last executing test programs: 23m23.398656942s ago: executing program 32 (id=37): syz_open_dev$loop(0x0, 0x3, 0x800) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$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") connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) umount2(&(0x7f0000000040)='.\x00', 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000400)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) mount$bind(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f00000003c0), 0x410, 0x0) 20m36.802609708s ago: executing program 6 (id=685): 20m36.541149213s ago: executing program 6 (id=688): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x53a, &(0x7f00000008c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800051000000000000006808500000050000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f00000007c0)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 20m34.399124749s ago: executing program 6 (id=693): r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/255, 0xff}], 0x1, &(0x7f0000000940)=[{&(0x7f0000000680)=""/5, 0x5}], 0x1, 0x0) 20m33.852112971s ago: executing program 6 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = accept$unix(r2, &(0x7f0000000240)=@abs, &(0x7f0000000300)=0x6e) accept$unix(r3, &(0x7f0000000340)=@abs, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) 20m32.690135436s ago: executing program 6 (id=698): socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x2}, 0x1c) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="1876d4", 0x3}], 0x1) 20m32.431706112s ago: executing program 6 (id=703): syz_open_dev$loop(0x0, 0x3, 0x800) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$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") connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) umount2(&(0x7f0000000040)='.\x00', 0x2) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000400)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) mount$bind(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f00000003c0), 0x410, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x118, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000440)={'fscrypt:', @auto=[0x65, 0x36, 0x37, 0x63, 0x62, 0x39, 0x39, 0x34, 0x62, 0x64, 0x30, 0x66, 0x37, 0x38, 0x64, 0x39]}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6(0xa, 0x1, 0x0) mmap$binder(&(0x7f0000fd2000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 20m16.907793051s ago: executing program 33 (id=703): syz_open_dev$loop(0x0, 0x3, 0x800) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0QQQVDxIOilZ1/qzasvV/0vPEhL1bRY8SCR2eym22Y33bTZ3WA+H5js88zM5nm++8w888zOsBPAnjWW/slEHIqID5OIkdr8JCIGqqn+iBPr691eXcmnUxJra6//nlTXubW6ko+G96QO1DKPR8QP70Yczmwut7y0PJsrFgsLtfxEZe78RHlp+ci5udxMYaYwf2xyauro8eeOH9u5WP/8efng9Y9eefrrE3+/89jVD35M4kQcrC1rjGOnjMVY7TMZSD/Cu7y804X1WNLrCvBA0l2zb30vj0MxEn3VVAtD3awZANApb0fEGgCwxySO/wCwx9S/B7i1upKvT739RqK7brwUEfvX469f31xf0l+7Zre/eh10+FZy15WRJCJGd6D8sYj4/Ns3v0yn6NB1SIBmLl2OiDOjY5v7/2TTPQvb9cxWC9cGqy9j98y+b//3/kNWCtjwXTr+eb7Z+C+zMf6JJuOfwSb77oO4//6fubYDxbSUjv9ebLi37XZD/DWjfbXc/6pjvoHk7LliIe3b/h8R4zEwmOYnq6s2vwtq/OY/N1uV3zj+++Pjt75Iy09f76yRudY/ePd7pnOV3MPGXXfjcsQT/c3iTzbaP2kx/j3VZhmvvvDeZ62WpfGn8danzfF31tqViKeatv+dtky2vD9xoro5TNQ3iia++eXT4VblN7Z/OqXl188FuiFt/+Gt4x9NGu/XLG+/jJ+ujHzfatn942++/e9L3qim99XmXcxVKguTEfuS1zbPP3rnvfV8ff00/vEnm+//W23/6TnhmTbj77/+21cPHn9npfFPb6v9t5+4enu2r1X57bX/VDU1XpvTTv/XbgUf5rMDAAAAAAAAAAAAAAAAAAAAAAAAgHZlIuJgJJnsRjqTyWbXn+H9aAxniqVy5fDZ0uL8dFSflT0aA5n6T12ONPwe6mTt9/Dr+aP35J+NiEci4pPBoWo+my8Vp3sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHGjx/P/Ur4O9rh0A0DH7W8zv63I9AIDuaXX8BwD+u7Z3/B/qWD0AgO5x/g8Ae0/bx/8zna0HANA9zv8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosFMnT6bT2l+rK/k0P31haXG2dOHIdKE8m51bzGfzpYXz2ZlSaaZYyOZLcy3/0aX1l2KpdH4q5hcvTlQK5cpEeWn59Fxpcb5y+txcbqZwujDQtcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoH3lpeXZXLFYWJDYMjG0O6qxaxL9sSuqIdGxRGMvMdS7DgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgl/s3AAD//4fPK2Y=") connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) umount2(&(0x7f0000000040)='.\x00', 0x2) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000400)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) mount$bind(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f00000003c0), 0x410, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x118, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000440)={'fscrypt:', @auto=[0x65, 0x36, 0x37, 0x63, 0x62, 0x39, 0x39, 0x34, 0x62, 0x64, 0x30, 0x66, 0x37, 0x38, 0x64, 0x39]}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6(0xa, 0x1, 0x0) mmap$binder(&(0x7f0000fd2000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 15m21.90746135s ago: executing program 5 (id=1295): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$ppp(0xffffffffffffffff, &(0x7f0000000500)="e6f58b13ccf81f0fbf83483231b7e110d865f0d1d25d705d11117ca0799dc15cac7079505bf730a9cf409a75a73b6d25a5af0f19e5be185f8f5559e37d22e1128d9f65e73de3164cc3356162f75e8eb0a4efa051dcf9be5d556aad57e42d163c8718eb0bdd5612d5518fc1ef0cbfaa54ce85e15c6f032be89347a53adf9cedb392dec3e69781041c147f4371b64affee09ac227d5b00259917e9188065094557f82fb31b2a50dd69d6ed18ebd86b03df", 0xb0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)}}], 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 15m19.997312812s ago: executing program 5 (id=1298): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x2, 0x3, 0xa, 0x0}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 15m18.838914876s ago: executing program 5 (id=1300): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000002408000000080000008010", @ANYRES32=0x1, @ANYBLOB="000000000000000000050000000000000000000085d20aaf79af6e8659da379a615ecb27b7c4cfed78dc51b7d3572c7c8330524f29b88b8b992219c4a47714bb91", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x100, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x2000000, @rand_addr=' \x01\x00', 0x5}}}, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e047f2d20"], 0x7) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x50) mkdir(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x840) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r7, 0x40384708, 0x20000000) 15m13.012162498s ago: executing program 5 (id=1311): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 15m7.750420022s ago: executing program 5 (id=1321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, r4, 0x800, 0x0, 0x25dfdbfc, {{}, {@val={0x21, 0x140}, @val={0xc, 0x99, {0x9, 0x3}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xfffffffffffffcc2) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x54583}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty}}}], 0x20}}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r10, 0xc058534b, &(0x7f0000000440)={0x80}) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15m2.876813569s ago: executing program 5 (id=1328): fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x2020) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x60}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000440)='\x00\x00', 0x0}, 0x20) socket$alg(0x26, 0x5, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 14m46.807492798s ago: executing program 34 (id=1328): fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x2020) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x60}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000440)='\x00\x00', 0x0}, 0x20) socket$alg(0x26, 0x5, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 14m29.578691557s ago: executing program 1 (id=1383): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) r3 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) r4 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, r5, 0x0) io_uring_enter(r4, 0x381b, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 14m27.054683002s ago: executing program 1 (id=1391): writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000000)=0x4) ioctl$BLKRRPART(r2, 0x125f, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x19, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800005, 0x11, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xb81a, @any, 0x7ff}, 0xe) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x7, 0x7, 0x3, 0x4, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @remote, {[@ssrr={0x89, 0x3, 0x72}]}}}}}) 14m20.639485996s ago: executing program 1 (id=1401): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 14m19.61807473s ago: executing program 1 (id=1404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 14m17.453017324s ago: executing program 1 (id=1409): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000002408000000080000008010", @ANYRES32=0x1, @ANYBLOB="000000000000000000050000000000000000000085d20aaf79af6e8659da379a615ecb27b7c4cfed78dc51b7d3572c7c8330524f29b88b8b992219c4a47714bb91", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x100, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x2000000, @rand_addr=' \x01\x00', 0x5}}}, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e047f2d20"], 0x7) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x50) mkdir(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x840) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) 14m13.467338894s ago: executing program 1 (id=1414): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) keyctl$invalidate(0x15, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5417, 0x0) r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$unix(0x1, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000001e80)=""/96, 0x60) 13m58.11977947s ago: executing program 35 (id=1414): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) keyctl$invalidate(0x15, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5417, 0x0) r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$unix(0x1, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000001e80)=""/96, 0x60) 12m34.052295352s ago: executing program 0 (id=1566): r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x600000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fadvise64(r1, 0x101f, 0x1f, 0x4) syz_open_dev$admmidi(&(0x7f0000000000), 0x800, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x80) 12m32.40873288s ago: executing program 0 (id=1570): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000002408000000080000008010", @ANYRES32=0x1, @ANYBLOB="000000000000000000050000000000000000000085d20aaf79af6e8659da379a615ecb27b7c4cfed78dc51b7d3572c7c8330524f29b88b8b992219c4a47714bb91", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x100, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x2000000, @rand_addr=' \x01\x00', 0x5}}}, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e047f2d20"], 0x7) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x50) mkdir(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r7, 0x40384708, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12m28.765811064s ago: executing program 0 (id=1573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, r4, 0x800, 0x0, 0x25dfdbfc, {{}, {@val={0x21, 0x140}, @val={0xc, 0x99, {0x9, 0x3}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xfffffffffffffcc2) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty}}}], 0x20}}], 0x1, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r9, 0xc058534b, &(0x7f0000000440)={0x80}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12m24.598373204s ago: executing program 0 (id=1578): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffff50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000800)="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", 0x442, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) 12m23.460698134s ago: executing program 0 (id=1581): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40800) fanotify_init(0x0, 0x80000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = eventfd2(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a30000000002200010073797a300000000008000540000000020c000980080001400000007b0800084000000001140000001000010000000000000000000000000a"], 0x98}}, 0x0) flock(r5, 0xa422928b49da8f69) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000140)={0xffffff8, "13f20afd86c17f9dfa507069d57c6684154bc7ec29052b9ec48e707a4f251dd9", 0x0, 0x0, 0x0, 0xfffffffc, 0x1}) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000005c0)=@req3={0x3, 0xc, 0xffffffff, 0x6, 0x1, 0x4, 0xffffffff}, 0x1c) 12m22.007756698s ago: executing program 0 (id=1583): fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x2020) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x60}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000440)='\x00\x00', 0x0}, 0x20) socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 12m5.757572786s ago: executing program 36 (id=1583): fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x2020) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x60}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000440)='\x00\x00', 0x0}, 0x20) socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 7m7.01396837s ago: executing program 9 (id=2126): socket(0x2b, 0x1, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prlimit64(r0, 0x6, 0x0, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000480)={0x200000000000001}, 0x8) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = syz_open_procfs(r0, &(0x7f0000000080)='net/rt6_stats\x00') r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x0, 0x1a8, 0xb0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f00000002c0)=""/183) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17", 0xb6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) 7m2.239387411s ago: executing program 9 (id=2133): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 7m1.849851392s ago: executing program 9 (id=2136): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x8011a3, 0x6) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) epoll_create1(0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f00000000c0)) 7m0.189785264s ago: executing program 9 (id=2138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x2, 0x80000}, 0x20) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x8000) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#ayz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xdc) write$dsp(0xffffffffffffffff, &(0x7f0000000280)="4b1f558d5c", 0x5) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e0612"], 0x9) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6m58.234776408s ago: executing program 9 (id=2140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socket(0x1d, 0x2, 0x6) ioperm(0x0, 0x444, 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 6m57.240242248s ago: executing program 9 (id=2143): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000140)={0x10, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x48, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_usb_connect(0x4, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a000905"], 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad2}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 6m41.895956531s ago: executing program 37 (id=2143): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000140)={0x10, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x48, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_usb_connect(0x4, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a000905"], 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad2}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 4m46.790092262s ago: executing program 7 (id=2335): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2eda) listen(r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4m45.293388488s ago: executing program 7 (id=2337): keyctl$invalidate(0x15, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$unix(0x1, 0x1, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 4m44.109241504s ago: executing program 7 (id=2340): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x8011a3, 0x6) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f00000000c0)) 4m42.790578438s ago: executing program 7 (id=2342): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/mem_sleep', 0x42, 0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x4000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0xfffffc98}]) 4m42.137351958s ago: executing program 7 (id=2344): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 4m41.944057126s ago: executing program 7 (id=2345): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4m26.781208604s ago: executing program 38 (id=2345): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m32.798287372s ago: executing program 8 (id=2608): keyctl$invalidate(0x15, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$unix(0x1, 0x1, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1m31.710077691s ago: executing program 8 (id=2611): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r4}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001400b99f000000000000c04b06"], 0x114}], 0x1}, 0x0) 1m29.939657428s ago: executing program 8 (id=2614): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@cgroup, 0x4, 0x1, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/196, 0xc4, 0xffffffffff600000, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 1m28.617110297s ago: executing program 8 (id=2615): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp936,codepage=iso8859-4,dir_umask=00000000000\x00\x00\x00\x0000000005,part=0x000000000000007e,\x00'], 0x1, 0x2fe, &(0x7f0000000240)="$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") r0 = socket$inet_smc(0x2b, 0x1, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) socket$xdp(0x2c, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioperm(0x0, 0x444, 0xb1f) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m26.855010275s ago: executing program 8 (id=2617): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414"], 0x1c) 1m26.220047666s ago: executing program 8 (id=2620): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x5bcf4d33, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffff, r1, 0x0, 0x0, 0x801, 0x0, 0x0, r1}]) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, 0x4}, {0xa, 0x4e23, 0x10000, @loopback, 0x885}, r3, 0x3}}, 0x48) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYBLOB="040029bd7000ffdbdf254200000008", @ANYRES32=0x0, @ANYBLOB="0a00000000505050505000000a0006009b9757059d8d0000bd0c49550f3173"], 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x20008045) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800810, &(0x7f0000000640)=ANY=[], 0x1, 0x669, &(0x7f0000001000)="$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") r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioperm(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x1, '\x00', @p_u8=&(0x7f0000000080)}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 1m10.801103934s ago: executing program 39 (id=2620): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x5bcf4d33, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffff, r1, 0x0, 0x0, 0x801, 0x0, 0x0, r1}]) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, 0x4}, {0xa, 0x4e23, 0x10000, @loopback, 0x885}, r3, 0x3}}, 0x48) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYBLOB="040029bd7000ffdbdf254200000008", @ANYRES32=0x0, @ANYBLOB="0a00000000505050505000000a0006009b9757059d8d0000bd0c49550f3173"], 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x20008045) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800810, &(0x7f0000000640)=ANY=[], 0x1, 0x669, &(0x7f0000001000)="$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") r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioperm(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x1, '\x00', @p_u8=&(0x7f0000000080)}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 16.318624868s ago: executing program 2 (id=2704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x0, 0x0, 0x986, 0x2, 0x10, 0x8}, 0x9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r8 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x5}, 0x8) ioctl$UFFDIO_COPY(r7, 0xc028aa03, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) 14.900365621s ago: executing program 2 (id=2710): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000200)=0x40, 0x4) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f0000000180), 0x9, 0x50f6, &(0x7f0000000340)="$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") mkdir(0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0xf, 0x3, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x9) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) 10.788045112s ago: executing program 2 (id=2715): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioperm(0x45, 0xc000000000000000, 0xb1f) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x80}}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x3}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) epoll_create1(0x0) 8.13253261s ago: executing program 3 (id=2720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 6.304321034s ago: executing program 3 (id=2722): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="7800000018002507b9199b02ffff48000203be0402d6d8935a06022509b15c6869a9238c93eb253016a4160d0a0000000d0085a268d0bf46d32345653600646e040012000a00070849935ade4a460c89b6ec0cff3959547ff38f604786c902007a00004a32000407160015000a00000f872e6972d8a8729b", 0x78, 0x20008090, 0x0, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000440)={0xa10000, 0x9, 0xfff, r2, 0x0, &(0x7f00000003c0)={0xa00001, 0x8, '\x00', @value64=0x8000000000000000}}) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x44008800) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x15) r8 = dup(r7) write$UHID_CREATE(r8, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) 6.295050833s ago: executing program 4 (id=2723): syz_usb_connect(0x6, 0x24, &(0x7f0000000480)=ANY=[], 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.900629499s ago: executing program 2 (id=2724): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5fd0cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb6d658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d967206115b492d825751fcc00000000000000e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bebb749daef202e0412a73d545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177de97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b8f8451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f50520f91fbf7201fc9621d0aee9735d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fbad8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c40000005e538c77b2b14f63d253705363846bc4e9cd3284ff329330812d2211ae34106e0306376a2b1cfe60a09becae2b05ec9adcac47612af85f598a880fa97891a7a290b6e730800542aea761aeb463f5ff5bdf5099ae8ad4afe99db9e9c4e703cb900e9ae272742fe2ff81d1a4f15668392cdafd2e1757706f47f9f84e532f25e2737cb6f6e89378f8d79ab8507b109c7f1f3653a5bc9d54ccc633de6263526eac10519274"], 0x1, 0x5f16, &(0x7f0000003100)="$eJzs3V1vHFcZB/BnX7x+KU2jClUh4iJNobSU5j2B8taUCy4ACSSUaxK5bhVIASUB0SoirnKBuODlI8BNb7joFylfAfEBiBRzVQnKoLHPScbjddZp4p1dn99PcmaePTPeM/l7PLuemT0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMT3vvvj072IuPzr9MDhiM/EIKIfsVzXx6KeuZiXH0bEkdhsjuciYrAYUa+/+c8zEeci4qNDEfc2bq3WD5/ZYz/On7p5/ZPvf+cfv/vTnSM/ffMnH7Tbf/TZsx/+/nbE4R++9uEnt5/MtgMAAEApqqqqeult/tH0/r7fdacAgKnIx/8qyY+r1Wq1+onWf+zPVn/UhdZN1Xi3m0VErDfXqV8zOB0PAHNmPT7uugt0SP5FG0bEU113Aphpva47wL64t3FrtZfy7TWPB8e22vPfKbflv967f3/HbtNJ2teYTOvn604M4tld+rM8pT7Mkpx/v53/5a32UVpuv/Oflt3yH23d+lScnP+gnX/Ltvz/HBFzm39/bP6lyvkPHyX/9cEc7//yBwAAAADg4Mt//z/c8fnfxcfflD152PnfY1PqAwAAAAAAAAA8aY87/t99xv8DAACAmVW/V6/95dCDx3b7LLb68Uu9iKdbywOFSTfLrHTdDwAAAAAAAAAAAAAoyXDrGt5LvYiFiHh6ZaWqqvqrqV0/qsddf96Vvv1Qsq5/yQMAwJaPDrXu5e9FLEXEpfRZfwsrKytVtbS8Uq1Uy4v59exocalabryvzdP6scXRHl4QD0dV/c2WGus1TXq/PKm9/f3q5xpVgz10bDo6DBwAImLraHTPEemAqapnoutXOcwH+//BY/9nL7r+OQUAAAD2X1VVVS99nPfRdM6/33WnAIBpWMrH//Z5AbVarVar1QevbqrGu90sImK9uU79msFw/AAwZ9bj4667QIfkX7RhRBzpuhPATOt13QH2xb2NW6u9lG+veTxI47vna0G25b/e21wvrz9uOkn7GpNp/XzdiUE8u0t/nptSH2ZJzr/fzv/yVvsoLbff+U/LbvnX23m4g/50Lec/aOffcnDy74/Nv1Q5/+Ej5T+QPwAAAAAAzLD89//Dzv/mTQYAAAAAAACAuXNv49Zqvu81n////Jjles05938eGDn/3p7zd//vQZLz77fzb12QM2jM333jQf7/3ri1+sHNf30uT2c+/4XBqH7uhV5/MEzX/FQLb8XVuBZrcWrH8sNt7ad3tC9saz8zof3sjvZR3b6c20/EavwirsWb99sXJ1wYtTShvZrQnvMf2P+LlPMfNr7q/FdSe681rd19v79jv29Oxz3Pxb/998Wde9f03YnB/W1rqrfveAf92fw/eWoUv7qxdv3Eb67cvHn9dKTJtkfPRJo8YTn/hfSV83/pha32/Hu/ub/efX/0yPnPijsx3DX/Fxrz9fa+POW+dSHnP0pfOf98BBq//89z/rvv/6900B8AAAAAAAAAAAAAAAB4mKqqNm8RvRgRF9L9P13dmwkATNUffpBmqiTUarVarVYf2LqpGu/1ZhFL29e5EBG/HffNAIBZ9r+I+GfXnaAz8i9Y/ry/evqFrjsDTNWNd9/72ZVr19au3+i6JwAAAAAAAADAp5XH/zzWGP958zqg1rjR28Z/fSOOze34n/3RYHOs87RBz8fDx/8+Hg8f/3s44fkWJrSPJrQvTmhfmtA+9kaPhpz/8ynjnP/RtGEljf/6Ugf96VrO/3ga6znn/6XWcs38q7/Oc/79bfmfvPnOL0/eePe9V6++c+XttbfXfn761IVzZ8+fO3v+/Mm3rl5bO7X1b4c93l85/zz2tetAy5Lzz5nLvyw5/y+mWv5lyfm/mGr5lyXnn1/vyb8sOf/83kf+Zcn5v5xq+Zcl5//lVMu/LDn/V1It/7Lk/L+SavmXJef/aqrlX5ac/4lUy78sOf+TqZZ/WXL++QyX/MuS889XNsi/LDn/M6mWf1ly/mdTLf+y5PzPpVr+Zcn5n0+1/MuS87+QavmXJef/1VTLvyw5/6+lWv5lyfm/lmr5lyXn//VUy78sOf9vpFr+Zcn5fzPV8i9Lzv9bqZZ/WXL+3061/MuS83891fIvy4PP/zcz5Zn//D1iBrphxsy4ma5/MwEAAAAAAAAAAAAAbdO4nLjrbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd3cxcpX3GcDPftlrQ4IbCCHECWtjwMDi3fUXOMRgkpBS0qaUhLRpSY1jr40Tf9W7TgChshTaEgWpSO0FvWiaRGkUqa1AUaSmEo2QGqm9K1eJuIlaiQtLhcpBSaVUga3OnPd9d2Z2dmb9sXjOOb8fwn/vzJmZd86cmd1nrWcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZhs+Nv3nA1mW5f83/liXZZfmf1+T7cm/nNt5sVcIAAAAnK+3Gn/+w2XphD3LuFDTNv/2of/4/vz8/Hz2hTdPv/2X8/PpjLEsG1qdZY3zon//5S/mm7cJnspGBwabvh7scfNDPc4f7nH+SI/zV/U4f3WP80d7nL9oByyypvh9TOPKNjX+uq7YpdkV2UjjvE0dLvXUwOrBwfi7nIaBxmXmRw5mh7Mj2XQ2uegyA43/suylDflt3ZPF2xpsuq31WZad+dnj++MaBsI+3pS13FhD82P3xl3Z2Js/e3z/d2Zff3+n2XM3LFpplm3emK/z6Sxb+HVVNpCtTvskrnOwaZ3rO6xzqGWdA43L5X9vX+eZZa4z3u/RsM5XuqxzfTjtkWuzLJvLltym3VPZYLa27VbT/h4tjoj8OvKH8j3Z8FkdJxuWcZzkl3nt2tbjpP2YjPt/Q9gnw0usofnheOPJVYv2+7keJ/m97odjNb/u+/IbHR1t/tVqy7Gab/P4dUsfAx0fuw7HQDqWm46Bjb2OgcFVQ41jYHBhzRtbjoGpRZcZzAYat3X6uu7HwMTs0RMTM48+dsvho/sOTR+aPjY1uXP7th3bt+3YMXHw8JHpyeLPs9ulJbI2G0zH4MbwWhOPwRvatm0+JOe/eeGeB6N98jzI7/tnrs8XdOlgtsQxnm/z9Obzfx6k7/tNz4PhpudBx9fUDs+D4WU8D/Jtzmxe3vfM4ab/O61hpV4L1zUdAxfz+2F+mw/euPRr4fqwrmduOtvvh0OLjoF4twbCcy8/Jf28N3pb2C+Lj4ur8zMuWZWdmpk+ueWRfbOzJ6eyMN4Rlzc9Vu3Hy9qm+5QtOl4Gz/p42fP3v7r+6g6nrwv7avTm7o9Vvs328e6PVePVvXV/rsqK/dly6tYsjAvsnd6fnb6b5fszZYku+zPf5ulbzv9nwZRLml7/Rnq9/g2NDBevf0Npb4y0vP4tfmiGGivLsjO3LO/1byT8/06//l3RJ69/+b56cEv3YyDf5pmJsz0Ghru+/l0b5kBYz40hMYw25f63G+fPFYdp02PZ87gZHh4Jx81wvMXW42bbosvk15bf9ubJcztuNl/b+li1/NxSweMm31d/Ndn9uMm3eXnq/F871sS/Nr12rOp1DIwMrcrXO5IOguL1bn5NPAa2ZPuz49mR7EC6TP4o57c1vnV5x8Cq8P87/dpxVZ8cA/m+en5r92Mg3+ZH2y7sz06bwylpm6afndp/v7BU5r96eOH62nfbhc78+To//uNPpdM6ZYh8m9e3n23O6L6fbg6nXNJhP7U/f5Y6pg9k78x+uiqs88iO7r+byre5Yucyj6c9WZa9OvVq4/dd4fe73zv14++3/N630++UX5169d6J+39yNusHAODcvd34c25V8bNm079YL+ff/wEAAIBSiLl/MMxE/gcAAIDKiLl/KMxE/gcAAIDKiLl/OMykJvn/4dt2vfDWE1l6N8D5IJ4fd8N9dxTbxY73XPh6bH5BfvpHvz3ywlefWN5tD2ZZ9qt7P9Bx+4fviOsqnIjr/HDr6Ytcdc2ybv+hBxa2a37/hDO7iuuP92e5h0HsKr80sbVxvWOPTjXmy/dmjXn/3DNPFddffB23P72t2P5vwpuW7Dk40HL5zWE9m8IcC+8pc9+ehf2Qz3i5F9Z/6F8v/+zC7cXLDWx8d+NuPv/HxfXG94h67vJi+3i/l1r/v3ztuy/k2z9yXef1PzHYef2nw/W+FuYvdxfbN+/zrzat/0/D+uPtxctt+dYPO67/xfcV278YjotvhNm+/rv+4oNvdXq84u3sub24XLz9yf/d3rhcvL54/e3rH31iqmV/tF//y28W17P7yz8fat4+nh5vJ3ro9tbjeyA8vi098izLvvtnWct+zj5SXO6f29Yfr+/E7Z3Xf3PbOk8MXNO4/ML9Wddyv77+d1s73t+4nj3/uK7l/jx3d9h/b078KL/e0/eH4zGc/3+vFNfX/l6mL97d+noTt//GuuJ5G69vom39z7Wtf+6afN/1Xv89bxbrf/HO1S3r3/OJcDzdU8xe6z/0t5e1XP6b3ykej5NfGT92fObU4QNNe7X5ebx6dM3aSy5917svC6+l7V/vPT778PTJscmxySwbK+FbBq70+r8V5v8UY+7C30LhJz8vjrtnP1l837rhF8XXz4XTHwqPZ/z++PW/Hmk5Xtsf97k7i3m+678prGO53ve1/7pmWRue/vxLp/7pT15v/7kg3p8T7x1t3L/nN1zZOG/g5eL89terXv7zva3P658OTzbmD8J+nQ/vzLzxyuL22q8/vjfJs58unr/xJ7l4+azt/UTWDbXej/Nd/0/DzzE/vKr19S8eHz94ou3dnNdlA/kS5sLrQzZXnB+3ivv72TNXdry9+D482dz7z2aZS5p5dGbiyOFjpx6ZmJ2emZ2YefSxvUePnzo2u7fx3qV7v9jr8gvP77WN5/eB6Z3bs8az/XgxVtjFXv+JB/YfuHXy+gPTB/edOjj7wInpk4f2z8zsnz4wc/2+gwenv9Lr8ocP7J7aumvbrVvHDx0+sPu2Xbu27Ro/fOx4voxiUT3snPzS+LGTexsXmdm9fdfUjh3bJ8ePHj8wvfvWycnxU70u3/jeNJ5f+svjJ6eP7Js9fHR6fObwY9O7p3bt3Lm157s/Hj1xcGZs4uSpYxOnZqZPThT3ZWy2cXL+va/X5amHmePh9a7NQPjp/HM370zvj5v79pNLXlWxSeuPp9kb4b2g4ve3Xl/H3D8SZlKT/A8AAAB1EHN/eOP/hTPkfwAAAKiMmPtXh5nI/wAAAFAZMfcXyX80ffx7XfL/her/P6n/36D/r/+f6f8n+v/6/5n+v/5/D/r/+v9lXr/+v/4/vfVb/z/k/mxNlvn3fwAAAKiomPvXhpnI/wAAAFAZMfdfEmYi/wMAAEBlxNx/aZhJTfK/z//X/9f/79b/j9vq/2f6//3Q/9/03/r/i+j/6/9n+v/n7GL358u+/j7s/6/R/6ff9Fv/P+b+d4WZ1CT/AwAAQB3E3P/uMBP5HwAAACoj5v7LwkzkfwAAAKiMmPvXhZnUJP/r/+v/6//7/H/9/9L0/33+fwf6//r/mf7/ObvY/fmyr78P+/8+/5++02/9/5j7fy3MpCb5HwAAAOog5v73hJnI/wAAAFAZMfdfHmYi/wMAAEBlxNx/RZhJTfJ/Pfv/r2VZpv+f6f/r/7etU/9f/38l6P/r/3ej/6//X+b16//r/9Nbv/X/Y+5/b5hJTfI/AAAA1EHM/VeGmcj/AAAAUBkx978vzET+BwAAgMqIuf+qMJOa5P969v99/r/+f0H/v3Wd+v/6/ytB/1//vxv9f/3/Mq9f/1//n976rf8fc//7w0xqkv8BAACgDmLuvzrMRP4HAACAyoi5/wNhJvI/AAAAVEbM/evDTGqS//X/9f/1//X/9f/1/1dSufr/g0ueo/9f0P9vdeH6/3MLC9D/L8369f/1/+mt3/r/Mfd/MMykJvkfAAAA6iDm/g+Fmcj/AAAAUBkx918TZiL/AwAAQGXE3D8WZlKT/K//r/+v/6//r/+v/7+SytX/X5r+f0H/v5XP/9f/1//X/6e7fuv/x9y/IcykJvkfAAAA6iDm/o1hJvI/AAAAVEbM/deGmcj/AAAAUBkx928KM6lJ/tf/1//X/9f/1//X/19J+v/6/93o/+v/l3n9+v/6//TWb/3/mPuvCzOpSf4HAACAOoi5//owE/kfAAAAKiPm/hvCTOR/AAAAqIyY+zeHmdQk/+v/6//r/5e4/z+k/5/p//c9/X/9/270//X/y7x+/X/9f3rrt/5/zP03hpnUJP8DAABAHcTcf1OYifwPAAAAlRFz/81hJvI/AAAAVEbM/eNhJjXJ//r/+v/6/yXu//v8/5b16//3J/1//f9u9P/1/8u8fv1//X9667f+f8z9t4SZ1CT/AwAAQB3E3L8lzET+BwAAgMqIuX8izET+BwAAgMqIuX8yzKQm+V//X/9f/1//X/9f/38l6f/r/3ej/6//X+b16//r/9Nbv/X/Y+6fCjOpSf4HAACAOoi5f2uYifwPAAAAlRFz/7YwE/kfAAAAKiPm/u1hJjXJ/yXp/29JBSj9f/1//X/9f/3/UtH/1//vRv9f/7/M69f/1/+n1WCH0/qt/x9z/44wk5rkfwAAAKiDmPt3hpnI/wAAAFAZMfffGmYi/wMAAEBlxNx/W5hJTfJ/Sfr/Pv9f/1//v4n+v/5/mej/6/93o/+v/1/m9ev/6//TW7/1/2Pu3xVmUpP8DwAAAHUQc/+Hw0zkfwAAAKiMmPtvDzOR/wEAAKBUOn0OYRRz/0fCTGqS//X/q97/n1+t/6//r//fff36/ytL/1//vxv9f/3/Mq9f/1//n976rf8fc//uMJOa5H8AAACog5j77wgzkf8BAACgMmLuvzPMRP4HAACAyoi5f0+YSU3yv/5/1fv/Pv9f/1//v9f69f9Xlv6//n83+v/l7P+HH1v0//uo/58fQ/r/9KN+6//H3H9XmElN8j8AAADUQcz9Hw0zkf8BAACgMmLu/1iYifwPAAAAlRFz/8fDTGqS//X/9f/1//X/9f/1/1eS/v+K9f8bL4X6/wX9/3NzsfvzZV9/P/X/ff4//arf+v8x998dZlKT/A8AAAB1EHP/J8JM5H8AAACojJj7fz3MRP4HAACAyoi5/54wk5rkf/1//X/9f/1//X/9/5Wk/+/z/7vR/9f/L/P69f/1/+mt3/r/Mff/RphJTfI/AAAA1EHM/feGmcj/AAAAUBkx938yzET+BwAAgJJZteQ5Mff/ZphJTfJ/+fr/Y6Xs/w+m69f/1//X/9f/1/+/kPT/9f8z/f9zdrH782Vfv/6//j+99Vv/P+b+3wozqUn+BwAAgDqIuf9TYSbyPwAAAFRGzP2/HWYi/wMAAEBlxNx/X5hJTfL/he7/t1++G5//r/+f6f/r/+v/6/+fJ/1//f9M//+cXez+fNnXr/+v/09v/db/j7n/d8JMapL/AQAAoA5i7r8/zET+BwAAgD718FlfIub+T4eZyP8AAABQGTH3fybMpCb5v3yf/6//r/+v/6//r/9fJvr/+v/d6P/r/5d5/fr/+v/01m/9/5j7HwgzqUn+BwAAgDqIuf+zYSbyPwAAAFRGzP2/G2Yi/wMAAEBlxNz/e2EmNcn/+v/6//r/+v/6//r/K0n/f3H/P38N0/8v6P/r/5d5/fr/+v/01m/9/5j7PxdmUpP8DwAAAHUQc//vh5nI/wAAAFAZMff/QZiJ/A8AAACVEXP/g2EmNcn/+v/6//r/+v/6//r/K0n/3+f/d6P/r/9f5vXr/+v/01u/9f9j7v98mElN8j8AAADUQcz9fxhmIv8DAABAZcTcvzfMRP4HAACAyoi5/6Ewk5rkf/1//X/9f/1//X/9/5Wk/6//343+v/5/mdev/6//T2/91v+PuX9fmMme1psBAAAAyivm/i+EmdTk3/8BAACgDmLu3x9mIv8DAABAZcTcfyDMpCb5X/9f/1//X/9f/1//fyXp/+v/d6P/r/9f5vXr/+v/01u/9f9j7p8OM6lJ/gcAAIA6iLn/YJiJ/A8AAACVEXP/oTAT+R8AAAAqI+b+h8NMapL/9f/1//X/a9v/f+V7bevU/9f/Xwn6//r/3ej/6/+Xef36//r/9NZv/f+Y+w+HmdQk/wMAAEAdxNz/xTAT+R8AAAAqI+b+L4WZyP8AAABQGTH3HwkzqUn+1//X/9f/r23/f3mf/79m4Xb1//X/z4X+v/5/N/r/+v9lXr/+v/4/vfVb/z/m/qNhJjXJ/wAAAFAHMfcfCzOR/wEAAKAyYu4/HmYi/wMAAEBlxNx/IsykJvlf///s+v8DS3QD9f87r1//vwL9/yb6//r/50L/X/+/G/1//f8yr1//X/+f3vqt/x9z/x+FmdQk/wMAAEAdxNx/MsxE/gcAAIDKiLl/JsxE/gcAAIDKiLl/NsykJvlf/9/n/+v/6//r/+v/ryT9f/3/bvT/9f/LvH79f/1/euu3/n/M/afCTGqS/wEAAKAO/p+9+8zV66riOPziYHCEmEOmwAgYAmNAYgz0ktBDh9B7C72ZDqH33nvvPRB6lUC5XmsFO77nXNv39d1nr+f5kAU3SNlRzIe/nJ9O7v77xy32PwAAAEwjd/8D4hb7HwAAAKaRu/+BcUuT/a//1//r//X/+n/9/z7p//X/S/T/+v8tv1//r/9n3Wj9f+7+B8UtTfY/AAAAdJC7/8Fxi/0PAAAA08jd/5C4xf4HAACAaeTuf2jc0mT/6//1//p//b/+X/+/T/p//f8S/b/+f8vv1//r/1k3Wv+fu/9hcUuT/Q8AAAAd5O5/eNxi/wMAAMA0cvc/Im6x/wEAAGAaufuvj1ua7H/9v/5f/7/B/v+u+n/9/3bo//X/S/T/+v8tv1//r/9n3Wj9f+7+G+KWJvsfAAAAOsjd/8i4xf4HAACAaeTuf1TcYv8DAADANHL3PzpuabL/9f/6f/3/Bvt/3//X/2+I/l//v0T/r//f8vv1//p/1o3W/+fuf0zc0mT/AwAAQAe5+x8bt9j/AAAAMI3c/Y+LW+x/AAAAmEbu/sfHLU32v/5f/6//1//r//X/+6T/1/8v0f/r/7f8fv2//p91e+//73PjwT1q/5+7/8a4pcn+BwAAgA5y9z8hbrH/AQAAYBq5+58Yt9j/AAAAMI3c/U+KW5rsf/2//v+O/v+/d9H/6//1/3f8XP9/PPT/+v8l+n/9/5bfr//X/7Nu7/3/Su9/4X/P3f/kuKXJ/gcAAIAOcvc/JW6x/wEAAGAaufufGrfY/wAAADCN3P1Pi1ua7H/9v/7f9//1//p//f8+6f+H7f8v/L/e+fT/R6L/1/8f1v/f+wjv1//TwWj9f+7+p8ctTfY/AAAAdJC7/xlxi/0PAAAA08jdf1PcYv8DAADANHL3PzNuabL/9f/6f/2//v/8/v9Uy/7/9p/p//dD/z9s/79M/38k+n/9v+//6/9ZNlr/n7v/WXFLk/0PAAAAHeTuf3bcYv8DAADANHL3Pydusf8BAABgGrn7nxu3NNn/+n/9v/5f/39F3/+/Zo7+3/f/90f/r/9fov/X/2/5/fp//T/rRuv/c/c/L25psv8BAABgeqd2tfufH7fY/wAAADCN3P0viFvsfwAAAJhG7v4Xxi1N9r/+X/+v/9f/X1H/P8n3//X/+6P/1/8vOWr/v9P/19+L/n+c9+v/9f+sG63/z93/orilyf4HAACADnL3vzhusf8BAABgGrn7XxK32P8AAAAwjdz9L41bmux//b/+X/+v/9f/6//3Sf+v/1/i+//6/y2/X/+v/2fdaP1/7v6XxS1N9j8AAAB0kLv/5XGL/Q8AAADTyN3/irjF/gcAAIBp5O5/Zdxy4f4/dTVfdfXo//X/+n/9v/5f/79P+n/9/xL9/8X7/zOH/PX0/2O9X/+v/2fdaP1/7v6b4xa//w8AAADTyN3/qrjF/gcAAIBp5O5/ddxi/wMAAMA0cve/Jm5psv8P6/9vu8e5P6//Pxr9/8Xfr//X/+v/9f/6f/3/Ev2/7/9v+f36f/0/60br/3P3vzZuabL/AQAAoIPc/a+LW+x/AAAAmEbu/tfHLfY/AAAATCN3/xvilib7//i//3+d/l//r/+Pq//X/+v/9f/6/2X6f/3/lt+v/9f/s260/j93/xvjlib7HwAAADrI3f+muMX+BwAAgGnk7n9z3GL/AwAAwDRy978lbmmy/4+///f9f/3/Jfb/p/T/Sf8f/1z1//r/S6D/1//v9P+X7aT7+a2/X/+v/2fdaP1/7v6zB1Ov3/4HAACADs4e/PHM7q1xi/0PAAAA08jd/7a4xf4HAACAaeTuf3vc0mT/6//1/yfe//v+f9H/xz9X/b/+/xLo//X/O/3/ZTvpfn7r79f/6/9ZN1r/n7v/HXFLk/0PAAAAHeTuf2fcYv8DAADANGL3n/uX3+1/AAAAmNK7Dv54ZvfuuKXJ/m/c/193pf3/tf/3n/X/F3+//v9Y+v+zF/7a0//r/7dE/6//X6L/1/9v+f3j9P/xg+v1/4xntP4/d/974pYm+x8AAAA6yN3/3rjF/gcAAIBp5O6/JW6x/wEAAGAaufvfF7c02f+N+/9Jvv9/31vjBfr/eft/3/+Pq//X/1+M/l//v9P/X7aT7ue3/v5x+n/f/2dco/X/ufvfH7c02f8AAADQQe7+D8Qt9j8AAABMI3f/B+MW+x8AAACmkbv/Q3FLk/2v/996/+/7//p//b/+f2z6f/3/Ev2//n/L79f/6/9ZN1r/n7v/w3FLk/0PAAAAHeTu/0jcYv8DAADANHL3fzRusf8BAABgGrn7Pxa3NNn/+n/9/776/9v/Ivr/Jv3/Dfr/nf7/UPp//f8S/b/+f8vv1//r/1k3Wv+fu//jcUuT/Q8AAAAd5O7/RNxi/wMAAMA0cvd/Mm6x/wEAAGAaufs/FTfc654n96TjdfqQn0dvrv/X//v+v/7f9//1//uk/9f/L9H/6/+3/H79v/6fdaP1/7n7Px23+P1/AAAAmEbu/s/ELfY/AAAATCN3/2fjFvsfAAAAppG7/3NxS5P9r//X/+v/N9v/X6v/P//9+v8x6f/1/0v0//r/Lb9f/6//Z91o/X/u/s/HLU32PwAAAHSQu/8LcYv9DwAAANPI3f/FuMX+BwAAgGnk7v9S3NJk/+v/9f/6/832/77/f8H79f9j0v/r/5fo//X/W36//l//z7rR+v/c/V+OW5rsfwAAAOggd/9X4hb7HwAAAKaRu/+rcYv9DwAAANPI3f+1uKXJ/tf/6//1//p//b/+f5/0//r/Jfp//f+W36//1/+zbrT+P3f/1+OWJvsfAAAAOsjd/424xf4HAACAaeTu/2bcYv8DAADANHL3fytuabL/Z+7/l/5n+v9z9P/6/53+X/+/Z/p//f8S/b/+f8vv1//r/1k3Wv+fu//bcUuT/Q8AAAAd5O7/Ttxi/wMAAMA0cvd/N26x/wEAAGAaufu/F7c02f8z9/9L9P/n6P/1/zv9v/5/z/T/+v8l+n/9/5bfr//X/7PuhPr/07tD+v/c/d+PW5rsfwAAAOggd/8P4hb7HwAAAKaRu/+HcYv9DwAAANPI3f+juGWe/X+/Wxb+pP7/2Pv/g19E+n/9/07/r//X/x/Q/+v/l+j/9f9bfr/+X//PutG+/5+7/8dxyzz7HwAAANrL3f+TuMX+BwAAgGnk7v9p3GL/AwAAwDRy9/8sbmmy//X/vv+v/2/V/1+z0//r/68y/b/+f4n+X/+/5ffr//X/rBut/8/d//O4pcn+BwAAgA5y9/8ibrH/AQAAYBq5+38Zt9j/AAAAMI3c/b+KW5rsf/2//l//36r/9/1//f9Vp//X/y/R/+v/t/z+7P/z153+X//PnY3W/+fu/3Xc0mT/AwAAQAe5+38Tt9j/AAAAMI3c/b+NW+x/AAAAmEbu/t/FLU32v/5f/6//1//r//X/+6T/1/8v0f/r/7f8ft//1/+zbrT+P3f/rXFLk/0PAAAAHeTu/33cYv8DAADANHL3/yFusf8BAABgGrn7b4tbmux//b/+f8r+/+76f/2//n8U+n/9/xL9v/5/y+/X/+v/WTda/5+7/49xS5P9DwAAAB3k7v9T3GL/AwAAwDRy9/85brH/AQAAYBq5+/8StzTZ//p//f+l9/+n6+972P7f9//1//r/Yczb/99N/6//v+L+/6abz/1Y/7/N9+v/9f+sG63/z93/17ilyf4HAACADnL3/y1usf8BAABgGrn7/x632P8AAAAwjdz9/4hbmux//b/+f8rv/+v/9f/6/2HM2//7/r/+3/f/9f/6f/0/a0br/3P3/zNuabL/AQAAoIPc/f+KW+x/AAAAmEbu/n/HLfY/AAAATCN3/3/ilib7X/+v/9f/6//1//r/fdL/6/+X6P/1/1t+v/5f/8+60fr/3P3/CwAA//8gszKL") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000001c0)) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x300f000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) symlinkat(&(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.517533161s ago: executing program 4 (id=2725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x0, 0x0, 0x986, 0x2, 0x10, 0x8}, 0x9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$pptp(0x18, 0x1, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) 5.197111553s ago: executing program 3 (id=2726): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000480)='configfs\x00', 0x0, 0x0) lchown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 4.380233351s ago: executing program 3 (id=2727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x3304, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}}) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x2200c0c0) socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r7 = fanotify_init(0x0, 0x400) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r7, 0x1, 0x40001019, r6, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 4.314483554s ago: executing program 4 (id=2728): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800080, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}]}, 0x3, 0x452, &(0x7f0000000400)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xf5ffffff}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 2.552389299s ago: executing program 2 (id=2729): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f00000002c0)={0xffff, 0x0, 0x0, 0x7fff, 0xff, "db2d416fbecfb84b5452b768e08ee2df361089"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x9, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x80000, "340b7832ceefdad118cf501922d6974a270000c50f0000002ddc7d00"}) ppoll(&(0x7f0000000200)=[{r7}, {}], 0x2, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) lchown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 2.441661029s ago: executing program 3 (id=2730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000380)={0x6, 0x5ac}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x42, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) 2.352683043s ago: executing program 4 (id=2731): r0 = creat(0x0, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea", 0x1b) write$qrtrtun(r0, &(0x7f0000000240)="25375468d806d8f58187445ffe9858217350a60bd72487386e5fed8ee07cb6f6b4ecc8a6356cee94d42a3c", 0x2b) write$qrtrtun(r0, &(0x7f0000000900)="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", 0x380) write$qrtrtun(r0, &(0x7f00000003c0)="b9f7e454d6ce3c38320af2cda788e32c79a152b0dc36b2bdac6494a7d1f3e718f268a55c29480f0c36d8de3d666657e1c58c0671d27052696b64bf2cf998704531acab8307b461abd2114803c92b859af1cdb90146a0a7f9fda2caaafd343e27d9ba0b64116c2e14d29cb7724e586d10e855df2a9454146707f0344bc54b5b9f242e838a44f606e4bb188b8f8518da43a4a1148582e2dd25", 0x98) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 1.385617839s ago: executing program 4 (id=2732): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x44, 0x0, 0x400, 0x0, 0x25dfdbfc, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, r8, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3a}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7e2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "1bc8bb9fd2de98b76c623afd67976a361d5ec53a17950cc5d125f191eb12492db9"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4048010}, 0x20000040) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) mknodat$loop(r4, &(0x7f0000000400)='./file0/file0\x00', 0x4, 0x1) ioctl$EVIOCGKEY(r9, 0x80404518, &(0x7f0000000c40)=""/122) 50.531915ms ago: executing program 4 (id=2733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 44.275915ms ago: executing program 2 (id=2734): syz_usb_connect(0x6, 0x24, &(0x7f0000000480)=ANY=[], 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 0s ago: executing program 3 (id=2735): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x28}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) syz_open_dev$loop(&(0x7f0000000280), 0xc65, 0x20000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="90", 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r7 = syz_open_dev$cec(0x0, 0x0, 0x100) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000000)={"34e17141", 0x200, 0x5, 0x8, 0x5, 0x6d, "8a86ccfd751b15dac5ddb6f309fe93", "2f2c30e1", "39ad577c", "f119ab00", ["5d086e6b8476dc731c55f35c", "749e9fffef9ad43460f115b1", "681218fcfcdc175ade9e1fc0", "f6c7fdde06da7e3140431a04"]}) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f00000000c0)={0x1, 0xc, 0x5, 0x8, 0x8000, 0x3fe, "a20a069f416ef72504d1690ea4e7e0ef", 0x3, 0x7, 0x2, 0x9, 0x6, 0xf4, 0xff}) kernel console output (not intermixed with test programs): oo small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.985494][T15263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.324667][T15395] Cannot find set identified by id 0 to match [ 1117.942223][T15389] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2164'. [ 1117.964484][T15389] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2164'. [ 1118.022987][T14893] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.435693][T15263] hsr_slave_0: entered promiscuous mode [ 1118.490432][T15263] hsr_slave_1: entered promiscuous mode [ 1118.519427][T15263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1118.555369][T15263] Cannot create hsr debugfs directory [ 1118.919016][ T29] audit: type=1326 audit(1731292363.211:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.4.2168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a5d57e719 code=0x0 [ 1118.950232][T14893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1119.027561][T14893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1119.118498][T11276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1119.130247][T11276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1119.139343][T11276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1119.150595][T11276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1119.158293][T11276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1119.165902][T11276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1119.245016][T11655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.252310][T11655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.276951][T11655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.284109][T11655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.497619][T15404] ip6gretap0 speed is unknown, defaulting to 1000 [ 1120.191894][ T2989] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.269005][T15409] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2169'. [ 1120.278235][T15409] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2169'. [ 1120.567780][ T2989] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.728408][ T2989] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.968684][ T2989] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.219924][T11276] Bluetooth: hci3: command tx timeout [ 1121.655433][T15424] netlink: 'syz.4.2172': attribute type 1 has an invalid length. [ 1121.663310][T15424] netlink: 'syz.4.2172': attribute type 2 has an invalid length. [ 1123.388141][ T5854] Bluetooth: hci3: command tx timeout [ 1125.381485][T15404] chnl_net:caif_netlink_parms(): no params data found [ 1125.463219][T11276] Bluetooth: hci3: command tx timeout [ 1125.509551][ T2989] bridge_slave_1: left allmulticast mode [ 1125.515228][ T2989] bridge_slave_1: left promiscuous mode [ 1125.593974][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.635763][ T2989] bridge_slave_0: left allmulticast mode [ 1125.768975][ T2989] bridge_slave_0: left promiscuous mode [ 1125.774766][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.863995][T15440] loop4: detected capacity change from 0 to 4096 [ 1125.944187][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1125.972929][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1126.039291][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1126.105435][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1126.113884][ T5854] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1126.128489][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1127.587973][T11276] Bluetooth: hci3: command tx timeout [ 1128.188913][T11276] Bluetooth: hci4: command tx timeout [ 1128.431652][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.462247][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.504506][ T2989] bond0 (unregistering): Released all slaves [ 1128.760790][T15458] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2180'. [ 1128.775853][T15458] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2180'. [ 1129.598957][ T2989] tipc: Disabling bearer [ 1129.619307][ T2989] tipc: Left network mode [ 1129.673101][T15404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.698126][T15404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.913925][T15404] bridge_slave_0: entered allmulticast mode [ 1129.987872][T15404] bridge_slave_0: entered promiscuous mode [ 1130.114869][T15404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.157517][T15404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.303892][T15404] bridge_slave_1: entered allmulticast mode [ 1130.312558][T15404] bridge_slave_1: entered promiscuous mode [ 1130.320001][T11276] Bluetooth: hci4: command tx timeout [ 1130.378514][T15474] loop2: detected capacity change from 0 to 8 [ 1130.606800][T15443] ip6gretap0 speed is unknown, defaulting to 1000 [ 1130.769951][T15474] SQUASHFS error: Unable to read inode 0xe3 [ 1130.792450][T15471] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2182'. [ 1130.814728][T15471] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2182'. [ 1132.035242][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 1132.043269][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 1132.327510][T15480] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2185'. [ 1132.339923][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 1132.346023][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 1132.352541][T11276] Bluetooth: hci4: command tx timeout [ 1132.361971][T15484] ceph: No mds server is up or the cluster is laggy [ 1132.369507][T15480] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2185'. [ 1132.412323][T15404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.986786][T15498] netlink: 'syz.2.2189': attribute type 1 has an invalid length. [ 1132.994772][T15498] netlink: 'syz.2.2189': attribute type 2 has an invalid length. [ 1133.880659][T15263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1134.056647][T15404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.185962][T15263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1134.208865][T15263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1134.419268][T11276] Bluetooth: hci4: command tx timeout [ 1134.537258][T15404] team0: Port device team_slave_0 added [ 1134.617081][T15404] team0: Port device team_slave_1 added [ 1134.851380][T15504] Unsupported ieee802154 address type: 0 [ 1134.862056][T15263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1134.886436][ T2989] hsr_slave_0: left promiscuous mode [ 1134.960640][T15509] netlink: 'syz.7.2193': attribute type 1 has an invalid length. [ 1134.968569][T15509] netlink: 'syz.7.2193': attribute type 2 has an invalid length. [ 1135.836400][ T2989] hsr_slave_1: left promiscuous mode [ 1135.850297][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1135.857726][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1136.079729][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1136.194023][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.621358][ T2989] veth1_macvtap: left promiscuous mode [ 1136.627099][ T2989] veth0_macvtap: left promiscuous mode [ 1136.633040][ T2989] veth1_vlan: left promiscuous mode [ 1136.638819][ T2989] veth0_vlan: left promiscuous mode [ 1137.399291][T14506] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1139.957537][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 1140.050173][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 1140.273752][T14506] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1140.286245][T14506] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1140.298033][T14506] usb 5-1: can't read configurations, error -71 [ 1140.969498][T15404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.995740][T15404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.038600][T15404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.312543][T15443] chnl_net:caif_netlink_parms(): no params data found [ 1141.395557][T15404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.492384][T15404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.602122][T15404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.046488][T15404] hsr_slave_0: entered promiscuous mode [ 1142.283951][T15404] hsr_slave_1: entered promiscuous mode [ 1142.298989][T15404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1142.306807][T15404] Cannot create hsr debugfs directory [ 1144.218482][T15555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2205'. [ 1145.064636][T15555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2205'. [ 1145.077339][T15563] Unsupported ieee802154 address type: 0 [ 1146.294827][T15571] loop2: detected capacity change from 0 to 1024 [ 1146.432195][T15263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.452926][T15443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.463892][T15443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.479364][T15443] bridge_slave_0: entered allmulticast mode [ 1146.489446][T15443] bridge_slave_0: entered promiscuous mode [ 1146.719107][T15263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.748428][T15443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.818739][T15578] netlink: 'syz.7.2210': attribute type 1 has an invalid length. [ 1146.826788][T15578] netlink: 'syz.7.2210': attribute type 2 has an invalid length. [ 1146.905496][T15443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.932142][T15443] bridge_slave_1: entered allmulticast mode [ 1147.562653][T15443] bridge_slave_1: entered promiscuous mode [ 1147.976499][T15263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1147.986979][T15263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1148.092873][ T8397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.100172][ T8397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.126145][ T8397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.133305][ T8397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.202190][T15443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.479737][T15443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.815428][T15443] team0: Port device team_slave_0 added [ 1149.882076][T15263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.299529][T15612] netlink: 'syz.7.2216': attribute type 1 has an invalid length. [ 1151.307381][T15612] netlink: 'syz.7.2216': attribute type 2 has an invalid length. [ 1152.443677][T15443] team0: Port device team_slave_1 added [ 1153.761821][T15618] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2218'. [ 1153.777743][T15618] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2218'. [ 1153.883936][T15443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.891234][T15443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.917624][T15443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.950691][T15443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.957974][T15443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.984284][T15443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.686037][T15627] netlink: 'syz.2.2220': attribute type 1 has an invalid length. [ 1154.694044][T15627] netlink: 'syz.2.2220': attribute type 2 has an invalid length. [ 1156.054550][T15635] usb usb8: usbfs: process 15635 (syz.2.2223) did not claim interface 0 before use [ 1156.829164][T15639] Unsupported ieee802154 address type: 0 [ 1157.309727][T15443] hsr_slave_0: entered promiscuous mode [ 1157.322160][T15443] hsr_slave_1: entered promiscuous mode [ 1157.339692][T15443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1157.347534][T15443] Cannot create hsr debugfs directory [ 1157.542216][ T1084] bridge_slave_1: left allmulticast mode [ 1157.547914][ T1084] bridge_slave_1: left promiscuous mode [ 1157.554543][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.564432][ T1084] bridge_slave_0: left allmulticast mode [ 1157.571200][ T1084] bridge_slave_0: left promiscuous mode [ 1157.576965][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.046256][T15648] loop7: detected capacity change from 0 to 1024 [ 1158.092123][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1158.108484][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1158.117975][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1158.125370][ T1195] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1158.144530][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1158.359003][T11757] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1158.367332][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1159.021579][ T1195] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1159.033179][ T1195] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1159.043407][ T1195] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1159.067114][ T1195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.100945][T15646] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1159.121283][ T1195] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1159.149761][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.243625][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.276106][ T1084] bond0 (unregistering): Released all slaves [ 1159.464385][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.530003][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.571006][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.591413][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.727388][T15659] netlink: 'syz.7.2229': attribute type 1 has an invalid length. [ 1159.735322][T15659] netlink: 'syz.7.2229': attribute type 2 has an invalid length. [ 1160.627217][T15655] loop2: detected capacity change from 0 to 32768 [ 1160.711815][T15649] ip6gretap0 speed is unknown, defaulting to 1000 [ 1160.719133][T15667] netlink: 'syz.7.2230': attribute type 1 has an invalid length. [ 1160.738127][T15655] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1160.753360][T15667] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2230'. [ 1160.800548][ T1084] hsr_slave_0: left promiscuous mode [ 1160.809812][ T1084] hsr_slave_1: left promiscuous mode [ 1160.818455][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.828030][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.876250][T15655] XFS (loop2): Ending clean mount [ 1160.904965][T15655] XFS (loop2): Quotacheck needed: Please wait. [ 1160.982645][T15655] XFS (loop2): Quotacheck: Done. [ 1161.060142][ T5854] Bluetooth: hci0: command tx timeout [ 1161.101725][ T5842] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1161.292856][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 1161.337394][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 1161.829563][T15678] Cannot find set identified by id 0 to match [ 1162.678449][ T9] usb 5-1: USB disconnect, device number 21 [ 1163.150821][ T5854] Bluetooth: hci0: command tx timeout [ 1163.280051][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1163.301571][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1164.681637][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1164.687691][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1164.735746][T15683] ceph: No mds server is up or the cluster is laggy [ 1165.219839][ T5854] Bluetooth: hci0: command tx timeout [ 1165.220219][T15702] loop2: detected capacity change from 0 to 512 [ 1165.336162][T15702] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1165.351899][T15702] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 1167.908656][ T5854] Bluetooth: hci0: command tx timeout [ 1168.444218][T15404] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1168.476333][T15404] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1169.884643][T15404] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1170.319122][T15649] chnl_net:caif_netlink_parms(): no params data found [ 1170.568312][T15404] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1170.679577][T14580] libceph: connect (1)[c::]:6789 error -101 [ 1170.884745][T14580] libceph: mon0 (1)[c::]:6789 connect error [ 1171.259237][T14580] libceph: connect (1)[c::]:6789 error -101 [ 1171.265664][T14580] libceph: mon0 (1)[c::]:6789 connect error [ 1171.434062][T15753] ceph: No mds server is up or the cluster is laggy [ 1171.712500][T15765] usb usb8: usbfs: process 15765 (syz.4.2251) did not claim interface 0 before use [ 1172.549819][T15649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.557180][T15649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.575443][T15649] bridge_slave_0: entered allmulticast mode [ 1172.800206][T15649] bridge_slave_0: entered promiscuous mode [ 1172.901122][T15776] siw: device registration error -23 [ 1173.527148][T15404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.545166][T15649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.843314][T15649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.864000][T15649] bridge_slave_1: entered allmulticast mode [ 1173.892446][T15649] bridge_slave_1: entered promiscuous mode [ 1177.438499][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.535500][T15649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.646680][T15649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.385613][T15649] team0: Port device team_slave_0 added [ 1179.459743][T15443] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1179.506328][T15443] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1179.518500][T11276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1179.691020][T11276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1179.757991][T11276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1179.809789][T15825] netlink: 'syz.4.2261': attribute type 1 has an invalid length. [ 1179.837854][T15825] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2261'. [ 1180.309236][T15830] Cannot find set identified by id 0 to match [ 1180.712671][T11276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1180.850378][T11276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1180.857936][T11276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1180.931862][T15649] team0: Port device team_slave_1 added [ 1181.760494][T15843] loop2: detected capacity change from 0 to 512 [ 1181.793567][T15843] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1181.829028][T15443] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1181.844249][T15843] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 1182.198664][T15813] ip6gretap0 speed is unknown, defaulting to 1000 [ 1183.009610][T11276] Bluetooth: hci5: command tx timeout [ 1183.247082][T15851] loop7: detected capacity change from 0 to 512 [ 1184.398583][T15851] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1184.412201][T15851] EXT4-fs (loop7): SIPHASH is not a valid default hash value [ 1184.468368][T15649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.488846][T15649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.534067][T15649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.546886][T15649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.554210][T15649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.580470][T15649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.743012][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1184.754983][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1184.769074][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1184.778207][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1184.786661][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1184.794216][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1185.112776][T15868] Bluetooth: hci5: command tx timeout [ 1186.433343][T15649] hsr_slave_0: entered promiscuous mode [ 1187.398052][T15868] Bluetooth: hci3: command tx timeout [ 1187.405250][T15868] Bluetooth: hci5: command tx timeout [ 1188.267629][T15649] hsr_slave_1: entered promiscuous mode [ 1189.502555][T15868] Bluetooth: hci3: command tx timeout [ 1189.508042][T11757] Bluetooth: hci5: command tx timeout [ 1189.618331][T15914] usb usb8: usbfs: process 15914 (syz.2.2277) did not claim interface 0 before use [ 1190.407017][T15907] loop7: detected capacity change from 0 to 4096 [ 1190.739063][ T1084] bridge_slave_1: left allmulticast mode [ 1190.744861][ T1084] bridge_slave_1: left promiscuous mode [ 1190.751222][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.760907][ T1084] bridge_slave_0: left allmulticast mode [ 1190.766600][ T1084] bridge_slave_0: left promiscuous mode [ 1190.772697][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.603957][T11757] Bluetooth: hci3: command tx timeout [ 1193.709014][T11757] Bluetooth: hci3: command tx timeout [ 1196.557845][T15954] 9pnet_fd: Insufficient options for proto=fd [ 1197.979868][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.999441][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1198.012837][ T1084] bond0 (unregistering): Released all slaves [ 1198.177661][T15855] ip6gretap0 speed is unknown, defaulting to 1000 [ 1198.570771][ T1084] hsr_slave_0: left promiscuous mode [ 1198.583755][ T1084] hsr_slave_1: left promiscuous mode [ 1198.623204][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.673372][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1199.424786][T15995] loop2: detected capacity change from 0 to 4096 [ 1201.124242][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 1201.616870][T16022] fuse: Unknown parameter '0x0000000000000006' [ 1201.844675][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 1202.748191][T15813] chnl_net:caif_netlink_parms(): no params data found [ 1206.136635][T15813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.162300][T15813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.170121][T15813] bridge_slave_0: entered allmulticast mode [ 1206.177364][T15813] bridge_slave_0: entered promiscuous mode [ 1206.189897][T15813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.197079][T15813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.204401][T15813] bridge_slave_1: entered allmulticast mode [ 1206.211614][T15813] bridge_slave_1: entered promiscuous mode [ 1206.361651][T15813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.385054][T15813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.921547][T15813] team0: Port device team_slave_0 added [ 1207.953375][T15813] team0: Port device team_slave_1 added [ 1207.989763][T15855] chnl_net:caif_netlink_parms(): no params data found [ 1208.322469][T15813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.337966][T15813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.600115][T16101] usb usb8: usbfs: process 16101 (syz.2.2306) did not claim interface 0 before use [ 1209.333370][T15813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.352608][T15813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.370625][T15813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.153849][T15813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.375960][T15813] hsr_slave_0: entered promiscuous mode [ 1210.612819][T15813] hsr_slave_1: entered promiscuous mode [ 1210.632736][T15813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1210.642061][T15813] Cannot create hsr debugfs directory [ 1212.669333][T16127] fuse: Bad value for 'fd' [ 1213.572621][T16141] netlink: 'syz.7.2315': attribute type 1 has an invalid length. [ 1213.587382][T16141] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2315'. [ 1216.507684][T15855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.515524][T15855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.537911][T15855] bridge_slave_0: entered allmulticast mode [ 1216.610481][T15855] bridge_slave_0: entered promiscuous mode [ 1216.631363][T15649] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1216.860035][T16168] fuse: Bad value for 'fd' [ 1217.620895][T16167] loop7: detected capacity change from 0 to 128 [ 1217.649959][T15855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.657128][T15855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.660398][T16167] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1217.689162][T15855] bridge_slave_1: entered allmulticast mode [ 1217.716594][T16167] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1217.722334][T15855] bridge_slave_1: entered promiscuous mode [ 1217.772238][T15649] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1217.789804][T16167] ext4 filesystem being mounted at /331/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1217.918217][T15649] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1218.802959][T15649] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1219.026480][T15855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.100692][T15855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.257914][T15855] team0: Port device team_slave_0 added [ 1219.266236][T15855] team0: Port device team_slave_1 added [ 1219.312137][T15855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.324215][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.375872][T15855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.488144][T15855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.508988][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.586023][T15855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.781168][T15855] hsr_slave_0: entered promiscuous mode [ 1219.799765][T15855] hsr_slave_1: entered promiscuous mode [ 1219.813128][T15855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1219.824551][T15855] Cannot create hsr debugfs directory [ 1220.063206][T16190] loop4: detected capacity change from 0 to 512 [ 1220.139274][T16190] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1220.178167][T16190] EXT4-fs (loop4): SIPHASH is not a valid default hash value [ 1220.382437][ T1084] bridge_slave_1: left allmulticast mode [ 1220.423619][ T1084] bridge_slave_1: left promiscuous mode [ 1220.441170][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.614980][T16186] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1221.157527][ T1084] bridge_slave_0: left allmulticast mode [ 1221.192044][ T1084] bridge_slave_0: left promiscuous mode [ 1221.197720][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.227231][ T1084] bridge_slave_1: left allmulticast mode [ 1221.255714][ T1084] bridge_slave_1: left promiscuous mode [ 1221.272525][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.295669][ T1084] bridge_slave_0: left allmulticast mode [ 1221.314798][ T1084] bridge_slave_0: left promiscuous mode [ 1221.329404][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.439115][T15868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1221.462950][T15868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1221.496696][T15868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1221.514431][T15868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1221.522729][T15868] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1221.530444][T15868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1221.789624][ T9179] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1223.555910][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1223.578303][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.605139][ T1084] bond0 (unregistering): Released all slaves [ 1223.619035][T15868] Bluetooth: hci0: command tx timeout [ 1224.669456][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1224.681586][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1224.702506][ T1084] bond0 (unregistering): Released all slaves [ 1224.778536][T16202] ip6gretap0 speed is unknown, defaulting to 1000 [ 1224.895426][ T1084] hsr_slave_0: left promiscuous mode [ 1224.959039][ T1084] hsr_slave_1: left promiscuous mode [ 1225.041893][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.118379][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1225.590986][ T1084] hsr_slave_0: left promiscuous mode [ 1225.701305][T15868] Bluetooth: hci0: command tx timeout [ 1225.778152][ T1084] hsr_slave_1: left promiscuous mode [ 1225.784304][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.793083][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.411776][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 1226.481598][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 1226.975312][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 1227.022055][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 1227.403672][T15813] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1227.467709][T15813] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1227.835803][T16246] loop2: detected capacity change from 0 to 40427 [ 1227.852183][T15868] Bluetooth: hci0: command tx timeout [ 1227.877422][T16246] F2FS-fs (loop2): invalid crc value [ 1228.155977][T16246] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1228.207887][T16246] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1228.282486][T15813] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1228.338706][T15813] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1228.488437][T16253] netlink: 6 bytes leftover after parsing attributes in process `syz.7.2330'. [ 1229.643262][T15813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1229.678093][T15813] 8021q: adding VLAN 0 to HW filter on device team0 [ 1229.762470][ T8397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.769808][ T8397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1229.839787][T16202] chnl_net:caif_netlink_parms(): no params data found [ 1229.860269][T15868] Bluetooth: hci0: command tx timeout [ 1229.982556][T11655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.989724][T11655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.184299][T15855] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1230.239761][T15855] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1231.717583][T15855] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1231.729909][T15855] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1231.826100][T16202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.854503][T16202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.888423][T16202] bridge_slave_0: entered allmulticast mode [ 1231.954215][T16202] bridge_slave_0: entered promiscuous mode [ 1231.977865][T16202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.006409][T16202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.026806][T16202] bridge_slave_1: entered allmulticast mode [ 1232.054064][T16202] bridge_slave_1: entered promiscuous mode [ 1232.140136][ T962] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1233.208615][ T962] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1233.306956][ T962] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1233.373164][T16202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.403510][ T962] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1233.432371][T16202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.443358][ T962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.672773][T16297] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1233.685108][ T962] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1234.081462][T16297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.410981][T16297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.468231][T15813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.513952][T16202] team0: Port device team_slave_0 added [ 1234.554587][T16202] team0: Port device team_slave_1 added [ 1234.625108][T16297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.877456][T16297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.153070][T16330] loop4: detected capacity change from 0 to 40427 [ 1235.181924][T16330] F2FS-fs (loop4): invalid crc value [ 1235.270020][T16330] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1235.357943][T16330] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1235.762709][T16202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.771113][T16202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.797354][T16202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.810703][T16202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.817676][T16202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.868944][T16202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.732895][T16202] hsr_slave_0: entered promiscuous mode [ 1236.783480][T16202] hsr_slave_1: entered promiscuous mode [ 1236.812727][T16202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1236.852210][T16202] Cannot create hsr debugfs directory [ 1236.986626][ T5907] usb 3-1: USB disconnect, device number 13 [ 1237.124699][T15813] veth0_vlan: entered promiscuous mode [ 1237.137213][T15813] veth1_vlan: entered promiscuous mode [ 1237.154591][T15855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.251112][T15813] veth0_macvtap: entered promiscuous mode [ 1237.260768][T15813] veth1_macvtap: entered promiscuous mode [ 1237.281615][T15813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.292222][T15813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.302584][T15813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.313257][T15813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.323191][T15813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.334464][T15813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.346878][T15813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1237.470173][T15813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1237.481443][T15813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.189890][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.547543][T15813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.565853][T15813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.597773][T15813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.618546][T15813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.680358][T15813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.145747][T11757] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1240.154954][T11757] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1240.163782][T11757] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1240.172656][T11757] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1240.180778][T11757] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1240.188066][T11757] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1240.227677][T15855] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.270504][T11655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.277727][T11655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.508238][ T1084] bridge_slave_1: left allmulticast mode [ 1240.556884][ T1084] bridge_slave_1: left promiscuous mode [ 1240.562917][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.767268][ T1084] bridge_slave_0: left allmulticast mode [ 1240.774030][ T1084] bridge_slave_0: left promiscuous mode [ 1240.780549][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.882503][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1241.913459][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.962230][ T1084] bond0 (unregistering): Released all slaves [ 1242.146981][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.154153][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.422858][T11757] Bluetooth: hci4: command tx timeout [ 1243.126879][T16388] ip6gretap0 speed is unknown, defaulting to 1000 [ 1243.222477][ T1084] hsr_slave_0: left promiscuous mode [ 1243.233954][ T1084] hsr_slave_1: left promiscuous mode [ 1243.245591][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.261482][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.846546][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 1243.936855][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 1244.368958][T16407] loop2: detected capacity change from 0 to 40427 [ 1244.400907][T16407] F2FS-fs (loop2): invalid crc value [ 1244.466883][T16407] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1244.562216][T16407] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1244.745738][T11757] Bluetooth: hci4: command tx timeout [ 1245.546529][T15868] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1245.556871][T15868] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1245.564790][T15868] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1245.572567][T15868] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1245.581326][T15868] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1245.589446][T15868] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1245.701411][T16418] ip6gretap0 speed is unknown, defaulting to 1000 [ 1246.182754][T16418] chnl_net:caif_netlink_parms(): no params data found [ 1246.431177][T16202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1246.513874][T16202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1246.534022][T16202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1246.601337][T16388] chnl_net:caif_netlink_parms(): no params data found [ 1246.659012][T16202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1246.819160][T15868] Bluetooth: hci4: command tx timeout [ 1246.850632][T16418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.857793][T16418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.865749][T16418] bridge_slave_0: entered allmulticast mode [ 1246.886093][T16418] bridge_slave_0: entered promiscuous mode [ 1246.967592][T16202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1246.988525][T16202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.097896][T16418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.106621][T16418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.129241][T16418] bridge_slave_1: entered allmulticast mode [ 1247.159955][T16418] bridge_slave_1: entered promiscuous mode [ 1247.868547][T15868] Bluetooth: hci5: command tx timeout [ 1248.216425][T16418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.234035][T15195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.241176][T15195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.251208][T15195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.258275][T15195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.307370][T16388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.322754][T16388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.384210][T16388] bridge_slave_0: entered allmulticast mode [ 1248.400247][T16388] bridge_slave_0: entered promiscuous mode [ 1248.424031][T16418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.451667][T16388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.478955][T16388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.486219][T16388] bridge_slave_1: entered allmulticast mode [ 1248.526927][T16388] bridge_slave_1: entered promiscuous mode [ 1248.586672][T16202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1248.640925][T16202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1249.031070][T15868] Bluetooth: hci4: command tx timeout [ 1249.169516][T16418] team0: Port device team_slave_0 added [ 1249.238706][T16388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.277114][T16418] team0: Port device team_slave_1 added [ 1249.343640][T16388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.461854][T16418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.476569][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.575750][T16418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.680584][T16388] team0: Port device team_slave_0 added [ 1249.701657][T16388] team0: Port device team_slave_1 added [ 1249.767065][T16418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.809703][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.956654][T16418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.029033][T15868] Bluetooth: hci5: command tx timeout [ 1250.268259][T16418] hsr_slave_0: entered promiscuous mode [ 1250.307812][T16418] hsr_slave_1: entered promiscuous mode [ 1250.336583][T16388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.274303][T16388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.303921][T16388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.395272][T16202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.415569][T16388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.464858][T16388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.518409][T16388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.100211][T15868] Bluetooth: hci5: command tx timeout [ 1253.390463][T16388] hsr_slave_0: entered promiscuous mode [ 1253.481571][T16388] hsr_slave_1: entered promiscuous mode [ 1253.491088][T16388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1253.539778][T16388] Cannot create hsr debugfs directory [ 1253.605031][T16202] veth0_vlan: entered promiscuous mode [ 1253.741402][T11757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1253.760108][T11757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1253.769643][T11757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1253.778010][T11757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1253.786115][T11757] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1253.796280][T11757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1254.187352][T11757] Bluetooth: hci5: command tx timeout [ 1254.477759][T16202] veth1_vlan: entered promiscuous mode [ 1254.607249][ T1084] bridge_slave_1: left allmulticast mode [ 1254.613679][ T1084] bridge_slave_1: left promiscuous mode [ 1254.649297][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.658668][ T1084] bridge_slave_0: left allmulticast mode [ 1254.684259][ T1084] bridge_slave_0: left promiscuous mode [ 1254.702693][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.789422][ T1084] bridge_slave_1: left allmulticast mode [ 1254.795120][ T1084] bridge_slave_1: left promiscuous mode [ 1254.806558][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.823308][ T1084] bridge_slave_0: left allmulticast mode [ 1254.829165][ T1084] bridge_slave_0: left promiscuous mode [ 1254.838627][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.068913][ T5941] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1255.235855][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 1255.247705][ T5941] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.271498][ T5941] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1255.287638][ T5941] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1255.311586][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1255.320913][ T5941] usb 5-1: Product: syz [ 1255.325146][ T5941] usb 5-1: Manufacturer: syz [ 1255.346914][ T5941] usb 5-1: SerialNumber: syz [ 1255.361274][ T5941] appletouch 5-1:1.0: Could not find int-in endpoint [ 1255.380493][ T5941] appletouch 5-1:1.0: probe with driver appletouch failed with error -5 [ 1255.391008][ T5941] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1255.592563][T12231] usb 5-1: USB disconnect, device number 22 [ 1255.857897][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.878928][T11757] Bluetooth: hci3: command tx timeout [ 1255.927720][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.957387][ T1084] bond0 (unregistering): Released all slaves [ 1256.839401][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2363'. [ 1257.243588][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1257.255926][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1257.269725][ T1084] bond0 (unregistering): Released all slaves [ 1257.485705][T16534] loop2: detected capacity change from 0 to 1024 [ 1257.552845][T16510] ip6gretap0 speed is unknown, defaulting to 1000 [ 1257.683734][ T1084] hsr_slave_0: left promiscuous mode [ 1257.704220][ T1084] hsr_slave_1: left promiscuous mode [ 1257.805718][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.939055][T11757] Bluetooth: hci3: command tx timeout [ 1257.950834][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1258.395821][ T1084] hsr_slave_0: left promiscuous mode [ 1258.435252][ T1084] hsr_slave_1: left promiscuous mode [ 1258.474444][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.501696][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.515817][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1258.536484][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1258.785278][ T1084] veth1_macvtap: left promiscuous mode [ 1258.791232][ T1084] veth0_macvtap: left promiscuous mode [ 1258.796862][ T1084] veth1_vlan: left promiscuous mode [ 1258.802626][ T1084] veth0_vlan: left promiscuous mode [ 1260.122351][T15868] Bluetooth: hci3: command tx timeout [ 1262.178870][T11757] Bluetooth: hci3: command tx timeout [ 1262.478695][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 1262.556153][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 1263.759111][T16569] netlink: 'syz.4.2373': attribute type 1 has an invalid length. [ 1263.767048][T16569] netlink: 'syz.4.2373': attribute type 2 has an invalid length. [ 1267.179647][T16586] Cannot find set identified by id 0 to match [ 1267.194071][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 1267.263640][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 1269.209051][T14506] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1269.272389][T16202] veth0_macvtap: entered promiscuous mode [ 1269.367444][T16202] veth1_macvtap: entered promiscuous mode [ 1269.381739][T14506] usb 5-1: Using ep0 maxpacket: 8 [ 1269.390661][T14506] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.416520][T14506] usb 5-1: config 0 has no interfaces? [ 1269.424480][T16202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.445080][T16202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.457903][T14506] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1269.467328][T14506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.475665][T16202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.486231][T14506] usb 5-1: Product: syz [ 1269.490627][T14506] usb 5-1: Manufacturer: syz [ 1269.495235][T14506] usb 5-1: SerialNumber: syz [ 1269.498937][T16202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.505071][T14506] usb 5-1: config 0 descriptor?? [ 1269.515222][T16202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.528993][T16202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.568503][T16202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.631469][T16510] chnl_net:caif_netlink_parms(): no params data found [ 1269.768411][T16202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.782943][T16202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.793737][T16202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.804581][T16202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.814471][T16202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.825064][T16202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.836313][T16202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.847264][T16418] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1269.885188][T16418] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1269.904535][T16418] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1269.928205][T16418] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1270.094001][T16202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.103149][T16202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.112384][T16202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.124731][T16202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.806997][T16510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.832649][T16510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.848090][T16510] bridge_slave_0: entered allmulticast mode [ 1270.863573][T16510] bridge_slave_0: entered promiscuous mode [ 1270.959049][ T1195] usb 5-1: USB disconnect, device number 23 [ 1271.286715][T16510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.294560][T16510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.302267][T16510] bridge_slave_1: entered allmulticast mode [ 1271.387839][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2382'. [ 1271.579184][T16510] bridge_slave_1: entered promiscuous mode [ 1272.245868][T16510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.313179][ T1084] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.608318][ T1084] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.680798][T16510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.772846][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.781832][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.807578][T16622] loop4: detected capacity change from 0 to 1024 [ 1272.854137][ T1084] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.902158][T16510] team0: Port device team_slave_0 added [ 1272.936130][T16510] team0: Port device team_slave_1 added [ 1273.035978][ T1084] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.104307][T16388] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1273.125282][T16510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.149546][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.176475][T16510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.201331][T16388] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1273.240381][T16510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.262405][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.288993][T16510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.325085][T16388] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1273.340655][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.367310][T16510] hsr_slave_0: entered promiscuous mode [ 1273.373122][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.389350][T16510] hsr_slave_1: entered promiscuous mode [ 1273.395699][T16510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1273.409176][T16510] Cannot create hsr debugfs directory [ 1273.417302][T16388] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1273.474409][T16418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.057203][T16418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.191062][ T1084] bridge_slave_1: left allmulticast mode [ 1276.364595][ T1084] bridge_slave_1: left promiscuous mode [ 1276.384030][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.065879][ T1084] bridge_slave_0: left allmulticast mode [ 1277.109748][ T1084] bridge_slave_0: left promiscuous mode [ 1277.140662][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.571645][T16672] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1283.591635][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1283.833827][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1283.846348][ T1084] bond0 (unregistering): Released all slaves [ 1284.316829][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.324278][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.424461][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.431627][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.952807][T16388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.000560][T16388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.322827][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.330011][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.398236][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.405396][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1286.777307][ T1084] hsr_slave_0: left promiscuous mode [ 1286.831424][ T1084] hsr_slave_1: left promiscuous mode [ 1286.842418][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.409914][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.440750][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.460000][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.493302][T16707] loop2: detected capacity change from 0 to 1024 [ 1287.527286][ T1084] veth1_macvtap: left promiscuous mode [ 1287.534109][ T1084] veth0_macvtap: left promiscuous mode [ 1287.540723][ T1084] veth1_vlan: left promiscuous mode [ 1287.546177][ T1084] veth0_vlan: left promiscuous mode [ 1287.730791][ T1084] pimreg (unregistering): left allmulticast mode [ 1287.758905][T14545] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1288.090794][T14545] usb 4-1: Using ep0 maxpacket: 32 [ 1288.097705][T14545] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.108550][T14545] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1288.132726][T14545] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1288.142297][T14545] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1288.153604][T14545] usb 4-1: Product: syz [ 1288.157854][T14545] usb 4-1: Manufacturer: syz [ 1288.165844][T14545] usb 4-1: SerialNumber: syz [ 1288.440926][T14545] appletouch 4-1:1.0: Could not find int-in endpoint [ 1288.530305][T14545] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 1288.727948][T14545] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1288.763088][T14545] usb 4-1: USB disconnect, device number 2 [ 1289.260393][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 1289.362585][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 1290.782800][T16739] siw: device registration error -23 [ 1291.029009][ T5941] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1291.179019][ T5941] usb 3-1: device descriptor read/64, error -71 [ 1291.928943][ T5941] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1292.023394][T16743] loop3: detected capacity change from 0 to 64 [ 1292.223497][T16388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1292.321954][ T5941] usb 3-1: device descriptor read/64, error -71 [ 1292.439926][T16747] ip6t_rpfilter: unknown options [ 1292.667579][ T5941] usb usb3-port1: attempt power cycle [ 1293.098883][ T5941] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1293.147809][T16510] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1293.192346][ T5941] usb 3-1: device descriptor read/8, error -71 [ 1293.323623][T16510] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1293.429652][T16510] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1293.480319][T16510] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1293.504930][T16418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.667378][ T1084] IPVS: stop unused estimator thread 0... [ 1293.765963][T16388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.096478][T16510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.789792][T16510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.883633][ T6507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.890827][ T6507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.023554][T14863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.031031][T14863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.178760][T16418] veth0_vlan: entered promiscuous mode [ 1296.256803][T16418] veth1_vlan: entered promiscuous mode [ 1296.393317][T16388] veth0_vlan: entered promiscuous mode [ 1296.427351][T16388] veth1_vlan: entered promiscuous mode [ 1296.449273][ T5939] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1297.600793][T16793] Cannot find set identified by id 0 to match [ 1297.628988][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 1297.673500][ T5939] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.679977][T16418] veth0_macvtap: entered promiscuous mode [ 1297.687468][ T5939] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1297.866857][ T5939] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1297.896793][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1297.947741][ T5939] usb 4-1: Product: syz [ 1297.987702][T16388] veth0_macvtap: entered promiscuous mode [ 1298.003132][ T5939] usb 4-1: Manufacturer: syz [ 1298.032598][T16418] veth1_macvtap: entered promiscuous mode [ 1298.039333][ T5939] usb 4-1: SerialNumber: syz [ 1298.297517][ T5939] appletouch 4-1:1.0: Could not find int-in endpoint [ 1298.304602][ T5939] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 1298.307640][T16388] veth1_macvtap: entered promiscuous mode [ 1298.313984][ T5939] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1299.426744][T16418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1299.437303][T16418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.447194][T16418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1299.458119][T16418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.468370][T16418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1299.478963][T16418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.490410][T16418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1299.502489][T16418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.528772][T16418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.548919][T16418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.585400][T16418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.654066][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.681140][T16418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.718837][T16418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.740506][T16418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.892178][ T5939] usb 4-1: USB disconnect, device number 3 [ 1299.902331][T16418] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.029362][T16418] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.921559][T16418] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.330065][T16418] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.076588][T16510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1302.817826][T15868] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1302.832684][T11459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.842479][T11459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.878961][T15868] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1302.891380][T15868] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1302.912417][T15868] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1302.920953][T15868] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1302.937271][T15868] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1303.082010][T16825] ip6gretap0 speed is unknown, defaulting to 1000 [ 1303.107304][T15195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1303.124918][T15195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1303.146682][T16838] loop2: detected capacity change from 0 to 64 [ 1303.754491][T16845] ip6t_rpfilter: unknown options [ 1305.333548][T11757] Bluetooth: hci6: command tx timeout [ 1306.875747][T16510] veth0_vlan: entered promiscuous mode [ 1306.985888][T16871] netlink: 'syz.8.2434': attribute type 1 has an invalid length. [ 1306.994006][T16871] netlink: 'syz.8.2434': attribute type 2 has an invalid length. [ 1307.684348][T11757] Bluetooth: hci6: command tx timeout [ 1308.579866][T16885] netlink: 'syz.8.2438': attribute type 1 has an invalid length. [ 1308.587689][T16885] netlink: 'syz.8.2438': attribute type 2 has an invalid length. [ 1309.025171][ T1195] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1310.146584][ T1195] usb 5-1: Using ep0 maxpacket: 32 [ 1310.152104][T11757] Bluetooth: hci6: command tx timeout [ 1310.159258][ T1195] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1310.170027][ T1195] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1310.187725][ T1195] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1310.358926][ T1195] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1310.382079][ T1195] usb 5-1: Product: syz [ 1310.407160][ T1195] usb 5-1: Manufacturer: syz [ 1310.412486][ T1195] usb 5-1: SerialNumber: syz [ 1310.544170][T16876] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1310.563188][ T1195] appletouch 5-1:1.0: Could not find int-in endpoint [ 1310.574855][ T1195] appletouch 5-1:1.0: probe with driver appletouch failed with error -5 [ 1310.590172][T16510] veth1_vlan: entered promiscuous mode [ 1310.603597][T16825] chnl_net:caif_netlink_parms(): no params data found [ 1310.624275][ T1195] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1310.776189][ T9] usb 5-1: USB disconnect, device number 24 [ 1310.904348][T16510] veth0_macvtap: entered promiscuous mode [ 1310.963855][ T5958] bridge_slave_1: left allmulticast mode [ 1310.982578][ T5958] bridge_slave_1: left promiscuous mode [ 1310.995275][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.017085][ T5958] bridge_slave_0: left allmulticast mode [ 1311.037458][ T5958] bridge_slave_0: left promiscuous mode [ 1311.057549][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.625312][T11757] Bluetooth: hci6: command tx timeout [ 1315.913552][T15868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1315.923196][T15868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1315.931540][T15868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1315.940564][T15868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1315.948369][T15868] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1315.955834][T15868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1316.458568][T16964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2449'. [ 1316.612067][ T5958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.632252][ T5958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.912919][ T5958] bond0 (unregistering): Released all slaves [ 1317.133393][T16825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.176598][T16825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.291345][T16825] bridge_slave_0: entered allmulticast mode [ 1317.398530][T16825] bridge_slave_0: entered promiscuous mode [ 1317.469124][T16825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.498358][T16825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.542470][T16825] bridge_slave_1: entered allmulticast mode [ 1317.552945][T16825] bridge_slave_1: entered promiscuous mode [ 1317.980307][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1318.668919][T15868] Bluetooth: hci4: command tx timeout [ 1320.109061][ T5958] hsr_slave_0: left promiscuous mode [ 1320.618044][T16986] loop3: detected capacity change from 0 to 1024 [ 1320.639829][ T5958] hsr_slave_1: left promiscuous mode [ 1320.669324][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1320.751927][T15868] Bluetooth: hci4: command tx timeout [ 1320.962813][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1321.004318][ T5958] veth1_macvtap: left promiscuous mode [ 1321.016488][ T5958] veth0_macvtap: left promiscuous mode [ 1321.032453][ T5958] veth1_vlan: left promiscuous mode [ 1321.043243][ T5958] veth0_vlan: left promiscuous mode [ 1322.839371][T15868] Bluetooth: hci4: command tx timeout [ 1323.099151][T17012] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2460'. [ 1323.965926][ T5958] team0 (unregistering): Port device team_slave_1 removed [ 1324.014192][ T5958] team0 (unregistering): Port device team_slave_0 removed [ 1324.899437][T15868] Bluetooth: hci4: command tx timeout [ 1326.442418][T17028] fuse: Bad value for 'fd' [ 1326.593756][T16825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1326.623305][T16960] ip6gretap0 speed is unknown, defaulting to 1000 [ 1326.901569][T17040] loop2: detected capacity change from 0 to 128 [ 1327.032779][T17040] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1327.528685][T17040] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1327.553007][T17040] ext4 filesystem being mounted at /579/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1327.762659][T16825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.956619][T17051] loop4: detected capacity change from 0 to 1024 [ 1327.981739][ T5842] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1328.158515][T16825] team0: Port device team_slave_0 added [ 1329.335968][T16825] team0: Port device team_slave_1 added [ 1329.672330][T17073] loop4: detected capacity change from 0 to 512 [ 1330.213339][T17073] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1330.385892][T16825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.402552][T17073] EXT4-fs (loop4): SIPHASH is not a valid default hash value [ 1330.419091][T16825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.450249][T16825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.486111][T16825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.493449][T16825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.519833][T16825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.836267][T16825] hsr_slave_0: entered promiscuous mode [ 1330.863220][T16825] hsr_slave_1: entered promiscuous mode [ 1330.874285][T16825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1330.958933][T16825] Cannot create hsr debugfs directory [ 1333.662499][T16960] chnl_net:caif_netlink_parms(): no params data found [ 1333.946713][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1334.589998][T17123] loop3: detected capacity change from 0 to 1024 [ 1340.374334][T16960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.853681][T16960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.919032][T16960] bridge_slave_0: entered allmulticast mode [ 1341.024130][T16960] bridge_slave_0: entered promiscuous mode [ 1341.448874][T16960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.456080][T16960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.473850][T16960] bridge_slave_1: entered allmulticast mode [ 1341.490066][T16960] bridge_slave_1: entered promiscuous mode [ 1341.685980][T16825] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1341.732151][T16960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.744545][T16825] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1341.784023][T16825] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1341.814306][T16960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1343.598994][T16825] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1343.803040][T17214] loop8: detected capacity change from 0 to 1024 [ 1343.859134][T17219] loop3: detected capacity change from 0 to 64 [ 1345.114037][T16960] team0: Port device team_slave_0 added [ 1345.123333][T16960] team0: Port device team_slave_1 added [ 1345.531517][T17229] ip6t_rpfilter: unknown options [ 1346.149489][T16960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.156505][T16960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.291386][T16960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.348362][ T51] bridge_slave_1: left allmulticast mode [ 1346.354464][ T51] bridge_slave_1: left promiscuous mode [ 1346.369831][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.461099][ T51] bridge_slave_0: left allmulticast mode [ 1347.466880][ T51] bridge_slave_0: left promiscuous mode [ 1347.478939][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.180270][T11757] Bluetooth: hci0: command 0x0406 tx timeout [ 1349.883128][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.903750][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.937423][ T51] bond0 (unregistering): Released all slaves [ 1350.014718][T17277] siw: device registration error -23 [ 1350.163724][T16960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.181224][T16960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.228942][T16960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.989753][ T51] hsr_slave_0: left promiscuous mode [ 1355.419367][ T51] hsr_slave_1: left promiscuous mode [ 1356.470803][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.479964][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.527587][ T51] veth0_macvtap: left promiscuous mode [ 1356.615119][ T51] veth1_vlan: left promiscuous mode [ 1356.629452][ T51] veth0_vlan: left promiscuous mode [ 1360.261925][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1360.617274][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1361.290745][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.979189][T11757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1361.991339][T11757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1362.004693][T11757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1362.013379][T11757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1362.021384][T11757] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1362.029782][T11757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1362.947614][T17352] loop2: detected capacity change from 0 to 512 [ 1362.983802][T17352] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1363.000722][T17352] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 1363.180174][T16960] hsr_slave_0: entered promiscuous mode [ 1363.190239][T16960] hsr_slave_1: entered promiscuous mode [ 1363.208627][T16960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1363.225201][T16960] Cannot create hsr debugfs directory [ 1363.403500][T17347] ip6gretap0 speed is unknown, defaulting to 1000 [ 1364.747249][T11757] Bluetooth: hci3: command tx timeout [ 1365.209768][T17364] Cannot find set identified by id 0 to match [ 1367.168979][T15868] Bluetooth: hci3: command tx timeout [ 1368.997914][ T5854] Bluetooth: hci5: command 0x0406 tx timeout [ 1370.377658][T11757] Bluetooth: hci3: command tx timeout [ 1372.565029][T11757] Bluetooth: hci3: command tx timeout [ 1373.037077][T17426] loop3: detected capacity change from 0 to 128 [ 1373.188394][T17426] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1374.189514][T17426] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1375.103055][T14580] IPVS: starting estimator thread 0... [ 1375.949275][T17426] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1376.019213][T17453] IPVS: using max 15 ests per chain, 36000 per kthread [ 1376.460205][T16202] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1376.486833][T17347] chnl_net:caif_netlink_parms(): no params data found [ 1379.691724][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1379.700634][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1379.708262][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1379.720351][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1379.727967][ T5854] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1379.735568][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1380.189989][T17496] loop8: detected capacity change from 0 to 64 [ 1381.492198][T17505] ip6t_rpfilter: unknown options [ 1381.957184][T11757] Bluetooth: hci4: command tx timeout [ 1382.135359][T17486] ip6gretap0 speed is unknown, defaulting to 1000 [ 1384.281514][T11757] Bluetooth: hci4: command tx timeout [ 1386.439419][ T5854] Bluetooth: hci4: command tx timeout [ 1386.599844][T17347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.607681][T17347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.748030][T17347] bridge_slave_0: entered allmulticast mode [ 1386.755652][T17347] bridge_slave_0: entered promiscuous mode [ 1387.446383][T17557] netlink: 'syz.8.2557': attribute type 1 has an invalid length. [ 1387.454240][T17557] netlink: 'syz.8.2557': attribute type 2 has an invalid length. [ 1387.830142][T17554] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2556'. [ 1388.393685][T17347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.401451][T17347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.413220][T17347] bridge_slave_1: entered allmulticast mode [ 1388.455502][T17347] bridge_slave_1: entered promiscuous mode [ 1388.509337][ T5854] Bluetooth: hci4: command tx timeout [ 1388.780438][T17566] loop2: detected capacity change from 0 to 64 [ 1388.955300][T17347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.988450][T17347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1389.425976][T17576] ip6t_rpfilter: unknown options [ 1390.792227][T17347] team0: Port device team_slave_0 added [ 1390.860782][T17347] team0: Port device team_slave_1 added [ 1391.294901][T17594] Cannot find set identified by id 0 to match [ 1392.240556][T17486] chnl_net:caif_netlink_parms(): no params data found [ 1393.179416][T17347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.186420][T17347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1393.248831][T17347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.581380][T17347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.811586][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2567'. [ 1394.798739][T17347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1395.304694][T17347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.936219][ T51] bridge_slave_1: left allmulticast mode [ 1399.979879][ T51] bridge_slave_1: left promiscuous mode [ 1400.365590][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.380431][ T51] bridge_slave_0: left allmulticast mode [ 1400.397812][ T51] bridge_slave_0: left promiscuous mode [ 1400.607319][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.892802][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.913497][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1405.014359][ T51] bond0 (unregistering): Released all slaves [ 1406.350864][T17688] Cannot find set identified by id 0 to match [ 1407.276493][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2581'. [ 1408.254369][T17486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.264687][T17486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.272097][T17486] bridge_slave_0: entered allmulticast mode [ 1408.279394][T17486] bridge_slave_0: entered promiscuous mode [ 1408.556398][T17347] hsr_slave_0: entered promiscuous mode [ 1408.579675][T17347] hsr_slave_1: entered promiscuous mode [ 1408.689367][ T29] audit: type=1326 audit(1731292652.981:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17708 comm="syz.2.2583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8cc77e719 code=0x0 [ 1408.781387][T17347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1408.830289][T17347] Cannot create hsr debugfs directory [ 1409.257351][ T51] hsr_slave_0: left promiscuous mode [ 1409.288340][ T51] hsr_slave_1: left promiscuous mode [ 1409.418962][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.447980][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.811994][T17725] netlink: 'syz.3.2584': attribute type 1 has an invalid length. [ 1409.820060][T17725] netlink: 'syz.3.2584': attribute type 2 has an invalid length. [ 1411.776992][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1411.824966][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1412.285205][T17486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.298668][T17486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.320801][T17486] bridge_slave_1: entered allmulticast mode [ 1412.341660][T17486] bridge_slave_1: entered promiscuous mode [ 1414.284599][T17486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1414.552731][T17486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.903829][T17486] team0: Port device team_slave_0 added [ 1415.303185][T17486] team0: Port device team_slave_1 added [ 1415.494418][T17763] loop2: detected capacity change from 0 to 64 [ 1415.894654][T17769] ip6t_rpfilter: unknown options [ 1416.805696][T17486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.855158][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1416.943876][T17486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.315491][T17774] loop2: detected capacity change from 0 to 32768 [ 1417.724942][T17486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.739853][T17774] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1417.754409][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1418.808183][T17486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.727842][ T5842] ocfs2: Unmounting device (7,2) on (node local) [ 1420.798303][T17486] hsr_slave_0: entered promiscuous mode [ 1420.868454][T17486] hsr_slave_1: entered promiscuous mode [ 1421.089420][T17486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1421.106317][T17486] Cannot create hsr debugfs directory [ 1421.190533][ T51] bridge_slave_1: left allmulticast mode [ 1421.196405][ T51] bridge_slave_1: left promiscuous mode [ 1421.220447][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.238075][ T51] bridge_slave_0: left allmulticast mode [ 1421.247191][ T51] bridge_slave_0: left promiscuous mode [ 1421.268934][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.553168][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.470029][T17836] SET target dimension over the limit! [ 1424.289647][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.374418][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.450898][ T51] bond0 (unregistering): Released all slaves [ 1424.538915][T12231] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1424.732481][T11757] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1424.742710][T11757] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1424.752542][T12231] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1424.764298][T11757] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1424.772703][T11757] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1424.781866][T11757] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1424.789400][T11757] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1424.817235][T12231] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1424.827781][T12231] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1424.837374][T12231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.854155][T17842] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1424.867934][T12231] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1425.562520][T17845] ip6gretap0 speed is unknown, defaulting to 1000 [ 1425.694681][T17842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.749917][ T51] hsr_slave_0: left promiscuous mode [ 1425.763533][T17842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.867147][ T51] hsr_slave_1: left promiscuous mode [ 1425.881808][T17842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.930292][T17842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.183883][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.279826][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.733542][T17870] loop2: detected capacity change from 0 to 40427 [ 1426.813917][T17870] F2FS-fs (loop2): invalid crc value [ 1426.862612][T11757] Bluetooth: hci6: command tx timeout [ 1426.935634][T17870] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1427.129343][T17870] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1428.342279][ T1195] usb 5-1: USB disconnect, device number 25 [ 1428.917832][T11757] Bluetooth: hci6: command tx timeout [ 1429.959795][T17895] loop8: detected capacity change from 0 to 64 [ 1430.010319][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1430.202822][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1430.718890][T17900] ip6t_rpfilter: unknown options [ 1431.295535][ T5854] Bluetooth: hci6: command tx timeout [ 1432.241995][T17913] loop3: detected capacity change from 0 to 64 [ 1432.668135][T17922] ip6t_rpfilter: unknown options [ 1432.905317][T17919] loop8: detected capacity change from 0 to 1024 [ 1433.403360][ T5854] Bluetooth: hci6: command tx timeout [ 1433.719050][T17929] loop2: detected capacity change from 0 to 40427 [ 1434.008467][T17929] F2FS-fs (loop2): invalid crc value [ 1434.169607][T17929] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1434.246712][T17929] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1435.274377][T17845] chnl_net:caif_netlink_parms(): no params data found [ 1435.558799][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1435.709134][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1435.716074][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1435.757403][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1435.776878][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1435.794948][T17845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.813197][T17845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.850421][T17845] bridge_slave_0: entered allmulticast mode [ 1435.867049][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1435.880742][ T9] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1435.890890][T11757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1435.906034][ T9] usb 4-1: Product: syz [ 1435.910795][T11757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1435.928771][ T9] usb 4-1: Manufacturer: syz [ 1435.936285][ T9] usb 4-1: SerialNumber: syz [ 1435.950457][T11757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1435.959369][T11757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1435.967415][T11757] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1435.976451][T17953] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1435.984675][T11757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1436.000061][ T9] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input19 [ 1436.027381][ C0] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 1436.647698][T17845] bridge_slave_0: entered promiscuous mode [ 1436.689096][T10562] usb 4-1: USB disconnect, device number 4 [ 1436.715463][T17845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.750381][T17845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.778022][T17845] bridge_slave_1: entered allmulticast mode [ 1436.819753][T17845] bridge_slave_1: entered promiscuous mode [ 1436.865679][T10562] appletouch 4-1:1.0: input: appletouch disconnected [ 1436.935523][ T51] bridge_slave_1: left allmulticast mode [ 1436.944469][ T51] bridge_slave_1: left promiscuous mode [ 1436.961478][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.987038][ T51] bridge_slave_0: left allmulticast mode [ 1437.012253][ T51] bridge_slave_0: left promiscuous mode [ 1437.040644][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.243780][T11757] Bluetooth: hci3: command tx timeout [ 1438.559861][T17984] binder: 17980:17984 ioctl 4018620d 0 returned -22 [ 1439.537933][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.829945][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1439.861524][ T51] bond0 (unregistering): Released all slaves [ 1440.145222][T17960] ip6gretap0 speed is unknown, defaulting to 1000 [ 1440.231233][T17845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.259726][T11757] Bluetooth: hci3: command tx timeout [ 1440.307867][T17845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.621320][ T51] hsr_slave_0: left promiscuous mode [ 1441.637749][ T51] hsr_slave_1: left promiscuous mode [ 1441.651208][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1441.791693][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1442.338925][T11757] Bluetooth: hci3: command tx timeout [ 1444.423572][T11757] Bluetooth: hci3: command tx timeout [ 1444.717004][T18028] loop4: detected capacity change from 0 to 40427 [ 1444.748086][T18028] F2FS-fs (loop4): invalid crc value [ 1444.771205][T18028] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1444.868440][T18028] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1445.071396][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1445.320930][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1445.737973][T17845] team0: Port device team_slave_0 added [ 1445.777985][T17845] team0: Port device team_slave_1 added [ 1445.789016][ T5939] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1445.918827][ T5939] usb 4-1: device descriptor read/64, error -71 [ 1446.209406][T17845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.226730][T17845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.249865][ T5939] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1446.358243][T17845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.410493][T17845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1447.288908][T17845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1447.340081][ T5941] IPVS: starting estimator thread 0... [ 1447.388868][T17845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.456301][T18051] IPVS: using max 16 ests per chain, 38400 per kthread [ 1447.827964][T17845] hsr_slave_0: entered promiscuous mode [ 1447.849520][T17845] hsr_slave_1: entered promiscuous mode [ 1447.909353][T17845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1447.916926][T17845] Cannot create hsr debugfs directory [ 1448.109065][ T5939] usb 4-1: device descriptor read/64, error -71 [ 1448.213365][T17960] chnl_net:caif_netlink_parms(): no params data found [ 1448.237027][ T51] bridge_slave_1: left allmulticast mode [ 1448.243135][ T51] bridge_slave_1: left promiscuous mode [ 1448.251417][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.319681][ T51] bridge_slave_0: left allmulticast mode [ 1448.325363][ T51] bridge_slave_0: left promiscuous mode [ 1448.379227][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.453307][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1448.463802][ T5939] usb usb4-port1: attempt power cycle [ 1448.471389][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1448.568263][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1448.581488][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1448.599687][ T5854] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1448.606930][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1448.739060][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1448.751650][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1448.762396][ T51] bond0 (unregistering): Released all slaves [ 1448.827617][T17845] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1448.864413][ T5939] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1448.901995][T17845] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1448.938109][T17845] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1448.975073][ T5939] usb 4-1: Using ep0 maxpacket: 8 [ 1449.023752][ T51] hsr_slave_0: left promiscuous mode [ 1449.029717][ T51] hsr_slave_1: left promiscuous mode [ 1449.035592][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1449.043706][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1449.187825][ T5939] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1449.288067][ T5939] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1449.341959][ T5939] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1449.441231][ T5939] usb 4-1: config 250 has no interface number 0 [ 1449.480363][ T5939] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1449.556253][ T5939] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1449.607943][ T5939] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 1449.696658][ T5939] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1449.758876][ T5939] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1449.838781][ T5939] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1449.868208][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1449.913008][ T5939] usb 4-1: Product: syz [ 1449.917309][ T5939] usb 4-1: SerialNumber: syz [ 1449.918634][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1449.961267][ T5939] hub 4-1:250.228: bad descriptor, ignoring hub [ 1449.967565][ T5939] hub 4-1:250.228: probe with driver hub failed with error -5 [ 1450.303255][ T5939] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1450.681030][ T5854] Bluetooth: hci4: command tx timeout [ 1451.088522][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1451.204380][ C0] usblp0: nonzero read bulk status received: -71 [ 1451.231426][ T5939] usb 4-1: USB disconnect, device number 7 [ 1451.306890][ T5939] usblp0: removed [ 1452.092651][T17845] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1452.199852][T18067] ip6gretap0 speed is unknown, defaulting to 1000 [ 1452.391467][T17960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.772135][ T5854] Bluetooth: hci4: command tx timeout [ 1453.325994][T17960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.370888][T17960] bridge_slave_0: entered allmulticast mode [ 1453.390773][T17960] bridge_slave_0: entered promiscuous mode [ 1453.460829][T17960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.468068][T17960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.498946][T17960] bridge_slave_1: entered allmulticast mode [ 1453.506161][T17960] bridge_slave_1: entered promiscuous mode [ 1453.670198][T18120] loop2: detected capacity change from 0 to 256 [ 1454.290951][T17960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1454.532160][T17960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.973297][T18127] loop4: detected capacity change from 0 to 40427 [ 1455.030510][T18127] F2FS-fs (loop4): invalid crc value [ 1455.060544][ T5854] Bluetooth: hci4: command tx timeout [ 1455.080187][T18127] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1455.537400][T18127] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1455.818812][ T29] audit: type=1326 audit(1731292699.531:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18129 comm="syz.3.2648" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4340b7e719 code=0x0 [ 1456.363377][T17960] team0: Port device team_slave_0 added [ 1456.420007][T17960] team0: Port device team_slave_1 added [ 1457.143083][ T5854] Bluetooth: hci4: command tx timeout [ 1457.222564][T17960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.358725][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.490334][T17960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.608394][ T51] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.681589][T17960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.690483][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.748986][T12231] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1457.777561][T17960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.871788][ T51] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.918852][T12231] usb 4-1: Using ep0 maxpacket: 8 [ 1457.930747][T12231] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1457.949219][T12231] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1457.988382][T12231] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1458.009378][T12231] usb 4-1: config 250 has no interface number 0 [ 1458.015706][T12231] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1458.036401][T12231] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1458.067831][T12231] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 1458.109034][T12231] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1458.148814][T12231] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1458.171643][T12231] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1458.189581][T12231] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1458.197720][ T51] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.208976][T12231] usb 4-1: Product: syz [ 1458.213165][T12231] usb 4-1: SerialNumber: syz [ 1458.241155][T12231] hub 4-1:250.228: bad descriptor, ignoring hub [ 1458.253475][T18067] chnl_net:caif_netlink_parms(): no params data found [ 1458.267915][T12231] hub 4-1:250.228: probe with driver hub failed with error -5 [ 1458.290826][T17960] hsr_slave_0: entered promiscuous mode [ 1458.309283][T17960] hsr_slave_1: entered promiscuous mode [ 1458.339276][T17960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1458.346943][T17960] Cannot create hsr debugfs directory [ 1458.451643][T12231] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1458.635271][ T51] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.889718][T17845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.979256][T12231] usb 4-1: USB disconnect, device number 8 [ 1459.029650][T12231] usblp0: removed [ 1459.229797][T18067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.238057][T18067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.264575][T18067] bridge_slave_0: entered allmulticast mode [ 1459.286927][T18067] bridge_slave_0: entered promiscuous mode [ 1459.343345][T17845] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.202043][T18067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.222949][T18067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.352577][T18067] bridge_slave_1: entered allmulticast mode [ 1462.370764][T18067] bridge_slave_1: entered promiscuous mode [ 1462.440242][T15195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.447490][T15195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.497180][T15195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.504458][T15195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.902406][T17960] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1462.926333][T17960] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1462.971244][T18067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.990336][ T51] bridge_slave_1: left allmulticast mode [ 1462.997074][ T51] bridge_slave_1: left promiscuous mode [ 1463.007791][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.020184][ T51] bridge_slave_0: left allmulticast mode [ 1463.025932][ T51] bridge_slave_0: left promiscuous mode [ 1463.031954][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.058950][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1463.390274][ T5941] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1463.735863][ T5941] usb 4-1: device descriptor read/64, error -71 [ 1463.765978][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1463.775049][ T9] usb 3-1: config 127 has an invalid interface number: 230 but max is 0 [ 1463.784030][ T9] usb 3-1: config 127 has no interface number 0 [ 1463.790851][ T9] usb 3-1: config 127 interface 230 has no altsetting 0 [ 1463.800068][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=73.e9 [ 1463.821689][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.844756][ T9] usb 3-1: Product: syz [ 1463.849152][ T9] usb 3-1: Manufacturer: syz [ 1463.853792][ T9] usb 3-1: SerialNumber: syz [ 1465.082538][ T29] audit: type=1326 audit(1731292708.691:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18210 comm="syz.4.2657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a5d57e719 code=0x0 [ 1466.059528][ T5941] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1467.888788][ T9] usb 3-1: USB disconnect, device number 18 [ 1467.984547][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.061095][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.422950][ T51] bond0 (unregistering): Released all slaves [ 1469.456979][T17960] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1469.606558][T17960] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1469.817252][T18067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1470.146592][T18240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2662'. [ 1471.519355][T18067] team0: Port device team_slave_0 added [ 1471.562740][T18259] loop2: detected capacity change from 0 to 256 [ 1471.710683][T18261] loop4: detected capacity change from 0 to 256 [ 1471.780393][T18067] team0: Port device team_slave_1 added [ 1471.797017][T18261] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1472.143534][T18067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1472.150916][T18067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.177453][T18067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1472.190815][T18067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1472.197789][T18067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.224078][T18067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.414725][T18067] hsr_slave_0: entered promiscuous mode [ 1472.800281][T18067] hsr_slave_1: entered promiscuous mode [ 1472.824354][T18067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1472.855599][T18067] Cannot create hsr debugfs directory [ 1473.435546][ T51] hsr_slave_0: left promiscuous mode [ 1473.442489][ T51] hsr_slave_1: left promiscuous mode [ 1473.448498][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1473.456554][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.469761][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.477180][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.614113][ T51] veth1_macvtap: left promiscuous mode [ 1473.653226][ T51] veth0_macvtap: left promiscuous mode [ 1473.683174][ T51] veth1_vlan: left promiscuous mode [ 1473.711606][ T51] veth0_vlan: left promiscuous mode [ 1477.470027][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2673'. [ 1479.111006][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1479.187742][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1481.032881][T18340] SET target dimension over the limit! [ 1483.557256][T17960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.675941][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.489866][T17960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.600475][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.607665][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.747238][ T51] IPVS: stop unused estimator thread 0... [ 1485.865918][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.873174][ T5959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.868300][T11757] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1486.885844][T11757] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1486.901665][T11757] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1486.913615][T11757] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1486.930104][T11757] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1486.938649][T11757] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1488.534195][T18397] ip6gretap0 speed is unknown, defaulting to 1000 [ 1489.507156][T11757] Bluetooth: hci5: command tx timeout [ 1491.590387][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2689'. [ 1491.630236][T11757] Bluetooth: hci5: command tx timeout [ 1492.032291][T18067] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1492.368331][T18067] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1492.519586][T18067] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1492.731697][T18067] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1492.994929][T17960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1493.060043][T18397] chnl_net:caif_netlink_parms(): no params data found [ 1494.142413][T11757] Bluetooth: hci5: command tx timeout [ 1494.221274][T18067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.239797][T18067] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.251388][T15195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.258545][T15195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.376009][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.383216][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1494.598124][T18067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1494.673514][ T11] bridge_slave_1: left allmulticast mode [ 1494.679467][ T11] bridge_slave_1: left promiscuous mode [ 1494.685338][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.701434][ T11] bridge_slave_0: left allmulticast mode [ 1494.718330][ T11] bridge_slave_0: left promiscuous mode [ 1494.754382][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.155877][T18477] SET target dimension over the limit! [ 1496.488912][T11757] Bluetooth: hci5: command tx timeout [ 1496.571831][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1496.604816][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1496.616439][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1496.657692][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1496.666510][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1496.674736][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1496.746274][T18491] siw: device registration error -23 [ 1498.919890][T11757] Bluetooth: hci3: command tx timeout [ 1499.592327][T18538] loop4: detected capacity change from 0 to 64 [ 1500.979501][T11757] Bluetooth: hci3: command tx timeout [ 1501.056455][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.078396][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.106652][ T11] bond0 (unregistering): Released all slaves [ 1501.168537][T18397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.191556][T18397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.229468][T18397] bridge_slave_0: entered allmulticast mode [ 1501.256690][T18397] bridge_slave_0: entered promiscuous mode [ 1501.284650][T18527] tipc: Started in network mode [ 1501.289618][T18527] tipc: Node identity 7f000001, cluster identity 4711 [ 1501.296989][T18527] tipc: Enabled bearer , priority 10 [ 1502.026875][T18397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.048913][T18397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.056240][T18397] bridge_slave_1: entered allmulticast mode [ 1502.069976][T18397] bridge_slave_1: entered promiscuous mode [ 1502.175152][T18397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1502.237047][T18397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.507517][ T11] hsr_slave_0: left promiscuous mode [ 1502.519488][ T11] hsr_slave_1: left promiscuous mode [ 1502.525592][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.579270][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.642069][ T5907] tipc: Node number set to 2130706433 [ 1503.069623][ T5854] Bluetooth: hci3: command tx timeout [ 1504.689976][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 1505.209423][ T5854] Bluetooth: hci3: command 0x0419 tx timeout [ 1506.489701][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1506.611331][T18573] loop2: detected capacity change from 0 to 32768 [ 1506.633007][T18573] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2710 (18573) [ 1506.755380][T18573] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1506.778331][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1506.796329][T18573] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1506.966576][T18573] BTRFS info (device loop2): using free-space-tree [ 1506.990609][T18573] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1506.995318][T18573] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1507.019922][T18573] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1507.033007][T18573] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1507.043211][T18573] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1507.056223][T18573] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1507.099754][T18573] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1507.163195][T18573] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1507.182806][T18573] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1507.219379][ T5854] Bluetooth: hci3: command 0x0419 tx timeout [ 1507.239488][T18573] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1507.239804][T18573] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1507.527655][T18573] BTRFS error (device loop2): open_ctree failed [ 1508.426157][T18589] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2714'. [ 1508.472985][T18397] team0: Port device team_slave_0 added [ 1508.521964][T18397] team0: Port device team_slave_1 added [ 1508.838854][T18488] ip6gretap0 speed is unknown, defaulting to 1000 [ 1508.899973][T18397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1508.906984][T18397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.986887][T18397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.017298][T18397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.051909][T18397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.087469][T11757] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1509.094917][T18397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.121853][T11757] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1509.140781][T11757] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1509.186250][T11757] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1509.194259][T11757] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1509.203071][T11757] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1509.995111][T18616] ip6gretap0 speed is unknown, defaulting to 1000 [ 1510.089204][T18397] hsr_slave_0: entered promiscuous mode [ 1510.115576][T18397] hsr_slave_1: entered promiscuous mode [ 1510.692316][T18644] loop4: detected capacity change from 0 to 64 [ 1511.741058][ T5854] Bluetooth: hci6: command tx timeout [ 1512.302561][T18652] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2722'. [ 1512.621108][T18488] chnl_net:caif_netlink_parms(): no params data found [ 1513.355624][T18616] chnl_net:caif_netlink_parms(): no params data found [ 1513.781467][T11757] Bluetooth: hci6: command tx timeout [ 1514.242389][T18664] loop2: detected capacity change from 0 to 32768 [ 1514.566890][T18689] loop4: detected capacity change from 0 to 512 [ 1515.388454][T18689] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1515.593044][T18689] EXT4-fs (loop4): SIPHASH is not a valid default hash value [ 1515.741562][T18488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.767763][T18488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.796706][T18488] bridge_slave_0: entered allmulticast mode [ 1515.814310][T18488] bridge_slave_0: entered promiscuous mode [ 1515.878881][T11757] Bluetooth: hci6: command tx timeout [ 1516.126612][T18616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.153003][T18616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.160493][T18616] bridge_slave_0: entered allmulticast mode [ 1516.167588][T18616] bridge_slave_0: entered promiscuous mode [ 1516.185405][T18616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.192890][T18616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.200755][T18616] bridge_slave_1: entered allmulticast mode [ 1516.207858][T18616] bridge_slave_1: entered promiscuous mode [ 1516.223430][T18488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.249155][T18488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.256450][T18488] bridge_slave_1: entered allmulticast mode [ 1516.286931][T18488] bridge_slave_1: entered promiscuous mode [ 1516.761630][T18717] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2730'. [ 1517.576456][T18616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.597665][T18616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.287678][T11757] Bluetooth: hci6: command tx timeout [ 1518.329134][T18724] tipc: Started in network mode [ 1518.334056][T18724] tipc: Node identity 7f000001, cluster identity 4711 [ 1518.342271][T18724] tipc: Enabled bearer , priority 10 [ 1518.450980][T18397] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1518.470434][T18397] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1518.536603][T18488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.571621][T18488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.271838][T18741] [ 1519.274219][T18741] ============================= [ 1519.279076][T18741] [ BUG: Invalid wait context ] [ 1519.283932][T18741] 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 Not tainted [ 1519.291047][T18741] ----------------------------- [ 1519.295903][T18741] syz.3.2735/18741 is trying to lock: [ 1519.301281][T18741] ffff8880b863ea98 (xdomain_lock){+.+.}-{3:3}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1519.310895][T18741] other info that might help us debug this: [ 1519.316776][T18741] context-{4:4} [ 1519.320264][T18741] 3 locks held by syz.3.2735/18741: [ 1519.325545][T18741] #0: ffff8880501d26d0 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x246/0x12f0 [ 1519.335341][T18741] #1: ffff8880501d2818 (&u->peer_wait){+.+.}-{2:2}, at: __wake_up_common_lock+0x25/0x1e0 [ 1519.345310][T18741] #2: ffff88802e8e8a18 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xbe/0x14b0 [ 1519.354573][T18741] stack backtrace: [ 1519.358286][T18741] CPU: 1 UID: 0 PID: 18741 Comm: syz.3.2735 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 1519.369046][T18741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1519.379189][T18741] Call Trace: [ 1519.382470][T18741] [ 1519.385400][T18741] dump_stack_lvl+0x241/0x360 [ 1519.390091][T18741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1519.395303][T18741] ? __pfx__printk+0x10/0x10 [ 1519.399900][T18741] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1519.405900][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.411571][T18741] __lock_acquire+0x154a/0x2050 [ 1519.416445][T18741] lock_acquire+0x1ed/0x550 [ 1519.420960][T18741] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1519.426519][T18741] ? __pfx_lock_acquire+0x10/0x10 [ 1519.431555][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.437196][T18741] ? do_raw_spin_lock+0x14f/0x370 [ 1519.442229][T18741] ? __lock_acquire+0x1384/0x2050 [ 1519.447266][T18741] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1519.452735][T18741] _raw_spin_lock_nested+0x31/0x40 [ 1519.458036][T18741] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1519.463609][T18741] raw_spin_rq_lock_nested+0x2a/0x140 [ 1519.468998][T18741] __task_rq_lock+0xdf/0x3e0 [ 1519.473599][T18741] try_to_wake_up+0x18f/0x14b0 [ 1519.478366][T18741] ? __skb_try_recv_from_queue+0x5d8/0x780 [ 1519.484184][T18741] ? __pfx_try_to_wake_up+0x10/0x10 [ 1519.489383][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.495026][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.500669][T18741] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1519.506133][T18741] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1519.512033][T18741] autoremove_wake_function+0x16/0x110 [ 1519.517507][T18741] __wake_up_common_lock+0x132/0x1e0 [ 1519.522807][T18741] __unix_dgram_recvmsg+0x5f4/0x12f0 [ 1519.528117][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.533766][T18741] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1519.539505][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.545149][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.550804][T18741] ? iovec_from_user+0x61/0x240 [ 1519.555677][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.561317][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.566955][T18741] ? unix_dgram_recvmsg+0xb6/0xe0 [ 1519.571987][T18741] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1519.577535][T18741] sock_recvmsg_nosec+0x190/0x1d0 [ 1519.582562][T18741] ____sys_recvmsg+0x3cd/0x480 [ 1519.587336][T18741] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1519.592634][T18741] ? __might_fault+0xaa/0x120 [ 1519.597327][T18741] do_recvmmsg+0x45e/0xad0 [ 1519.601761][T18741] ? __pfx_do_recvmmsg+0x10/0x10 [ 1519.606705][T18741] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1519.612707][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.618382][T18741] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1519.624279][T18741] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1519.630611][T18741] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1519.636606][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.642254][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.647895][T18741] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 1519.654496][T18741] ? irqentry_exit+0x63/0x90 [ 1519.659103][T18741] ? rcu_is_watching+0x15/0xb0 [ 1519.663881][T18741] __x64_sys_recvmmsg+0x199/0x250 [ 1519.668920][T18741] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1519.674480][T18741] ? exc_page_fault+0x590/0x8c0 [ 1519.679336][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.684979][T18741] ? do_syscall_64+0xb6/0x230 [ 1519.689671][T18741] do_syscall_64+0xf3/0x230 [ 1519.694200][T18741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.700103][T18741] RIP: 0033:0x7f4340b7e719 [ 1519.704520][T18741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1519.724126][T18741] RSP: 002b:00007f4341918038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1519.732547][T18741] RAX: ffffffffffffffda RBX: 00007f4340d36058 RCX: 00007f4340b7e719 [ 1519.740604][T18741] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1519.748573][T18741] RBP: 00007f4340bf139e R08: 0000000000000000 R09: 0000000000000000 [ 1519.756542][T18741] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1519.764514][T18741] R13: 0000000000000001 R14: 00007f4340d36058 R15: 00007ffdcb202c98 [ 1519.772494][T18741] [ 1519.775511][T18741] ================================================================== [ 1519.783566][T18741] BUG: KASAN: wild-memory-access in __lock_acquire+0xc8b/0x2050 [ 1519.791218][T18741] Read of size 8 at addr 1fffffff87715c68 by task syz.3.2735/18741 [ 1519.799119][T18741] [ 1519.801439][T18741] CPU: 1 UID: 0 PID: 18741 Comm: syz.3.2735 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 1519.812195][T18741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1519.822246][T18741] Call Trace: [ 1519.825519][T18741] [ 1519.828445][T18741] dump_stack_lvl+0x241/0x360 [ 1519.833134][T18741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1519.838338][T18741] ? __pfx__printk+0x10/0x10 [ 1519.842932][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.848571][T18741] ? _printk+0xd5/0x120 [ 1519.852733][T18741] print_report+0xe8/0x550 [ 1519.857166][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.862806][T18741] ? __virt_addr_valid+0x58/0x530 [ 1519.867840][T18741] ? __lock_acquire+0xc8b/0x2050 [ 1519.872809][T18741] kasan_report+0x143/0x180 [ 1519.877315][T18741] ? __lock_acquire+0xc8b/0x2050 [ 1519.882272][T18741] kasan_check_range+0x282/0x290 [ 1519.887217][T18741] __lock_acquire+0xc8b/0x2050 [ 1519.892002][T18741] lock_acquire+0x1ed/0x550 [ 1519.896516][T18741] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1519.902080][T18741] ? __pfx_lock_acquire+0x10/0x10 [ 1519.907115][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.912756][T18741] ? do_raw_spin_lock+0x14f/0x370 [ 1519.917895][T18741] ? __lock_acquire+0x1384/0x2050 [ 1519.923027][T18741] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1519.928411][T18741] _raw_spin_lock_nested+0x31/0x40 [ 1519.933560][T18741] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1519.939126][T18741] raw_spin_rq_lock_nested+0x2a/0x140 [ 1519.944511][T18741] __task_rq_lock+0xdf/0x3e0 [ 1519.949116][T18741] try_to_wake_up+0x18f/0x14b0 [ 1519.953887][T18741] ? __skb_try_recv_from_queue+0x5d8/0x780 [ 1519.959706][T18741] ? __pfx_try_to_wake_up+0x10/0x10 [ 1519.964906][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.970552][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.976193][T18741] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1519.981658][T18741] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1519.987556][T18741] autoremove_wake_function+0x16/0x110 [ 1519.993030][T18741] __wake_up_common_lock+0x132/0x1e0 [ 1519.998333][T18741] __unix_dgram_recvmsg+0x5f4/0x12f0 [ 1520.003642][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.009290][T18741] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1520.015026][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.020757][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.026491][T18741] ? iovec_from_user+0x61/0x240 [ 1520.031358][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.036998][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.042647][T18741] ? unix_dgram_recvmsg+0xb6/0xe0 [ 1520.047678][T18741] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1520.053232][T18741] sock_recvmsg_nosec+0x190/0x1d0 [ 1520.058350][T18741] ____sys_recvmsg+0x3cd/0x480 [ 1520.063129][T18741] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1520.068436][T18741] ? __might_fault+0xaa/0x120 [ 1520.073137][T18741] do_recvmmsg+0x45e/0xad0 [ 1520.077569][T18741] ? __pfx_do_recvmmsg+0x10/0x10 [ 1520.082514][T18741] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1520.088532][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.094175][T18741] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1520.100075][T18741] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1520.106410][T18741] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1520.112404][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.118049][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.123693][T18741] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 1520.130321][T18741] ? irqentry_exit+0x63/0x90 [ 1520.134927][T18741] ? rcu_is_watching+0x15/0xb0 [ 1520.139700][T18741] __x64_sys_recvmmsg+0x199/0x250 [ 1520.144738][T18741] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1520.150292][T18741] ? exc_page_fault+0x590/0x8c0 [ 1520.155145][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.160787][T18741] ? do_syscall_64+0xb6/0x230 [ 1520.165474][T18741] do_syscall_64+0xf3/0x230 [ 1520.169986][T18741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.175890][T18741] RIP: 0033:0x7f4340b7e719 [ 1520.180309][T18741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1520.199914][T18741] RSP: 002b:00007f4341918038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1520.208332][T18741] RAX: ffffffffffffffda RBX: 00007f4340d36058 RCX: 00007f4340b7e719 [ 1520.216302][T18741] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1520.224621][T18741] RBP: 00007f4340bf139e R08: 0000000000000000 R09: 0000000000000000 [ 1520.232680][T18741] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1520.240648][T18741] R13: 0000000000000001 R14: 00007f4340d36058 R15: 00007ffdcb202c98 [ 1520.248804][T18741] [ 1520.251838][T18741] ================================================================== [ 1520.259895][T18741] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1520.267082][T18741] CPU: 1 UID: 0 PID: 18741 Comm: syz.3.2735 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 1520.277930][T18741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1520.287981][T18741] Call Trace: [ 1520.291258][T18741] [ 1520.294187][T18741] dump_stack_lvl+0x241/0x360 [ 1520.298876][T18741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1520.304086][T18741] ? __pfx__printk+0x10/0x10 [ 1520.308687][T18741] ? rcu_is_watching+0x15/0xb0 [ 1520.313454][T18741] ? lock_release+0xbf/0xa30 [ 1520.318055][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.323695][T18741] ? vscnprintf+0x5d/0x90 [ 1520.328037][T18741] panic+0x349/0x880 [ 1520.331939][T18741] ? check_panic_on_warn+0x21/0xb0 [ 1520.337053][T18741] ? __pfx_panic+0x10/0x10 [ 1520.341473][T18741] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1520.346682][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.352320][T18741] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1520.358219][T18741] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1520.364551][T18741] ? print_report+0xe8/0x550 [ 1520.369151][T18741] check_panic_on_warn+0x86/0xb0 [ 1520.374094][T18741] ? __lock_acquire+0xc8b/0x2050 [ 1520.379042][T18741] end_report+0x77/0x160 [ 1520.383290][T18741] kasan_report+0x154/0x180 [ 1520.387796][T18741] ? __lock_acquire+0xc8b/0x2050 [ 1520.392754][T18741] kasan_check_range+0x282/0x290 [ 1520.397715][T18741] __lock_acquire+0xc8b/0x2050 [ 1520.402499][T18741] lock_acquire+0x1ed/0x550 [ 1520.407012][T18741] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1520.412572][T18741] ? __pfx_lock_acquire+0x10/0x10 [ 1520.417607][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.423251][T18741] ? do_raw_spin_lock+0x14f/0x370 [ 1520.428283][T18741] ? __lock_acquire+0x1384/0x2050 [ 1520.433321][T18741] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1520.438706][T18741] _raw_spin_lock_nested+0x31/0x40 [ 1520.443996][T18741] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1520.449547][T18741] raw_spin_rq_lock_nested+0x2a/0x140 [ 1520.454929][T18741] __task_rq_lock+0xdf/0x3e0 [ 1520.459526][T18741] try_to_wake_up+0x18f/0x14b0 [ 1520.464294][T18741] ? __skb_try_recv_from_queue+0x5d8/0x780 [ 1520.470133][T18741] ? __pfx_try_to_wake_up+0x10/0x10 [ 1520.475344][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.480985][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.486621][T18741] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1520.492079][T18741] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1520.497974][T18741] autoremove_wake_function+0x16/0x110 [ 1520.503443][T18741] __wake_up_common_lock+0x132/0x1e0 [ 1520.508744][T18741] __unix_dgram_recvmsg+0x5f4/0x12f0 [ 1520.514047][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.519687][T18741] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1520.525422][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.531062][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.536703][T18741] ? iovec_from_user+0x61/0x240 [ 1520.541570][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.547209][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.552848][T18741] ? unix_dgram_recvmsg+0xb6/0xe0 [ 1520.557880][T18741] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1520.563434][T18741] sock_recvmsg_nosec+0x190/0x1d0 [ 1520.568459][T18741] ____sys_recvmsg+0x3cd/0x480 [ 1520.573254][T18741] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1520.578560][T18741] ? __might_fault+0xaa/0x120 [ 1520.583257][T18741] do_recvmmsg+0x45e/0xad0 [ 1520.587689][T18741] ? __pfx_do_recvmmsg+0x10/0x10 [ 1520.592634][T18741] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1520.598634][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.604279][T18741] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1520.610176][T18741] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1520.616506][T18741] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1520.622498][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.628141][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.633789][T18741] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 1520.640396][T18741] ? irqentry_exit+0x63/0x90 [ 1520.645001][T18741] ? rcu_is_watching+0x15/0xb0 [ 1520.649772][T18741] __x64_sys_recvmmsg+0x199/0x250 [ 1520.654812][T18741] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1520.660366][T18741] ? exc_page_fault+0x590/0x8c0 [ 1520.665218][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1520.670861][T18741] ? do_syscall_64+0xb6/0x230 [ 1520.675549][T18741] do_syscall_64+0xf3/0x230 [ 1520.680062][T18741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.685959][T18741] RIP: 0033:0x7f4340b7e719 [ 1520.690369][T18741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1520.709974][T18741] RSP: 002b:00007f4341918038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1520.718393][T18741] RAX: ffffffffffffffda RBX: 00007f4340d36058 RCX: 00007f4340b7e719 [ 1520.726364][T18741] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1520.734335][T18741] RBP: 00007f4340bf139e R08: 0000000000000000 R09: 0000000000000000 [ 1520.742304][T18741] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1520.750376][T18741] R13: 0000000000000001 R14: 00007f4340d36058 R15: 00007ffdcb202c98 [ 1520.758369][T18741] [ 1520.761616][T18741] Kernel Offset: disabled [ 1520.765934][T18741] Rebooting in 86400 seconds..