ad84f991acf38e7a9792ed155aa344507c741bdbf3022935756412a424ecb929c5f6a6cdc8e488b11c9c20c02829c6430f7a6ba976f46028cc37e1356a7b7d30165a6f070c857e47c0b12ee6793fd8af5e51414f9e09f5097ea256bd7cf34f5e711f9912044004e6e132fbfd124312cd41584c4dadc9b1423ebffac99b4c1792f800bfc6b471b8bc6074dc5a7929a7767b054b10fd66905d33660c6e7517a8f6dd115d88c83bf82e913a5adbe41fd70029273b13db8ce7c1204fd3e4f7f55f2b732e28486fa09fdbd49bb5372c1fd0b7d1da200be4596153c8fef079a1442514663c207008c13ce64db2a0d233bd7935a72c505664b8cf90308f0557dff4bbcc62020b14be7163135f7e22b35b12efddc93dfbcf7576bc3f785173836b4553e2196db707f7463c0ecd9be87e90225d98b8f9c7b284cf1da1dfb399f27f39d196e7c686dd56f758e734a223efeff64da1417b81b971778fdf238a409dec2a1eba50f3adc70461831bebe47278f49fed79ef5cd68ac136fefc2388d136c4c3902946d3a1bc64af1ac6c217ce6bc0d570674a07f2b88487635fba6ea5b122394c6126fdaccf38739b89adf1bfb1f903bf517e8e5a4dcecb014bd2adc1f0579cf372cf0e91af3d3a1eb3be77eaa44eba8da00e25ab70f0645a4c9079c6272960de61e887c6d6b02eaea95d467349a06b04c91f4be2788647bba3f11809169cce31311b795d14be603de618abbfc3a825d6caa74d9462a341af88744131c8d955d26b88e42807239324dadd7c099981b74f153a77c55a00536b4690510c63b6e117e61d0eef9ac76b0da898fc2b9ca75869fb048af198e8252414fee0b45a3412e7fb363b1d2ead0fe2176210afab31207a9b2e7cdfa0c93d96f8800e889755bdc9a360861aaf7f59f81b8"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x9) 8.007518854s ago: executing program 4 (id=2329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000040)=0x4, 0x4) 7.421481973s ago: executing program 6 (id=2330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000002c0)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='hfs\x00', 0x800040, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000440)={0x12, 0xb, 0xfa00, {0x0, 0xffffffffffffffff, r3}}, 0x18) 7.295761529s ago: executing program 7 (id=2331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setrlimit(0x1b, &(0x7f0000000300)={0x1, 0x4}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000008006966623000000000000000000000000064756d6d79300000000000000000000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000182c20000000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000007f0000e1ab14140000000000000000000084110400000000000000000000000041554449540000bcb92dfff07fca000000466ef58f5dc8438b000000000000000800"/376]}, 0x1f0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006001e0089e9aaa911d7c2290f0086dd1327c9167c642c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x28000000, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = accept$alg(r4, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000004180), 0xff77) 6.344018085s ago: executing program 7 (id=2332): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008002300", @ANYRES32], 0x30}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000002380)={0x398, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, [@NL80211_ATTR_NAN_FUNC={0xbc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xb6, 0xb, "d286a43283c53b05f12365d290636a2da8d7a85cf56c20773e1688946fd8b0f9de1c4d75cea88df8b756e4b5007a3ab64fface44c71554421c2417765b887bbcdb6516d00c3951ae28c6a258825dfbc2ae9d4e0068ccb531fe12cf7925e558b51ef96f2c442e9b696381b75d8c64aaebc8dac73d6c28348ea5bb57f9dc70ab9b0273fcf47e6f41f760c6715291f8e1eb3e2d843d83eaa3c8515eccc88e90809d222e75e7b5f59490c44a2662247af25b1668"}]}, @NL80211_ATTR_NAN_FUNC={0x2b0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7a7c62a6a657"}, @NL80211_NAN_FUNC_SRF={0x170, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xfb, 0xb, "e9fd17594ab9e9e7de056a82cb33295784d51ae876225ac8275c97519a5d1eb73548fab8696cd606937981997a1ab10fba55a9c5e01077bce83fdf483a59f0e2c210a867916fbeef7a89178bb8a132e3083e220a03df76f810b77ac3a1ecdc62beef345764d7209abe1548858602cfa211d8eb8e0fc3f954d68b31f4698126db9acafda89d10ec3c3a45ea83424185bf53bb944111036a64938ec8ad4bd8a57c1ef0cc2466e926d2357d1886e27d3088af41f2cf387e3ebed702ff7d6655f6025eeb5885fa96060a37187823a6f621be263afd69272e98db088b8cee64ebddaf32b243735f111af9e6fba925c094cd77c9394707b633e9"}]}, @NL80211_ATTR_NAN_FUNC={0x4}]}, 0x398}, 0x1, 0x0, 0x0, 0x20000045}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r8, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x79, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0f10f3ecb3"], 0x8) syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f000000b100)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="2da97369bd5bd2a022e4fea628166430fb7a26dae38cd827ad7f8cff5d2246bdd2cc0e8101b9631aa9db6c88c4ea13a8fbc6a23601da47409ecba43e29d90521e4a37f2f57fa7ce2366b5b89b5b9529791fb53b47e83c2014cd5779926a7dd8a0de70a50b2baf658b32d6d108efa8d3b6101762c8308a5b3351fd14516c9c33e6c6bd15e956f84604a2717d3853b39df8186d0a3930803bc325b8ebb315aff3e39aa98ba22dffb1b6a7c1acafedad4ef237de4595f77f679e98e", @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x1, 0x1cd, &(0x7f0000002180)="$eJzs282O0lAYxvGnBdqZ8ftr48rEhW6kypDo7JwL8AbcTWbqhFjUiBuIibLxPrwMd96JNwCJXkFNSwkUaSltaEH+v2Sm75z06TmTzNs5JSAAe+tm+N2QoUZY+b7/5YGk168k1VOjVikLBLAxvjFp+iTW8uGD9BSA3VD7vXzcTmzwH9PC5C4A7LLxaS3cB/w0pF9/Pp+Poq9Gxv3D+NSUatEPc3lLOsiUHxrh8X5dGs3lbcUvYHxN2L98n+QfKZ4/zLr+aP6jhfzRqmDwyBQYmuHh8cN4/oqkq5KuSbou6Ub0rHVL0u0l818szH8v4/qBIoK/vmZsJFPbxvPNlBPs9HzQPW86nvt0rVlnGlH+Wc68FeVbBfPHOfN2lG+ev/cuEs96mfPqQDrzn/5fz8r+TzR7+bBI/9cL9j+wz3r9wdszz3M/rl+YuVIU+1JMN5LBSHCbXp36VvmayysOt2MZyUXFNyYAG+d86n5wev3Bk0737NK9dN+12icv2set9vMTJ9yXO0V25wC22eyffrbz098SBAAAAAAAAAAAAAAAqnBH0t2qFwEAAACgFGV8nKjq3xEAAAAAAAAAAAAAAAAAAAD4X/wNAAD//7bVPAk=") r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80000, 0x30) getdents64(r9, 0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001180)='./bus\x00') 5.317105547s ago: executing program 6 (id=2333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setrlimit(0x1b, &(0x7f0000000300)={0x1, 0x4}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006001e0089e9aaa911d7c2290f0086dd1327c9167c642c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x28000000, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = accept$alg(r4, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000004180), 0xff77) 4.140249395s ago: executing program 7 (id=2334): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x80) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) write$9p(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$nl_route(r2, 0x0, 0x2011) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000280)={0x0, 0x3938700}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd601927f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000240), 0x1004) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.664145055s ago: executing program 6 (id=2335): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket$inet_sctp(0x2, 0x400000000001, 0x84) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 3.137423551s ago: executing program 4 (id=2336): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x80) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) write$9p(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$nl_route(r2, 0x0, 0x2011) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000280)={0x0, 0x3938700}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd601927f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000240), 0x1004) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.910190573s ago: executing program 7 (id=2337): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$netlink(0x10, 0x3, 0x12) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x3, @any, 0x8, 0x1}, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x1d, r4, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x1de) close(0xffffffffffffffff) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}, 0x9, 0x0, 0x8, 0x8, r1, r1, 0x9}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='ntfs3\x00', 0x1010400, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.200559365s ago: executing program 6 (id=2338): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045009, &(0x7f0000000040)) 1.161100294s ago: executing program 4 (id=2339): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = dup(r0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, 0x0) read$char_usb(r5, &(0x7f00000004c0)=""/185, 0xb9) epoll_pwait(r4, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, 0x0, &(0x7f00000021c0)) accept4$packet(r1, 0x0, 0x0, 0x800) 3.733626ms ago: executing program 7 (id=2340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYBLOB="21003300d080", @ANYRES8=r0], 0x40}}, 0x0) 0s ago: executing program 6 (id=2341): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) timerfd_gettime(r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x6e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000004c0), &(0x7f0000000240)=0xfe29) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000200)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@remote, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x1, 0x400, 0x0, 0x26, r2}) kernel console output (not intermixed with test programs): eed USB device number 9 using dummy_hcd [ 1342.119961][T12090] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1342.879202][ T9] IPVS: starting estimator thread 0... [ 1342.920672][T12090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.992590][T15240] IPVS: using max 19 ests per chain, 45600 per kthread [ 1343.026732][T12090] usb 5-1: config 0 descriptor?? [ 1343.040621][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1643'. [ 1343.915110][T12090] playstation 0003:054C:0DF2.0007: item fetching failed at offset 2/5 [ 1343.923918][T12090] playstation 0003:054C:0DF2.0007: Parse failed [ 1343.930282][T12090] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -22 [ 1343.936299][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1645'. [ 1345.880370][ T9] usb 5-1: USB disconnect, device number 9 [ 1355.831312][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1667'. [ 1356.535998][T15355] fuse: Bad value for 'user_id' [ 1356.541002][T15355] fuse: Bad value for 'user_id' [ 1356.886487][T15351] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1665'. [ 1356.896650][T15351] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1665'. [ 1361.085804][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.156613][T15458] bio_check_eod: 14 callbacks suppressed [ 1369.156667][T15458] syz.4.1687: attempt to access beyond end of device [ 1369.156667][T15458] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1369.905627][T15458] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1369.911832][T15458] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1369.917881][T15458] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1369.923911][T15458] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1370.354052][T15458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1370.360210][T15458] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1370.526518][T15458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1370.532816][T15458] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1370.672120][T15458] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1371.379525][ T9658] Bluetooth: hci6: command 0x0c1a tx timeout [ 1371.641460][T15483] syz.4.1689: attempt to access beyond end of device [ 1371.641460][T15483] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1372.397265][ T9658] Bluetooth: hci7: command 0x0406 tx timeout [ 1372.403515][ T9658] Bluetooth: hci4: command 0x0419 tx timeout [ 1372.576826][ T9658] Bluetooth: hci1: command 0x0406 tx timeout [ 1372.583654][ T9658] Bluetooth: hci2: command 0x0c1a tx timeout [ 1373.259734][T15483] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1373.268103][T15483] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1373.274223][T15483] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1373.281096][T15483] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1373.287129][T15483] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1373.912434][ T9658] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1373.922080][ T9658] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1373.930155][ T9658] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1373.938020][ T9658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1373.965316][ T9658] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1373.974177][ T9658] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1376.697263][ T8906] Bluetooth: hci1: command 0x0406 tx timeout [ 1376.703412][ T8906] Bluetooth: hci7: command 0x0406 tx timeout [ 1376.710133][ T8906] Bluetooth: hci4: command 0x0419 tx timeout [ 1376.716166][ T8906] Bluetooth: hci6: command 0x0c1a tx timeout [ 1376.722827][ T8906] Bluetooth: hci3: command tx timeout [ 1376.783487][ T9658] Bluetooth: hci2: command 0x0c1a tx timeout [ 1378.980305][T15523] syz.0.1697: attempt to access beyond end of device [ 1378.980305][T15523] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1380.313263][T15509] Bluetooth: hci3: command tx timeout [ 1380.320011][T15509] Bluetooth: hci2: command 0x0c1a tx timeout [ 1380.542688][T15524] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1380.548742][T15524] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1380.556427][T15524] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1380.562683][T15524] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1380.568717][T15524] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1380.574871][T15524] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1380.580929][T15524] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1380.752004][T15524] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1381.390406][T15539] binder: BINDER_SET_CONTEXT_MGR already set [ 1381.396545][T15539] binder: 15538:15539 ioctl 4018620d 20004a80 returned -16 [ 1382.581131][T15509] Bluetooth: hci3: command 0x0419 tx timeout [ 1382.587217][T15509] Bluetooth: hci2: command 0x0c1a tx timeout [ 1382.593497][T15509] Bluetooth: hci1: command 0x0406 tx timeout [ 1382.600745][T15509] Bluetooth: hci7: command 0x0406 tx timeout [ 1382.606746][T15509] Bluetooth: hci4: command 0x0419 tx timeout [ 1382.612923][T15509] Bluetooth: hci6: command 0x0c1a tx timeout [ 1384.076154][T15485] chnl_net:caif_netlink_parms(): no params data found [ 1384.412614][T15571] syz.7.1707: attempt to access beyond end of device [ 1384.412614][T15571] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1384.429759][T15571] syz.7.1707: attempt to access beyond end of device [ 1384.429759][T15571] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1384.447472][T15571] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1384.460610][T15571] syz.7.1707: attempt to access beyond end of device [ 1384.460610][T15571] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1384.475925][T15571] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1384.511962][T15571] syz.7.1707: attempt to access beyond end of device [ 1384.511962][T15571] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1384.528943][T15571] syz.7.1707: attempt to access beyond end of device [ 1384.528943][T15571] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1384.545481][T15571] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1384.558607][T15571] syz.7.1707: attempt to access beyond end of device [ 1384.558607][T15571] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1384.572892][T15571] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1384.586788][T15571] syz.7.1707: attempt to access beyond end of device [ 1384.586788][T15571] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1384.601025][T15571] syz.7.1707: attempt to access beyond end of device [ 1384.601025][T15571] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1384.614350][T15571] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1384.629661][T15571] syz.7.1707: attempt to access beyond end of device [ 1384.629661][T15571] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1384.643385][T15571] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1384.661912][T15571] syz.7.1707: attempt to access beyond end of device [ 1384.661912][T15571] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1384.676561][T15571] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1384.687708][T15571] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1384.697573][T15571] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 1384.706358][ T5843] Bluetooth: hci3: command 0x0419 tx timeout [ 1385.530232][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1708'. [ 1385.799210][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1386.739290][ T5843] Bluetooth: hci3: command 0x0419 tx timeout [ 1386.919241][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1386.939220][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.968569][ T9] usb 1-1: config 0 descriptor?? [ 1387.835328][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1387.842047][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1387.917648][ T9] usb 1-1: USB disconnect, device number 10 [ 1389.043553][ T5843] Bluetooth: hci3: command 0x0419 tx timeout [ 1390.136390][T15485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.149808][T15485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.157014][T15485] bridge_slave_0: entered allmulticast mode [ 1390.173596][T15485] bridge_slave_0: entered promiscuous mode [ 1391.166065][ T138] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.043293][ T138] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.126991][ T5843] Bluetooth: hci7: command 0x0406 tx timeout [ 1394.879277][T15485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.038643][T15485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.050837][T15485] bridge_slave_1: entered allmulticast mode [ 1395.057965][T15485] bridge_slave_1: entered promiscuous mode [ 1395.344823][ T138] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.960110][T12090] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1397.419874][T12090] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1397.713621][T12090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.958824][T12090] usb 1-1: config 0 descriptor?? [ 1397.993743][ T138] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.784298][T12090] usbhid 1-1:0.0: can't add hid device: -71 [ 1399.163412][T15485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.174943][T12090] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1399.229844][T15485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.253347][T12090] usb 1-1: USB disconnect, device number 11 [ 1400.061446][T15485] team0: Port device team_slave_0 added [ 1400.085893][T15485] team0: Port device team_slave_1 added [ 1401.067103][T15704] bio_check_eod: 2 callbacks suppressed [ 1401.067120][T15704] syz.0.1734: attempt to access beyond end of device [ 1401.067120][T15704] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1401.086627][T15704] syz.0.1734: attempt to access beyond end of device [ 1401.086627][T15704] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1401.099556][T15704] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1401.109252][T15704] syz.0.1734: attempt to access beyond end of device [ 1401.109252][T15704] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1401.122176][T15704] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1401.133179][T15704] syz.0.1734: attempt to access beyond end of device [ 1401.133179][T15704] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1401.146215][T15704] syz.0.1734: attempt to access beyond end of device [ 1401.146215][T15704] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1401.159158][T15704] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1401.168744][T15704] syz.0.1734: attempt to access beyond end of device [ 1401.168744][T15704] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1401.181935][T15704] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1401.191828][T15704] syz.0.1734: attempt to access beyond end of device [ 1401.191828][T15704] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1401.204856][T15704] syz.0.1734: attempt to access beyond end of device [ 1401.204856][T15704] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1401.217930][T15704] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1401.227645][T15704] syz.0.1734: attempt to access beyond end of device [ 1401.227645][T15704] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1401.241637][T15704] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1401.251561][T15704] syz.0.1734: attempt to access beyond end of device [ 1401.251561][T15704] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1401.264581][T15704] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1401.274354][T15704] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1401.284057][T15704] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1401.551153][T15707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1737'. [ 1401.609812][T15485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.277457][T15485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1402.304912][T15485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1402.339130][T15485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1402.346145][T15485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1402.387658][T15485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1404.189773][ T138] bridge_slave_1: left allmulticast mode [ 1404.195609][ T138] bridge_slave_1: left promiscuous mode [ 1404.202160][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.471475][T15729] ntfs3(nbd0): try to read out of volume at offset 0x0 [ 1405.180140][ T138] bridge_slave_0: left allmulticast mode [ 1405.185844][ T138] bridge_slave_0: left promiscuous mode [ 1405.199657][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.659360][ T5895] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1408.865766][ T5895] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1408.893522][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.981246][ T5895] usb 5-1: config 0 descriptor?? [ 1409.274031][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.295159][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.326289][ T138] bond0 (unregistering): Released all slaves [ 1409.472169][ T5895] playstation 0003:054C:0DF2.0008: item fetching failed at offset 2/5 [ 1409.480981][ T5895] playstation 0003:054C:0DF2.0008: Parse failed [ 1409.487592][ T5895] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -22 [ 1410.556683][T15485] hsr_slave_0: entered promiscuous mode [ 1410.663999][T15485] hsr_slave_1: entered promiscuous mode [ 1410.742237][T15765] bio_check_eod: 2 callbacks suppressed [ 1410.742254][T15765] syz.6.1747: attempt to access beyond end of device [ 1410.742254][T15765] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1410.761455][T15765] syz.6.1747: attempt to access beyond end of device [ 1410.761455][T15765] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1410.774383][T15765] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1410.784058][T15765] syz.6.1747: attempt to access beyond end of device [ 1410.784058][T15765] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1410.796971][T15765] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1410.807035][T15765] syz.6.1747: attempt to access beyond end of device [ 1410.807035][T15765] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1410.820459][T15765] syz.6.1747: attempt to access beyond end of device [ 1410.820459][T15765] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1410.833438][T15765] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1410.843079][T15765] syz.6.1747: attempt to access beyond end of device [ 1410.843079][T15765] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1410.856161][T15765] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1410.866611][T15765] syz.6.1747: attempt to access beyond end of device [ 1410.866611][T15765] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1410.879529][T15765] syz.6.1747: attempt to access beyond end of device [ 1410.879529][T15765] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1410.892528][T15765] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1410.902134][T15765] syz.6.1747: attempt to access beyond end of device [ 1410.902134][T15765] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1410.915116][T15765] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1410.924999][T15765] syz.6.1747: attempt to access beyond end of device [ 1410.924999][T15765] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1410.938020][T15765] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1410.947622][T15765] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1410.957113][T15765] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1411.011463][T15485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1411.033709][T15485] Cannot create hsr debugfs directory [ 1413.654408][T13568] usb 5-1: USB disconnect, device number 10 [ 1415.147918][ T138] hsr_slave_0: left promiscuous mode [ 1415.175094][ T138] hsr_slave_1: left promiscuous mode [ 1415.198253][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.224500][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.251590][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.279187][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.387747][ T138] veth1_macvtap: left promiscuous mode [ 1415.413804][ T138] veth0_macvtap: left promiscuous mode [ 1415.442691][ T138] veth1_vlan: left promiscuous mode [ 1415.471635][ T138] veth0_vlan: left promiscuous mode [ 1417.951392][T15821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1759'. [ 1418.216705][ T138] team0 (unregistering): Port device team_slave_1 removed [ 1418.938321][ T138] team0 (unregistering): Port device team_slave_0 removed [ 1419.674983][T15818] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1758'. [ 1419.699440][T15819] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1758'. [ 1420.277065][T13568] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1421.408208][T13568] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1421.419510][T13568] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1421.951492][T13568] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 1421.962665][T13568] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1421.977153][T13568] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1421.987546][T13568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1421.996250][T13568] usb 5-1: SerialNumber: syz [ 1422.905374][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.935176][T15485] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1422.998927][T15485] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1423.934303][T13568] usb 5-1: 0:2 : does not exist [ 1423.939568][T13568] usb 5-1: unit 5 not found! [ 1424.652467][T13568] usb 5-1: USB disconnect, device number 11 [ 1424.905720][T15485] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1425.955680][T15863] udevd[15863]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1428.036315][T15485] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1428.398290][ T138] IPVS: stop unused estimator thread 0... [ 1428.560248][T15485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.171966][T15485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.437118][T15908] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1429.507946][T15908] CPU: 1 UID: 0 PID: 15908 Comm: syz.2.1772 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1429.519027][T15908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1429.529196][T15908] Call Trace: [ 1429.532499][T15908] [ 1429.535455][T15908] dump_stack_lvl+0x241/0x360 [ 1429.540181][T15908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1429.545419][T15908] ? __pfx__printk+0x10/0x10 [ 1429.550045][T15908] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.555710][T15908] ? __kmalloc_cache_noprof+0x243/0x390 [ 1429.561292][T15908] ? sysfs_warn_dup+0x51/0xa0 [ 1429.566089][T15908] sysfs_warn_dup+0x8e/0xa0 [ 1429.570619][T15908] sysfs_do_create_link_sd+0xbe/0x110 [ 1429.576020][T15908] device_add_class_symlinks+0x1c5/0x250 [ 1429.581688][T15908] device_add+0x553/0xbf0 [ 1429.586056][T15908] wiphy_register+0x1a58/0x27b0 [ 1429.590955][T15908] ? __pfx_wiphy_register+0x10/0x10 [ 1429.596177][T15908] ? minstrel_ht_alloc+0x72b/0x860 [ 1429.601328][T15908] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 1429.607615][T15908] ieee80211_register_hw+0x30fb/0x3e10 [ 1429.613190][T15908] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1429.619568][T15908] ? ieee80211_register_hw+0x1501/0x3e10 [ 1429.625235][T15908] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1429.631688][T15908] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.637350][T15908] ? __asan_memset+0x23/0x50 [ 1429.641970][T15908] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.647629][T15908] ? __hrtimer_init+0x170/0x250 [ 1429.652523][T15908] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 1429.658294][T15908] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1429.664468][T15908] ? kstrndup+0x5c/0xb0 [ 1429.668649][T15908] ? __asan_memcpy+0x40/0x70 [ 1429.673258][T15908] hwsim_new_radio_nl+0xece/0x2290 [ 1429.678403][T15908] ? __pfx___nla_validate_parse+0x10/0x10 [ 1429.684161][T15908] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1429.689759][T15908] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.695404][T15908] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.701057][T15908] genl_rcv_msg+0xb16/0xec0 [ 1429.705599][T15908] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1429.710685][T15908] ? __pfx_lock_acquire+0x10/0x10 [ 1429.715725][T15908] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1429.721291][T15908] ? __pfx___might_resched+0x10/0x10 [ 1429.726598][T15908] netlink_rcv_skb+0x1e5/0x430 [ 1429.731375][T15908] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1429.736420][T15908] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1429.741849][T15908] genl_rcv+0x28/0x40 [ 1429.745868][T15908] netlink_unicast+0x7f8/0x990 [ 1429.747331][T15918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1774'. [ 1429.750841][T15908] ? __pfx_netlink_unicast+0x10/0x10 [ 1429.765162][T15908] ? __virt_addr_valid+0x45f/0x530 [ 1429.770313][T15908] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.775975][T15908] ? __phys_addr_symbol+0x2f/0x70 [ 1429.781035][T15908] ? __check_object_size+0x47a/0x730 [ 1429.786360][T15908] netlink_sendmsg+0x8e4/0xcb0 [ 1429.791255][T15908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1429.796577][T15908] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.802270][T15908] ? aa_sock_msg_perm+0x91/0x160 [ 1429.807241][T15908] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.812908][T15908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1429.818310][T15908] __sock_sendmsg+0x223/0x270 [ 1429.823043][T15908] ____sys_sendmsg+0x52a/0x7e0 [ 1429.827854][T15908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1429.833176][T15908] ? __fget_files+0x2a/0x410 [ 1429.837811][T15908] ? __fget_files+0x2a/0x410 [ 1429.842452][T15908] __sys_sendmsg+0x269/0x350 [ 1429.847078][T15908] ? __pfx_futex_wake+0x10/0x10 [ 1429.851976][T15908] ? __pfx___sys_sendmsg+0x10/0x10 [ 1429.857177][T15908] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1429.863628][T15908] ? do_syscall_64+0x100/0x230 [ 1429.868442][T15908] ? do_syscall_64+0xb6/0x230 [ 1429.873163][T15908] do_syscall_64+0xf3/0x230 [ 1429.877728][T15908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.883663][T15908] RIP: 0033:0x7f41b0185d19 [ 1429.888104][T15908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1429.907737][T15908] RSP: 002b:00007f41b0f3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1429.916191][T15908] RAX: ffffffffffffffda RBX: 00007f41b0376160 RCX: 00007f41b0185d19 [ 1429.924197][T15908] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000008 [ 1429.932195][T15908] RBP: 00007f41b0201a20 R08: 0000000000000000 R09: 0000000000000000 [ 1429.940214][T15908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1429.948310][T15908] R13: 0000000000000000 R14: 00007f41b0376160 R15: 00007ffccdc33158 [ 1429.956323][T15908] [ 1433.879992][ T9658] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1433.912303][ T9658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1433.932801][ T9658] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1433.943845][ T9658] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1433.951888][ T9658] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1433.962172][ T9658] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1434.649386][T15954] kAFS: No cell specified [ 1436.112057][ T9658] Bluetooth: hci2: command tx timeout [ 1436.430699][T15953] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1436.437431][T15953] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1436.443840][T15953] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1436.450107][T15953] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1436.456148][T15953] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1436.463074][T15953] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1437.448089][T15953] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1437.588375][T15967] Trying to write to read-only block-device nullb0 [ 1438.079398][T15979] bio_check_eod: 2 callbacks suppressed [ 1438.079450][T15979] syz.0.1784: attempt to access beyond end of device [ 1438.079450][T15979] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1438.400372][T15979] syz.0.1784: attempt to access beyond end of device [ 1438.400372][T15979] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1438.418355][T15979] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1438.449552][T15979] syz.0.1784: attempt to access beyond end of device [ 1438.449552][T15979] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1438.496529][T15979] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1438.512087][T15509] Bluetooth: hci2: command 0x040f tx timeout [ 1438.522692][ T9658] Bluetooth: hci1: command 0x0406 tx timeout [ 1438.529286][T15509] Bluetooth: hci7: command 0x0406 tx timeout [ 1438.535424][ T9658] Bluetooth: hci4: command 0x0419 tx timeout [ 1438.541845][T15509] Bluetooth: hci6: command 0x0c1a tx timeout [ 1438.570017][T15979] syz.0.1784: attempt to access beyond end of device [ 1438.570017][T15979] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1438.927383][T15979] syz.0.1784: attempt to access beyond end of device [ 1438.927383][T15979] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1439.164405][T15979] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1439.533236][T15979] syz.0.1784: attempt to access beyond end of device [ 1439.533236][T15979] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1439.639346][T15979] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1439.668462][T15979] syz.0.1784: attempt to access beyond end of device [ 1439.668462][T15979] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1439.731131][T15979] syz.0.1784: attempt to access beyond end of device [ 1439.731131][T15979] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1439.808627][T15979] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1439.827642][T15993] binder: 15992:15993 ioctl 4018620d 0 returned -22 [ 1439.849480][T15979] syz.0.1784: attempt to access beyond end of device [ 1439.849480][T15979] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1439.875018][T15979] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1439.888582][T15938] chnl_net:caif_netlink_parms(): no params data found [ 1439.934682][T15979] syz.0.1784: attempt to access beyond end of device [ 1439.934682][T15979] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1439.948520][T15979] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1439.958586][T15979] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1439.968119][T15979] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1440.775504][ T5843] Bluetooth: hci2: command 0x040f tx timeout [ 1441.472399][T16017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1791'. [ 1442.102331][T16033] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1442.899568][ T5843] Bluetooth: hci2: command 0x040f tx timeout [ 1443.532981][T16030] bio_check_eod: 2 callbacks suppressed [ 1443.533003][T16030] syz.4.1795: attempt to access beyond end of device [ 1443.533003][T16030] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1443.552178][T16030] syz.4.1795: attempt to access beyond end of device [ 1443.552178][T16030] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1443.565209][T16030] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1443.575060][T16030] syz.4.1795: attempt to access beyond end of device [ 1443.575060][T16030] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1443.588000][T16030] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1443.598217][T16030] syz.4.1795: attempt to access beyond end of device [ 1443.598217][T16030] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1443.611261][T16030] syz.4.1795: attempt to access beyond end of device [ 1443.611261][T16030] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1443.624560][T16030] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1443.635050][T16030] syz.4.1795: attempt to access beyond end of device [ 1443.635050][T16030] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1443.648182][T16030] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1443.658681][T16030] syz.4.1795: attempt to access beyond end of device [ 1443.658681][T16030] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1443.671684][T16030] syz.4.1795: attempt to access beyond end of device [ 1443.671684][T16030] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1443.684774][T16030] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1443.694407][T16030] syz.4.1795: attempt to access beyond end of device [ 1443.694407][T16030] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1443.707544][T16030] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1443.717511][T16030] syz.4.1795: attempt to access beyond end of device [ 1443.717511][T16030] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1443.731157][T16030] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1443.740960][T16030] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1443.750497][T16030] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1444.707003][T15938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.839766][T15938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.870247][T16055] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1444.876801][T16055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1444.884636][T16055] vhci_hcd vhci_hcd.0: Device attached [ 1444.987222][T15938] bridge_slave_0: entered allmulticast mode [ 1445.008840][T16056] vhci_hcd: connection closed [ 1445.018985][ T73] vhci_hcd: stop threads [ 1445.038951][T15938] bridge_slave_0: entered promiscuous mode [ 1445.519108][ T5843] Bluetooth: hci2: command 0x040f tx timeout [ 1445.564841][ T73] vhci_hcd: release socket [ 1445.576889][ T73] vhci_hcd: disconnect device [ 1445.583250][T15938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.652888][T15938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.712308][T15938] bridge_slave_1: entered allmulticast mode [ 1445.745011][T15938] bridge_slave_1: entered promiscuous mode [ 1446.087224][T15938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.120119][T15938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.365154][T16077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1447.562489][T16077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1447.617839][ T5843] Bluetooth: hci2: command 0x040f tx timeout [ 1447.817956][T16077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1447.876165][T16077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1447.910287][T16077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1447.920037][T16077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1447.931486][T16077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1448.028202][T16077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1448.071578][T16077] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1448.206250][T15938] team0: Port device team_slave_0 added [ 1448.222868][ T1138] bridge_slave_1: left allmulticast mode [ 1448.228891][ T1138] bridge_slave_1: left promiscuous mode [ 1448.241463][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.092943][ T1138] bridge_slave_0: left allmulticast mode [ 1449.098652][ T1138] bridge_slave_0: left promiscuous mode [ 1449.125866][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.922221][T16114] bio_check_eod: 14 callbacks suppressed [ 1450.922264][T16114] syz.6.1810: attempt to access beyond end of device [ 1450.922264][T16114] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1450.942361][T16114] syz.6.1810: attempt to access beyond end of device [ 1450.942361][T16114] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1450.956626][T16114] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1450.967083][T16114] syz.6.1810: attempt to access beyond end of device [ 1450.967083][T16114] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1450.995188][T16114] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1451.065717][T16114] syz.6.1810: attempt to access beyond end of device [ 1451.065717][T16114] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1451.082578][T16114] syz.6.1810: attempt to access beyond end of device [ 1451.082578][T16114] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1451.108229][T16114] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1451.143747][T16114] syz.6.1810: attempt to access beyond end of device [ 1451.143747][T16114] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1451.158367][T16114] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1451.182798][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1451.199312][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1451.214384][T16114] syz.6.1810: attempt to access beyond end of device [ 1451.214384][T16114] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1451.232841][ T1138] bond0 (unregistering): Released all slaves [ 1451.261588][T16114] syz.6.1810: attempt to access beyond end of device [ 1451.261588][T16114] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1451.359399][T15938] team0: Port device team_slave_1 added [ 1451.389409][T16114] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1451.400218][T16114] syz.6.1810: attempt to access beyond end of device [ 1451.400218][T16114] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1451.416198][T16114] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1451.427219][T16114] syz.6.1810: attempt to access beyond end of device [ 1451.427219][T16114] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1451.440935][T16114] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1451.451087][T16114] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1451.461322][T16114] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1451.837649][T15938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1451.864667][T15938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1451.890613][ C1] vkms_vblank_simulate: vblank timer overrun [ 1452.236925][T16122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1813'. [ 1452.250579][T15938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.279925][T15938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.286999][T15938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.313362][T15938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1452.344195][T16125] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1813'. [ 1452.412030][T16127] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1452.480547][T16127] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1452.501213][T16127] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1452.531721][T16127] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1452.543704][T16127] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1452.554463][T16127] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1452.564838][T16127] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1452.575101][T16127] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1452.584725][T16127] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1452.827486][ T1138] hsr_slave_0: left promiscuous mode [ 1452.858402][ T1138] hsr_slave_1: left promiscuous mode [ 1455.216504][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1455.902753][T16162] ntfs3(nbd6): try to read out of volume at offset 0x0 [ 1456.860806][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.961650][T16176] fuse: Unknown parameter 'user_i00000000000000000000' [ 1460.083731][T16183] bio_check_eod: 14 callbacks suppressed [ 1460.083749][T16183] syz.0.1824: attempt to access beyond end of device [ 1460.083749][T16183] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1460.102713][T16183] syz.0.1824: attempt to access beyond end of device [ 1460.102713][T16183] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1460.116175][T16183] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1460.125937][T16183] syz.0.1824: attempt to access beyond end of device [ 1460.125937][T16183] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1460.139049][T16183] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1460.149626][T16183] syz.0.1824: attempt to access beyond end of device [ 1460.149626][T16183] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1460.162664][T16183] syz.0.1824: attempt to access beyond end of device [ 1460.162664][T16183] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1460.175630][T16183] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1460.185301][T16183] syz.0.1824: attempt to access beyond end of device [ 1460.185301][T16183] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1460.198409][T16183] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1460.208300][T16183] syz.0.1824: attempt to access beyond end of device [ 1460.208300][T16183] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1460.221914][T16183] syz.0.1824: attempt to access beyond end of device [ 1460.221914][T16183] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1460.234926][T16183] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1460.244557][T16183] syz.0.1824: attempt to access beyond end of device [ 1460.244557][T16183] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1460.257560][T16183] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1460.267698][T16183] syz.0.1824: attempt to access beyond end of device [ 1460.267698][T16183] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1460.280663][T16183] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1460.290277][T16183] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1460.299753][T16183] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1462.023566][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 1462.122064][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 1465.504706][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 1467.709649][T16223] syz.4.1836 (16223) used greatest stack depth: 17904 bytes left [ 1469.540910][T16122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1469.548492][T16122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.572793][T15509] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1469.797389][ T9658] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1469.805603][T16122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1469.815560][ T9658] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1469.823876][T16122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.834005][ T9658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1470.640155][ T9658] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1470.648088][ T9658] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1471.494377][T15938] hsr_slave_0: entered promiscuous mode [ 1471.515460][T15938] hsr_slave_1: entered promiscuous mode [ 1471.596610][T15938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1471.625427][T15938] Cannot create hsr debugfs directory [ 1472.739479][ T9658] Bluetooth: hci3: command tx timeout [ 1474.866334][ T9658] Bluetooth: hci3: command tx timeout [ 1476.969924][ T9658] Bluetooth: hci3: command tx timeout [ 1479.063937][ T9658] Bluetooth: hci3: command tx timeout [ 1480.323290][T16337] ubi: mtd0 is already attached to ubi0 [ 1480.521924][T16238] chnl_net:caif_netlink_parms(): no params data found [ 1481.288308][ T1138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.869835][ T1138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.945018][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.001252][T16238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.299341][T16366] kAFS: No cell specified [ 1484.935777][T16238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.946460][T16238] bridge_slave_0: entered allmulticast mode [ 1484.953582][T16238] bridge_slave_0: entered promiscuous mode [ 1487.336741][ T1138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.381776][T16238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.390221][T16238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.397363][T16238] bridge_slave_1: entered allmulticast mode [ 1487.405175][T16238] bridge_slave_1: entered promiscuous mode [ 1487.670960][T15938] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1487.699526][T16367] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1487.705607][T16367] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1487.711796][T16367] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1487.717852][T16367] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1487.723969][T16367] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1487.729991][T16367] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1488.908620][T16367] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1489.173557][T13570] IPVS: starting estimator thread 0... [ 1489.320201][T16380] IPVS: using max 18 ests per chain, 43200 per kthread [ 1489.816507][ T1138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.010927][ T9658] Bluetooth: hci3: command 0x0c1a tx timeout [ 1490.019262][ T9658] Bluetooth: hci2: command 0x040f tx timeout [ 1490.025453][ T9658] Bluetooth: hci1: command 0x0406 tx timeout [ 1490.033981][ T9658] Bluetooth: hci4: command 0x0419 tx timeout [ 1490.040789][ T9658] Bluetooth: hci6: command 0x0c1a tx timeout [ 1491.260686][T15938] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1491.290523][T15938] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1491.380246][T15938] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1491.568714][T16238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1491.616780][T16238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1492.220600][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 1492.483433][T16416] bio_check_eod: 2 callbacks suppressed [ 1492.483456][T16416] syz.4.1873: attempt to access beyond end of device [ 1492.483456][T16416] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1492.486126][T13568] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 1492.545077][T16416] syz.4.1873: attempt to access beyond end of device [ 1492.545077][T16416] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1492.609199][T16416] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1492.621000][T16416] syz.4.1873: attempt to access beyond end of device [ 1492.621000][T16416] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1492.637177][T16416] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1492.679183][T13568] usb 8-1: device descriptor read/64, error -71 [ 1492.699911][ T1138] bridge_slave_1: left allmulticast mode [ 1492.705740][ T1138] bridge_slave_1: left promiscuous mode [ 1492.713027][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.746509][T16416] syz.4.1873: attempt to access beyond end of device [ 1492.746509][T16416] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1492.761281][ T1138] bridge_slave_0: left allmulticast mode [ 1492.767150][ T1138] bridge_slave_0: left promiscuous mode [ 1492.787582][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.800100][T16416] syz.4.1873: attempt to access beyond end of device [ 1492.800100][T16416] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1492.826339][T16416] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1492.852400][T16416] syz.4.1873: attempt to access beyond end of device [ 1492.852400][T16416] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1492.870917][T16416] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1492.908225][T16416] syz.4.1873: attempt to access beyond end of device [ 1492.908225][T16416] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1492.921502][T13568] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 1492.946389][T16416] syz.4.1873: attempt to access beyond end of device [ 1492.946389][T16416] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1492.962036][T16416] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1492.992977][T16416] syz.4.1873: attempt to access beyond end of device [ 1492.992977][T16416] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1493.008832][T16416] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1493.036003][T16416] syz.4.1873: attempt to access beyond end of device [ 1493.036003][T16416] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1493.066971][T16416] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1493.083912][T13568] usb 8-1: device descriptor read/64, error -71 [ 1493.104545][T16416] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1493.114468][T16416] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1493.284782][T13568] usb usb8-port1: attempt power cycle [ 1493.700887][T13568] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 1494.427829][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 1494.649152][T13568] usb 8-1: device descriptor read/8, error -71 [ 1496.290217][ T9658] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1496.579799][ T9658] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1496.711281][ T9658] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1496.970123][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'. [ 1497.466820][ T9658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1497.475597][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1497.502919][ T9658] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1497.517726][ T9658] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1497.553664][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.602457][ T1138] bond0 (unregistering): Released all slaves [ 1498.965191][T16238] team0: Port device team_slave_0 added [ 1498.982665][T16238] team0: Port device team_slave_1 added [ 1499.018014][T16238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.238058][T16238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.284832][T16238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.342792][T16238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.379179][T16238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.439202][T16238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.619184][ T5843] Bluetooth: hci5: command tx timeout [ 1499.789133][ T5843] Bluetooth: hci4: command 0x0419 tx timeout [ 1502.149303][ T5843] Bluetooth: hci5: command tx timeout [ 1503.540317][T16238] hsr_slave_0: entered promiscuous mode [ 1503.569818][T16238] hsr_slave_1: entered promiscuous mode [ 1503.585672][T16238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1503.599953][T16238] Cannot create hsr debugfs directory [ 1503.834204][ T1138] hsr_slave_0: left promiscuous mode [ 1503.841382][ T1138] hsr_slave_1: left promiscuous mode [ 1503.877604][ T1138] veth1_macvtap: left promiscuous mode [ 1503.883269][ T1138] veth0_macvtap: left promiscuous mode [ 1503.899953][ T1138] veth1_vlan: left promiscuous mode [ 1503.905377][ T1138] veth0_vlan: left promiscuous mode [ 1504.195194][ T9658] Bluetooth: hci5: command tx timeout [ 1504.455698][T16506] kAFS: No cell specified [ 1504.508487][T16506] bio_check_eod: 2 callbacks suppressed [ 1504.508535][T16506] syz.6.1891: attempt to access beyond end of device [ 1504.508535][T16506] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1506.012769][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 1506.185016][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 1506.259649][ T9658] Bluetooth: hci5: command tx timeout [ 1507.111395][T16507] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1507.118641][T16507] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1507.124805][T16507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1507.130955][T16507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1507.137023][T16507] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1507.143140][T16507] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1507.152051][T16507] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1509.849199][ T5843] Bluetooth: hci5: command 0x0c1a tx timeout [ 1509.855469][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 1509.861893][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 1509.867922][ T5843] Bluetooth: hci4: command 0x0419 tx timeout [ 1509.874286][ T5843] Bluetooth: hci6: command 0x0c1a tx timeout [ 1511.937173][T16567] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1511.946848][T16567] CPU: 0 UID: 0 PID: 16567 Comm: syz.0.1900 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1511.957649][T16567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1511.967725][T16567] Call Trace: [ 1511.971019][T16567] [ 1511.973968][T16567] dump_stack_lvl+0x241/0x360 [ 1511.978864][T16567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1511.984088][T16567] ? __pfx__printk+0x10/0x10 [ 1511.988700][T16567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1511.994345][T16567] ? __kmalloc_cache_noprof+0x243/0x390 [ 1511.999918][T16567] ? sysfs_warn_dup+0x51/0xa0 [ 1512.004623][T16567] sysfs_warn_dup+0x8e/0xa0 [ 1512.008732][ T9658] Bluetooth: hci5: command 0x0c1a tx timeout [ 1512.009124][T16567] sysfs_do_create_link_sd+0xbe/0x110 [ 1512.009163][T16567] device_add_class_symlinks+0x1c5/0x250 [ 1512.026129][T16567] device_add+0x553/0xbf0 [ 1512.030484][T16567] wiphy_register+0x1a58/0x27b0 [ 1512.035365][T16567] ? __pfx_wiphy_register+0x10/0x10 [ 1512.040588][T16567] ? minstrel_ht_alloc+0x72b/0x860 [ 1512.045736][T16567] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 1512.051841][T16567] ieee80211_register_hw+0x30fb/0x3e10 [ 1512.057325][T16567] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1512.063684][T16567] ? ieee80211_register_hw+0x1501/0x3e10 [ 1512.069333][T16567] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1512.075166][T16567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1512.080818][T16567] ? __asan_memset+0x23/0x50 [ 1512.085419][T16567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1512.091070][T16567] ? __hrtimer_init+0x170/0x250 [ 1512.095948][T16567] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 1512.101726][T16567] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1512.107823][T16567] ? hwsim_new_radio_nl+0xec3/0x2290 [ 1512.113141][T16567] hwsim_new_radio_nl+0xece/0x2290 [ 1512.118291][T16567] ? __pfx___nla_validate_parse+0x10/0x10 [ 1512.124040][T16567] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1512.129650][T16567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1512.135302][T16567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1512.140962][T16567] genl_rcv_msg+0xb16/0xec0 [ 1512.145497][T16567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1512.150578][T16567] ? __pfx_lock_acquire+0x10/0x10 [ 1512.155634][T16567] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1512.161208][T16567] ? __pfx___might_resched+0x10/0x10 [ 1512.166517][T16567] netlink_rcv_skb+0x1e5/0x430 [ 1512.171296][T16567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1512.176350][T16567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1512.181775][T16567] genl_rcv+0x28/0x40 [ 1512.185774][T16567] netlink_unicast+0x7f8/0x990 [ 1512.190581][T16567] ? __pfx_netlink_unicast+0x10/0x10 [ 1512.195903][T16567] ? __virt_addr_valid+0x45f/0x530 [ 1512.201039][T16567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1512.206699][T16567] ? __phys_addr_symbol+0x2f/0x70 [ 1512.211757][T16567] ? __check_object_size+0x47a/0x730 [ 1512.217086][T16567] netlink_sendmsg+0x8e4/0xcb0 [ 1512.221891][T16567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1512.227206][T16567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1512.232863][T16567] ? aa_sock_msg_perm+0x91/0x160 [ 1512.237951][T16567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1512.243614][T16567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1512.248926][T16567] __sock_sendmsg+0x223/0x270 [ 1512.253652][T16567] ____sys_sendmsg+0x52a/0x7e0 [ 1512.258471][T16567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1512.263801][T16567] ? __fget_files+0x2a/0x410 [ 1512.268419][T16567] ? __fget_files+0x2a/0x410 [ 1512.273044][T16567] __sys_sendmsg+0x269/0x350 [ 1512.277668][T16567] ? __pfx___sys_sendmsg+0x10/0x10 [ 1512.282833][T16567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1512.288497][T16567] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1512.294846][T16567] ? do_syscall_64+0x100/0x230 [ 1512.299651][T16567] ? do_syscall_64+0xb6/0x230 [ 1512.304368][T16567] do_syscall_64+0xf3/0x230 [ 1512.308921][T16567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.314856][T16567] RIP: 0033:0x7fe0fa385d19 [ 1512.319296][T16567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1512.338944][T16567] RSP: 002b:00007fe0fb24b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1512.347403][T16567] RAX: ffffffffffffffda RBX: 00007fe0fa576160 RCX: 00007fe0fa385d19 [ 1512.355400][T16567] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000008 [ 1512.363391][T16567] RBP: 00007fe0fa401a20 R08: 0000000000000000 R09: 0000000000000000 [ 1512.371370][T16567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1512.379370][T16567] R13: 0000000000000000 R14: 00007fe0fa576160 R15: 00007ffd0301a3d8 [ 1512.387458][T16567] [ 1512.390556][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.423438][T16433] chnl_net:caif_netlink_parms(): no params data found [ 1514.139183][ T9658] Bluetooth: hci5: command 0x0c1a tx timeout [ 1515.118794][ T1138] IPVS: stop unused estimator thread 0... [ 1517.797062][T16433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.981132][T16433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.377646][T16433] bridge_slave_0: entered allmulticast mode [ 1518.398067][T16433] bridge_slave_0: entered promiscuous mode [ 1518.770474][T16433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.777700][T16433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.802789][T16433] bridge_slave_1: entered allmulticast mode [ 1518.818697][T16433] bridge_slave_1: entered promiscuous mode [ 1519.613871][T16433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1519.646137][T16433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1521.689352][T16433] team0: Port device team_slave_0 added [ 1521.790331][T16433] team0: Port device team_slave_1 added [ 1524.630867][T16238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1524.711715][T16238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1524.819901][T16238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1524.842312][T16238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1524.896884][T16433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1524.908381][T16433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.039459][T16433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.328628][T16433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1526.383679][T16433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1526.629236][T16433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.511083][ T1138] bridge_slave_1: left allmulticast mode [ 1527.516871][ T1138] bridge_slave_1: left promiscuous mode [ 1527.533221][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.772280][ T1138] bridge_slave_0: left allmulticast mode [ 1527.778069][ T1138] bridge_slave_0: left promiscuous mode [ 1528.192182][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.703979][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1529.863126][ T9658] Bluetooth: hci6: command 0x0c1a tx timeout [ 1530.457721][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1530.819793][ T1138] bond0 (unregistering): Released all slaves [ 1531.013493][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1531.023231][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1531.032174][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1531.041048][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1531.048758][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1531.063118][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1531.135311][T16433] hsr_slave_0: entered promiscuous mode [ 1531.176606][T16433] hsr_slave_1: entered promiscuous mode [ 1531.231393][T16433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1531.266669][T16433] Cannot create hsr debugfs directory [ 1532.541652][ T1138] hsr_slave_0: left promiscuous mode [ 1532.719321][T16731] fuse: Unknown parameter '0x0000000000000003' [ 1533.006785][ T1138] hsr_slave_1: left promiscuous mode [ 1533.064894][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1533.153219][T15509] Bluetooth: hci2: command tx timeout [ 1534.109868][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1535.599710][T15509] Bluetooth: hci2: command tx timeout [ 1536.907407][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1933'. [ 1537.751529][T15509] Bluetooth: hci2: command tx timeout [ 1537.947356][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 1538.000339][T13568] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 1538.126114][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 1538.270743][T13568] usb 5-1: device descriptor read/64, error -71 [ 1538.587682][T13568] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 1538.749119][T13568] usb 5-1: device descriptor read/64, error -71 [ 1538.860495][T13568] usb usb5-port1: attempt power cycle [ 1539.396511][T13568] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 1539.455983][T13568] usb 5-1: device descriptor read/8, error -71 [ 1539.779285][T15509] Bluetooth: hci2: command tx timeout [ 1540.734259][T16776] random: crng reseeded on system resumption [ 1540.934924][T16713] chnl_net:caif_netlink_parms(): no params data found [ 1544.002121][T16433] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1544.104402][T16433] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1544.116362][T16713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.131701][T16713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.488687][T13568] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1544.522128][T16713] bridge_slave_0: entered allmulticast mode [ 1544.544765][T16713] bridge_slave_0: entered promiscuous mode [ 1544.554116][T16713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.569156][T16713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.580034][T16713] bridge_slave_1: entered allmulticast mode [ 1544.592677][T16713] bridge_slave_1: entered promiscuous mode [ 1544.604347][T16433] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1544.672565][T13568] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1544.681830][T13568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.769366][T16433] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1544.770923][T13568] usb 1-1: config 0 descriptor?? [ 1544.813408][T16713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1544.895730][T16713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1545.228005][T16713] team0: Port device team_slave_0 added [ 1545.243052][T16713] team0: Port device team_slave_1 added [ 1546.309705][T13568] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 1546.938729][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.225735][T13568] playstation 0003:054C:0DF2.0009: Invalid byte count transferred, expected 20 got 0 [ 1547.235461][T13568] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -22 [ 1547.245368][T13568] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 1547.254605][T13568] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 1547.349387][T13568] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -22 [ 1547.467453][ T9346] usb 1-1: USB disconnect, device number 12 [ 1547.759473][ T1138] bridge_slave_1: left allmulticast mode [ 1547.773601][ T1138] bridge_slave_1: left promiscuous mode [ 1547.801648][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.816624][ T1138] bridge_slave_0: left allmulticast mode [ 1547.844151][ T1138] bridge_slave_0: left promiscuous mode [ 1547.863421][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.214852][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.306871][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.347696][ T1138] bond0 (unregistering): Released all slaves [ 1549.392463][T16713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.489258][T16713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1549.529075][T16713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.606322][T16713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1549.630153][T16713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1549.708138][T16713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1549.863974][ T1138] hsr_slave_0: left promiscuous mode [ 1549.878953][ T1138] hsr_slave_1: left promiscuous mode [ 1549.898694][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1549.932861][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.497647][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 1550.641640][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 1552.148581][T16433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.873067][T16713] hsr_slave_0: entered promiscuous mode [ 1552.880657][T16713] hsr_slave_1: entered promiscuous mode [ 1552.909099][T16713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1552.919421][T16713] Cannot create hsr debugfs directory [ 1553.211259][T16433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1555.404932][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1555.420478][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1555.435983][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1555.446294][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1555.462924][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1555.478764][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1557.736042][ T5843] Bluetooth: hci3: command tx timeout [ 1557.753837][T16878] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1557.761475][T16878] CPU: 1 UID: 0 PID: 16878 Comm: syz.6.1957 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1557.772260][T16878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1557.782334][T16878] Call Trace: [ 1557.785628][T16878] [ 1557.788589][T16878] dump_stack_lvl+0x241/0x360 [ 1557.793312][T16878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1557.798562][T16878] ? __pfx__printk+0x10/0x10 [ 1557.803189][T16878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.808856][T16878] ? __kmalloc_cache_noprof+0x243/0x390 [ 1557.814440][T16878] ? sysfs_warn_dup+0x51/0xa0 [ 1557.819152][T16878] sysfs_warn_dup+0x8e/0xa0 [ 1557.823774][T16878] sysfs_do_create_link_sd+0xbe/0x110 [ 1557.829179][T16878] device_add_class_symlinks+0x1c5/0x250 [ 1557.834932][T16878] device_add+0x553/0xbf0 [ 1557.839299][T16878] wiphy_register+0x1a58/0x27b0 [ 1557.844190][T16878] ? __pfx_wiphy_register+0x10/0x10 [ 1557.849413][T16878] ? minstrel_ht_alloc+0x72b/0x860 [ 1557.854567][T16878] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 1557.860687][T16878] ieee80211_register_hw+0x30fb/0x3e10 [ 1557.866177][T16878] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1557.872553][T16878] ? ieee80211_register_hw+0x1501/0x3e10 [ 1557.878221][T16878] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1557.884064][T16878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.889725][T16878] ? __asan_memset+0x23/0x50 [ 1557.894343][T16878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.900001][T16878] ? __hrtimer_init+0x170/0x250 [ 1557.905245][T16878] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 1557.911037][T16878] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1557.917145][T16878] ? kstrndup+0x5c/0xb0 [ 1557.921336][T16878] ? __asan_memcpy+0x40/0x70 [ 1557.925958][T16878] hwsim_new_radio_nl+0xece/0x2290 [ 1557.931120][T16878] ? __pfx___nla_validate_parse+0x10/0x10 [ 1557.936880][T16878] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1557.942499][T16878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.948159][T16878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.953854][T16878] genl_rcv_msg+0xb16/0xec0 [ 1557.958405][T16878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1557.963501][T16878] ? __pfx_lock_acquire+0x10/0x10 [ 1557.968556][T16878] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1557.974140][T16878] ? __pfx___might_resched+0x10/0x10 [ 1557.979472][T16878] netlink_rcv_skb+0x1e5/0x430 [ 1557.984272][T16878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1557.989323][T16878] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1557.994651][T16878] genl_rcv+0x28/0x40 [ 1557.998654][T16878] netlink_unicast+0x7f8/0x990 [ 1558.003452][T16878] ? __pfx_netlink_unicast+0x10/0x10 [ 1558.008762][T16878] ? __virt_addr_valid+0x45f/0x530 [ 1558.013897][T16878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1558.019557][T16878] ? __phys_addr_symbol+0x2f/0x70 [ 1558.024622][T16878] ? __check_object_size+0x47a/0x730 [ 1558.029940][T16878] netlink_sendmsg+0x8e4/0xcb0 [ 1558.034733][T16878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1558.040034][T16878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1558.045677][T16878] ? aa_sock_msg_perm+0x91/0x160 [ 1558.050628][T16878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1558.056272][T16878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1558.061567][T16878] __sock_sendmsg+0x223/0x270 [ 1558.066272][T16878] ____sys_sendmsg+0x52a/0x7e0 [ 1558.071059][T16878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1558.076356][T16878] ? __fget_files+0x2a/0x410 [ 1558.080968][T16878] ? __fget_files+0x2a/0x410 [ 1558.085585][T16878] __sys_sendmsg+0x269/0x350 [ 1558.090194][T16878] ? __pfx___sys_sendmsg+0x10/0x10 [ 1558.095364][T16878] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1558.101884][T16878] ? do_syscall_64+0x100/0x230 [ 1558.106683][T16878] ? do_syscall_64+0xb6/0x230 [ 1558.111389][T16878] do_syscall_64+0xf3/0x230 [ 1558.115914][T16878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1558.121565][T16878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.127480][T16878] RIP: 0033:0x7f5393785d19 [ 1558.131907][T16878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1558.151524][T16878] RSP: 002b:00007f53915f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1558.159954][T16878] RAX: ffffffffffffffda RBX: 00007f5393976160 RCX: 00007f5393785d19 [ 1558.167939][T16878] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000008 [ 1558.175919][T16878] RBP: 00007f5393801a20 R08: 0000000000000000 R09: 0000000000000000 [ 1558.183906][T16878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1558.191885][T16878] R13: 0000000000000000 R14: 00007f5393976160 R15: 00007ffd83a28de8 [ 1558.199885][T16878] [ 1559.549079][T16892] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1559.555631][T16892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1559.635510][T16892] vhci_hcd vhci_hcd.0: Device attached [ 1559.829673][ T5843] Bluetooth: hci3: command tx timeout [ 1559.900634][ T5895] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 1561.020568][T16713] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1561.031301][T16864] chnl_net:caif_netlink_parms(): no params data found [ 1561.061926][T16713] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1561.092186][T16713] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1561.146575][T16713] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1561.929320][ T5843] Bluetooth: hci3: command tx timeout [ 1562.248725][T16899] vhci_hcd: connection reset by peer [ 1562.307739][ T4873] vhci_hcd: stop threads [ 1562.419830][ T4873] vhci_hcd: release socket [ 1562.424863][ T4873] vhci_hcd: disconnect device [ 1563.494918][T16864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.505172][T16864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.519352][T16864] bridge_slave_0: entered allmulticast mode [ 1563.541321][T16864] bridge_slave_0: entered promiscuous mode [ 1563.572213][T16713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.659308][T16864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.666615][T16864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.699514][T16864] bridge_slave_1: entered allmulticast mode [ 1563.716767][T16864] bridge_slave_1: entered promiscuous mode [ 1563.939065][ T5843] Bluetooth: hci3: command tx timeout [ 1564.540406][T16864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.543031][T16864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.765302][T16864] team0: Port device team_slave_0 added [ 1564.985507][T16713] 8021q: adding VLAN 0 to HW filter on device team0 [ 1565.008903][T16864] team0: Port device team_slave_1 added [ 1565.190206][ T5895] vhci_hcd: vhci_device speed not set [ 1565.332133][ T8092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.339613][ T8092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.370037][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.377172][ T8092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.523842][T16864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1565.531329][T16864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1565.599331][T16864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.833126][ T1138] bridge_slave_1: left allmulticast mode [ 1566.852970][ T1138] bridge_slave_1: left promiscuous mode [ 1568.376766][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.485095][ T1138] bridge_slave_0: left allmulticast mode [ 1568.494225][ T1138] bridge_slave_0: left promiscuous mode [ 1568.519891][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.719594][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.742800][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.800616][ T1138] bond0 (unregistering): Released all slaves [ 1574.859585][T16864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.867221][T16864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.971169][T16864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.142224][T16864] hsr_slave_0: entered promiscuous mode [ 1575.173794][T16864] hsr_slave_1: entered promiscuous mode [ 1575.259182][T16864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1575.266880][T16864] Cannot create hsr debugfs directory [ 1575.442838][ T1138] hsr_slave_0: left promiscuous mode [ 1575.458594][ T1138] hsr_slave_1: left promiscuous mode [ 1575.677879][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1575.763994][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1577.460757][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 1577.650372][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 1586.959268][T17058] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2000'. [ 1592.187412][T16864] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1592.723102][T16864] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1592.751766][T16864] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1592.870645][T16864] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1592.909326][T15947] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1593.080917][T15947] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1593.106135][T15947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.208649][T15509] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1593.221348][T15947] usb 5-1: config 0 descriptor?? [ 1593.228423][T15509] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1593.239240][T15509] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1593.248087][T15509] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1593.256459][T15509] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1593.265757][T15509] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1593.672529][T15947] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 1593.701091][T16864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1593.849376][T15947] playstation 0003:054C:0DF2.000A: Invalid byte count transferred, expected 20 got 0 [ 1593.858922][T15947] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense pairing info: -22 [ 1593.939193][T15947] playstation 0003:054C:0DF2.000A: Failed to get MAC address from DualSense [ 1593.966804][T15947] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 1594.006549][T15947] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -22 [ 1594.032942][T16864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1594.262032][T15947] usb 5-1: USB disconnect, device number 16 [ 1594.750355][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.757523][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1595.568811][T15509] Bluetooth: hci5: command tx timeout [ 1596.849319][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2016'. [ 1596.904486][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.911670][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1597.027377][T17102] chnl_net:caif_netlink_parms(): no params data found [ 1597.035051][T17149] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2016'. [ 1598.021809][T15509] Bluetooth: hci5: command tx timeout [ 1598.350900][T17156] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1598.357557][T17156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1598.365853][T17156] vhci_hcd vhci_hcd.0: Device attached [ 1598.365863][T17159] vhci_hcd: connection closed [ 1598.483991][ T6066] vhci_hcd: stop threads [ 1598.619407][ T5895] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 1598.630675][ T6066] vhci_hcd: release socket [ 1598.635320][ T6066] vhci_hcd: disconnect device [ 1598.665199][T16864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1600.305903][ T5843] Bluetooth: hci5: command tx timeout [ 1601.087296][T17102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.098674][T17102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.107236][T17102] bridge_slave_0: entered allmulticast mode [ 1601.116151][T17186] binder: BINDER_SET_CONTEXT_MGR already set [ 1601.122960][T17186] binder: 17185:17186 ioctl 4018620d 20000040 returned -16 [ 1601.372606][T17102] bridge_slave_0: entered promiscuous mode [ 1601.846661][T17102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.863996][T17102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.879210][T17102] bridge_slave_1: entered allmulticast mode [ 1601.886281][T17102] bridge_slave_1: entered promiscuous mode [ 1602.138664][T17102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1602.203953][T17102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1602.524283][ T5843] Bluetooth: hci5: command tx timeout [ 1602.797206][T16864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1603.726142][T17102] team0: Port device team_slave_0 added [ 1603.879879][ T5895] vhci_hcd: vhci_device speed not set [ 1603.892038][T17102] team0: Port device team_slave_1 added [ 1604.880103][ T1138] bridge_slave_1: left allmulticast mode [ 1604.885925][ T1138] bridge_slave_1: left promiscuous mode [ 1604.992533][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.539916][ T1138] bridge_slave_0: left allmulticast mode [ 1605.545639][ T1138] bridge_slave_0: left promiscuous mode [ 1605.554699][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.866990][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.249170][T17259] ubi: mtd0 is already attached to ubi0 [ 1611.948184][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.146232][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1612.191733][ T1138] bond0 (unregistering): Released all slaves [ 1613.020541][T17102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1613.027522][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1613.053399][ C1] vkms_vblank_simulate: vblank timer overrun [ 1613.066386][T17102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1613.181496][T17102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1613.188663][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1613.290831][T17102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1614.664672][T17102] hsr_slave_0: entered promiscuous mode [ 1614.676432][T17102] hsr_slave_1: entered promiscuous mode [ 1614.684711][T17102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1614.692463][T17102] Cannot create hsr debugfs directory [ 1614.704182][ T1138] hsr_slave_0: left promiscuous mode [ 1614.717805][ T1138] hsr_slave_1: left promiscuous mode [ 1614.736980][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1614.760767][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1616.148374][T17300] ntfs3(nbd6): try to read out of volume at offset 0x0 [ 1616.884938][T13568] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1616.981035][T15509] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1617.004355][T15509] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1617.049095][T13568] usb 8-1: Using ep0 maxpacket: 16 [ 1617.059986][T13568] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.067717][T15509] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1617.100485][T15509] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1617.113665][T15509] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1617.123718][T13568] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.123851][T15509] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1617.329044][T15947] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1617.365960][T13568] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1617.379309][T13568] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1617.388483][T13568] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.534164][T13568] usb 8-1: config 0 descriptor?? [ 1617.561696][T15947] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1617.573859][T15947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.596401][T15947] usb 1-1: config 0 descriptor?? [ 1618.145885][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.154769][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.164918][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.173958][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.199097][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.224603][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.257380][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.315115][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.346879][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.360398][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.367629][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.374954][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.379297][T15947] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 1618.382476][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.401425][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.408652][T13568] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1618.418244][T13568] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 1618.470121][T13568] microsoft 0003:045E:07DA.000B: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1618.482224][T13568] microsoft 0003:045E:07DA.000B: no inputs found [ 1618.488575][T13568] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 1618.536782][T15947] playstation 0003:054C:0DF2.000C: Invalid reportID received, expected 9 got 0 [ 1618.549595][T15947] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense pairing info: -22 [ 1618.558869][T15947] playstation 0003:054C:0DF2.000C: Failed to get MAC address from DualSense [ 1618.573635][T13568] usb 8-1: USB disconnect, device number 25 [ 1618.573753][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 1618.649015][T15947] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 1619.631714][T15509] Bluetooth: hci2: command tx timeout [ 1619.672930][T15947] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -22 [ 1619.878116][ T9346] usb 1-1: USB disconnect, device number 13 [ 1619.998341][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 1621.746233][T15509] Bluetooth: hci2: command tx timeout [ 1623.779236][T15509] Bluetooth: hci2: command tx timeout [ 1625.863365][T15509] Bluetooth: hci2: command tx timeout [ 1633.404587][T17434] ntfs3(nbd0): try to read out of volume at offset 0x0 [ 1635.562956][T17448] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1641.322787][T17489] loop0: detected capacity change from 0 to 64 [ 1643.631933][T17303] chnl_net:caif_netlink_parms(): no params data found [ 1643.659356][T17505] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2079'. [ 1646.034230][T17303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.063785][T17303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.101906][T17303] bridge_slave_0: entered allmulticast mode [ 1646.131710][T17303] bridge_slave_0: entered promiscuous mode [ 1646.384069][T17102] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1646.723686][T17303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.834692][T17303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.034013][T17303] bridge_slave_1: entered allmulticast mode [ 1647.066494][T17303] bridge_slave_1: entered promiscuous mode [ 1647.792080][T17102] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1647.850405][T17102] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1648.944626][T17303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1649.050629][T17102] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1649.073882][T17563] syz.4.2088: attempt to access beyond end of device [ 1649.073882][T17563] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1649.119194][T17563] syz.4.2088: attempt to access beyond end of device [ 1649.119194][T17563] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1649.124154][T17303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1649.244758][T17563] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1649.293892][T17563] syz.4.2088: attempt to access beyond end of device [ 1649.293892][T17563] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1649.367219][T17563] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1649.367924][T17563] syz.4.2088: attempt to access beyond end of device [ 1649.367924][T17563] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1649.390951][T17563] syz.4.2088: attempt to access beyond end of device [ 1649.390951][T17563] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1649.445838][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1649.537865][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1649.546334][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1649.555732][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1649.563747][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1649.571311][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1649.679466][T17563] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1649.790816][T17575] kAFS: No cell specified [ 1649.806151][T17575] syz.7.2091: attempt to access beyond end of device [ 1649.806151][T17575] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1650.521060][T17563] syz.4.2088: attempt to access beyond end of device [ 1650.521060][T17563] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1650.581680][ T9658] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1650.603451][T17563] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1650.701568][T17563] syz.4.2088: attempt to access beyond end of device [ 1650.701568][T17563] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1650.922136][T17563] syz.4.2088: attempt to access beyond end of device [ 1650.922136][T17563] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1650.935299][T17563] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1650.956734][T17563] syz.4.2088: attempt to access beyond end of device [ 1650.956734][T17563] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1651.899491][T17563] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1651.922529][T17563] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1651.932343][T17563] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1651.942890][T17563] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1652.010287][T17303] team0: Port device team_slave_0 added [ 1652.032975][T17303] team0: Port device team_slave_1 added [ 1652.069776][T17576] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1652.075999][T17576] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1652.082233][T17576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1652.088264][T17576] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1652.094296][T17576] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1652.269200][T11626] bridge_slave_1: left allmulticast mode [ 1652.274904][T11626] bridge_slave_1: left promiscuous mode [ 1652.281010][T11626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.375925][T17576] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1652.389897][T17595] ntfs3(nbd6): try to read out of volume at offset 0x0 [ 1653.269332][ T5843] Bluetooth: hci3: command tx timeout [ 1653.332601][T11626] bridge_slave_0: left allmulticast mode [ 1653.333349][T17576] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1653.347788][T17576] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1653.364397][T17576] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1653.369557][T11626] bridge_slave_0: left promiscuous mode [ 1653.569884][T11626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.339259][ T9658] Bluetooth: hci2: command 0x0c1a tx timeout [ 1654.345346][ T9658] Bluetooth: hci1: command 0x0406 tx timeout [ 1654.352392][ T5843] Bluetooth: hci4: command 0x0419 tx timeout [ 1654.353680][T15509] Bluetooth: hci6: command 0x0c1a tx timeout [ 1655.429641][T15509] Bluetooth: hci3: command 0x040f tx timeout [ 1656.213005][T17632] xt_connbytes: Forcing CT accounting to be enabled [ 1656.287052][T17632] Cannot find add_set index 0 as target [ 1656.481783][T15509] Bluetooth: hci2: command 0x0c1a tx timeout [ 1657.230772][T11626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.390709][T11626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.514812][T15509] Bluetooth: hci3: command 0x040f tx timeout [ 1657.522932][T11626] bond0 (unregistering): Released all slaves [ 1657.577682][T17303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.669117][T17303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.695542][T17303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.984830][T17659] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 1657.991478][T17659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1657.999297][T17659] vhci_hcd vhci_hcd.0: Device attached [ 1658.094365][T17303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.461725][T17661] vhci_hcd: connection closed [ 1658.463674][ T5895] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1658.506829][T16569] vhci_hcd: stop threads [ 1658.551310][T15509] Bluetooth: hci2: command 0x0c1a tx timeout [ 1658.558041][T16569] vhci_hcd: release socket [ 1658.558364][T17303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.562641][T16569] vhci_hcd: disconnect device [ 1658.600457][T17303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.761070][T17646] overlay: ./file0 is not a directory [ 1659.158796][T11626] hsr_slave_0: left promiscuous mode [ 1659.174079][T11626] hsr_slave_1: left promiscuous mode [ 1659.185195][T11626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.702432][T15509] Bluetooth: hci3: command 0x040f tx timeout [ 1659.775475][T11626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.787629][T15509] Bluetooth: hci3: command 0x040f tx timeout [ 1662.790314][T11626] team0 (unregistering): Port device team_slave_1 removed [ 1662.894435][T11626] team0 (unregistering): Port device team_slave_0 removed [ 1663.725535][ T5895] vhci_hcd: vhci_device speed not set [ 1663.829322][T17716] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2110'. [ 1663.866477][T15509] Bluetooth: hci3: command 0x040f tx timeout [ 1664.571479][T17303] hsr_slave_0: entered promiscuous mode [ 1664.599747][T17303] hsr_slave_1: entered promiscuous mode [ 1664.629202][T17303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1664.636977][T17303] Cannot create hsr debugfs directory [ 1665.416261][T17569] chnl_net:caif_netlink_parms(): no params data found [ 1667.557797][T17569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.673264][T17569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.820920][T17569] bridge_slave_0: entered allmulticast mode [ 1667.887353][T17569] bridge_slave_0: entered promiscuous mode [ 1667.908387][T17760] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1668.024121][T17569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.039036][T17569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.046401][T17569] bridge_slave_1: entered allmulticast mode [ 1668.068580][T17569] bridge_slave_1: entered promiscuous mode [ 1668.263920][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.104596][T17569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1670.177796][T17790] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2124'. [ 1670.258015][T17569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1670.269665][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1670.489453][ T25] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1670.549430][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.627274][ T25] usb 1-1: config 0 descriptor?? [ 1671.096073][T17569] team0: Port device team_slave_0 added [ 1671.183495][T17569] team0: Port device team_slave_1 added [ 1671.640660][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 1672.453330][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1672.508487][ T25] usb 1-1: USB disconnect, device number 14 [ 1675.652864][T17569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.674665][T17569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.702569][T17569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.782240][T17569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.797252][T17569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.823224][ C0] vkms_vblank_simulate: vblank timer overrun [ 1675.842161][T17569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.990361][T17569] hsr_slave_0: entered promiscuous mode [ 1676.027087][T17569] hsr_slave_1: entered promiscuous mode [ 1676.033656][T17569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1676.051879][T17569] Cannot create hsr debugfs directory [ 1676.770798][T11626] bridge_slave_1: left allmulticast mode [ 1676.800229][T11626] bridge_slave_1: left promiscuous mode [ 1676.837442][T11626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.032792][T11626] bridge_slave_0: left allmulticast mode [ 1677.583635][T11626] bridge_slave_0: left promiscuous mode [ 1677.589557][T11626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.845160][T17862] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2137'. [ 1677.959550][T11626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1678.006101][T11626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1678.247588][T11626] bond0 (unregistering): Released all slaves [ 1678.669134][T17868] ubi: mtd0 is already attached to ubi0 [ 1679.387240][ T8906] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1679.397100][ T8906] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1679.405780][ T8906] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1679.414367][ T8906] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1679.422333][ T8906] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1679.429701][ T8906] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1682.007360][ T8906] Bluetooth: hci2: command tx timeout [ 1682.122270][T11626] hsr_slave_0: left promiscuous mode [ 1682.128308][T11626] hsr_slave_1: left promiscuous mode [ 1684.029775][ T8906] Bluetooth: hci2: command tx timeout [ 1684.988179][T11626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1685.388639][T11626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1686.169193][ T8906] Bluetooth: hci2: command tx timeout [ 1687.811963][ T8906] Bluetooth: hci6: command 0x0c1a tx timeout [ 1688.233963][ T8906] Bluetooth: hci2: command tx timeout [ 1689.053242][T17934] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2151'. [ 1689.120598][T11626] team0 (unregistering): Port device team_slave_1 removed [ 1689.178662][T11626] team0 (unregistering): Port device team_slave_0 removed [ 1689.747085][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2152'. [ 1691.456399][T17870] chnl_net:caif_netlink_parms(): no params data found [ 1698.137473][T17870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.210855][T17870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.259340][T17870] bridge_slave_0: entered allmulticast mode [ 1698.277005][T17870] bridge_slave_0: entered promiscuous mode [ 1698.298014][T18009] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2164'. [ 1698.302832][T17870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.361508][T17870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.391440][T17870] bridge_slave_1: entered allmulticast mode [ 1698.450158][T17870] bridge_slave_1: entered promiscuous mode [ 1699.576633][T17870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1699.833586][T17870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1699.850209][T17569] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1701.279200][T11626] bridge_slave_1: left allmulticast mode [ 1701.284897][T11626] bridge_slave_1: left promiscuous mode [ 1701.291181][T11626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.324917][T11626] bridge_slave_0: left allmulticast mode [ 1701.333378][T11626] bridge_slave_0: left promiscuous mode [ 1701.349936][T11626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.202584][T18056] bio_check_eod: 3 callbacks suppressed [ 1702.202600][T18056] syz.0.2173: attempt to access beyond end of device [ 1702.202600][T18056] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1702.221261][T18056] syz.0.2173: attempt to access beyond end of device [ 1702.221261][T18056] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1702.234166][T18056] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1702.243978][T18056] syz.0.2173: attempt to access beyond end of device [ 1702.243978][T18056] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1702.256955][T18056] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1702.267063][T18056] syz.0.2173: attempt to access beyond end of device [ 1702.267063][T18056] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1702.280033][T18056] syz.0.2173: attempt to access beyond end of device [ 1702.280033][T18056] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1702.293550][T18056] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1702.303215][T18056] syz.0.2173: attempt to access beyond end of device [ 1702.303215][T18056] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1702.316236][T18056] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1702.326133][T18056] syz.0.2173: attempt to access beyond end of device [ 1702.326133][T18056] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1702.339150][T18056] syz.0.2173: attempt to access beyond end of device [ 1702.339150][T18056] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1702.352186][T18056] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1702.361823][T18056] syz.0.2173: attempt to access beyond end of device [ 1702.361823][T18056] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1702.374856][T18056] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1702.384701][T18056] syz.0.2173: attempt to access beyond end of device [ 1702.384701][T18056] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1702.398225][T18056] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1702.407824][T18056] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1702.417306][T18056] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1705.560376][T11626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1705.645705][T11626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1706.343413][T11626] bond0 (unregistering): Released all slaves [ 1706.929624][T17569] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1707.195057][T17569] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1707.233219][T17870] team0: Port device team_slave_0 added [ 1707.346573][T17569] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1707.416000][T18089] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1707.430229][T17870] team0: Port device team_slave_1 added [ 1707.459416][T18089] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1707.778834][T11626] hsr_slave_0: left promiscuous mode [ 1707.823427][T11626] hsr_slave_1: left promiscuous mode [ 1707.846014][T11626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1707.864363][T11626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1710.203538][T11626] team0 (unregistering): Port device team_slave_1 removed [ 1710.272306][T11626] team0 (unregistering): Port device team_slave_0 removed [ 1711.422420][T18136] ubi: mtd0 is already attached to ubi0 [ 1715.079818][T15509] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1715.089155][T15509] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1715.097836][T15509] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1715.106311][T15509] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1715.113983][T15509] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1715.149036][T15509] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1715.336713][T17870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1715.532919][T17870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1716.639155][T17870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1718.750262][T15509] Bluetooth: hci5: command tx timeout [ 1719.140622][T17870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1719.147674][T17870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1719.378495][T17870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1721.560446][ T8906] Bluetooth: hci5: command tx timeout [ 1723.518876][T17870] hsr_slave_0: entered promiscuous mode [ 1723.564474][T17870] hsr_slave_1: entered promiscuous mode [ 1723.598248][T17870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1723.619161][T15509] Bluetooth: hci5: command tx timeout [ 1723.631300][T17870] Cannot create hsr debugfs directory [ 1723.810243][T18149] chnl_net:caif_netlink_parms(): no params data found [ 1725.598355][ T9346] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1725.709919][T15509] Bluetooth: hci5: command tx timeout [ 1726.097195][ T9346] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1726.198232][ T9346] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.535194][ T9346] usb 8-1: config 0 descriptor?? [ 1728.047895][T18149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.059323][T18149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.066742][T18149] bridge_slave_0: entered allmulticast mode [ 1728.084860][T18149] bridge_slave_0: entered promiscuous mode [ 1728.111060][T17870] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1728.137922][ T9346] usbhid 8-1:0.0: can't add hid device: -71 [ 1728.156465][ T9346] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1728.190533][ T9346] usb 8-1: USB disconnect, device number 26 [ 1728.228231][T18149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.256688][T18149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.268062][T18149] bridge_slave_1: entered allmulticast mode [ 1728.279087][T18149] bridge_slave_1: entered promiscuous mode [ 1728.638866][T17870] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1728.825594][T18149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.848773][T17870] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1728.871588][T17870] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1728.942510][T17870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1728.959323][T17870] 8021q: adding VLAN 0 to HW filter on device team0 [ 1728.991889][T17870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1729.002362][T17870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1729.108398][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.115601][ T6273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1729.162655][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.169912][ T6273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1729.245754][T18149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.760131][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.452973][T18280] udevd[18280]: failed to send result of seq 42286 to main daemon: Connection refused [ 1730.463141][T18257] udevd[18257]: failed to send result of seq 42283 to main daemon: Transport endpoint is not connected [ 1730.607080][T18195] udevd[18195]: failed to send result of seq 42294 to main daemon: Transport endpoint is not connected [ 1731.949477][T11626] bridge_slave_1: left allmulticast mode [ 1731.955182][T11626] bridge_slave_1: left promiscuous mode [ 1731.993886][T11626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.518154][T11626] bridge_slave_0: left allmulticast mode [ 1732.524047][T11626] bridge_slave_0: left promiscuous mode [ 1732.538559][T11626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.499503][T11626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1734.569457][T11626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1734.613920][T18327] bio_check_eod: 2 callbacks suppressed [ 1734.613936][T18327] syz.0.2228: attempt to access beyond end of device [ 1734.613936][T18327] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1734.632891][T18327] syz.0.2228: attempt to access beyond end of device [ 1734.632891][T18327] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1734.645811][T18327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1734.656012][T18327] syz.0.2228: attempt to access beyond end of device [ 1734.656012][T18327] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1734.668949][T18327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1734.681686][T18327] syz.0.2228: attempt to access beyond end of device [ 1734.681686][T18327] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1734.696281][T18327] syz.0.2228: attempt to access beyond end of device [ 1734.696281][T18327] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1734.709316][T18327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1734.718927][T18327] syz.0.2228: attempt to access beyond end of device [ 1734.718927][T18327] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1734.731944][T18327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1734.741848][T18327] syz.0.2228: attempt to access beyond end of device [ 1734.741848][T18327] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1734.755385][T18327] syz.0.2228: attempt to access beyond end of device [ 1734.755385][T18327] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1734.768432][T18327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1734.778310][T18327] syz.0.2228: attempt to access beyond end of device [ 1734.778310][T18327] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1734.791330][T18327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1734.801152][T18327] syz.0.2228: attempt to access beyond end of device [ 1734.801152][T18327] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1734.814073][T18327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1734.825311][T18327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1734.834830][T18327] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1734.860544][T11626] bond0 (unregistering): Released all slaves [ 1734.921589][T17870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1735.116799][T18149] team0: Port device team_slave_0 added [ 1736.130291][T18149] team0: Port device team_slave_1 added [ 1736.768203][T11626] hsr_slave_0: left promiscuous mode [ 1736.807669][T11626] hsr_slave_1: left promiscuous mode [ 1736.830465][T11626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.838449][T11626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1737.451722][ T8906] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1737.553519][ T8906] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1737.700623][ T8906] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1737.708633][ T8906] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1737.718357][ T8906] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1737.727281][ T8906] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1738.920601][T11626] team0 (unregistering): Port device team_slave_1 removed [ 1739.049643][T11626] team0 (unregistering): Port device team_slave_0 removed [ 1739.804884][ T8906] Bluetooth: hci2: command tx timeout [ 1740.013702][T18149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1740.049498][T18149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1740.109030][T18149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1740.318373][T18149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1740.339279][T18149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1740.370465][T15947] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1740.379083][T18149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1741.397537][T15947] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1741.427758][T15947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.687335][T15947] usb 5-1: config 0 descriptor?? [ 1741.861581][T18149] hsr_slave_0: entered promiscuous mode [ 1741.867742][ T8906] Bluetooth: hci2: command tx timeout [ 1743.721932][T18149] hsr_slave_1: entered promiscuous mode [ 1743.763707][T18149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1743.809137][T18149] Cannot create hsr debugfs directory [ 1743.867291][T15947] usbhid 5-1:0.0: can't add hid device: -71 [ 1743.873416][T15947] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1743.890610][T15947] usb 5-1: USB disconnect, device number 17 [ 1745.025874][ T8906] Bluetooth: hci2: command tx timeout [ 1746.091789][T18357] chnl_net:caif_netlink_parms(): no params data found [ 1747.161781][ T8906] Bluetooth: hci2: command tx timeout [ 1748.527908][T18357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.536326][T18357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.556418][T18357] bridge_slave_0: entered allmulticast mode [ 1748.569223][T18357] bridge_slave_0: entered promiscuous mode [ 1750.649618][T18357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.656937][T18357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.665358][T18357] bridge_slave_1: entered allmulticast mode [ 1750.681615][T18357] bridge_slave_1: entered promiscuous mode [ 1750.774452][T18357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1751.325425][T18357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1751.670362][T18357] team0: Port device team_slave_0 added [ 1752.079018][T18357] team0: Port device team_slave_1 added [ 1754.540762][T18357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1754.548249][T18357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1754.583181][T18357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1754.862480][T18357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.896016][T18357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1754.955144][T18357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1754.982998][ T29] audit: type=1107 audit(1734327420.230:81): pid=18528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1758.832985][T18357] hsr_slave_0: entered promiscuous mode [ 1759.320628][T18357] hsr_slave_1: entered promiscuous mode [ 1759.434758][T18357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1759.452646][T18357] Cannot create hsr debugfs directory [ 1759.899516][T18574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2273'. [ 1760.809076][T18149] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1761.234708][T18149] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1763.759001][T18149] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1764.121580][T18149] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1764.178264][T11626] bridge_slave_1: left allmulticast mode [ 1764.187355][T11626] bridge_slave_1: left promiscuous mode [ 1764.205854][T11626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.229366][T11626] bridge_slave_0: left allmulticast mode [ 1764.270078][T11626] bridge_slave_0: left promiscuous mode [ 1764.281119][T11626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.480108][T15947] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1765.440392][T15947] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1765.449686][T15947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.478403][T15947] usb 5-1: config 0 descriptor?? [ 1766.567958][T18624] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1767.044259][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1767.054649][T15947] usbhid 5-1:0.0: can't add hid device: -71 [ 1767.061664][T15947] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1767.150411][T15947] usb 5-1: USB disconnect, device number 18 [ 1770.550848][T11626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1770.621335][T11626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1770.652084][T11626] bond0 (unregistering): Released all slaves [ 1774.331861][ T8906] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1774.481430][ T8906] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1774.499359][T18668] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1774.506154][T18668] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1774.514620][T18671] vhci_hcd: connection closed [ 1774.515002][T18668] vhci_hcd vhci_hcd.0: Device attached [ 1774.525328][ T8906] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1774.558330][ T8906] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1774.567934][ T1103] vhci_hcd: stop threads [ 1774.579847][ T8906] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1774.585916][ T1103] vhci_hcd: release socket [ 1774.599410][ T1103] vhci_hcd: disconnect device [ 1774.616074][ T8906] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1775.471722][T11626] hsr_slave_0: left promiscuous mode [ 1776.009040][T11626] hsr_slave_1: left promiscuous mode [ 1776.051167][T11626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1776.069528][T11626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1776.679152][T18694] fuse: Bad value for 'fd' [ 1777.780931][T15509] Bluetooth: hci3: command tx timeout [ 1779.885882][ T8906] Bluetooth: hci3: command tx timeout [ 1781.907017][T11626] team0 (unregistering): Port device team_slave_1 removed [ 1782.072931][ T8906] Bluetooth: hci3: command tx timeout [ 1783.926823][T11626] team0 (unregistering): Port device team_slave_0 removed [ 1784.130138][T18730] Cannot find add_set index 0 as target [ 1784.164778][ T8906] Bluetooth: hci3: command tx timeout [ 1789.507359][T18664] chnl_net:caif_netlink_parms(): no params data found [ 1790.681141][T18756] overlay: ./file0 is not a directory [ 1791.762831][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.810362][T18664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.817469][T18664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.836434][T18664] bridge_slave_0: entered allmulticast mode [ 1791.844484][T18664] bridge_slave_0: entered promiscuous mode [ 1792.219209][T18664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.377141][T18664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.387089][T18664] bridge_slave_1: entered allmulticast mode [ 1792.403885][T18664] bridge_slave_1: entered promiscuous mode [ 1795.203062][T18664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1795.828407][T18664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1797.091801][T18825] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2332'. [ 1797.963104][T18664] team0: Port device team_slave_0 added [ 1798.054852][T18664] team0: Port device team_slave_1 added [ 1798.522889][T15509] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1798.532723][T15509] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1798.540765][T15509] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1798.639010][T15509] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1799.589175][T15509] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1800.039208][T15509] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1800.123462][T18664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1800.147638][T18664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.174013][T18664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.353755][T18664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.383446][T18664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.652017][T18664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.707950][T18864] ntfs3(nbd7): try to read out of volume at offset 0x0 [ 1802.179044][T15509] Bluetooth: hci5: command tx timeout [ 1803.188053][T18837] ------------[ cut here ]------------ [ 1803.193546][T18837] DEBUG_LOCKS_WARN_ON(1) [ 1803.193660][T18837] WARNING: CPU: 1 PID: 18837 at kernel/locking/lockdep.c:232 __lock_acquire+0x564/0x2100 [ 1803.207709][T18837] Modules linked in: [ 1803.211594][T18837] CPU: 1 UID: 0 PID: 18837 Comm: syz-executor Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1803.222514][T18837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1803.232741][T18837] RIP: 0010:__lock_acquire+0x564/0x2100 [ 1803.238330][T18837] Code: 00 00 83 3d e1 f1 9e 0e 00 75 23 90 48 c7 c7 00 96 0a 8c 48 c7 c6 00 99 0a 8c e8 67 5d e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 1803.257954][T18837] RSP: 0018:ffffc90003bc6d90 EFLAGS: 00010046 [ 1803.264034][T18837] RAX: a10f4e6784dfe800 RBX: 00000000000019d8 RCX: ffff88802577bc00 [ 1803.272011][T18837] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1803.279986][T18837] RBP: 00000000000c19d8 R08: ffffffff81601a42 R09: 1ffff110170e519a [ 1803.287956][T18837] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff88802577c6c4 [ 1803.295927][T18837] R13: 000000000000000a R14: 1ffff11004aef8ea R15: ffff88802577c750 [ 1803.303907][T18837] FS: 000055555bb9b500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1803.312836][T18837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1803.319415][T18837] CR2: 000000002001d000 CR3: 00000000605ae000 CR4: 0000000000350ef0 [ 1803.327384][T18837] Call Trace: [ 1803.330658][T18837] [ 1803.333585][T18837] ? __warn+0x165/0x4d0 [ 1803.337751][T18837] ? __lock_acquire+0x564/0x2100 [ 1803.342698][T18837] ? report_bug+0x2b3/0x500 [ 1803.347210][T18837] ? __lock_acquire+0x564/0x2100 [ 1803.352157][T18837] ? handle_bug+0x60/0x90 [ 1803.356581][T18837] ? exc_invalid_op+0x1a/0x50 [ 1803.361270][T18837] ? asm_exc_invalid_op+0x1a/0x20 [ 1803.366312][T18837] ? __warn_printk+0x292/0x360 [ 1803.371087][T18837] ? __lock_acquire+0x564/0x2100 [ 1803.376036][T18837] ? validate_chain+0x11e/0x5920 [ 1803.380991][T18837] lock_acquire+0x1ed/0x550 [ 1803.385499][T18837] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1803.391064][T18837] ? __pfx_lock_acquire+0x10/0x10 [ 1803.396088][T18837] ? rcu_note_context_switch+0xc7c/0xff0 [ 1803.401722][T18837] ? mark_lock+0x9a/0x360 [ 1803.406057][T18837] ? mark_lock+0x9a/0x360 [ 1803.410400][T18837] _raw_spin_lock_nested+0x31/0x40 [ 1803.415520][T18837] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1803.421081][T18837] raw_spin_rq_lock_nested+0xb0/0x140 [ 1803.426468][T18837] __schedule+0x35a/0x4c30 [ 1803.430891][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.436534][T18837] ? __pfx_validate_chain+0x10/0x10 [ 1803.441744][T18837] ? __pfx___schedule+0x10/0x10 [ 1803.446691][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.452321][T18837] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1803.458306][T18837] ? preempt_schedule_irq+0xf0/0x1c0 [ 1803.463602][T18837] preempt_schedule_irq+0xfb/0x1c0 [ 1803.468900][T18837] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1803.474637][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.480278][T18837] irqentry_exit+0x5e/0x90 [ 1803.484792][T18837] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1803.490266][T18837] RIP: 0010:unwind_next_frame+0x18e6/0x22d0 [ 1803.496166][T18837] Code: 00 00 80 3d f5 8e e2 0c 01 75 40 80 3d 72 d0 ce 11 00 75 37 c6 05 69 d0 ce 11 01 e9 21 fa ff ff bf 01 00 00 00 e8 fa c0 21 00 <65> 8b 0d 9b 14 b8 7e b0 01 85 c9 75 73 e8 18 86 be ff eb 6c 80 3d [ 1803.515769][T18837] RSP: 0018:ffffc90003bc73d0 EFLAGS: 00000297 [ 1803.521841][T18837] RAX: 0000000080000001 RBX: ffffc90003bc74b0 RCX: 0000000000000001 [ 1803.529906][T18837] RDX: dffffc0000000000 RSI: ffffc90003bc0000 RDI: 0000000000000001 [ 1803.537875][T18837] RBP: ffffc90003bc74a0 R08: ffffc90003bc7b20 R09: ffffc90003bc74f0 [ 1803.545845][T18837] R10: dffffc0000000000 R11: fffff52000778ea0 R12: dffffc0000000000 [ 1803.553912][T18837] R13: ffffc90003bc74a0 R14: ffffc90003bc0000 R15: ffffc90003bc7b30 [ 1803.561900][T18837] ? ip6_tnl_init_net+0x236/0x310 [ 1803.566948][T18837] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1803.573111][T18837] arch_stack_walk+0x11c/0x150 [ 1803.577887][T18837] ? ops_init+0x320/0x590 [ 1803.582219][T18837] stack_trace_save+0x118/0x1d0 [ 1803.587074][T18837] ? __pfx_stack_trace_save+0x10/0x10 [ 1803.592451][T18837] kasan_save_track+0x3f/0x80 [ 1803.597132][T18837] ? kasan_save_track+0x3f/0x80 [ 1803.601990][T18837] ? __kasan_kmalloc+0x98/0xb0 [ 1803.606932][T18837] ? __kmalloc_cache_noprof+0x243/0x390 [ 1803.612490][T18837] ? dropmon_net_event+0x220/0x2a0 [ 1803.617606][T18837] ? notifier_call_chain+0x1a7/0x3f0 [ 1803.622892][T18837] ? register_netdevice+0x167f/0x1b00 [ 1803.628268][T18837] ? register_netdev+0x3b/0x50 [ 1803.633035][T18837] ? ip6_tnl_init_net+0x236/0x310 [ 1803.638096][T18837] __kasan_kmalloc+0x98/0xb0 [ 1803.642691][T18837] __kmalloc_cache_noprof+0x243/0x390 [ 1803.648074][T18837] ? dropmon_net_event+0x220/0x2a0 [ 1803.653194][T18837] dropmon_net_event+0x220/0x2a0 [ 1803.658139][T18837] notifier_call_chain+0x1a7/0x3f0 [ 1803.663257][T18837] register_netdevice+0x167f/0x1b00 [ 1803.668467][T18837] ? __pfx_register_netdevice+0x10/0x10 [ 1803.674021][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.679662][T18837] register_netdev+0x3b/0x50 [ 1803.684346][T18837] ip6_tnl_init_net+0x236/0x310 [ 1803.689211][T18837] ops_init+0x320/0x590 [ 1803.693375][T18837] ? lockdep_init_map_type+0xa1/0x910 [ 1803.698756][T18837] setup_net+0x287/0x9e0 [ 1803.703020][T18837] ? __pfx_down_read_killable+0x10/0x10 [ 1803.708582][T18837] ? __pfx_setup_net+0x10/0x10 [ 1803.713357][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.718995][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.724627][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.730261][T18837] copy_net_ns+0x33f/0x570 [ 1803.734694][T18837] create_new_namespaces+0x425/0x7b0 [ 1803.740000][T18837] unshare_nsproxy_namespaces+0x124/0x180 [ 1803.745735][T18837] ksys_unshare+0x57d/0xa70 [ 1803.750245][T18837] ? __pfx_ksys_unshare+0x10/0x10 [ 1803.755273][T18837] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1803.761605][T18837] ? do_syscall_64+0x100/0x230 [ 1803.766383][T18837] __x64_sys_unshare+0x38/0x40 [ 1803.771244][T18837] do_syscall_64+0xf3/0x230 [ 1803.775764][T18837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.781676][T18837] RIP: 0033:0x7f7991b87517 [ 1803.786089][T18837] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1803.805694][T18837] RSP: 002b:00007fff03994968 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1803.814111][T18837] RAX: ffffffffffffffda RBX: 00007f7991d75f40 RCX: 00007f7991b87517 [ 1803.822084][T18837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1803.830056][T18837] RBP: 00007f7991d76738 R08: 0000000000000000 R09: 0000000000000000 [ 1803.838025][T18837] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1803.845994][T18837] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1803.853969][T18837] [ 1803.856984][T18837] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1803.864255][T18837] CPU: 1 UID: 0 PID: 18837 Comm: syz-executor Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1803.875276][T18837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1803.885330][T18837] Call Trace: [ 1803.888605][T18837] [ 1803.891535][T18837] dump_stack_lvl+0x241/0x360 [ 1803.896226][T18837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1803.901439][T18837] ? __pfx__printk+0x10/0x10 [ 1803.906040][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.911673][T18837] ? vscnprintf+0x5d/0x90 [ 1803.916012][T18837] panic+0x349/0x880 [ 1803.919917][T18837] ? __warn+0x174/0x4d0 [ 1803.924081][T18837] ? __pfx_panic+0x10/0x10 [ 1803.928520][T18837] __warn+0x344/0x4d0 [ 1803.932507][T18837] ? __lock_acquire+0x564/0x2100 [ 1803.937453][T18837] report_bug+0x2b3/0x500 [ 1803.941880][T18837] ? __lock_acquire+0x564/0x2100 [ 1803.946828][T18837] handle_bug+0x60/0x90 [ 1803.950982][T18837] exc_invalid_op+0x1a/0x50 [ 1803.955486][T18837] asm_exc_invalid_op+0x1a/0x20 [ 1803.960350][T18837] RIP: 0010:__lock_acquire+0x564/0x2100 [ 1803.965903][T18837] Code: 00 00 83 3d e1 f1 9e 0e 00 75 23 90 48 c7 c7 00 96 0a 8c 48 c7 c6 00 99 0a 8c e8 67 5d e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 1803.985510][T18837] RSP: 0018:ffffc90003bc6d90 EFLAGS: 00010046 [ 1803.991586][T18837] RAX: a10f4e6784dfe800 RBX: 00000000000019d8 RCX: ffff88802577bc00 [ 1803.999557][T18837] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1804.007611][T18837] RBP: 00000000000c19d8 R08: ffffffff81601a42 R09: 1ffff110170e519a [ 1804.015581][T18837] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff88802577c6c4 [ 1804.023551][T18837] R13: 000000000000000a R14: 1ffff11004aef8ea R15: ffff88802577c750 [ 1804.031527][T18837] ? __warn_printk+0x292/0x360 [ 1804.036306][T18837] ? validate_chain+0x11e/0x5920 [ 1804.041258][T18837] lock_acquire+0x1ed/0x550 [ 1804.045763][T18837] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1804.051332][T18837] ? __pfx_lock_acquire+0x10/0x10 [ 1804.056356][T18837] ? rcu_note_context_switch+0xc7c/0xff0 [ 1804.061990][T18837] ? mark_lock+0x9a/0x360 [ 1804.066326][T18837] ? mark_lock+0x9a/0x360 [ 1804.070695][T18837] _raw_spin_lock_nested+0x31/0x40 [ 1804.075824][T18837] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1804.081476][T18837] raw_spin_rq_lock_nested+0xb0/0x140 [ 1804.086869][T18837] __schedule+0x35a/0x4c30 [ 1804.091293][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.096937][T18837] ? __pfx_validate_chain+0x10/0x10 [ 1804.102150][T18837] ? __pfx___schedule+0x10/0x10 [ 1804.107007][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.112818][T18837] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1804.118811][T18837] ? preempt_schedule_irq+0xf0/0x1c0 [ 1804.124110][T18837] preempt_schedule_irq+0xfb/0x1c0 [ 1804.129234][T18837] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1804.135050][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.140689][T18837] irqentry_exit+0x5e/0x90 [ 1804.145116][T18837] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1804.150587][T18837] RIP: 0010:unwind_next_frame+0x18e6/0x22d0 [ 1804.156486][T18837] Code: 00 00 80 3d f5 8e e2 0c 01 75 40 80 3d 72 d0 ce 11 00 75 37 c6 05 69 d0 ce 11 01 e9 21 fa ff ff bf 01 00 00 00 e8 fa c0 21 00 <65> 8b 0d 9b 14 b8 7e b0 01 85 c9 75 73 e8 18 86 be ff eb 6c 80 3d [ 1804.176094][T18837] RSP: 0018:ffffc90003bc73d0 EFLAGS: 00000297 [ 1804.182167][T18837] RAX: 0000000080000001 RBX: ffffc90003bc74b0 RCX: 0000000000000001 [ 1804.190139][T18837] RDX: dffffc0000000000 RSI: ffffc90003bc0000 RDI: 0000000000000001 [ 1804.198194][T18837] RBP: ffffc90003bc74a0 R08: ffffc90003bc7b20 R09: ffffc90003bc74f0 [ 1804.206167][T18837] R10: dffffc0000000000 R11: fffff52000778ea0 R12: dffffc0000000000 [ 1804.214222][T18837] R13: ffffc90003bc74a0 R14: ffffc90003bc0000 R15: ffffc90003bc7b30 [ 1804.222209][T18837] ? ip6_tnl_init_net+0x236/0x310 [ 1804.227250][T18837] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1804.233406][T18837] arch_stack_walk+0x11c/0x150 [ 1804.238181][T18837] ? ops_init+0x320/0x590 [ 1804.242510][T18837] stack_trace_save+0x118/0x1d0 [ 1804.247363][T18837] ? __pfx_stack_trace_save+0x10/0x10 [ 1804.252739][T18837] kasan_save_track+0x3f/0x80 [ 1804.257421][T18837] ? kasan_save_track+0x3f/0x80 [ 1804.262271][T18837] ? __kasan_kmalloc+0x98/0xb0 [ 1804.267036][T18837] ? __kmalloc_cache_noprof+0x243/0x390 [ 1804.272592][T18837] ? dropmon_net_event+0x220/0x2a0 [ 1804.277707][T18837] ? notifier_call_chain+0x1a7/0x3f0 [ 1804.282995][T18837] ? register_netdevice+0x167f/0x1b00 [ 1804.288371][T18837] ? register_netdev+0x3b/0x50 [ 1804.293138][T18837] ? ip6_tnl_init_net+0x236/0x310 [ 1804.298197][T18837] __kasan_kmalloc+0x98/0xb0 [ 1804.302797][T18837] __kmalloc_cache_noprof+0x243/0x390 [ 1804.308177][T18837] ? dropmon_net_event+0x220/0x2a0 [ 1804.313296][T18837] dropmon_net_event+0x220/0x2a0 [ 1804.318249][T18837] notifier_call_chain+0x1a7/0x3f0 [ 1804.323373][T18837] register_netdevice+0x167f/0x1b00 [ 1804.328583][T18837] ? __pfx_register_netdevice+0x10/0x10 [ 1804.334138][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.339778][T18837] register_netdev+0x3b/0x50 [ 1804.344462][T18837] ip6_tnl_init_net+0x236/0x310 [ 1804.349328][T18837] ops_init+0x320/0x590 [ 1804.353497][T18837] ? lockdep_init_map_type+0xa1/0x910 [ 1804.358889][T18837] setup_net+0x287/0x9e0 [ 1804.363147][T18837] ? __pfx_down_read_killable+0x10/0x10 [ 1804.368709][T18837] ? __pfx_setup_net+0x10/0x10 [ 1804.373488][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.379129][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.384769][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.390412][T18837] copy_net_ns+0x33f/0x570 [ 1804.394843][T18837] create_new_namespaces+0x425/0x7b0 [ 1804.400152][T18837] unshare_nsproxy_namespaces+0x124/0x180 [ 1804.405890][T18837] ksys_unshare+0x57d/0xa70 [ 1804.410489][T18837] ? __pfx_ksys_unshare+0x10/0x10 [ 1804.415517][T18837] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1804.421851][T18837] ? do_syscall_64+0x100/0x230 [ 1804.426631][T18837] __x64_sys_unshare+0x38/0x40 [ 1804.431410][T18837] do_syscall_64+0xf3/0x230 [ 1804.435931][T18837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.441835][T18837] RIP: 0033:0x7f7991b87517 [ 1804.446247][T18837] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1804.465852][T18837] RSP: 002b:00007fff03994968 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1804.474356][T18837] RAX: ffffffffffffffda RBX: 00007f7991d75f40 RCX: 00007f7991b87517 [ 1804.482330][T18837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1804.490303][T18837] RBP: 00007f7991d76738 R08: 0000000000000000 R09: 0000000000000000 [ 1804.498272][T18837] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1804.506242][T18837] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1804.514220][T18837] [ 1804.517443][T18837] Kernel Offset: disabled [ 1804.521845][T18837] Rebooting in 86400 seconds..