last executing test programs: 9m53.572936582s ago: executing program 1 (id=342): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) 9m51.322969454s ago: executing program 1 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='sessionid\x00') r2 = fanotify_init(0x8, 0x0) fanotify_mark(r2, 0x1, 0x40000011, r1, 0x0) 9m47.721157049s ago: executing program 1 (id=352): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0xa0b81, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 9m47.057288725s ago: executing program 1 (id=356): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xff, 0xc9}}}, 0x6) socket$key(0xf, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400000000000001]}) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000001a40)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x200000, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x4}}]}}) 9m45.559509021s ago: executing program 1 (id=360): ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) open(0x0, 0x1afbc2, 0x108) signalfd(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) 9m43.722282268s ago: executing program 1 (id=364): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x11}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$snapshot(0xffffffffffffff9c, 0x0, 0x5410c3, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x200000, &(0x7f0000000600)=ANY=[], 0xfa, 0x27c, &(0x7f0000001240)="$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") open_tree(r4, &(0x7f0000000040)='./bus\x00', 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) r6 = socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x5}}]}}]}, 0x40}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 9m28.45568888s ago: executing program 32 (id=364): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x11}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$snapshot(0xffffffffffffff9c, 0x0, 0x5410c3, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x200000, &(0x7f0000000600)=ANY=[], 0xfa, 0x27c, &(0x7f0000001240)="$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") open_tree(r4, &(0x7f0000000040)='./bus\x00', 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) r6 = socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x5}}]}}]}, 0x40}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 8m11.576017664s ago: executing program 3 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x0) 8m8.900964181s ago: executing program 3 (id=531): syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) 8m5.727391427s ago: executing program 3 (id=535): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@commit}]}, 0x1, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id, 0x10) recvmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d80)=""/157, 0x9d}], 0x1}}], 0x2, 0x0, 0x0) shutdown(r4, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1) close_range(r6, 0xffffffffffffffff, 0x0) close(r5) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x2a, 0xb, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29, 0x2, 0x0, 0x0, 0x0, [@private1]}]}}}}}, 0x0) 8m0.73056057s ago: executing program 3 (id=542): syz_emit_vhci(&(0x7f0000000a80)=ANY=[@ANYBLOB="02c8000c000800010002"], 0x11) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180), 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x50000000}]}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000004c0)=""/206, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 7m59.446477899s ago: executing program 3 (id=543): syz_open_dev$video4linux(0x0, 0x101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4}) 7m57.230819996s ago: executing program 3 (id=548): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xff, 0xc9}}}, 0x6) socket$key(0xf, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000001a40)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 7m41.663956632s ago: executing program 33 (id=548): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xff, 0xc9}}}, 0x6) socket$key(0xf, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000001a40)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 3m43.237470596s ago: executing program 0 (id=931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000040)) 3m39.388915395s ago: executing program 0 (id=938): socket$inet6(0xa, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x407}}}, 0x7) 3m37.693580576s ago: executing program 0 (id=941): socket$key(0xf, 0x3, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) rmdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 3m34.626546845s ago: executing program 0 (id=950): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x67) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x1c, 0x0, &(0x7f0000000140)) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsopen(&(0x7f0000000200)='cramfs\x00', 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x31e3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m32.825617013s ago: executing program 0 (id=952): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r8, 0x0, 0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r9}) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d"], 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3, 0x4000) 3m30.880663659s ago: executing program 0 (id=956): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x1008, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000580)={'#! ', '', [{0x20, '^-@\'/'}, {0x20, '\"\x04\x00'}, {0x20, 'GPL\x00'}, {0x20, 'skcipher\x00'}, {0x20, '#\xbbL4}\x13\x8eq\xce\xb8\x17)e\x015\x9fj\xeb\xb4\xda\xc1P\x02\xe8\x86\xfd\x11YV\x8d\x94(\xae~\xdf\x1f\xb1\xe6\xf7\xbdH\xd1\xd0\xc8\xf9)#'}, {0x20, 'blkio.bfq.io_wait_time_recursive\x00'}]}, 0x6f) unshare(0x400) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x423f}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r5, 0x0, 0x8001) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00002f7000/0x3000)=nil, 0x3000, 0x4, 0x28011, 0xffffffffffffffff, 0x8509b000) fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x2, 0x2, 0x4, 0xe19, 0xffffffffffffffff}) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) 3m14.67650122s ago: executing program 34 (id=956): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x1008, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000580)={'#! ', '', [{0x20, '^-@\'/'}, {0x20, '\"\x04\x00'}, {0x20, 'GPL\x00'}, {0x20, 'skcipher\x00'}, {0x20, '#\xbbL4}\x13\x8eq\xce\xb8\x17)e\x015\x9fj\xeb\xb4\xda\xc1P\x02\xe8\x86\xfd\x11YV\x8d\x94(\xae~\xdf\x1f\xb1\xe6\xf7\xbdH\xd1\xd0\xc8\xf9)#'}, {0x20, 'blkio.bfq.io_wait_time_recursive\x00'}]}, 0x6f) unshare(0x400) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x423f}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r5, 0x0, 0x8001) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00002f7000/0x3000)=nil, 0x3000, 0x4, 0x28011, 0xffffffffffffffff, 0x8509b000) fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x2, 0x2, 0x4, 0xe19, 0xffffffffffffffff}) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) 2m9.188196148s ago: executing program 2 (id=1097): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000), 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {0x0}], 0x2}], 0x1, 0x0) r6 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0xd, 0x2, 0x3}) 2m3.972241318s ago: executing program 2 (id=1107): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000740)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x2, 0x0) syz_clone3(0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="00000001ff197b60e96a84006ab171de59f75700109af4ea72663f47afdc9168b4158b4913df725e94a85b907c5ff963bdfa3d302c9f2fdebf1f6e58fd43f40e850b5e78b8ddba71101e49f618d36622ff203bb3bbfa0f737896fcd24d06d9dc5f655b5d7e0b1cf8fc539cd93e74ad6ed40389a4983a1583e4495959c67fd4db7f796a4db4c72dfa1203584c33e6000000000000"], &(0x7f00000006c0)='GPL\x00', 0x80000001, 0x48, &(0x7f00000009c0)=""/72, 0x40f00, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0x2, 0xff, 0x4}, 0x10, 0x2228, 0xffffffffffffffff, 0x4, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x5, 0x2, 0x2, 0x8}, {0x0, 0x4, 0x10, 0x9}, {0x0, 0x5, 0x0, 0x6}, {0x4, 0x3, 0xb, 0x8}], 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) copy_file_range(0xffffffffffffffff, &(0x7f00000004c0)=0x2, r3, &(0x7f0000000500)=0x2, 0xde3c, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 2m1.300177602s ago: executing program 2 (id=1114): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x11}}, {0x8, 0x2, @private=0x3}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x78}}, 0x0) read$msr(r2, &(0x7f0000000100)=""/105, 0x69) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000019240)) write$P9_RGETLOCK(r4, 0x0, 0x0) 1m50.122264622s ago: executing program 2 (id=1130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2080) write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84a01, 0x120) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 1m45.153609065s ago: executing program 2 (id=1141): add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="3097", 0x2, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = open(0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8d}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000041}, 0x8004) recvmmsg(0xffffffffffffffff, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x1) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) 1m40.479397646s ago: executing program 2 (id=1148): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012120, 0x0) shmctl$SHM_LOCK(0x0, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x10000, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x761c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) 1m23.834582532s ago: executing program 35 (id=1148): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012120, 0x0) shmctl$SHM_LOCK(0x0, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x10000, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x761c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) 54.012140943s ago: executing program 4 (id=1223): syz_open_dev$video4linux(0x0, 0x101, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r5, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x51e}) 52.088628333s ago: executing program 4 (id=1226): r0 = syz_open_dev$video(&(0x7f0000000380), 0xbdff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xda, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0088a800008100000086dd600b336c009c110000000000000000000000000000000000ff02000000000000000000000000000100004e22"], 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000740)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, 0xa3f4, 0x2, 0x100, 0x7, {0x2, 0x1, 0x8, 0x6, 0xec, 0x40, 0x9, 0xfff7, 0xead, 0x3, 0x1, 0xffffffff, 0xff, 0x3, "f724a6a187dd87b64cb4706663289990940819d8c8eec37eece215131d194319"}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x1268, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12c8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 47.135166883s ago: executing program 4 (id=1232): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xfffffffffffffdf9, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe681}}}}]}, 0x58}}, 0x0) 41.048856949s ago: executing program 4 (id=1242): socket$key(0xf, 0x3, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) rmdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 39.864755933s ago: executing program 4 (id=1245): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x67) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x1c, 0x0, &(0x7f0000000140)) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = fsopen(&(0x7f0000000200)='cramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x31e3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 36.314409478s ago: executing program 4 (id=1250): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000028c0)='net/fib_triestat\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002900), 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) splice(r2, 0x0, r0, 0x0, 0x8000c9f, 0x7) prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002fc0)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000780)={0x2020}, 0x2020) r6 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f00000027c0)={0x1, @vbi={0x9, 0x3, 0x80000000, 0x32315559, [0x6, 0x252], [0x80000001, 0x2], 0x2}}) 21.221890353s ago: executing program 36 (id=1250): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000028c0)='net/fib_triestat\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002900), 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) splice(r2, 0x0, r0, 0x0, 0x8000c9f, 0x7) prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002fc0)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000780)={0x2020}, 0x2020) r6 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f00000027c0)={0x1, @vbi={0x9, 0x3, 0x80000000, 0x32315559, [0x6, 0x252], [0x80000001, 0x2], 0x2}}) 20.417237329s ago: executing program 7 (id=1274): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r5, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x51e}) 16.05207489s ago: executing program 7 (id=1278): socket$key(0xf, 0x3, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) rmdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 13.453651083s ago: executing program 6 (id=1281): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x2, 0x0) syz_clone3(0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="00000001ff197b60e96a84006ab171de59f75700109af4ea72663f47afdc9168b4158b4913df725e94a85b907c5ff963bdfa3d302c9f2fdebf1f6e58fd43f40e850b5e78b8ddba71101e49f618d36622ff203bb3bbfa0f737896fcd24d06d9dc5f655b5d7e0b1cf8fc539cd93e74ad6ed40389a4983a1583e4495959c67fd4db7f796a4db4c72dfa1203584c33e6000000000000"], &(0x7f00000006c0)='GPL\x00', 0x80000001, 0x48, &(0x7f00000009c0)=""/72, 0x40f00, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0x2, 0xff, 0x4}, 0x10, 0x2228, 0xffffffffffffffff, 0x4, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x5, 0x2, 0x2, 0x8}, {0x0, 0x4, 0x10, 0x9}, {0x0, 0x5, 0x0, 0x6}, {0x4, 0x3, 0xb, 0x8}], 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) copy_file_range(0xffffffffffffffff, &(0x7f00000004c0)=0x2, r2, &(0x7f0000000500)=0x2, 0xde3c, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 13.392603769s ago: executing program 7 (id=1282): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) kexec_load(0x101, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000600)={0x0, 0x9}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000340)=@ethtool_cmd={0x48, 0x0, 0x97, 0x0, 0x1d, 0x0, 0x6, 0x0, 0x0, 0x3, 0x3f, 0x1000000, 0x0, 0x0, 0x7, 0x2}}) 12.09718984s ago: executing program 6 (id=1283): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) kexec_load(0x101, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000600)={0x0, 0x9}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$nl_generic(0x10, 0x3, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x9, 0x0, 0xfffffff9, 0x9}, {0x7fff, 0x7, 0x3, 0xd06a}}}, 0x0, 0x600) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) 12.020256655s ago: executing program 5 (id=1284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000440)={0x0, 0x0, 0x200, 0x3}, &(0x7f0000000400)=0x0, &(0x7f0000000340)=0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x481, 0x0) socketpair(0x1, 0x80002, 0x800000, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x3f) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)="0d58fa00a4a25557614e6a0775da555b9f8ad5652a279bc135d626d27148a6cc0000006fed6452c9724e4c07ed7aa4e8c6bd506f95bec06503d8803fe650c96d09e0fc0609306753c346692ef17e4d0069d3fdab21d98fff73b790b5ee22c300b00ebae4de85206d3246df851340fbaecd2bff386d043953e4970c3190c853f3309e940fbf548a7cb97c011a7cda046981926f3ad6ee6c028842366e6b6a19fdbab9a72d1d9641486a40de5a17397b33ccd1fc56b75688af422fb01e9eb9fe66a7bb072f74976c3aae86e9de21e8f5256ac9cd0801a0f7b0a8f31f51763f0b4f89d22c553f23531772be5d87a8fc149f73", 0xf1}, {&(0x7f00000004c0)="2ef8046485325c060cdf43d6ad058f9c4901f565c67a7978929c3851bae3ad57e4c8e60c9aa18f7d134e258ea8625a70b1202bf3efa48128e204", 0x3a}], 0x2}, 0xa010) recvmmsg(r7, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/166, 0xa6}], 0x1}, 0x7ff}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400080}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xa4, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1575}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xcc7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f328b01750086d6e9d6e90f20d835080000000f22d866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x43}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) 12.019750944s ago: executing program 8 (id=1285): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x4000000) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004cc0)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x0) pselect6(0xffec, &(0x7f00000000c0)={0x0, 0x0, 0x800000000, 0x57}, 0x0, 0x0, 0x0, 0x0) 10.339949253s ago: executing program 7 (id=1286): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x4000000e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0xe000, 0x88be, 0x8}}}}}, 0x0) r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0x6, 0x5, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0xd615, 0x5, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fc, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x210, 0x210, 0x138, 0x0, 0x210, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'gretap0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 10.332908116s ago: executing program 5 (id=1287): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x4, 0x3, 0x3}, {0x0, 0x0, 0x0, 0x100000002}, 0x0, 0x0, 0x2, 0x1}, {{@in6=@mcast1, 0x4d2}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xa}}, 0xe8) 9.557498294s ago: executing program 8 (id=1288): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x67) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = fsopen(&(0x7f0000000200)='cramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x31e3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.895601723s ago: executing program 7 (id=1289): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x67) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x1c, 0x0, &(0x7f0000000140)) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = fsopen(&(0x7f0000000200)='cramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x31e3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.638136539s ago: executing program 5 (id=1290): syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) 8.021685866s ago: executing program 8 (id=1291): socket$key(0xf, 0x3, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) rmdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 7.401599196s ago: executing program 5 (id=1292): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x2, 0x0) syz_clone3(0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="00000001ff197b60e96a84006ab171de59f75700109af4ea72663f47afdc9168b4158b4913df725e94a85b907c5ff963bdfa3d302c9f2fdebf1f6e58fd43f40e850b5e78b8ddba71101e49f618d36622ff203bb3bbfa0f737896fcd24d06d9dc5f655b5d7e0b1cf8fc539cd93e74ad6ed40389a4983a1583e4495959c67fd4db7f796a4db4c72dfa1203584c33e6000000000000"], &(0x7f00000006c0)='GPL\x00', 0x80000001, 0x48, &(0x7f00000009c0)=""/72, 0x40f00, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0x2, 0xff, 0x4}, 0x10, 0x2228, 0xffffffffffffffff, 0x4, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x5, 0x2, 0x2, 0x8}, {0x0, 0x4, 0x10, 0x9}, {0x0, 0x5, 0x0, 0x6}, {0x4, 0x3, 0xb, 0x8}], 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) copy_file_range(0xffffffffffffffff, &(0x7f00000004c0)=0x2, r2, &(0x7f0000000500)=0x2, 0xde3c, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 5.667446668s ago: executing program 5 (id=1293): prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x401}}}, 0x7) 4.71238686s ago: executing program 8 (id=1294): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x2}}, 0x18) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)) sendmmsg$unix(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000003c0)="1b", 0x1}], 0x1, 0x0, 0x0, 0x4000080}}], 0x1, 0x0) 4.561560292s ago: executing program 6 (id=1295): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000740)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x2, 0x0) syz_clone3(0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="00000001ff197b60e96a84006ab171de59f75700109af4ea72663f47afdc9168b4158b4913df725e94a85b907c5ff963bdfa3d302c9f2fdebf1f6e58fd43f40e850b5e78b8ddba71101e49f618d36622ff203bb3bbfa0f737896fcd24d06d9dc5f655b5d7e0b1cf8fc539cd93e74ad6ed40389a4983a1583e4495959c67fd4db7f796a4db4c72dfa1203584c33e6000000000000"], &(0x7f00000006c0)='GPL\x00', 0x80000001, 0x48, &(0x7f00000009c0)=""/72, 0x40f00, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0x2, 0xff, 0x4}, 0x10, 0x2228, 0xffffffffffffffff, 0x4, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x5, 0x2, 0x2, 0x8}, {0x0, 0x4, 0x10, 0x9}, {0x0, 0x5, 0x0, 0x6}, {0x4, 0x3, 0xb, 0x8}], 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) copy_file_range(0xffffffffffffffff, &(0x7f00000004c0)=0x2, r3, &(0x7f0000000500)=0x2, 0xde3c, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) modify_ldt$write(0x1, &(0x7f0000000000)={0x403, 0x20000800, 0xffffffffffffffff}, 0x10) 3.418938985s ago: executing program 6 (id=1296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000440)={0x0, 0x0, 0x200, 0x3}, &(0x7f0000000400)=0x0, &(0x7f0000000340)=0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x481, 0x0) socketpair(0x1, 0x80002, 0x800000, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x3f) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)="0d58fa00a4a25557614e6a0775da555b9f8ad5652a279bc135d626d27148a6cc0000006fed6452c9724e4c07ed7aa4e8c6bd506f95bec06503d8803fe650c96d09e0fc0609306753c346692ef17e4d0069d3fdab21d98fff73b790b5ee22c300b00ebae4de85206d3246df851340fbaecd2bff386d043953e4970c3190c853f3309e940fbf548a7cb97c011a7cda046981926f3ad6ee6c028842366e6b6a19fdbab9a72d1d9641486a40de5a17397b33ccd1fc56b75688af422fb01e9eb9fe66a7bb072f74976c3aae86e9de21e8f5256ac9cd0801a0f7b0a8f31f51763f0b4f89d22c553f23531772be5d87a8fc149f73", 0xf1}, {&(0x7f00000004c0)="2ef8046485325c060cdf43d6ad058f9c4901f565c67a7978929c3851bae3ad57e4c8e60c9aa18f7d134e258ea8625a70b1202bf3efa48128e204", 0x3a}], 0x2}, 0xa010) recvmmsg(r7, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/166, 0xa6}], 0x1}, 0x7ff}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400080}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xa4, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1575}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xcc7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f328b01750086d6e9d6e90f20d835080000000f22d866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x43}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) 2.746426765s ago: executing program 7 (id=1297): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={0x0}}, 0x20010805) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.75920095s ago: executing program 6 (id=1298): add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="3097", 0x2, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = open(0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8d}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000041}, 0x8004) recvmmsg(0xffffffffffffffff, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r7, 0x400455c8, 0x1) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000340)=0xff) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0x80) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x24040) 1.745349982s ago: executing program 8 (id=1299): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r8, 0x0, 0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r9}) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3, 0x4000) 91.796666ms ago: executing program 5 (id=1300): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040), 0x4) socket$netlink(0x10, 0x3, 0x0) 91.427168ms ago: executing program 6 (id=1301): syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) 0s ago: executing program 8 (id=1302): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x2, 0x0) syz_clone3(0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="00000001ff197b60e96a84006ab171de59f75700109af4ea72663f47afdc9168b4158b4913df725e94a85b907c5ff963bdfa3d302c9f2fdebf1f6e58fd43f40e850b5e78b8ddba71101e49f618d36622ff203bb3bbfa0f737896fcd24d06d9dc5f655b5d7e0b1cf8fc539cd93e74ad6ed40389a4983a1583e4495959c67fd4db7f796a4db4c72dfa1203584c33e6000000000000"], &(0x7f00000006c0)='GPL\x00', 0x80000001, 0x48, &(0x7f00000009c0)=""/72, 0x40f00, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0x2, 0xff, 0x4}, 0x10, 0x2228, 0xffffffffffffffff, 0x4, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x5, 0x2, 0x2, 0x8}, {0x0, 0x4, 0x10, 0x9}, {0x0, 0x5, 0x0, 0x6}, {0x4, 0x3, 0xb, 0x8}], 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) copy_file_range(0xffffffffffffffff, &(0x7f00000004c0)=0x2, r2, &(0x7f0000000500)=0x2, 0xde3c, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) kernel console output (not intermixed with test programs): pected cc 0x1003 length: 249 > 9 [ 265.383518][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 265.400252][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 265.453038][ T5840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 265.466230][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 267.274805][ T7401] chnl_net:caif_netlink_parms(): no params data found [ 268.181294][ T5840] Bluetooth: hci5: command tx timeout [ 270.233023][ T7442] loop3: detected capacity change from 0 to 128 [ 270.303649][ T7443] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 270.395829][ T5840] Bluetooth: hci5: command tx timeout [ 270.670312][ T7442] vfat filesystem being mounted at /72/bus supports timestamps until 2107-12-31 (0x10391447e) [ 272.935359][ T5840] Bluetooth: hci5: command tx timeout [ 273.551720][ T7452] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 273.821477][ T7456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.829944][ T5840] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 274.161467][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.168975][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.404215][ T7401] bridge_slave_0: entered allmulticast mode [ 274.898550][ T7401] bridge_slave_0: entered promiscuous mode [ 274.996930][ T5840] Bluetooth: hci5: command tx timeout [ 275.257586][ T3508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.367116][ T3508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.437779][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.472867][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.503628][ T7401] bridge_slave_1: entered allmulticast mode [ 276.541476][ T7401] bridge_slave_1: entered promiscuous mode [ 276.790950][ T3508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.973156][ T7401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.020080][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 277.020095][ T29] audit: type=1326 audit(4263431428.870:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ea57ff19 code=0x7fc00000 [ 277.075673][ T29] audit: type=1326 audit(4263431428.910:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f26ea57ff19 code=0x7fc00000 [ 277.132441][ T29] audit: type=1326 audit(4263431428.910:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ea57ff19 code=0x7fc00000 [ 277.232121][ T3508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.340772][ T7401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.686894][ T7401] team0: Port device team_slave_0 added [ 279.039174][ T7490] loop2: detected capacity change from 0 to 128 [ 280.107212][ T7492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.213756][ T7490] vfat filesystem being mounted at /91/bus supports timestamps until 2107-12-31 (0x10391447e) [ 282.554803][ T7401] team0: Port device team_slave_1 added [ 282.706319][ T5840] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 283.769150][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.784729][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.936301][ T7401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.993377][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.013659][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.260637][ T7401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.239716][ T7401] hsr_slave_0: entered promiscuous mode [ 285.294133][ T7401] hsr_slave_1: entered promiscuous mode [ 285.301592][ T7401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.309227][ T7401] Cannot create hsr debugfs directory [ 286.910842][ T3508] bridge_slave_1: left allmulticast mode [ 286.916946][ T3508] bridge_slave_1: left promiscuous mode [ 286.924803][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.954762][ T5840] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 287.347359][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 288.045092][ T3508] bridge_slave_0: left allmulticast mode [ 288.075271][ T3508] bridge_slave_0: left promiscuous mode [ 288.111255][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.941738][ T5840] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 291.004932][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.019021][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.069938][ T3508] bond0 (unregistering): Released all slaves [ 291.540883][ T3508] tipc: Left network mode [ 294.445035][ T7579] veth0_vlan: entered allmulticast mode [ 295.640752][ T5840] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 303.868876][ T7401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.322030][ T7401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.589871][ T7401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.777607][ T7401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 304.974580][ T3508] hsr_slave_0: left promiscuous mode [ 304.982011][ T3508] hsr_slave_1: left promiscuous mode [ 305.008684][ T5840] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 305.210829][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.218316][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.258170][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.300670][ T5888] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 306.007404][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.122017][ T3508] veth1_macvtap: left promiscuous mode [ 306.128461][ T3508] veth0_macvtap: left promiscuous mode [ 306.134251][ T3508] veth1_vlan: left promiscuous mode [ 306.139863][ T3508] veth0_vlan: left promiscuous mode [ 306.220534][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 306.229425][ T5888] usb 1-1: config 0 has an invalid interface number: 199 but max is 0 [ 306.238015][ T5888] usb 1-1: config 0 has no interface number 0 [ 306.246502][ T5888] usb 1-1: New USB device found, idVendor=0bfd, idProduct=000a, bcdDevice=30.0c [ 306.256210][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.272293][ T5888] usb 1-1: Product: syz [ 306.280592][ T5888] usb 1-1: Manufacturer: syz [ 306.291774][ T5888] usb 1-1: SerialNumber: syz [ 306.299147][ T5888] usb 1-1: config 0 descriptor?? [ 306.316392][ T5888] kvaser_usb 1-1:0.199: error -ENODEV: Cannot get usb endpoint(s) [ 306.525524][ T5888] usb 1-1: USB disconnect, device number 2 [ 307.026699][ T7674] loop4: detected capacity change from 0 to 32768 [ 307.136323][ T7674] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.463 (7674) [ 307.191603][ T7674] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 307.217218][ T7674] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 307.276095][ T7674] BTRFS info (device loop4): using free-space-tree [ 308.903841][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 309.241459][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 310.116453][ T5836] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 310.923812][ T5888] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 311.461513][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 311.470101][ T5888] usb 5-1: config 1 interface 0 has no altsetting 0 [ 311.808065][ T5840] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 311.816513][ T7401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.117802][ T7401] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.162009][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.169138][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.210167][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.217398][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.227423][ T5888] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 313.236756][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.244868][ T5888] usb 5-1: Product: syz [ 313.249115][ T5888] usb 5-1: Manufacturer: syz [ 313.253860][ T5888] usb 5-1: SerialNumber: syz [ 313.316186][ T7401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.359066][ T7401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.566615][ T5888] usbhid 5-1:1.0: can't add hid device: -71 [ 313.572927][ T5888] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 313.640113][ T5888] usb 5-1: USB disconnect, device number 4 [ 313.954994][ T7763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 315.675847][ T7763] bond1 (unregistering): Released all slaves [ 316.034375][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 316.091905][ T7401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.391738][ T5856] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 317.429963][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.772016][ T7401] veth0_vlan: entered promiscuous mode [ 321.782523][ T7401] veth1_vlan: entered promiscuous mode [ 321.984124][ T7401] veth0_macvtap: entered promiscuous mode [ 322.024296][ T7401] veth1_macvtap: entered promiscuous mode [ 322.121185][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.131985][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.142341][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.153234][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.163342][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.174079][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.184251][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.206965][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.239291][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.705826][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.853569][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.870469][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.890478][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.920251][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.940552][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.960527][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.230489][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.475231][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.807192][ T5856] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 328.311311][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.456827][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.472787][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.488154][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.502197][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 328.538292][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.694778][ T5852] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 331.111650][ T5852] Bluetooth: hci4: command tx timeout [ 333.210622][ T5852] Bluetooth: hci4: command tx timeout [ 333.471434][ T8027] Invalid ELF header magic: != ELF [ 333.558804][ T7926] chnl_net:caif_netlink_parms(): no params data found [ 335.253663][ T5852] Bluetooth: hci4: command tx timeout [ 335.324563][ T5852] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 337.575405][ T5852] Bluetooth: hci4: command tx timeout [ 339.518524][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.527089][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.535215][ T7926] bridge_slave_0: entered allmulticast mode [ 339.544254][ T7926] bridge_slave_0: entered promiscuous mode [ 339.552885][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.560064][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.568027][ T7926] bridge_slave_1: entered allmulticast mode [ 339.575711][ T7926] bridge_slave_1: entered promiscuous mode [ 341.451601][ T5856] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 341.612934][ T7926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.665544][ T7926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.835321][ T5856] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 344.758380][ T8122] vivid-000: ================= START STATUS ================= [ 344.767013][ T8122] vivid-000: Generate PTS: true [ 344.772741][ T8122] vivid-000: Generate SCR: true [ 344.778343][ T8122] tpg source WxH: 640x360 (Y'CbCr) [ 344.783998][ T8122] tpg field: 1 [ 344.787424][ T8122] tpg crop: 640x360@0x0 [ 344.791681][ T8122] tpg compose: 640x360@0x0 [ 344.796140][ T8122] tpg colorspace: 8 [ 344.799978][ T8122] tpg transfer function: 0/0 [ 344.805242][ T8122] tpg Y'CbCr encoding: 0/0 [ 344.809744][ T8122] tpg quantization: 0/0 [ 344.814156][ T8122] tpg RGB range: 0/2 [ 344.818124][ T8122] vivid-000: ================== END STATUS ================== [ 345.606453][ T7926] team0: Port device team_slave_0 added [ 346.193627][ T7926] team0: Port device team_slave_1 added [ 347.327161][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.370453][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.438808][ T7926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.532451][ T3508] bridge_slave_1: left allmulticast mode [ 347.538314][ T3508] bridge_slave_1: left promiscuous mode [ 347.573079][ T8141] loop2: detected capacity change from 0 to 128 [ 347.620206][ T8141] vfat filesystem being mounted at /127/bus supports timestamps until 2107-12-31 (0x10391447e) [ 347.635677][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.977742][ T3508] bridge_slave_0: left allmulticast mode [ 347.986384][ T3508] bridge_slave_0: left promiscuous mode [ 347.994099][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.706619][ T5852] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 352.313141][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.354671][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.406774][ T3508] bond0 (unregistering): Released all slaves [ 352.562488][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.594364][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.786956][ T7926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.020522][ T5852] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 353.868374][ T7926] hsr_slave_0: entered promiscuous mode [ 353.920953][ T7926] hsr_slave_1: entered promiscuous mode [ 353.954782][ T7926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.992147][ T7926] Cannot create hsr debugfs directory [ 354.198852][ T3508] hsr_slave_0: left promiscuous mode [ 354.221326][ T3508] hsr_slave_1: left promiscuous mode [ 355.744467][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.744553][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.023697][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.032085][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.101435][ T3508] veth1_macvtap: left promiscuous mode [ 357.107033][ T3508] veth0_macvtap: left promiscuous mode [ 357.140687][ T3508] veth1_vlan: left promiscuous mode [ 357.190719][ T3508] veth0_vlan: left promiscuous mode [ 358.932314][ T8209] loop0: detected capacity change from 0 to 32768 [ 358.961791][ T8209] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.551 (8209) [ 359.031946][ T8209] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 359.051282][ T8209] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 359.081415][ T8209] BTRFS info (device loop0): using free-space-tree [ 362.457714][ T5841] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 363.604318][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 363.735338][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 364.172991][ T8262] loop0: detected capacity change from 0 to 128 [ 364.260790][ T8262] vfat filesystem being mounted at /125/bus supports timestamps until 2107-12-31 (0x10391447e) [ 369.905131][ T8287] loop4: detected capacity change from 0 to 32768 [ 370.057601][ T8287] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.568 (8287) [ 370.072263][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.082727][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.102795][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.147196][ T8287] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 370.208837][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.216767][ T5856] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 370.225112][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 370.254522][ T8287] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 370.264198][ T8287] BTRFS info (device loop4): using free-space-tree [ 372.379269][ T5852] Bluetooth: hci5: command tx timeout [ 372.695523][ T5836] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 372.724716][ T7926] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 372.753570][ T7926] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 372.773200][ T7926] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 372.787681][ T7926] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 372.818602][ T8293] chnl_net:caif_netlink_parms(): no params data found [ 374.591729][ T5856] Bluetooth: hci5: command tx timeout [ 374.937057][ T3508] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.751148][ T5852] Bluetooth: hci5: command tx timeout [ 376.824770][ T3508] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.113450][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.130685][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.148519][ T8293] bridge_slave_0: entered allmulticast mode [ 377.157048][ T8293] bridge_slave_0: entered promiscuous mode [ 377.191805][ T3508] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.247061][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.269414][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.398597][ T8388] loop2: detected capacity change from 0 to 128 [ 377.441531][ T8388] vfat filesystem being mounted at /137/bus supports timestamps until 2107-12-31 (0x10391447e) [ 377.454767][ T8293] bridge_slave_1: entered allmulticast mode [ 377.462282][ T8293] bridge_slave_1: entered promiscuous mode [ 377.874241][ T7926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.896566][ T7926] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.937060][ T7926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 377.962534][ T7926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.996812][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.004019][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.014331][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.021571][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.408796][ T3508] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.509757][ T8293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.588978][ T8293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.832863][ T5852] Bluetooth: hci5: command tx timeout [ 379.052682][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.113779][ T8293] team0: Port device team_slave_0 added [ 379.115184][ T8395] loop4: detected capacity change from 0 to 32768 [ 379.410651][ T8395] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.581 (8395) [ 379.452819][ T8293] team0: Port device team_slave_1 added [ 379.508706][ T8395] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 379.550858][ T8395] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 379.585173][ T8395] BTRFS info (device loop4): using free-space-tree [ 379.592942][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.621722][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.680425][ T8293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.728506][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.750911][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.776880][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.800448][ T8293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.856768][ T7926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.801651][ T8293] hsr_slave_0: entered promiscuous mode [ 380.845158][ T8293] hsr_slave_1: entered promiscuous mode [ 380.874082][ T8293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.895710][ T8293] Cannot create hsr debugfs directory [ 380.901974][ T5836] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 380.922981][ T3508] bridge_slave_1: left allmulticast mode [ 380.928693][ T3508] bridge_slave_1: left promiscuous mode [ 380.961977][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.981850][ T3508] bridge_slave_0: left allmulticast mode [ 380.987570][ T3508] bridge_slave_0: left promiscuous mode [ 381.020629][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.144756][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.167371][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.195737][ T3508] bond0 (unregistering): Released all slaves [ 384.409498][ T3508] tipc: Left network mode [ 385.146693][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.197688][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.206756][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.277710][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.300684][ T5852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 385.340756][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 386.136051][ T3508] hsr_slave_0: left promiscuous mode [ 386.650190][ T3508] hsr_slave_1: left promiscuous mode [ 386.809911][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.952693][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.116749][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.210561][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.303153][ T3508] veth1_macvtap: left promiscuous mode [ 387.308808][ T3508] veth0_macvtap: left promiscuous mode [ 387.345903][ T3508] veth1_vlan: left promiscuous mode [ 387.395492][ T5856] Bluetooth: hci3: command tx timeout [ 389.501840][ T5856] Bluetooth: hci3: command tx timeout [ 391.600452][ T5856] Bluetooth: hci3: command tx timeout [ 393.313327][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 393.399504][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 393.631929][ T5856] Bluetooth: hci3: command tx timeout [ 395.171078][ T8293] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 395.350508][ T8293] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 395.690894][ T8293] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 395.837377][ T8293] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 397.224302][ T8464] chnl_net:caif_netlink_parms(): no params data found [ 397.323186][ T8293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.863215][ T8535] loop0: detected capacity change from 0 to 128 [ 398.303158][ T8518] loop4: detected capacity change from 0 to 32768 [ 398.343673][ T8518] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.603 (8518) [ 398.816530][ T8535] vfat filesystem being mounted at /137/bus supports timestamps until 2107-12-31 (0x10391447e) [ 398.969433][ T8293] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.106769][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.114050][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.331602][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.338838][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.829795][ T8553] ntfs3: Bad value for 'gid' [ 400.858966][ T8553] ntfs3: Bad value for 'gid' [ 400.871157][ T8464] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.878303][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.886695][ T8464] bridge_slave_0: entered allmulticast mode [ 400.894257][ T8464] bridge_slave_0: entered promiscuous mode [ 401.379983][ T8464] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.498690][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.527269][ T8464] bridge_slave_1: entered allmulticast mode [ 401.579720][ T8464] bridge_slave_1: entered promiscuous mode [ 401.926097][ T8464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.266452][ T8464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.979297][ T8464] team0: Port device team_slave_0 added [ 404.067553][ T8464] team0: Port device team_slave_1 added [ 405.132532][ T8586] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 405.686140][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.765420][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.110816][ T8464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.731401][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.731425][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.731456][ T8464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.931593][ T3508] bridge_slave_1: left allmulticast mode [ 406.931627][ T3508] bridge_slave_1: left promiscuous mode [ 406.931800][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.209325][ T3508] bridge_slave_0: left allmulticast mode [ 407.216957][ T3508] bridge_slave_0: left promiscuous mode [ 407.231732][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.824479][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.845738][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.865376][ T3508] bond0 (unregistering): Released all slaves [ 411.928386][ T8464] hsr_slave_0: entered promiscuous mode [ 411.955213][ T8464] hsr_slave_1: entered promiscuous mode [ 411.974573][ T8464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.990409][ T8464] Cannot create hsr debugfs directory [ 412.067348][ T3508] hsr_slave_0: left promiscuous mode [ 412.089281][ T3508] hsr_slave_1: left promiscuous mode [ 412.104168][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.171941][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.840264][ T8642] process 'syz.2.626' launched './file0' with NULL argv: empty string added [ 417.386868][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 417.493297][ T8665] loop2: detected capacity change from 0 to 64 [ 417.510523][ T5888] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 417.570048][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 417.575858][ T8665] hfs: get root inode failed [ 417.890534][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 418.479087][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 418.491034][ T5888] usb 1-1: config 1 interface 0 has no altsetting 0 [ 418.499807][ T5888] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 418.509423][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.518373][ T5888] usb 1-1: Product: syz [ 418.522775][ T5888] usb 1-1: Manufacturer: syz [ 418.527408][ T5888] usb 1-1: SerialNumber: syz [ 418.798829][ T5888] usbhid 1-1:1.0: can't add hid device: -71 [ 418.805485][ T5888] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 418.840184][ T5888] usb 1-1: USB disconnect, device number 3 [ 419.099215][ T5856] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 419.126924][ T8293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.704422][ T8293] veth0_vlan: entered promiscuous mode [ 421.804543][ T8293] veth1_vlan: entered promiscuous mode [ 421.842922][ T8712] netlink: 60 bytes leftover after parsing attributes in process `syz.0.643'. [ 421.943609][ T8293] veth0_macvtap: entered promiscuous mode [ 421.975430][ T8293] veth1_macvtap: entered promiscuous mode [ 422.093471][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.119818][ T8718] loop0: detected capacity change from 0 to 64 [ 422.135261][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.160453][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.183925][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.205376][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.265534][ T8718] hfs: get root inode failed [ 422.299204][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.430428][ T8293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.565869][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.585770][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.596363][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.607346][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.810463][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.851290][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.174241][ T8293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.235910][ T8293] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.286965][ T8293] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.309458][ T8293] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.318563][ T8293] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.341125][ T8464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 423.438874][ T8464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 424.384951][ T8464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 425.483549][ T8464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 427.276213][ T8756] netlink: 60 bytes leftover after parsing attributes in process `syz.4.653'. [ 427.341381][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.350241][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.582788][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.599468][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.916345][ T8771] loop0: detected capacity change from 0 to 64 [ 428.939588][ T8771] hfs: get root inode failed [ 428.955916][ T8464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.992787][ T8464] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.841138][ T8464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.852039][ T8464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.873881][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.881199][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.890387][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.897540][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.722592][ T5856] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 434.647887][ T8464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.025097][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 435.035677][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 435.203687][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 435.301893][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 435.315441][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 435.332181][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 435.378551][ T8814] netlink: 80 bytes leftover after parsing attributes in process `syz.0.662'. [ 437.245986][ T7976] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.246719][ T8833] loop4: detected capacity change from 0 to 64 [ 437.345288][ T8833] hfs: get root inode failed [ 437.551467][ T5852] Bluetooth: hci4: command tx timeout [ 439.154963][ T7976] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.242986][ T8464] veth0_vlan: entered promiscuous mode [ 439.402226][ T8464] veth1_vlan: entered promiscuous mode [ 439.440767][ T5889] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 439.632284][ T5852] Bluetooth: hci4: command tx timeout [ 439.646610][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 439.751447][ T7976] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.505951][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.559022][ T8866] netlink: 80 bytes leftover after parsing attributes in process `syz.2.671'. [ 440.625518][ T5852] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 440.629303][ T8464] veth0_macvtap: entered promiscuous mode [ 440.643604][ T8464] veth1_macvtap: entered promiscuous mode [ 440.667246][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.677939][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.688337][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.699319][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.709214][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.720038][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.730005][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.740823][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.752083][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.795095][ T5889] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 440.805830][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.814794][ T5889] usb 5-1: Product: syz [ 440.821266][ T5889] usb 5-1: Manufacturer: syz [ 440.825910][ T5889] usb 5-1: SerialNumber: syz [ 440.925034][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.942976][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.968522][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.979435][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.991000][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.001713][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.018805][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.030053][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.053687][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.955539][ T5852] Bluetooth: hci4: command tx timeout [ 441.993365][ T5889] usb 5-1: config 0 descriptor?? [ 443.217096][ T5889] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 443.241630][ T5889] gspca_sunplus: reg_w_riv err -71 [ 443.246917][ T5889] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 443.441368][ T5889] usb 5-1: USB disconnect, device number 5 [ 443.612406][ T7976] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.777654][ T8802] chnl_net:caif_netlink_parms(): no params data found [ 443.906924][ T8464] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.919184][ T8464] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.939731][ T8464] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.942980][ T8892] loop0: detected capacity change from 0 to 64 [ 443.950389][ T8464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.151157][ T5852] Bluetooth: hci4: command tx timeout [ 444.237811][ T8892] hfs: get root inode failed [ 446.513026][ T7976] bridge_slave_1: left allmulticast mode [ 446.530287][ T7976] bridge_slave_1: left promiscuous mode [ 446.548938][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.650048][ T7976] bridge_slave_0: left allmulticast mode [ 446.669764][ T7976] bridge_slave_0: left promiscuous mode [ 446.695998][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.642486][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 447.680442][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 447.690767][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 447.761058][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 447.809489][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 447.853911][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 448.333474][ T8939] block nbd0: not configured, cannot reconfigure [ 449.992319][ T5852] Bluetooth: hci3: command tx timeout [ 450.260059][ T7976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.506490][ T7976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.533416][ T7976] bond0 (unregistering): Released all slaves [ 451.569062][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.587643][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.629148][ T8802] bridge_slave_0: entered allmulticast mode [ 451.662037][ T8802] bridge_slave_0: entered promiscuous mode [ 451.956597][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.982250][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.989691][ T8802] bridge_slave_1: entered allmulticast mode [ 452.056435][ T8802] bridge_slave_1: entered promiscuous mode [ 452.110666][ T5852] Bluetooth: hci3: command tx timeout [ 452.665767][ T8802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.697502][ T8802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.107075][ T8983] loop0: detected capacity change from 0 to 64 [ 453.131692][ T8802] team0: Port device team_slave_0 added [ 453.140177][ T8802] team0: Port device team_slave_1 added [ 453.291544][ T8983] hfs: get root inode failed [ 453.552613][ T7976] hsr_slave_0: left promiscuous mode [ 453.580002][ T7976] hsr_slave_1: left promiscuous mode [ 454.201341][ T5852] Bluetooth: hci3: command tx timeout [ 454.233636][ T7976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.312336][ T7976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.419461][ T7976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.441172][ T7976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.617631][ T7976] veth1_macvtap: left promiscuous mode [ 454.641092][ T7976] veth0_macvtap: left promiscuous mode [ 454.647868][ T7976] veth1_vlan: left promiscuous mode [ 454.663289][ T7976] veth0_vlan: left promiscuous mode [ 455.551832][ T9013] block nbd0: not configured, cannot reconfigure [ 456.520450][ T5852] Bluetooth: hci3: command tx timeout [ 459.219923][ T7976] team0 (unregistering): Port device team_slave_1 removed [ 459.291565][ T7976] team0 (unregistering): Port device team_slave_0 removed [ 459.983218][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.990201][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.040434][ T8802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.053274][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.060275][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.086829][ T8802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.184805][ T9038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.694'. [ 460.482423][ T9038] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 460.838034][ T8802] hsr_slave_0: entered promiscuous mode [ 461.074214][ T8802] hsr_slave_1: entered promiscuous mode [ 461.167565][ T8802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.234539][ T8802] Cannot create hsr debugfs directory [ 461.358530][ T8925] chnl_net:caif_netlink_parms(): no params data found [ 462.112975][ T9056] block nbd0: not configured, cannot reconfigure [ 462.806021][ T9069] loop2: detected capacity change from 0 to 64 [ 462.818151][ T9069] hfs: get root inode failed [ 465.848133][ T8925] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.319837][ T8925] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.327272][ T8925] bridge_slave_0: entered allmulticast mode [ 466.342431][ T8925] bridge_slave_0: entered promiscuous mode [ 467.263381][ T8925] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.288014][ T8925] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.296435][ T8925] bridge_slave_1: entered allmulticast mode [ 467.312411][ T8925] bridge_slave_1: entered promiscuous mode [ 467.390525][ T29] audit: type=1326 audit(4263431619.240:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.2.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ea57ff19 code=0x7fc00000 [ 467.412617][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.048090][ T9144] syz.4.704 (9144): drop_caches: 2 [ 468.233233][ T7855] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.326376][ T8925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.382424][ T8925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.492016][ T9174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.603656][ T5892] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 468.789171][ T9179] block nbd0: not configured, cannot reconfigure [ 469.336682][ T8925] team0: Port device team_slave_0 added [ 469.455680][ T7855] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.528398][ T8925] team0: Port device team_slave_1 added [ 469.570563][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 469.597751][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 469.653880][ T5892] usb 3-1: config 1 interface 0 has no altsetting 0 [ 469.768050][ T5892] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 469.786555][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.800722][ T5892] usb 3-1: Product: syz [ 469.805084][ T5892] usb 3-1: Manufacturer: syz [ 469.810242][ T5892] usb 3-1: SerialNumber: syz [ 470.386660][ T5892] usbhid 3-1:1.0: can't add hid device: -71 [ 470.393280][ T5892] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 470.413873][ T5892] usb 3-1: USB disconnect, device number 3 [ 470.838444][ T8509] udevd[8509]: setting mode of /dev/bus/usb/003/003 to 020664 failed: No such file or directory [ 470.878086][ T8509] udevd[8509]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory [ 470.972410][ T7855] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.997078][ T9198] loop4: detected capacity change from 0 to 64 [ 472.205679][ T9198] hfs: get root inode failed [ 473.223798][ T7855] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.281778][ T8925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.289049][ T8925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.327221][ T8925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.342504][ T8925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.382775][ T8925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.386276][ T29] audit: type=1326 audit(4263431625.230:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0277ff19 code=0x7fc00000 [ 473.409006][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.448998][ T8925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.553872][ T29] audit: type=1326 audit(4263431625.230:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fcb0277ff19 code=0x7fc00000 [ 473.618983][ T29] audit: type=1326 audit(4263431625.230:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0277ff19 code=0x7fc00000 [ 473.646031][ T9265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.707587][ T29] audit: type=1326 audit(4263431625.230:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0277ff19 code=0x7fc00000 [ 473.743626][ T29] audit: type=1326 audit(4263431625.230:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0277ff19 code=0x7fc00000 [ 473.747456][ T8925] hsr_slave_0: entered promiscuous mode [ 473.784868][ T29] audit: type=1326 audit(4263431625.230:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0277ff19 code=0x7fc00000 [ 473.816280][ T29] audit: type=1326 audit(4263431625.230:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0277ff19 code=0x7fc00000 [ 473.849604][ T29] audit: type=1326 audit(4263431625.230:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0277ff19 code=0x7fc00000 [ 473.885318][ T29] audit: type=1326 audit(4263431625.230:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0277ff19 code=0x7fc00000 [ 473.908492][ T8925] hsr_slave_1: entered promiscuous mode [ 473.915341][ T8925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.933378][ T8925] Cannot create hsr debugfs directory [ 473.947680][ T29] audit: type=1326 audit(4263431625.230:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0277ff19 code=0x7fc00000 [ 474.273216][ T9272] block nbd0: not configured, cannot reconfigure [ 474.832674][ T7855] bridge_slave_1: left allmulticast mode [ 474.860601][ T7855] bridge_slave_1: left promiscuous mode [ 474.866465][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.097717][ T7855] bridge_slave_0: left allmulticast mode [ 475.103497][ T7855] bridge_slave_0: left promiscuous mode [ 475.110769][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.173727][ T9280] overlayfs: failed to resolve './bus': -2 [ 476.148517][ T9289] loop2: detected capacity change from 0 to 64 [ 476.176766][ T9289] hfs: get root inode failed [ 477.898055][ T9300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.858350][ T9361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.732'. [ 479.870414][ T9361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.732'. [ 479.928797][ T7855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.942925][ T7855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.045431][ T9364] block nbd0: not configured, cannot reconfigure [ 480.121770][ T7855] bond0 (unregistering): Released all slaves [ 480.732845][ T9361] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.740844][ T9361] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.880602][ T7855] hsr_slave_0: left promiscuous mode [ 481.290562][ T7855] hsr_slave_1: left promiscuous mode [ 481.297381][ T7855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.305756][ T7855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.456766][ T7855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.589917][ T7855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.821851][ T7855] veth1_macvtap: left promiscuous mode [ 481.827569][ T7855] veth0_macvtap: left promiscuous mode [ 481.857811][ T7855] veth1_vlan: left promiscuous mode [ 481.901406][ T7855] veth0_vlan: left promiscuous mode [ 483.952846][ T9396] block nbd0: not configured, cannot reconfigure [ 484.928212][ T9401] loop0: detected capacity change from 0 to 64 [ 485.153810][ T9401] hfs: get root inode failed [ 488.170859][ T9461] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 488.420939][ T7855] team0 (unregistering): Port device team_slave_1 removed [ 488.643139][ T7855] team0 (unregistering): Port device team_slave_0 removed [ 488.922621][ T9472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.406360][ T9483] block nbd0: not configured, cannot reconfigure [ 492.798947][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 492.823484][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 492.857945][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 492.879876][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 492.911091][ T5856] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 492.929597][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 493.240976][ T8802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 494.337736][ T9545] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 494.996819][ T5852] Bluetooth: hci5: command tx timeout [ 497.080755][ T5852] Bluetooth: hci5: command tx timeout [ 497.599692][ T9567] block nbd0: not configured, cannot reconfigure [ 499.046147][ T9573] loop0: detected capacity change from 0 to 64 [ 499.153276][ T5852] Bluetooth: hci5: command tx timeout [ 499.197720][ T9573] hfs: get root inode failed [ 501.230574][ T5852] Bluetooth: hci5: command tx timeout [ 501.744349][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.344870][ T9536] chnl_net:caif_netlink_parms(): no params data found [ 503.765078][ T9643] block nbd0: not configured, cannot reconfigure [ 505.290813][ T9657] loop0: detected capacity change from 0 to 64 [ 505.340154][ T9657] hfs: get root inode failed [ 507.629808][ T9536] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.652434][ T9536] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.659746][ T9536] bridge_slave_0: entered allmulticast mode [ 508.640681][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 508.659998][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 508.670253][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 508.679786][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 508.688084][ T5856] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 508.696174][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 508.726129][ T9536] bridge_slave_0: entered promiscuous mode [ 508.739533][ T9536] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.790550][ T9536] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.797879][ T9536] bridge_slave_1: entered allmulticast mode [ 508.822301][ T9536] bridge_slave_1: entered promiscuous mode [ 511.440600][ T9684] block nbd0: not configured, cannot reconfigure [ 511.460774][ T5856] Bluetooth: hci4: command tx timeout [ 512.532591][ T7855] bridge_slave_1: left allmulticast mode [ 512.538275][ T7855] bridge_slave_1: left promiscuous mode [ 513.150666][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.190519][ T7855] bridge_slave_0: left allmulticast mode [ 513.280629][ T7855] bridge_slave_0: left promiscuous mode [ 513.288404][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.480372][ T5852] Bluetooth: hci4: command tx timeout [ 514.618244][ T7855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.688518][ T7855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.737983][ T7855] bond0 (unregistering): Released all slaves [ 514.783146][ T9536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.004282][ T9536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.116544][ T5852] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 516.238998][ T5852] Bluetooth: hci4: command tx timeout [ 516.312333][ T7855] hsr_slave_0: left promiscuous mode [ 516.339863][ T7855] hsr_slave_1: left promiscuous mode [ 516.434393][ T7855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.511569][ T7855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.164716][ T7855] team0 (unregistering): Port device team_slave_1 removed [ 517.397181][ T7855] team0 (unregistering): Port device team_slave_0 removed [ 517.485693][ T5852] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 518.565152][ T5852] Bluetooth: hci4: command tx timeout [ 520.198266][ T9536] team0: Port device team_slave_0 added [ 520.389554][ T9536] team0: Port device team_slave_1 added [ 520.869207][ T9536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.889165][ T9732] loop0: detected capacity change from 0 to 64 [ 520.895620][ T9536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.895659][ T9536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.931085][ T9536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.010682][ T9536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.139385][ T9732] hfs: get root inode failed [ 521.172502][ T9536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.171713][ T9536] hsr_slave_0: entered promiscuous mode [ 523.213765][ T9536] hsr_slave_1: entered promiscuous mode [ 523.240583][ T9536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.260397][ T9536] Cannot create hsr debugfs directory [ 523.283084][ T9674] chnl_net:caif_netlink_parms(): no params data found [ 524.760646][ T5856] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 524.985054][ T9674] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.030584][ T9674] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.068709][ T9674] bridge_slave_0: entered allmulticast mode [ 525.105456][ T9674] bridge_slave_0: entered promiscuous mode [ 526.150261][ T9674] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.150633][ T5856] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 526.226926][ T9674] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.235316][ T9674] bridge_slave_1: entered allmulticast mode [ 526.243704][ T9674] bridge_slave_1: entered promiscuous mode [ 526.316394][ T9674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.586032][ T9674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.336598][ T9674] team0: Port device team_slave_0 added [ 528.386082][ T9674] team0: Port device team_slave_1 added [ 528.405476][ T9786] loop2: detected capacity change from 0 to 64 [ 528.472237][ T9786] hfs: get root inode failed [ 528.745592][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.785126][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.838841][ T9674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.897946][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.905770][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.435186][ T9674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.369838][ T9674] hsr_slave_0: entered promiscuous mode [ 530.399175][ T9674] hsr_slave_1: entered promiscuous mode [ 530.415243][ T9674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.455019][ T9674] Cannot create hsr debugfs directory [ 530.801526][ T7855] bridge_slave_1: left allmulticast mode [ 530.807275][ T7855] bridge_slave_1: left promiscuous mode [ 530.847776][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.872850][ T7855] bridge_slave_0: left allmulticast mode [ 530.878577][ T7855] bridge_slave_0: left promiscuous mode [ 531.023473][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.236721][ T9810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 532.291971][ T7855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.304493][ T7855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.342928][ T7855] bond0 (unregistering): Released all slaves [ 532.480902][ T9536] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 532.517218][ T9536] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 532.646383][ T9536] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 532.687096][ T7855] hsr_slave_0: left promiscuous mode [ 532.694530][ T7855] hsr_slave_1: left promiscuous mode [ 532.746747][ T7855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.771232][ T7855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.522453][ T7855] team0 (unregistering): Port device team_slave_1 removed [ 533.744045][ T7855] team0 (unregistering): Port device team_slave_0 removed [ 534.412703][ T9536] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 536.693008][ T9536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.814586][ T9536] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.903598][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.910796][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.919916][ T5856] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 537.168014][ T9674] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 537.186787][ T9833] loop2: detected capacity change from 0 to 64 [ 537.215907][ T9674] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 537.474038][ T9833] hfs: get root inode failed [ 537.729907][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.737115][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.005219][ T9674] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 538.016169][ T9674] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 538.775560][ T9674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.908316][ T9674] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.579715][ T9846] vivid-000: ================= START STATUS ================= [ 539.587724][ T9846] vivid-000: Generate PTS: true [ 539.593394][ T9846] vivid-000: Generate SCR: true [ 539.598915][ T9846] tpg source WxH: 640x360 (Y'CbCr) [ 539.604488][ T9846] tpg field: 1 [ 539.608086][ T9846] tpg crop: 640x360@0x0 [ 539.612527][ T9846] tpg compose: 640x360@0x0 [ 539.617115][ T9846] tpg colorspace: 8 [ 539.621177][ T9846] tpg transfer function: 0/0 [ 539.625985][ T9846] tpg Y'CbCr encoding: 0/0 [ 539.630714][ T9846] tpg quantization: 0/0 [ 539.635157][ T9846] tpg RGB range: 0/2 [ 539.639222][ T9846] vivid-000: ================== END STATUS ================== [ 539.818176][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.825443][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.920959][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.928199][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.236467][ T9536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.428032][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 540.931974][ T9674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.155767][ T5856] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 541.338946][ T9536] veth0_vlan: entered promiscuous mode [ 542.511752][ T9536] veth1_vlan: entered promiscuous mode [ 542.608269][ T9888] loop4: detected capacity change from 0 to 64 [ 542.802399][ T9888] hfs: get root inode failed [ 542.867312][ T9536] veth0_macvtap: entered promiscuous mode [ 542.915637][ T9536] veth1_macvtap: entered promiscuous mode [ 542.932310][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.942949][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.952916][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.963453][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.973525][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.984620][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.997016][ T9536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.087593][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.176415][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.207538][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.245511][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.270352][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.389565][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.643547][ T9536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.782205][ T9536] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.837870][ T9536] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.887522][ T9536] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.936431][ T9536] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.988674][ T9674] veth0_vlan: entered promiscuous mode [ 544.117334][ T9674] veth1_vlan: entered promiscuous mode [ 544.231991][ T7855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.240106][ T9674] veth0_macvtap: entered promiscuous mode [ 544.290090][ T7855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.337424][ T9674] veth1_macvtap: entered promiscuous mode [ 544.428669][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.480446][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.530638][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.571853][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.600568][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.654136][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.701975][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.751617][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.800793][ T9674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.858133][ T9130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.895661][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.955999][ T9130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.970535][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.056453][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.056485][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.056506][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.056524][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.056555][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.056572][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.057712][ T9674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.158990][ T9674] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.186216][ T9674] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.205357][ T9674] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.220489][ T9674] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.536147][ T9133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.585722][ T9133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.918053][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.931501][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'. [ 546.685334][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.735598][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.828'. [ 546.999309][ T5856] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 548.103906][ T9947] loop2: detected capacity change from 0 to 64 [ 548.408977][ T9947] hfs: get root inode failed [ 549.069445][ T9958] loop5: detected capacity change from 0 to 256 [ 550.082768][ T9958] vfat filesystem being mounted at /0/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 553.649725][T10012] loop6: detected capacity change from 0 to 64 [ 553.690900][ T5856] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 553.874329][T10012] hfs: get root inode failed [ 554.471059][T10017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 557.710445][ T9676] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 557.983584][ T9676] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 558.000619][ T9676] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.586337][T10064] Invalid ELF header magic: != ELF [ 558.886869][ T9676] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 558.896121][ T9676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.736935][ T9676] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 559.748049][ T9676] usb 1-1: invalid MIDI out EP 0 [ 559.956536][T10074] vivid-000: ================= START STATUS ================= [ 559.964486][T10074] vivid-000: Generate PTS: true [ 559.969579][T10074] vivid-000: Generate SCR: true [ 559.974791][T10074] tpg source WxH: 640x360 (Y'CbCr) [ 559.980551][T10074] tpg field: 1 [ 559.984018][T10074] tpg crop: 640x360@0x0 [ 559.988266][T10074] tpg compose: 640x360@0x0 [ 559.993395][T10074] tpg colorspace: 8 [ 559.997291][T10074] tpg transfer function: 0/0 [ 560.002132][T10074] tpg Y'CbCr encoding: 0/0 [ 560.006660][T10074] tpg quantization: 0/0 [ 560.011000][T10074] tpg RGB range: 0/2 [ 560.014984][T10074] vivid-000: ================== END STATUS ================== [ 562.372236][ T5856] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 563.575938][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.588269][ T9676] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 563.612863][ T9676] usb 1-1: USB disconnect, device number 4 [ 564.265032][T10100] loop2: detected capacity change from 0 to 64 [ 564.608801][T10100] hfs: get root inode failed [ 566.404844][ T7917] udevd[7917]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.094740][ T5852] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 575.150978][ T5856] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 575.267496][T10162] loop4: detected capacity change from 0 to 64 [ 575.348201][T10162] hfs: get root inode failed [ 579.657934][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 579.657959][ T29] audit: type=1326 audit(4263431731.470:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.2.879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26ea57ff19 code=0x0 [ 579.686067][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.949183][ T5852] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 594.913975][T10310] syz.4.896 (10310): drop_caches: 2 [ 595.772052][T10335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.396686][ T1205] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 598.901430][ T1205] usb 7-1: Using ep0 maxpacket: 32 [ 598.928142][ T1205] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.959115][ T1205] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 599.043623][ T1205] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.079948][ T1205] usb 7-1: Product: syz [ 600.148778][ T1205] usb 7-1: Manufacturer: syz [ 600.592125][ T1205] usb 7-1: SerialNumber: syz [ 600.826439][ T1205] usb 7-1: config 0 descriptor?? [ 601.587073][ T1205] usb 7-1: bad CDC descriptors [ 601.592867][ T1205] usb 7-1: unsupported MDLM descriptors [ 601.819766][ T1205] usb 7-1: USB disconnect, device number 2 [ 602.590157][T10411] syz.0.917 (10411): drop_caches: 2 [ 608.136238][T10462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.818977][T10475] syz.6.932 (10475): drop_caches: 2 [ 614.546951][T10555] vivid-000: ================= START STATUS ================= [ 614.554761][T10555] vivid-000: Generate PTS: true [ 614.560621][T10555] vivid-000: Generate SCR: true [ 614.565559][T10555] tpg source WxH: 640x360 (Y'CbCr) [ 614.570801][T10555] tpg field: 1 [ 614.574215][T10555] tpg crop: 640x360@0x0 [ 614.578402][T10555] tpg compose: 640x360@0x0 [ 614.583050][T10555] tpg colorspace: 8 [ 614.586890][T10555] tpg transfer function: 0/0 [ 614.591563][T10555] tpg Y'CbCr encoding: 0/0 [ 614.596010][T10555] tpg quantization: 0/0 [ 614.600204][T10555] tpg RGB range: 0/2 [ 614.604196][T10555] vivid-000: ================== END STATUS ================== [ 615.834022][T10568] capability: warning: `syz.6.947' uses 32-bit capabilities (legacy support in use) [ 616.882055][ T5856] Bluetooth: hci5: command 0x0406 tx timeout [ 616.912973][ T5856] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 616.921662][ T5856] Bluetooth: hci1: Injecting HCI hardware error event [ 616.932324][ T5856] Bluetooth: hci1: hardware error 0x00 [ 619.086240][ T5852] Bluetooth: hci4: link tx timeout [ 619.091855][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 619.859343][ T5856] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 621.100532][ T5889] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 621.380759][ T5889] usb 7-1: Using ep0 maxpacket: 8 [ 622.227225][ T5889] usb 7-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 622.250376][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.259122][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 622.482330][ T5889] usb 7-1: config 0 descriptor?? [ 622.494323][ T5889] kobil_sct 7-1:0.0: required endpoints missing [ 622.805442][ T9676] usb 7-1: USB disconnect, device number 3 [ 624.000815][T10691] vivid-000: ================= START STATUS ================= [ 624.008572][T10691] vivid-000: Generate PTS: true [ 624.013570][T10691] vivid-000: Generate SCR: true [ 624.018537][T10691] tpg source WxH: 640x360 (Y'CbCr) [ 624.023826][T10691] tpg field: 1 [ 624.027233][T10691] tpg crop: 640x360@0x0 [ 624.031536][T10691] tpg compose: 640x360@0x0 [ 624.036004][T10691] tpg colorspace: 8 [ 624.039827][T10691] tpg transfer function: 0/0 [ 624.044505][T10691] tpg Y'CbCr encoding: 0/0 [ 624.048942][T10691] tpg quantization: 0/0 [ 624.053201][T10691] tpg RGB range: 0/2 [ 624.057111][T10691] vivid-000: ================== END STATUS ================== [ 624.593393][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.021160][ T5852] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 629.471189][T10759] vivid-000: ================= START STATUS ================= [ 629.542021][T10769] tipc: Started in network mode [ 629.547125][T10769] tipc: Node identity ac1414aa, cluster identity 4711 [ 629.558238][T10769] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 629.565525][T10769] tipc: Enabled bearer , priority 10 [ 629.692518][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 629.830353][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 629.852537][ T5889] IPVS: starting estimator thread 0... [ 629.950799][T10770] IPVS: using max 15 ests per chain, 36000 per kthread [ 629.970375][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 630.110413][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 630.165141][T10759] vivid-000: Generate PTS: true [ 630.170097][T10759] vivid-000: Generate SCR: true [ 630.214312][T10759] tpg source WxH: 640x360 (Y'CbCr) [ 630.250383][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 630.268043][T10759] tpg field: 1 [ 630.305714][T10759] tpg crop: 640x360@0x0 [ 630.325531][T10759] tpg compose: 640x360@0x0 [ 630.388549][T10759] tpg colorspace: 8 [ 630.392862][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 630.531267][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 630.560688][T10759] tpg transfer function: 0/0 [ 630.565893][T10759] tpg Y'CbCr encoding: 0/0 [ 630.571500][T10759] tpg quantization: 0/0 [ 630.575904][T10759] tpg RGB range: 0/2 [ 630.596535][T10759] vivid-000: ================== END STATUS ================== [ 630.691676][ T9676] tipc: Node number set to 2886997162 [ 630.810545][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 631.080414][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 631.175504][ T5840] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 634.766780][ C0] net_ratelimit: 3 callbacks suppressed [ 634.772511][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 635.790376][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 636.830469][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 637.762870][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 637.776664][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 637.849466][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 637.862640][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 637.870348][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 637.905628][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 637.923871][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 638.910409][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 639.950882][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 640.580815][ T5852] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 640.589283][ T5852] Bluetooth: hci3: command tx timeout [ 640.990388][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 641.167828][T10836] chnl_net:caif_netlink_parms(): no params data found [ 642.030365][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 642.679150][ T5852] Bluetooth: hci3: command tx timeout [ 643.055997][T10885] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 643.070344][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 644.110353][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 644.287248][ T3480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.327274][T10836] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.336406][T10836] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.343900][T10836] bridge_slave_0: entered allmulticast mode [ 644.352314][T10836] bridge_slave_0: entered promiscuous mode [ 644.362059][T10836] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.369331][T10836] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.460512][T10836] bridge_slave_1: entered allmulticast mode [ 644.467749][T10836] bridge_slave_1: entered promiscuous mode [ 644.806611][ T5852] Bluetooth: hci3: command tx timeout [ 645.150327][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 645.834199][ T3480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.190327][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 646.354320][T10836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.504290][T10836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.677320][ T3480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.836309][ T5852] Bluetooth: hci3: command tx timeout [ 647.230355][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 648.270339][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 649.310322][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 649.553676][T10836] team0: Port device team_slave_0 added [ 649.831595][ T3480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.901948][T10836] team0: Port device team_slave_1 added [ 650.017840][T10836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.040755][T10836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.105965][T10836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.179675][T10836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.209773][T10836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.300345][T10836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.350344][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 650.483418][T10836] hsr_slave_0: entered promiscuous mode [ 650.561172][T10836] hsr_slave_1: entered promiscuous mode [ 650.584393][T10836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.617127][T10836] Cannot create hsr debugfs directory [ 650.701362][ T3480] bridge_slave_1: left allmulticast mode [ 650.720595][ T3480] bridge_slave_1: left promiscuous mode [ 650.727580][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.761476][ T3480] bridge_slave_0: left allmulticast mode [ 650.773517][ T3480] bridge_slave_0: left promiscuous mode [ 650.793022][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.390315][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 652.408262][ T3480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.430362][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 652.542133][ T3480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.593769][T10980] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 652.613821][ T3480] bond0 (unregistering): Released all slaves [ 652.653320][T10980] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 653.470335][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 653.794270][T10836] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 654.510419][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 655.111597][T10836] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 655.550314][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 655.839211][ T3480] hsr_slave_0: left promiscuous mode [ 655.878246][ T3480] hsr_slave_1: left promiscuous mode [ 655.889587][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.908824][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.961642][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.003543][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.059051][ T3480] veth1_macvtap: left promiscuous mode [ 656.072619][ T3480] veth0_macvtap: left promiscuous mode [ 656.110620][ T3480] veth1_vlan: left promiscuous mode [ 656.116015][ T3480] veth0_vlan: left promiscuous mode [ 656.590368][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 657.120573][T11059] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 657.630313][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 658.670905][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 659.046199][ T3480] team0 (unregistering): Port device team_slave_1 removed [ 659.710320][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 660.275004][ T3480] team0 (unregistering): Port device team_slave_0 removed [ 660.750359][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 661.790322][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 662.838594][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.870403][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 664.911058][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 665.950318][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 666.990308][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 667.703213][T10836] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 667.896123][T10836] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 668.030332][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 668.872650][T10836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.070316][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 669.591792][T10836] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.687300][T10836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 669.697783][T10836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 669.809255][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.816495][ T9139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.828668][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.835940][ T9139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.110368][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 671.150395][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 671.256862][T10836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.190324][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 672.581101][ T3480] IPVS: stop unused estimator thread 0... [ 673.230357][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 674.270314][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 674.374553][T10836] veth0_vlan: entered promiscuous mode [ 674.385719][T10836] veth1_vlan: entered promiscuous mode [ 674.409531][T10836] veth0_macvtap: entered promiscuous mode [ 674.418867][T10836] veth1_macvtap: entered promiscuous mode [ 674.435385][T10836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.445970][T10836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.455932][T10836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.466843][T10836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.477147][T10836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.487690][T10836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.497634][T10836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.508151][T10836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.519722][T10836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.529905][T10836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.540484][T10836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.550400][T10836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.560938][T10836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.571450][T10836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.582019][T10836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.592296][T10836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.603000][T10836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.615627][T10836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.625271][T10836] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.634070][T10836] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.642979][T10836] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.651737][T10836] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.834758][ T9452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.843040][ T9452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.900312][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.927637][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.310298][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 676.350335][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 677.390367][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 678.430438][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 679.470346][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 680.510322][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 681.550741][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 682.590306][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.630303][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 684.670307][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 685.710341][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 685.998740][T11297] fuse: Bad value for 'fd' [ 686.038360][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.063136][T11298] fuse: Bad value for 'user_id' [ 686.097714][T11298] fuse: Bad value for 'user_id' [ 686.750333][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 687.790325][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 688.830379][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 689.870323][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 690.910322][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 691.950326][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.990360][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 694.039192][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 695.132380][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 696.190310][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 697.230309][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 698.270303][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 698.891475][ T5852] Bluetooth: hci4: link tx timeout [ 698.937418][ T5852] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 699.310307][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 700.350403][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 701.150525][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 701.391880][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 702.430317][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 703.470306][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 704.510345][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 705.550325][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 706.590294][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 707.630363][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 708.480031][ T5852] Bluetooth: hci3: link tx timeout [ 708.485871][ T5852] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 708.670305][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 709.710866][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 710.750332][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 711.380329][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 711.790395][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 712.830303][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 713.870305][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 714.910305][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 715.950294][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 716.990329][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 718.030287][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 719.070283][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 720.110364][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 721.150303][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 722.190313][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 723.230316][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 724.270348][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 725.310329][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 726.350625][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 727.390288][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 728.430319][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 728.670444][ T3508] Bluetooth: Error in BCSP hdr checksum [ 728.924793][ T3508] Bluetooth: Error in BCSP hdr checksum [ 729.331608][ T9452] Bluetooth: Error in BCSP hdr checksum [ 729.470285][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 729.535873][T11702] syz.6.1145 uses obsolete (PF_INET,SOCK_PACKET) [ 730.510312][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 730.671316][ T5856] Bluetooth: hci1: command 0x1003 tx timeout [ 730.673518][ T5852] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 731.550358][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 732.590305][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 733.630297][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 734.671248][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 735.140608][T11751] fuse: Bad value for 'fd' [ 735.710304][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 736.455803][T11772] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1158'. [ 736.750294][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 737.222303][ T5919] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 737.790298][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 738.724284][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.735547][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.745821][ T5919] usb 6-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 738.781251][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.811389][ T5919] usb 6-1: config 0 descriptor?? [ 738.830274][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 739.870344][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 740.221645][ T5919] appletouch 6-1:0.0: Failed to read mode from device. [ 740.228722][ T5919] appletouch 6-1:0.0: probe with driver appletouch failed with error -5 [ 740.662103][ T5919] usb 6-1: USB disconnect, device number 2 [ 740.910332][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 741.579829][T11797] loop6: detected capacity change from 0 to 32768 [ 741.656303][T11797] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1161 (11797) [ 741.725030][T11797] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 741.735396][T11797] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 741.760806][T11797] BTRFS info (device loop6): using free-space-tree [ 741.950290][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 742.387504][T11797] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 742.404311][T11797] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 742.448845][T11797] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 742.460376][T11797] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 742.469718][T11797] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 742.479791][T11797] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 742.489129][T11797] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 742.499195][T11797] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 742.508443][T11797] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 742.518655][T11797] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 742.529054][T11797] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 742.539419][T11797] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 742.598013][T11797] BTRFS error (device loop6): open_ctree failed [ 742.990467][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 744.030281][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 745.070288][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 746.110329][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 746.280100][T11881] Invalid ELF header magic: != ELF [ 747.150319][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 747.800762][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.190426][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 748.214224][T11897] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1174'. [ 748.530324][ T5919] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 748.544804][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 748.567561][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 748.570684][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'. [ 748.576859][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 748.593784][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 748.601884][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 748.609102][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 748.736978][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.790488][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.230293][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 749.691818][ T5919] usb 6-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 749.711259][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.789285][ T5919] usb 6-1: config 0 descriptor?? [ 750.270285][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 750.804897][ T5852] Bluetooth: hci1: command tx timeout [ 751.130897][ T5919] appletouch 6-1:0.0: Failed to read mode from device. [ 751.138602][ T5919] appletouch 6-1:0.0: probe with driver appletouch failed with error -5 [ 751.192640][ T5919] usb 6-1: USB disconnect, device number 3 [ 751.233428][T11903] chnl_net:caif_netlink_parms(): no params data found [ 751.310299][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 752.350325][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 753.380676][ T5852] Bluetooth: hci1: command tx timeout [ 753.390308][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 753.928271][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.027113][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.259549][T11903] bridge_slave_0: entered allmulticast mode [ 754.341523][T11903] bridge_slave_0: entered promiscuous mode [ 754.430311][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 754.661181][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.668733][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.690902][T11903] bridge_slave_1: entered allmulticast mode [ 754.716736][T11903] bridge_slave_1: entered promiscuous mode [ 755.470275][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 755.743406][ T5852] Bluetooth: hci1: command tx timeout [ 756.510327][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 756.624008][T11903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.756204][T11903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.550279][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 757.944458][ T5856] Bluetooth: hci1: command tx timeout [ 758.590273][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 758.769455][T11903] team0: Port device team_slave_0 added [ 758.968330][T11997] vivid-000: ================= START STATUS ================= [ 759.080973][T11903] team0: Port device team_slave_1 added [ 759.221945][T11997] vivid-000: Generate PTS: true [ 759.318124][T12001] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 759.630598][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 760.263954][T11997] vivid-000: Generate SCR: true [ 760.359987][T11903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.368470][T11997] tpg source WxH: 640x360 (Y'CbCr) [ 760.484785][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.670321][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 761.383103][T11997] tpg field: 1 [ 761.420359][T11903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.435026][T11997] tpg crop: 640x360@0x0 [ 761.444438][T11903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.451681][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.477839][T11903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.557643][T11997] tpg compose: 640x360@0x0 [ 761.610375][T11997] tpg colorspace: 8 [ 761.620518][T11997] tpg transfer function: 0/0 [ 761.708606][T11997] tpg Y'CbCr encoding: 0/0 [ 761.713251][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 761.757502][T11997] tpg quantization: 0/0 [ 761.911556][T11997] tpg RGB range: 0/2 [ 761.915529][T11997] vivid-000: ================== END STATUS ================== [ 761.972515][T11903] hsr_slave_0: entered promiscuous mode [ 762.080814][T11903] hsr_slave_1: entered promiscuous mode [ 762.362763][T11903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.372903][T11903] Cannot create hsr debugfs directory [ 762.638829][T12005] syz.4.1195 (12005): drop_caches: 2 [ 762.750282][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 763.790281][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 764.830297][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 764.941308][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 765.870298][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 765.935084][T11903] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 766.417381][T12066] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 766.910299][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 767.110895][T11903] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 767.221276][T11903] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 767.237071][T11903] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 767.952398][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 768.233025][T11903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.251375][T11903] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.286707][T11903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 768.297592][T11903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 768.320866][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.328087][ T9139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.337490][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.344727][ T9139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.990301][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 770.030289][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 771.070290][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 771.618708][T12086] vivid-000: ================= START STATUS ================= [ 771.626496][T12086] vivid-000: Generate PTS: true [ 771.631455][T12086] vivid-000: Generate SCR: true [ 771.636350][T12086] tpg source WxH: 640x360 (Y'CbCr) [ 771.641937][T12086] tpg field: 1 [ 771.645326][T12086] tpg crop: 640x360@0x0 [ 771.649508][T12086] tpg compose: 640x360@0x0 [ 771.653966][T12086] tpg colorspace: 8 [ 771.657778][T12086] tpg transfer function: 0/0 [ 771.662399][T12086] tpg Y'CbCr encoding: 0/0 [ 771.666815][T12086] tpg quantization: 0/0 [ 771.671037][T12086] tpg RGB range: 0/2 [ 771.674937][T12086] vivid-000: ================== END STATUS ================== [ 772.110293][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 773.150329][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 773.536746][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.190285][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 774.672331][T11910] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 774.888237][T12146] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 775.230301][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 776.271169][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 777.026185][ T9452] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.142459][T11910] usb 5-1: device descriptor read/all, error -71 [ 777.310285][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 777.893679][T12168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 778.350352][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 778.510374][T11903] veth0_vlan: entered promiscuous mode [ 778.536453][T11903] veth1_vlan: entered promiscuous mode [ 779.390435][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 780.026026][ T9452] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.303456][T12182] vivid-000: ================= START STATUS ================= [ 780.311412][T12182] vivid-000: Generate PTS: true [ 780.316359][T12182] vivid-000: Generate SCR: true [ 780.321703][T12182] tpg source WxH: 640x360 (Y'CbCr) [ 780.326869][T12182] tpg field: 1 [ 780.330404][T12182] tpg crop: 640x360@0x0 [ 780.334601][T12182] tpg compose: 640x360@0x0 [ 780.339052][T12182] tpg colorspace: 8 [ 780.343603][T12182] tpg transfer function: 0/0 [ 780.348237][T12182] tpg Y'CbCr encoding: 0/0 [ 780.352760][T12182] tpg quantization: 0/0 [ 780.356948][T12182] tpg RGB range: 0/2 [ 780.360968][T12182] vivid-000: ================== END STATUS ================== [ 780.430281][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 780.492903][T11903] veth0_macvtap: entered promiscuous mode [ 780.502477][T11903] veth1_macvtap: entered promiscuous mode [ 780.524019][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.534678][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.544994][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.556422][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.567236][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.577844][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.587955][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.598730][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.608890][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.619890][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.645019][T11903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.470302][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 781.606494][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.630532][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.792322][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.860490][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.932586][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.010335][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.106442][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.508841][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.520248][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 782.741296][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.790985][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.841727][T11903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.960845][ T9452] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.003299][T11903] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.050033][T11903] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.090149][T11903] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.098985][T11903] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.189998][ T9452] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.532879][ T9133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.550349][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 783.571114][ T9133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.670641][ T9452] bridge_slave_1: left allmulticast mode [ 783.676365][ T9452] bridge_slave_1: left promiscuous mode [ 783.701567][ T9452] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.780062][ T9452] bridge_slave_0: left allmulticast mode [ 783.805474][ T9452] bridge_slave_0: left promiscuous mode [ 783.830501][ T9452] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.591692][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 785.630304][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 785.772032][T12227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 786.670334][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 787.710289][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 788.750255][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 789.800283][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 789.889021][ T9452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.974352][ T9452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.042822][ T9452] bond0 (unregistering): Released all slaves [ 790.093604][ T9139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.147676][ T9139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.180979][ T9452] tipc: Left network mode [ 790.830285][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 791.880310][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 792.910458][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 793.223049][T12272] vivid-000: ================= START STATUS ================= [ 793.230871][T12272] vivid-000: Generate PTS: true [ 793.235849][T12272] vivid-000: Generate SCR: true [ 793.240874][T12272] tpg source WxH: 640x360 (Y'CbCr) [ 793.246974][T12272] tpg field: 1 [ 793.250498][T12272] tpg crop: 640x360@0x0 [ 793.254715][T12272] tpg compose: 640x360@0x0 [ 793.259167][T12272] tpg colorspace: 8 [ 793.263360][T12272] tpg transfer function: 0/0 [ 793.267989][T12272] tpg Y'CbCr encoding: 0/0 [ 793.272485][T12272] tpg quantization: 0/0 [ 793.276705][T12272] tpg RGB range: 0/2 [ 793.280662][T12272] vivid-000: ================== END STATUS ================== [ 793.950259][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 794.990269][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 795.007646][ T5856] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 795.417174][T12294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 796.030246][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 797.070333][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 797.414438][T12303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 798.120289][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 798.908395][ T9452] hsr_slave_0: left promiscuous mode [ 798.916843][ T9452] hsr_slave_1: left promiscuous mode [ 798.940737][ T9452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.987031][ T9452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.150328][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 799.651262][ T9452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.834698][ T9452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.190284][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 800.256388][ T9452] veth1_macvtap: left promiscuous mode [ 800.442856][T12337] vivid-000: ================= START STATUS ================= [ 800.450662][T12337] vivid-000: Generate PTS: true [ 800.455763][T12337] vivid-000: Generate SCR: true [ 800.460924][T12337] tpg source WxH: 640x360 (Y'CbCr) [ 800.466121][T12337] tpg field: 1 [ 800.469570][T12337] tpg crop: 640x360@0x0 [ 800.473912][T12337] tpg compose: 640x360@0x0 [ 800.478411][T12337] tpg colorspace: 8 [ 800.482418][T12337] tpg transfer function: 0/0 [ 800.487097][T12337] tpg Y'CbCr encoding: 0/0 [ 800.491658][T12337] tpg quantization: 0/0 [ 800.496301][T12337] tpg RGB range: 0/2 [ 800.500369][T12337] vivid-000: ================== END STATUS ================== [ 801.050896][ T9452] veth0_macvtap: left promiscuous mode [ 801.219245][ T9452] veth1_vlan: left promiscuous mode [ 801.227670][T12336] loop6: detected capacity change from 0 to 64 [ 801.235115][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 801.244451][ T9452] veth0_vlan: left promiscuous mode [ 801.796854][T12336] hfs: get root inode failed [ 802.270285][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 802.690689][ T5856] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 803.215843][T12359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 803.310277][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 804.350273][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 805.390258][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 806.430259][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 807.470266][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 808.282009][ T9452] team0 (unregistering): Port device team_slave_1 removed [ 808.383827][T12386] trusted_key: encrypted_key: key user:syz not found [ 808.510285][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 809.268507][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.429066][ T9452] team0 (unregistering): Port device team_slave_0 removed [ 809.552482][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 810.590275][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 811.630250][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 811.997997][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 812.007518][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 812.015762][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 812.024334][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 812.122208][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 812.145842][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 812.459155][ T5840] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 812.670323][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 813.710363][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 814.059940][T12431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 814.539140][ T5840] Bluetooth: hci2: command tx timeout [ 814.750243][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 815.793512][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 816.316165][T12446] loop8: detected capacity change from 0 to 64 [ 816.356716][T12446] hfs: get root inode failed [ 816.830244][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 817.292751][ T5856] Bluetooth: hci2: command tx timeout [ 817.423240][T12403] chnl_net:caif_netlink_parms(): no params data found [ 817.870466][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 818.921204][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 819.312810][ T5840] Bluetooth: hci2: command tx timeout [ 819.322194][T12403] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.329340][T12403] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.336605][T12403] bridge_slave_0: entered allmulticast mode [ 819.343430][T12403] bridge_slave_0: entered promiscuous mode [ 819.350808][T12403] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.358499][T12403] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.365767][T12403] bridge_slave_1: entered allmulticast mode [ 819.372800][T12403] bridge_slave_1: entered promiscuous mode [ 819.651770][T12403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.944869][T12403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.954045][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 820.990254][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 821.390999][ T5840] Bluetooth: hci2: command tx timeout [ 822.030313][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 822.421772][T12403] team0: Port device team_slave_0 added [ 822.484455][T12403] team0: Port device team_slave_1 added [ 823.070275][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 824.110496][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 825.150259][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 825.662523][T12403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.745651][T12403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.190317][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 826.541586][T12403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.569903][T12403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.577200][T12403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.603450][T12403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.821464][T12403] hsr_slave_0: entered promiscuous mode [ 827.230244][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 827.860889][T12403] hsr_slave_1: entered promiscuous mode [ 828.270360][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 828.534256][T12403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 829.009612][T12403] Cannot create hsr debugfs directory [ 829.310244][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 830.350244][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 831.390252][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 832.430299][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 833.436755][T12292] [ 833.439111][T12292] ====================================================== [ 833.446145][T12292] WARNING: possible circular locking dependency detected [ 833.453205][T12292] 6.13.0-rc1-next-20241205-syzkaller #0 Not tainted [ 833.459822][T12292] ------------------------------------------------------ [ 833.466857][T12292] syz.4.1250/12292 is trying to acquire lock: [ 833.470236][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 833.472916][T12292] ffff88803339c078 (&hdev->lock){+.+.}-{4:4}, at: mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 833.490040][T12292] [ 833.490040][T12292] but task is already holding lock: [ 833.497410][T12292] ffff88803339c690 (&hdev->cmd_sync_work_lock){+.+.}-{4:4}, at: hci_cmd_sync_clear+0x4e/0x220 [ 833.507702][T12292] [ 833.507702][T12292] which lock already depends on the new lock. [ 833.507702][T12292] [ 833.518108][T12292] [ 833.518108][T12292] the existing dependency chain (in reverse order) is: [ 833.527124][T12292] [ 833.527124][T12292] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{4:4}: [ 833.535677][T12292] lock_acquire+0x1ed/0x550 [ 833.540717][T12292] __mutex_lock+0x1ac/0xee0 [ 833.545814][T12292] hci_cmd_sync_queue_once+0x43/0x240 [ 833.551725][T12292] le_conn_complete_evt+0xae1/0x12e0 [ 833.557547][T12292] hci_le_conn_complete_evt+0x18c/0x420 [ 833.563631][T12292] hci_event_packet+0xa55/0x1540 [ 833.569100][T12292] hci_rx_work+0x3f3/0xdb0 [ 833.574046][T12292] process_scheduled_works+0xa66/0x1840 [ 833.580129][T12292] worker_thread+0x870/0xd30 [ 833.585250][T12292] kthread+0x2f0/0x390 [ 833.589848][T12292] ret_from_fork+0x4b/0x80 [ 833.594800][T12292] ret_from_fork_asm+0x1a/0x30 [ 833.600103][T12292] [ 833.600103][T12292] -> #0 (&hdev->lock){+.+.}-{4:4}: [ 833.607424][T12292] validate_chain+0x18ef/0x5920 [ 833.612816][T12292] __lock_acquire+0x1397/0x2100 [ 833.618194][T12292] lock_acquire+0x1ed/0x550 [ 833.623319][T12292] __mutex_lock+0x1ac/0xee0 [ 833.628354][T12292] mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 833.635053][T12292] hci_cmd_sync_clear+0x107/0x220 [ 833.640601][T12292] hci_unregister_dev+0x181/0x510 [ 833.646158][T12292] vhci_release+0x80/0xd0 [ 833.651018][T12292] __fput+0x23c/0xa50 [ 833.655532][T12292] task_work_run+0x24f/0x310 [ 833.660656][T12292] do_exit+0xa2f/0x28e0 [ 833.665341][T12292] do_group_exit+0x207/0x2c0 [ 833.670465][T12292] get_signal+0x16b2/0x1750 [ 833.675500][T12292] arch_do_signal_or_restart+0x96/0x860 [ 833.681581][T12292] syscall_exit_to_user_mode+0xce/0x340 [ 833.687665][T12292] do_syscall_64+0x100/0x230 [ 833.692792][T12292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.699217][T12292] [ 833.699217][T12292] other info that might help us debug this: [ 833.699217][T12292] [ 833.709544][T12292] Possible unsafe locking scenario: [ 833.709544][T12292] [ 833.716994][T12292] CPU0 CPU1 [ 833.722362][T12292] ---- ---- [ 833.727733][T12292] lock(&hdev->cmd_sync_work_lock); [ 833.733038][T12292] lock(&hdev->lock); [ 833.739648][T12292] lock(&hdev->cmd_sync_work_lock); [ 833.747589][T12292] lock(&hdev->lock); [ 833.751674][T12292] [ 833.751674][T12292] *** DEADLOCK *** [ 833.751674][T12292] [ 833.759818][T12292] 1 lock held by syz.4.1250/12292: [ 833.764937][T12292] #0: ffff88803339c690 (&hdev->cmd_sync_work_lock){+.+.}-{4:4}, at: hci_cmd_sync_clear+0x4e/0x220 [ 833.775680][T12292] [ 833.775680][T12292] stack backtrace: [ 833.781591][T12292] CPU: 1 UID: 0 PID: 12292 Comm: syz.4.1250 Not tainted 6.13.0-rc1-next-20241205-syzkaller #0 [ 833.792007][T12292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 833.802077][T12292] Call Trace: [ 833.805365][T12292] [ 833.808302][T12292] dump_stack_lvl+0x241/0x360 [ 833.812999][T12292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.818226][T12292] ? __pfx__printk+0x10/0x10 [ 833.822832][T12292] print_circular_bug+0x13a/0x1b0 [ 833.827871][T12292] check_noncircular+0x36a/0x4a0 [ 833.832828][T12292] ? kernel_text_address+0xa7/0xe0 [ 833.837960][T12292] ? __pfx_check_noncircular+0x10/0x10 [ 833.843458][T12292] ? lockdep_lock+0x123/0x2b0 [ 833.848146][T12292] ? validate_chain+0x11e/0x5920 [ 833.853097][T12292] validate_chain+0x18ef/0x5920 [ 833.857966][T12292] ? validate_chain+0x11e/0x5920 [ 833.862921][T12292] ? __pfx_validate_chain+0x10/0x10 [ 833.868131][T12292] ? __pfx_validate_chain+0x10/0x10 [ 833.873345][T12292] ? __pfx_validate_chain+0x10/0x10 [ 833.878561][T12292] ? __lock_acquire+0x1397/0x2100 [ 833.883596][T12292] ? __pfx_validate_chain+0x10/0x10 [ 833.888904][T12292] ? mark_lock+0x9a/0x360 [ 833.893265][T12292] __lock_acquire+0x1397/0x2100 [ 833.898135][T12292] lock_acquire+0x1ed/0x550 [ 833.902652][T12292] ? mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 833.909005][T12292] ? __pfx_lock_acquire+0x10/0x10 [ 833.914041][T12292] ? __pfx___might_resched+0x10/0x10 [ 833.919351][T12292] __mutex_lock+0x1ac/0xee0 [ 833.923868][T12292] ? mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 833.930217][T12292] ? __pfx___might_resched+0x10/0x10 [ 833.935549][T12292] ? __pfx___mutex_trylock_common+0x10/0x10 [ 833.941462][T12292] ? mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 833.947808][T12292] ? __pfx___mutex_lock+0x10/0x10 [ 833.952842][T12292] ? trace_contention_end+0x3c/0x120 [ 833.958140][T12292] ? __mutex_lock+0x37f/0xee0 [ 833.962830][T12292] ? enable_work+0x22a/0x360 [ 833.967437][T12292] ? lockdep_hardirqs_on+0x99/0x150 [ 833.972644][T12292] ? hci_cmd_sync_clear+0x4e/0x220 [ 833.977767][T12292] mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 833.983940][T12292] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 833.990719][T12292] ? __pfx___cancel_work+0x10/0x10 [ 833.995839][T12292] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 834.002617][T12292] hci_cmd_sync_clear+0x107/0x220 [ 834.007656][T12292] hci_unregister_dev+0x181/0x510 [ 834.012698][T12292] vhci_release+0x80/0xd0 [ 834.017037][T12292] ? __pfx_vhci_release+0x10/0x10 [ 834.022072][T12292] __fput+0x23c/0xa50 [ 834.026072][T12292] task_work_run+0x24f/0x310 [ 834.030677][T12292] ? __pfx_task_work_run+0x10/0x10 [ 834.035806][T12292] ? do_exit+0xa2a/0x28e0 [ 834.040144][T12292] ? do_exit+0xa2a/0x28e0 [ 834.044484][T12292] do_exit+0xa2f/0x28e0 [ 834.048650][T12292] ? __pfx_do_exit+0x10/0x10 [ 834.053249][T12292] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 834.058637][T12292] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 834.064625][T12292] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 834.070960][T12292] ? _raw_spin_lock_irq+0xdf/0x120 [ 834.076081][T12292] do_group_exit+0x207/0x2c0 [ 834.080709][T12292] ? _raw_spin_unlock_irq+0x23/0x50 [ 834.085940][T12292] ? lockdep_hardirqs_on+0x99/0x150 [ 834.091166][T12292] get_signal+0x16b2/0x1750 [ 834.095708][T12292] ? __pfx_get_signal+0x10/0x10 [ 834.100591][T12292] arch_do_signal_or_restart+0x96/0x860 [ 834.106166][T12292] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 834.112343][T12292] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 834.118343][T12292] ? syscall_exit_to_user_mode+0xa3/0x340 [ 834.124075][T12292] syscall_exit_to_user_mode+0xce/0x340 [ 834.129662][T12292] do_syscall_64+0x100/0x230 [ 834.134272][T12292] ? clear_bhb_loop+0x35/0x90 [ 834.138965][T12292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.144896][T12292] RIP: 0033:0x7f27e3d7ff19 [ 834.149327][T12292] Code: Unable to access opcode bytes at 0x7f27e3d7feef. [ 834.156366][T12292] RSP: 002b:00007f27e4c0d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 834.164800][T12292] RAX: 0000000000019000 RBX: 00007f27e3f46080 RCX: 00007f27e3d7ff19 [ 834.172790][T12292] RDX: 0000000000019000 RSI: 0000000020002fc0 RDI: 000000000000000a [ 834.180769][T12292] RBP: 00007f27e3df3986 R08: 0000000000000000 R09: 0000000000000000 [ 834.188747][T12292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.196724][T12292] R13: 0000000000000000 R14: 00007f27e3f46080 R15: 00007fffb7786898 [ 834.204726][T12292] [ 834.220229][ T5840] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 834.228591][ T5840] Bluetooth: hci4: Injecting HCI hardware error event [ 834.235784][ T5840] Bluetooth: hci4: hardware error 0x00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 834.375796][ T7855] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.511887][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 835.245563][ T7855] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.433757][ T7855] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.550220][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 835.790522][ T7855] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.026468][ T7855] bridge_slave_1: left allmulticast mode [ 836.037971][ T7855] bridge_slave_1: left promiscuous mode [ 836.047276][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.057662][ T7855] bridge_slave_0: left allmulticast mode [ 836.070236][ T7855] bridge_slave_0: left promiscuous mode [ 836.079277][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.271679][ T7855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.282886][ T5840] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 836.295196][ T7855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.319275][ T7855] bond0 (unregistering): Released all slaves [ 836.419257][ T7855] tipc: Left network mode [ 836.582355][ T7855] hsr_slave_0: left promiscuous mode [ 836.588272][ T7855] hsr_slave_1: left promiscuous mode [ 836.590265][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 836.601200][ T7855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.608672][ T7855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.626340][ T7855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.634420][ T7855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.646601][ T7855] veth1_macvtap: left promiscuous mode [ 836.653114][ T7855] veth0_macvtap: left promiscuous mode [ 836.658729][ T7855] veth1_vlan: left promiscuous mode [ 836.669076][ T7855] veth0_vlan: left promiscuous mode [ 836.822630][ T7855] team0 (unregistering): Port device team_slave_1 removed [ 836.852320][ T7855] team0 (unregistering): Port device team_slave_0 removed [ 837.226423][ T7855] IPVS: stop unused estimator thread 0... [ 837.296212][ T7855] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.345269][ T7855] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.399392][ T7855] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.478365][ T7855] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.596295][ T7855] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.630294][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 837.659487][ T7855] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.728636][ T7855] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.768100][ T7855] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.869868][ T7855] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.915612][ T7855] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.976843][ T7855] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.036931][ T7855] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.166878][ T7855] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.196144][ T7855] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.235455][ T7855] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.276610][ T7855] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.395138][ T7855] bridge_slave_1: left allmulticast mode [ 838.405645][ T7855] bridge_slave_1: left promiscuous mode [ 838.413537][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.422492][ T7855] bridge_slave_0: left allmulticast mode [ 838.428177][ T7855] bridge_slave_0: left promiscuous mode [ 838.438112][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.449228][ T7855] bridge_slave_1: left allmulticast mode [ 838.455096][ T7855] bridge_slave_1: left promiscuous mode [ 838.462071][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.471350][ T7855] bridge_slave_0: left allmulticast mode [ 838.477041][ T7855] bridge_slave_0: left promiscuous mode [ 838.483569][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.492750][ T7855] bridge_slave_1: left allmulticast mode [ 838.498436][ T7855] bridge_slave_1: left promiscuous mode [ 838.504651][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.514827][ T7855] bridge_slave_0: left allmulticast mode [ 838.523439][ T7855] bridge_slave_0: left promiscuous mode [ 838.529163][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.539356][ T7855] bridge_slave_1: left allmulticast mode [ 838.545738][ T7855] bridge_slave_1: left promiscuous mode [ 838.552532][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.562889][ T7855] bridge_slave_0: left allmulticast mode [ 838.568593][ T7855] bridge_slave_0: left promiscuous mode [ 838.575180][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.584100][ T7855] bridge_slave_1: left allmulticast mode [ 838.589751][ T7855] bridge_slave_1: left promiscuous mode [ 838.595906][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.604239][ T7855] bridge_slave_0: left allmulticast mode [ 838.610718][ T7855] bridge_slave_0: left promiscuous mode [ 838.616393][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.670287][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 839.066593][ T7855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.077419][ T7855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.088582][ T7855] bond0 (unregistering): Released all slaves [ 839.098160][ T7855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.108174][ T7855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.118734][ T7855] bond0 (unregistering): Released all slaves [ 839.132860][ T7855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.142837][ T7855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.155318][ T7855] bond0 (unregistering): Released all slaves [ 839.168124][ T7855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.179692][ T7855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.189381][ T7855] bond0 (unregistering): Released all slaves [ 839.204769][ T7855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.214791][ T7855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.225619][ T7855] bond0 (unregistering): Released all slaves [ 839.305626][ T7855] tipc: Disabling bearer [ 839.311215][ T7855] tipc: Left network mode [ 839.351264][ T9676] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN PTI [ 839.363916][ T9676] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 839.372371][ T9676] CPU: 0 UID: 0 PID: 9676 Comm: kworker/0:1 Not tainted 6.13.0-rc1-next-20241205-syzkaller #0 [ 839.382658][ T9676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 839.392754][ T9676] Workqueue: events cleanup_bearer [ 839.397931][ T9676] RIP: 0010:cleanup_bearer+0x1f7/0x280 [ 839.403453][ T9676] Code: 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bc a8 9a f6 48 8b 1b 48 83 c3 30 e8 40 e1 60 00 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 9a a8 9a f6 49 83 c7 e8 48 8b 1b [ 839.423103][ T9676] RSP: 0018:ffffc9000451fb70 EFLAGS: 00010206 [ 839.429245][ T9676] RAX: 0000000000000006 RBX: 0000000000000030 RCX: ffffffff8bcd614e [ 839.437263][ T9676] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000451f840 [ 839.445273][ T9676] RBP: ffff888028e31908 R08: ffffc9000451f847 R09: 1ffff920008a3f08 [ 839.453284][ T9676] R10: dffffc0000000000 R11: fffff520008a3f09 R12: ffff888028e31998 [ 839.461293][ T9676] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888028e31918 [ 839.469313][ T9676] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 839.478290][ T9676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 839.484909][ T9676] CR2: 000055a062f3f950 CR3: 0000000031a82000 CR4: 00000000003526f0 [ 839.492921][ T9676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 839.500932][ T9676] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 839.508951][ T9676] Call Trace: [ 839.512269][ T9676] [ 839.515236][ T9676] ? __die_body+0x5f/0xb0 [ 839.519609][ T9676] ? die_addr+0xb0/0xe0 [ 839.523804][ T9676] ? exc_general_protection+0x3dd/0x5d0 [ 839.529405][ T9676] ? asm_exc_general_protection+0x26/0x30 [ 839.535171][ T9676] ? __mutex_unlock_slowpath+0x21e/0x790 [ 839.540846][ T9676] ? cleanup_bearer+0x1f7/0x280 [ 839.545745][ T9676] ? process_scheduled_works+0x976/0x1840 [ 839.551512][ T9676] process_scheduled_works+0xa66/0x1840 [ 839.557121][ T9676] ? __pfx_process_scheduled_works+0x10/0x10 [ 839.563151][ T9676] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 839.568742][ T9676] ? assign_work+0x364/0x3d0 [ 839.573387][ T9676] worker_thread+0x870/0xd30 [ 839.578030][ T9676] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 839.583969][ T9676] ? __kthread_parkme+0x169/0x1d0 [ 839.589045][ T9676] ? __pfx_worker_thread+0x10/0x10 [ 839.594213][ T9676] kthread+0x2f0/0x390 [ 839.598328][ T9676] ? __pfx_worker_thread+0x10/0x10 [ 839.603494][ T9676] ? __pfx_kthread+0x10/0x10 [ 839.608127][ T9676] ret_from_fork+0x4b/0x80 [ 839.612586][ T9676] ? __pfx_kthread+0x10/0x10 [ 839.617211][ T9676] ret_from_fork_asm+0x1a/0x30 [ 839.622027][ T9676] [ 839.625074][ T9676] Modules linked in: [ 839.629953][ T9676] ---[ end trace 0000000000000000 ]--- [ 839.930210][ T9676] RIP: 0010:cleanup_bearer+0x1f7/0x280 [ 839.935782][ T9676] Code: 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bc a8 9a f6 48 8b 1b 48 83 c3 30 e8 40 e1 60 00 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 9a a8 9a f6 49 83 c7 e8 48 8b 1b [ 839.956848][ T9676] RSP: 0018:ffffc9000451fb70 EFLAGS: 00010206 [ 839.965256][ T9676] RAX: 0000000000000006 RBX: 0000000000000030 RCX: ffffffff8bcd614e [ 839.975244][ T9676] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000451f840 [ 839.985183][ T9676] RBP: ffff888028e31908 R08: ffffc9000451f847 R09: 1ffff920008a3f08 [ 839.994043][ T9676] R10: dffffc0000000000 R11: fffff520008a3f09 R12: ffff888028e31998 [ 840.005839][ T9676] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888028e31918 [ 840.014404][ T9676] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 840.023686][ T9676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 840.030626][ T9676] CR2: 0000564b8eb91000 CR3: 000000002e0a6000 CR4: 00000000003526f0 [ 840.038817][ T9676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 840.047524][ T9676] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 840.056410][ T9676] Kernel panic - not syncing: Fatal exception [ 840.062821][ T9676] Kernel Offset: disabled [ 840.067148][ T9676] Rebooting in 86400 seconds..