last executing test programs: 33m9.241703476s ago: executing program 32 (id=227): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(r0, &(0x7f0000000280)='.\x02\x00', 0x102) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) 32m51.429258197s ago: executing program 33 (id=346): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x81800) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000) 32m42.927594867s ago: executing program 34 (id=416): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3d2}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0) 32m33.270990075s ago: executing program 7 (id=476): mount(0x0, 0x0, 0x0, 0x800000, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000100)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x337, &(0x7f0000001140)="$eJzs3M9LI2cYwPEnMcYkosmhtLRQfGkv7WXQtOfSUBRKAxU1pVoQRp3YkGkimWCJlKqnXkvvPZX2IB69Ca3/gJfe2ste9pbLwh5WlmVnmV8mmfgjhrhx9fsBmTfv+z6Zd+Z9I88MmTS//fWHctHSinpdogklERGRM5GMRCUQ8bdRtxyXdnvy8fjT/95fXF75KpfPzy4oNZdb+iSrlJqc+vvHn5J+t+MxOc2sNp9kH5++ffpu8+XS9yVLlSxVqdaVrtaqj+r6mmmojZJV1pSaNw3dMlSpYhk1r73qtRfN6tZWQ+mVjYnUVs2wLKVXGqpsNFS9quq1htI39VJFaZqmJlKCazgTuqDn+oxeH/BocEtqtZw+IiLJrpbCwVAGBAAAhiqc/0edlL6v/F8m3fzf6dzK/w8/OKmPf3M0eezErjaP4xfl/5/+771XR/6fEJF+8v/f5Qb5f3dG9LAUDhb6z/9xN0zFu6oiHa+c/D/lf35d+98dTrsF8n8AAAAAAAAAAAAAAAAAAAAAAN4EZ7adtm07HWyDv9YjBP5r3EuXzf+YiCSc2beZ//tscXlFEu6De84cm79sF7YL3tbvcCIiphgyLWl54a4Hn1MOnjxSjoz8Y+668c+d7YjbkitKyY2fkbRkwvG2PfdlfnZGefz488eUUu3xWUnLWxfHZzvjnfHvbhfi8tGHbfGapOXfdamKKRvuum7F/zyj1Bdf50PxSW8nAAAAAADcA5pSkT9V6PpdWtfvmqYCoXbvV0ZyRfc20SX3B7zr6+kLr89j6fdiwz56AAAAAAAeBquxU9ZN06hdUUjK9X36L8R66xwP1Yxe1Xmk7Qh7HU/cvZExvrO5dJOo7sIfPZ7VjkLwRYqOpoRf2d/pDY5/YPO1114TlR6iYuHBTzkV6oZ73/cP5LwmuG0Uv+Q8y3z3+0SvmNPRga3nd37769ngPiCfHQUr4PrO+/3uKxFedW5h9Nb/8QAAAAB47VpJf1DzeXtzZCiDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADggbmVn/QLFYZ9jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBd8SoAAP//c7z5SQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x401, 0xe2}}, 0x20) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 32m32.061428426s ago: executing program 7 (id=487): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 32m31.906269954s ago: executing program 7 (id=488): r0 = eventfd(0x48) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000280)={r0, 0x20002, 0x2, r0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x5b1280, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3ffff, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x4, 0x4], 0xdddd0000, 0x1d4217}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 32m31.733678193s ago: executing program 7 (id=491): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1808000, &(0x7f0000001600)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRES8, @ANYRES64, @ANYRES64, @ANYRESDEC, @ANYRES16], 0x1, 0x5e7, &(0x7f0000000680)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa1ff}]) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x100000, 0x16}]) 32m30.953746342s ago: executing program 7 (id=499): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x462, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f0000000280)={0x0, 0x4, 0x60000}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x1000000c}) epoll_pwait(r0, &(0x7f0000000e80)=[{}], 0x1, 0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x20441, 0x189) ioctl$FIBMAP(r2, 0x1, &(0x7f00000002c0)) 32m30.251003737s ago: executing program 7 (id=504): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000800)='./file1\x00', &(0x7f0000000180)='./file0\x00') 32m30.143419843s ago: executing program 35 (id=504): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000800)='./file1\x00', &(0x7f0000000180)='./file0\x00') 29m16.254779725s ago: executing program 1 (id=1716): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000300)={0x200000, 0x200000, 0xfffffffe}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r2, r3, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f00000010c0)={0x8, 0xffffffff, 0x0, 0xe, 0xf, "c187b3c1e5c979b0d064d45eb27803ea28bc0c"}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 29m16.215784788s ago: executing program 1 (id=1719): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x130) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r4, 0xb, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) 29m15.273779305s ago: executing program 1 (id=1725): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 29m14.790986569s ago: executing program 1 (id=1728): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@local, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@loopback, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x7f, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x6, 0x1000, 0xfffffffffffffffd}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0xb}, @coaddr={0x14, 0xe, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x4010011, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r3, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 29m13.822918308s ago: executing program 1 (id=1735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r4, 0x403, 0x0, 0xfffffffd, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x20000000) 29m13.539538982s ago: executing program 1 (id=1742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x28000600) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r3, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/111, 0xfffffffffffffd73) 29m12.725072394s ago: executing program 36 (id=1742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x28000600) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r3, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/111, 0xfffffffffffffd73) 27m6.568454642s ago: executing program 8 (id=2284): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000480)="b9f0812e4e06f000009e0fa208001fffffe10100000040000000803544b3007fb87a", 0x0, 0x20000102, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 27m4.796833491s ago: executing program 8 (id=2288): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x1, &(0x7f0000001740)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1, r1, &(0x7f0000000100)="02", 0x1}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x2, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) 27m2.928160046s ago: executing program 8 (id=2301): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 26m59.434066902s ago: executing program 8 (id=2311): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x60400) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 26m59.29208754s ago: executing program 8 (id=2314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = semget$private(0x0, 0x6, 0x2ef) semop(r3, &(0x7f0000000240)=[{0x0, 0xffff, 0x1000}, {0x0, 0xffff, 0x1800}], 0x2) 26m58.434392513s ago: executing program 8 (id=2319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, 0x0, 0x0) 26m58.288545221s ago: executing program 37 (id=2319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, 0x0, 0x0) 26m11.258740087s ago: executing program 3 (id=2466): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_emit_ethernet(0x7e, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240407fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x4000000) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) 26m9.69983061s ago: executing program 3 (id=2472): socket(0x10, 0x803, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e810cf782db44fd5617ec403ce69b0d12", 0x19}], 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r3}) 26m7.518835623s ago: executing program 3 (id=2478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078006000440000000000600054010000000080008"], 0x64}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x434001, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000240)=r1) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0x7}, {0x1, 0xfffffffc, 0x1, 0xb}]}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) 26m6.502892573s ago: executing program 3 (id=2481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) 26m5.957323647s ago: executing program 3 (id=2485): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 26m4.874112192s ago: executing program 3 (id=2487): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000010dcef7b5f643bc22f3060abca03d0170e5c102c185a6a33f0cb584cac9c208ff813bc5df950469a6222a2673b4dde39bf5c43668336530203f133fbbb418aaad28faac06acedb0befe30ad6d7ae55f370c512070fd32abd10fc8306c5d3c2680cde45e3a5e9c16a9bdd79b2902b33c6b03e55faacc0deb9b1111d957f1309cf88e9de584306f04483cf7dadfff8b06b97fc2512122db1c1ac87c00b6811cb9d25080139b621a3ae096ab19b9c5a712f0429ed718a47db9c33ee656da48370d7f5d8f1c226d4b6bdc60b0c7eb0cf9121d1b159fb4f8d2be2ff457aa95ac148bc31042a81539c778215467c2e07", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf25120000000c009900000200001d0000001c008100050001000700000005000200950000000500020008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44844) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) 25m47.957466772s ago: executing program 38 (id=2487): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000010dcef7b5f643bc22f3060abca03d0170e5c102c185a6a33f0cb584cac9c208ff813bc5df950469a6222a2673b4dde39bf5c43668336530203f133fbbb418aaad28faac06acedb0befe30ad6d7ae55f370c512070fd32abd10fc8306c5d3c2680cde45e3a5e9c16a9bdd79b2902b33c6b03e55faacc0deb9b1111d957f1309cf88e9de584306f04483cf7dadfff8b06b97fc2512122db1c1ac87c00b6811cb9d25080139b621a3ae096ab19b9c5a712f0429ed718a47db9c33ee656da48370d7f5d8f1c226d4b6bdc60b0c7eb0cf9121d1b159fb4f8d2be2ff457aa95ac148bc31042a81539c778215467c2e07", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf25120000000c009900000200001d0000001c008100050001000700000005000200950000000500020008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44844) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) 6m48.054438908s ago: executing program 9 (id=5620): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmsg(r0, &(0x7f00000054c0)={&(0x7f00000002c0)=@tipc, 0x80, &(0x7f0000005380)=[{0x0}, {&(0x7f0000005180)=""/127, 0x7f}, {&(0x7f0000005200)=""/168, 0xa8}, {&(0x7f00000052c0)=""/150, 0x96}], 0x4, &(0x7f0000005400)=""/188, 0xbc}, 0x60) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xf, r5, 0x0, &(0x7f00000003c0)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8) read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x690, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x6f0) syz_clone3(0x0, 0x0) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) 6m43.98955783s ago: executing program 9 (id=5632): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffffd, 0x0, 0x200, 0xb, 0x47, 0x3, [0x100, 0xfffffff9]}}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffe0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000280)=0xce76, 0x4) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\a\x00\x00'], 0x50) sendfile(r4, r5, 0x0, 0x106f) socket$rds(0x15, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)='x', 0x1}], 0x1}}], 0x1, 0x40c40c0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a0900000000004e22"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) recvmmsg(r7, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) 6m36.204207327s ago: executing program 9 (id=5647): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setxattr$security_ima(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_io_uring_setup(0x37e8, &(0x7f0000000340)={0x0, 0xdd87, 0x2, 0x1, 0x3ba}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000600)={r6, r6, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f00000000c0)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") rt_sigqueueinfo(0x0, 0x3b, &(0x7f0000000580)={0x37, 0x5, 0x9}) socket$key(0xf, 0x3, 0x2) 6m35.561448721s ago: executing program 9 (id=5648): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = msgget$private(0x0, 0x193) msgsnd(r3, 0x0, 0x8, 0x0) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000300)=""/168) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f0, &(0x7f0000000080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file3\x00', 0x60840, 0x8) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f00000102c0)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f00000041c0)={0x2020}, 0x2070) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$can_raw(0x1d, 0x3, 0x1) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) ioprio_set$uid(0x3, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) 6m34.326154086s ago: executing program 9 (id=5651): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) 6m33.767319495s ago: executing program 9 (id=5655): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x40}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000000000000000001"], 0x0, 0x4e}, 0x20) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 6m16.868843618s ago: executing program 39 (id=5655): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x40}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000000000000000001"], 0x0, 0x4e}, 0x20) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 11.953356485s ago: executing program 0 (id=6732): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r1, 0x0, 0x0, 0x2, 0x3000) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) 11.383965085s ago: executing program 0 (id=6734): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) setrlimit(0xa, &(0x7f0000000000)={0x80000000, 0xffffffffffff0f53}) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x3c}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff, 0xff, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x4, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 9.640547046s ago: executing program 6 (id=6737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 9.548105891s ago: executing program 6 (id=6739): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) 9.416735528s ago: executing program 0 (id=6741): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 9.086977455s ago: executing program 5 (id=6744): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[], &(0x7f00000001c0), 0xa8, 0x0, 0xfffffffc, 0x1, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) socket$caif_stream(0x25, 0x1, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, 0x0) 8.119826176s ago: executing program 0 (id=6746): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[], &(0x7f00000001c0), 0xa8, 0x0, 0xfffffffc, 0x1, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000006000000f60b0000040000000a0000", @ANYBLOB="0200"/15, @ANYBLOB="04000000012b9621207965fe5ffd5b00000005000000050000000000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 7.905692657s ago: executing program 4 (id=6747): socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) msgrcv(0x0, 0x0, 0x10, 0x1, 0x3000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = msgget(0x2, 0xd5e) msgctl$IPC_RMID(r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x54}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) 7.042776892s ago: executing program 0 (id=6748): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = msgget$private(0x0, 0x193) msgsnd(r2, 0x0, 0x8, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000300)=""/168) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f0, &(0x7f0000000080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file3\x00', 0x60840, 0x8) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f00000102c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000041c0)={0x2020}, 0x2070) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$can_raw(0x1d, 0x3, 0x1) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) ioprio_set$uid(0x3, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) 7.041996542s ago: executing program 5 (id=6749): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r1, 0x29, 0x50, 0x0, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r6}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r5, &(0x7f0000000180)={{0x3, @default, 0x5}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x22020400) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0xb, 0xfffffffd, 0x6, 0x1200, r7, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r8, &(0x7f0000000040)="09000000010001", 0x7) socket$inet6_sctp(0xa, 0x801, 0x84) 7.041544272s ago: executing program 6 (id=6750): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 6.826315923s ago: executing program 2 (id=6751): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) setrlimit(0xa, &(0x7f0000000000)={0x80000000, 0xffffffffffff0f53}) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x3c}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff, 0xff, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x4, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 6.104398611s ago: executing program 2 (id=6752): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_mtu(r1, 0x29, 0x50, 0x0, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r5, &(0x7f0000000280)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r6}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r5, &(0x7f0000000180)={{0x3, @default, 0x5}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x22020400) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0xb, 0xfffffffd, 0x6, 0x1200, r7, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r8, &(0x7f0000000040)="09000000010001", 0x7) socket$inet6_sctp(0xa, 0x801, 0x84) 5.090830794s ago: executing program 6 (id=6753): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = msgget$private(0x0, 0x193) msgsnd(r3, 0x0, 0x8, 0x0) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000300)=""/168) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f0, &(0x7f0000000080)="$eJzslruO00AUhv8ZW3aCuEiUNBREAgoc2wFEE4lIiIoCiUtEgUQkTBSSAEpckEgo4Qno6SjoeQEkaHkIFGigCRVbezUXO87Fu8nuelPs+aSMf4/mcnxm9J+AIIgTy+9fO5Pof/VPAcBplGDr/r/GbAxPjf9Z+Pfu+7279Q9PP/+wJ05x1ZpRtP7+JoBvNQNhMnd+dkk/H4In+hE4rmpdB4Oj9TNwPBZibCMAwxMUZHwvpVa8FuMd50WrEzgMgBCuaDzR+KKpLMY3fc/wPBUfk+qs7hm2G51O0OsPchP75W9a46im4lOHYukeFa2byp8HDk/rChgeaH0LdpwblZLU918wZ+unrgaWw7Vyz4gIZYNZ589khdoXOZrvMTO/a16IvB7R52Cstsz1DilhLMZsQIr4RHO/yscuYG58tTLPYrR0W/IQBzmLr7fVnLgnGql3OeZcxoLRaM0tLKwZRlwNVOYTf4o+MVxO+ZMpK8pHWWrKYfcNx2B4rdVtNINm8Mr3Kzfd6657w78DYURlaUd7+F9R+tOp2fora5J0RGbhbSMMe55qk3dftascl0v/47hyKXbTKHFWgb2wB9M/Lp/Se9tfMqMnCILYHheFo2nMWOhqguS/LnB/izESBEEQBEEQBEEQBHE4dgMAAP//Id89jw==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file3\x00', 0x60840, 0x8) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f00000102c0)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f00000041c0)={0x2020}, 0x2070) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$can_raw(0x1d, 0x3, 0x1) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) ioprio_set$uid(0x3, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) 5.063155125s ago: executing program 5 (id=6754): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[], &(0x7f00000001c0), 0xa8, 0x0, 0xfffffffc, 0x1, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000006000000f60b0000040000000a0000", @ANYBLOB="0200"/15, @ANYBLOB="04000000012b9621207965fe5ffd5b00000005000000050000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) socket$caif_stream(0x25, 0x1, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@overlay={0x80000000, 0xd, 0x4, 0x10, 0x9, {r6, r7/1000+10000}, {0x0, 0x2, 0x8f, 0x7, 0x3, 0x6, "0300"}, 0x6, 0x3, {}, 0x1d8}) 5.050629926s ago: executing program 4 (id=6755): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) socketpair$unix(0x1, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 4.01885403s ago: executing program 6 (id=6756): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 3.845394059s ago: executing program 2 (id=6757): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[], &(0x7f00000001c0), 0xa8, 0x0, 0xfffffffc, 0x1, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000006000000f60b0000040000000a0000", @ANYBLOB="0200"/15, @ANYBLOB="04000000012b9621207965fe5ffd5b00000005000000050000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) socket$caif_stream(0x25, 0x1, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@overlay={0x80000000, 0xd, 0x4, 0x10, 0x9, {r6, r7/1000+10000}, {0x0, 0x2, 0x8f, 0x7, 0x3, 0x6, "0300"}, 0x6, 0x3, {}, 0x1d8}) 3.82473888s ago: executing program 6 (id=6758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f0000000940)=ANY=[], 0x120) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000000c0)={0xf, 0x3, 0x7, 0x200}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x2e06, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) ioctl$KDGKBDIACR(r4, 0x4b4a, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x108, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_devices(r5, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}, {0x0}], 0x2, 0xffffff01, 0xa) 3.759103583s ago: executing program 4 (id=6759): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[], &(0x7f00000001c0), 0xa8, 0x0, 0xfffffffc, 0x1, 0x10000}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 2.784331195s ago: executing program 2 (id=6760): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[], &(0x7f00000001c0), 0xa8, 0x0, 0xfffffffc, 0x1, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) socket$caif_stream(0x25, 0x1, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, 0x0) 1.758863128s ago: executing program 2 (id=6761): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x9) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x3) setrlimit(0xa, &(0x7f0000000000)={0x80000000, 0xffffffffffff0f53}) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x3c}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff, 0xff, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x4, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.657330313s ago: executing program 5 (id=6762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9fe03318944268cb89914f086dd", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.427794045s ago: executing program 5 (id=6763): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x880, &(0x7f0000000380)={[{@shortname_mixed}, {@utf8}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}, {@uni_xlateno}, {@shortname_win95}, {@rodir}, {@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbad}}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@shortname_win95}, {@uni_xlateno}]}, 0x2a, 0x356, &(0x7f00000008c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 1.13668647s ago: executing program 4 (id=6764): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632177fbac141416ac14141689089f034d2f87e5940c04ab845013f2325f1a39018302038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 1.042810255s ago: executing program 4 (id=6765): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r1, 0x29, 0x50, 0x0, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r5}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default, 0x5}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x22020400) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0xb, 0xfffffffd, 0x6, 0x1200, r6, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r7, &(0x7f0000000040)="09000000010001", 0x7) socket$inet6_sctp(0xa, 0x801, 0x84) 530.231082ms ago: executing program 2 (id=6766): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x9) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xa, &(0x7f0000000000)={0x80000000, 0xffffffffffff0f53}) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x3c}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff, 0xff, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x4, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 147.716732ms ago: executing program 5 (id=6767): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r1, 0x29, 0x50, 0x0, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r5, &(0x7f0000000280)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r6}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r5, &(0x7f0000000180)={{0x3, @default, 0x5}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x22020400) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0xb, 0xfffffffd, 0x6, 0x1200, r7, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r8, &(0x7f0000000040)="09000000010001", 0x7) socket$inet6_sctp(0xa, 0x801, 0x84) 89.103765ms ago: executing program 4 (id=6768): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 0s ago: executing program 0 (id=6769): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) socketpair$unix(0x1, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): entity 4711 [ 712.430526][T16073] tipc: Enabled bearer , priority 0 [ 712.453012][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 712.474367][T16067] tipc: Resetting bearer [ 712.508370][T16067] tipc: Disabling bearer [ 712.551595][T16099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.558916][T16099] IPv6: NLM_F_CREATE should be set when creating new route [ 713.267178][T11405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.437564][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.445933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.974372][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.981835][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.120373][ T2238] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 714.697463][ T2238] usb 5-1: Using ep0 maxpacket: 32 [ 714.820165][T16099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.828082][ T2238] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 714.836796][ T2238] usb 5-1: config 0 has no interface number 0 [ 714.842919][ T2238] usb 5-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 714.853594][ T2238] usb 5-1: config 0 interface 86 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 714.863861][ T2238] usb 5-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 714.866224][T16099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.874589][ T2238] usb 5-1: config 0 interface 86 has no altsetting 0 [ 715.025440][T16099] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.040688][T16099] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.049688][T16099] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.059463][ T2238] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 715.064862][T16099] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.073711][ T2238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.086620][ T2238] usb 5-1: Product: syz [ 715.090810][ T2238] usb 5-1: Manufacturer: syz [ 715.096049][ T2238] usb 5-1: SerialNumber: syz [ 715.113417][ T2238] usb 5-1: config 0 descriptor?? [ 715.135930][T16130] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 716.223774][T16148] device syzkaller0 entered promiscuous mode [ 716.769089][ T23] net_ratelimit: 4 callbacks suppressed [ 716.769106][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.783218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.317694][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.425343][ T2238] usb 5-1: USB disconnect, device number 3 [ 717.470136][T16165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3194'. [ 717.499065][T16165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3194'. [ 718.698225][T16186] netlink: 'syz.0.3203': attribute type 10 has an invalid length. [ 718.721295][T16186] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 718.767669][T16194] loop9: detected capacity change from 0 to 128 [ 718.768993][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.855549][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3203'. [ 718.920141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.933758][ T4579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.942495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.952332][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.135449][T16216] netlink: 'syz.0.3218': attribute type 21 has an invalid length. [ 720.223831][T16216] netlink: 'syz.0.3218': attribute type 6 has an invalid length. [ 720.239522][T16216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3218'. [ 720.674562][ T4579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.682942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.465608][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 722.471975][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 723.529949][ T4231] net_ratelimit: 1 callbacks suppressed [ 723.529966][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.546412][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.555003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.942696][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'. [ 724.640024][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.827257][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.835603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.896297][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.937447][T16323] tipc: Enabling of bearer rejected, failed to enable media [ 726.545872][T13133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.554327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.194928][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.253497][T16370] netlink: 'syz.6.3240': attribute type 1 has an invalid length. [ 728.368443][T16370] 8021q: adding VLAN 0 to HW filter on device bond8 [ 728.393485][T16372] bond8: (slave dummy0): Enslaving as an active interface with a down link [ 730.033212][T11840] net_ratelimit: 5 callbacks suppressed [ 730.033232][T11840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.033509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.344785][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.354706][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.365404][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.377061][T11405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.536386][T16403] netlink: 'syz.9.3251': attribute type 1 has an invalid length. [ 730.603575][T16409] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 731.505317][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.923253][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.932044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.613904][ T4768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.650101][T16403] device bond2 entered promiscuous mode [ 732.656281][T16403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 732.766962][T16405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 732.774076][T16405] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 732.785030][T16405] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 732.799307][T16405] bond2: (slave wireguard0): making interface the new active one [ 732.807325][T16405] device wireguard0 entered promiscuous mode [ 732.815800][T16405] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 732.826025][T13193] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 732.853124][T16424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3257'. [ 735.415893][ T4231] net_ratelimit: 5 callbacks suppressed [ 735.415908][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.986193][T16470] netlink: 16166 bytes leftover after parsing attributes in process `syz.6.3264'. [ 736.647660][T16458] loop9: detected capacity change from 0 to 256 [ 736.698483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.767831][T13133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.800959][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.812067][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.188727][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.203354][T16478] blktrace: Concurrent blktraces are not allowed on loop12 [ 738.326148][T11405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.687188][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.695525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.773881][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.090894][ T4231] net_ratelimit: 4 callbacks suppressed [ 741.090911][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.126918][T16543] device erspan0 left promiscuous mode [ 741.132613][T16543] bridge3: port 1(erspan0) entered disabled state [ 742.069015][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.077547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.259647][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.273331][T16568] loop9: detected capacity change from 0 to 512 [ 742.333141][T16569] tipc: Enabled bearer , priority 0 [ 743.083766][ T4578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.096787][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.140415][T16578] netlink: 'syz.4.3290': attribute type 12 has an invalid length. [ 743.857893][T16584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.918447][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.928034][T16578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.940871][T16578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.031264][T16590] device vlan2 entered promiscuous mode [ 744.094339][T16590] device geneve1 entered promiscuous mode [ 744.956271][T16604] netlink: 'syz.2.3294': attribute type 10 has an invalid length. [ 745.227825][T16617] loop9: detected capacity change from 0 to 128 [ 750.843417][ T9] net_ratelimit: 1025 callbacks suppressed [ 750.843432][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.858799][ T4578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.876137][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.917549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.929148][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.954735][T11841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.963130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.141170][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.670603][T11405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.817561][T11405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.953613][T16686] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 756.744854][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.850716][T16711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.030509][T16713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.137873][T16713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.170122][T16711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.210170][T16721] netlink: 'syz.4.3322': attribute type 4 has an invalid length. [ 757.227993][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.236327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.233166][T16775] futex_wake_op: syz.9.3337 tries to shift op by 144; fix this program [ 768.620180][ T26] audit: type=1326 audit(3923883088.351:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.0.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 768.677705][ T26] audit: type=1326 audit(3923883088.389:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.0.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 768.705741][ T26] audit: type=1326 audit(3923883088.389:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.0.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 768.735918][ T26] audit: type=1326 audit(3923883088.389:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.0.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 768.765358][ T26] audit: type=1326 audit(3923883088.389:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.0.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 768.909757][ T26] audit: type=1326 audit(3923883088.389:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.0.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 769.005678][ T26] audit: type=1326 audit(3923883088.389:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.0.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 769.078176][ T26] audit: type=1326 audit(3923883088.389:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.0.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 769.172926][ T26] audit: type=1326 audit(3923883088.389:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.0.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 769.208761][ T26] audit: type=1326 audit(3923883088.389:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.0.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 772.444409][T16885] device erspan0 left promiscuous mode [ 772.467244][T16885] bridge2: port 1(erspan0) entered disabled state [ 773.050689][T16885] device bridge_slave_0 left promiscuous mode [ 773.109334][T16885] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.243784][T16885] device bridge_slave_1 left promiscuous mode [ 773.259287][T16885] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.282378][T16885] bond0: (slave bond_slave_0): Releasing backup interface [ 773.790322][T16885] bond0: (slave bond_slave_1): Releasing backup interface [ 774.191557][T16885] team0: Port device team_slave_0 removed [ 774.847027][T16885] team0: Port device team_slave_1 removed [ 774.961585][T16885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.969567][T16885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.994618][T16885] bond0: (slave wlan1): Releasing backup interface [ 775.029525][T16885] bond1: (slave geneve2): Releasing active interface [ 775.060696][T16885] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.076525][T16885] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.086741][T16885] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.185235][T16885] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.245470][T16885] bond2: (slave wireguard0): Releasing backup interface [ 775.259683][T16885] device wireguard0 left promiscuous mode [ 775.569819][T16934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3370'. [ 776.222455][T16939] device batadv_slave_1 entered promiscuous mode [ 776.306668][T16938] device batadv_slave_1 left promiscuous mode [ 778.360667][T16962] orangefs_mount: mount request failed with -4 [ 779.688113][T17005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3384'. [ 783.772477][T17048] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3396'. [ 783.981037][T17048] netlink: 'syz.9.3396': attribute type 12 has an invalid length. [ 784.067204][T17057] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 786.198389][T17080] futex_wake_op: syz.0.3407 tries to shift op by 144; fix this program [ 788.338742][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 788.354060][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 790.649937][T17134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3416'. [ 792.384515][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 792.384529][ T26] audit: type=1800 audit(3923883110.586:316): pid=17152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3419" name="bus" dev="ramfs" ino=76689 res=0 errno=0 [ 792.663817][T17168] infiniband syz0: set down [ 792.676854][T17168] infiniband syz0: added ipvlan0 [ 793.923461][T17168] RDS/IB: syz0: added [ 794.102391][T17168] smc: adding ib device syz0 with port count 1 [ 794.239359][T17168] smc: ib device syz0 port 1 has pnetid [ 794.728089][T17197] block device autoloading is deprecated and will be removed. [ 794.745364][T17192] block device autoloading is deprecated and will be removed. [ 795.990375][T17223] device vlan4 entered promiscuous mode [ 795.995962][T17223] device geneve1 entered promiscuous mode [ 796.529827][T17249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3441'. [ 800.031223][T17289] overlayfs: failed to clone upperpath [ 802.288712][T17331] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3458'. [ 804.115386][T17336] netlink: 'syz.2.3460': attribute type 14 has an invalid length. [ 804.123250][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3460'. [ 804.146102][T17336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.950033][T17362] device syzkaller0 entered promiscuous mode [ 810.933584][T17405] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3476'. [ 817.514156][T17448] loop4: detected capacity change from 0 to 512 [ 817.763863][T17448] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 818.167779][T17460] tipc: Enabling of bearer rejected, already enabled [ 818.300963][T17448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 818.331623][T17448] EXT4-fs (loop4): orphan cleanup on readonly fs [ 818.391147][T17448] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.3487: bad orphan inode 267 [ 818.422783][T17448] EXT4-fs (loop4): Remounting filesystem read-only [ 818.438815][T17448] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 818.474855][T17448] ip6t_srh: unknown srh invflags 4000 [ 818.656100][T17469] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.3487: dx entry: limit 0 != root limit 125 [ 818.728184][T17469] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3487: Corrupt directory, running e2fsck is recommended [ 819.559611][T17491] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3495'. [ 821.872326][T17521] device syzkaller0 entered promiscuous mode [ 822.109138][T17536] ip6t_srh: unknown srh invflags 4000 [ 823.143716][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3516'. [ 823.266080][T17556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.432672][T17578] loop9: detected capacity change from 0 to 2048 [ 824.595254][T17581] loop4: detected capacity change from 0 to 128 [ 825.163217][T17581] vfat filesystem being mounted at /164/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 827.045068][T17614] netlink: 399 bytes leftover after parsing attributes in process `syz.9.3526'. [ 827.101283][T17618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3529'. [ 827.110437][T17618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3529'. [ 827.162592][T17618] device bridge0 entered promiscuous mode [ 827.171237][T17618] device syz_tun entered promiscuous mode [ 827.498494][T13994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 828.354585][T17633] netlink: 'syz.4.3533': attribute type 1 has an invalid length. [ 828.470034][T17633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 829.671926][T17643] bond2: (slave geneve3): making interface the new active one [ 829.689828][T17643] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 829.794165][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 833.805465][T17694] tipc: Enabling of bearer rejected, failed to enable media [ 835.902948][T17707] netlink: 'syz.9.3549': attribute type 3 has an invalid length. [ 835.910951][T17707] netlink: 201372 bytes leftover after parsing attributes in process `syz.9.3549'. [ 839.697691][T17788] loop4: detected capacity change from 0 to 512 [ 839.967222][T17788] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 840.084389][T17788] EXT4-fs (loop4): 1 truncate cleaned up [ 840.139342][T17788] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 846.080193][T17888] device syzkaller0 left promiscuous mode [ 846.212316][T17892] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3591'. [ 846.370248][T17892] device bond3 entered promiscuous mode [ 846.382293][T17892] 8021q: adding VLAN 0 to HW filter on device bond3 [ 846.459008][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3591'. [ 849.614005][T17902] bond3 (unregistering): Released all slaves [ 852.506356][T17941] netlink: 173 bytes leftover after parsing attributes in process `syz.4.3601'. [ 854.001349][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 854.007762][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 857.616158][T17977] binder_alloc: 17976: pid 17976 spamming oneway? 2 buffers allocated for a total size of 5120 [ 857.743068][T17977] binder_alloc: 17976: pid 17976 spamming oneway? 3 buffers allocated for a total size of 5128 [ 857.868473][T17988] loop4: detected capacity change from 0 to 16 [ 857.955323][T17988] erofs: (device loop4): mounted with root inode @ nid 36. [ 861.711616][T18025] loop4: detected capacity change from 0 to 1024 [ 861.922570][T18025] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.932383][T18025] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.941334][T18025] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.950152][T18025] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.414418][T18025] team0: Port device vxlan0 added [ 867.122396][T18095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3637'. [ 867.157424][T18095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3637'. [ 867.202113][T18095] device ip6gretap0 entered promiscuous mode [ 867.220532][T18095] device syz_tun entered promiscuous mode [ 867.865716][T18095] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 867.893791][T18095] Cannot create hsr debugfs directory [ 867.904666][T18095] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 867.946341][T18095] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 868.109045][T18105] device syzkaller0 entered promiscuous mode [ 871.894597][T18151] binder_alloc: 18150: pid 18150 spamming oneway? 2 buffers allocated for a total size of 5120 [ 872.205221][T18163] binder_alloc: 18150: pid 18150 spamming oneway? 3 buffers allocated for a total size of 5128 [ 877.723527][T18192] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3668'. [ 882.916557][T18275] loop4: detected capacity change from 0 to 1024 [ 883.146123][T18275] EXT4-fs (loop4): Ignoring removed orlov option [ 883.377369][T18275] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 884.815301][T18295] kAFS: No cell specified [ 885.223699][T18304] hugetlbfs: syz.9.3682 (18304): Using mlock ulimits for SHM_HUGETLB is deprecated [ 894.272838][T18390] loop9: detected capacity change from 0 to 1024 [ 899.356508][T18436] netlink: 173 bytes leftover after parsing attributes in process `syz.0.3722'. [ 906.502637][T18516] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3724'. [ 907.209427][T18520] netlink: 173 bytes leftover after parsing attributes in process `syz.2.3727'. [ 907.590964][T18529] netlink: 'syz.6.3728': attribute type 2 has an invalid length. [ 913.920191][T18605] loop9: detected capacity change from 0 to 512 [ 914.005039][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3748'. [ 918.648594][T18675] syz.9.3770 (18675): attempted to duplicate a private mapping with mremap. This is not supported. [ 919.306336][T18680] loop9: detected capacity change from 0 to 256 [ 919.673544][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 919.685646][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 919.704631][T18680] /dev/loop9: Can't open blockdev [ 920.568360][T18690] libceph: resolve '0..' (ret=-3): failed [ 920.651630][T11845] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 922.215581][T11845] usb 10-1: device descriptor read/64, error -71 [ 925.148906][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3773'. [ 925.182347][T18734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.334898][T18734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.361538][T18749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3777'. [ 925.743626][T18729] netlink: 216 bytes leftover after parsing attributes in process `syz.9.3772'. [ 926.180217][T18729] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3772'. [ 928.540737][T18786] device ip6gre1 left promiscuous mode [ 928.547035][T18786] device vlan2 left promiscuous mode [ 928.552439][T18786] device geneve1 left promiscuous mode [ 930.096697][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3788'. [ 942.086261][T18944] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3819'. [ 942.095430][T18944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3819'. [ 944.328445][T18962] ipt_REJECT: TCP_RESET invalid for non-tcp [ 946.035642][T18985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3833'. [ 946.150540][T18987] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3832'. [ 954.852266][T19042] loop4: detected capacity change from 0 to 2048 [ 955.165267][T19042] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 956.553117][T19067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3852'. [ 956.562455][T19067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3852'. [ 957.244848][T19068] device ipip0 left promiscuous mode [ 957.251070][T19068] device bridge2 left promiscuous mode [ 957.257264][T19068] device ipvlan2 left promiscuous mode [ 957.263366][T19068] device vlan3 left promiscuous mode [ 957.269964][T19068] device macvtap0 left promiscuous mode [ 957.276212][T19068] device vlan4 left promiscuous mode [ 957.281564][T19068] device geneve1 left promiscuous mode [ 957.853205][T19070] loop9: detected capacity change from 0 to 512 [ 958.035839][T19070] tipc: Cannot configure node identity twice [ 958.981857][T19087] netlink: 173 bytes leftover after parsing attributes in process `syz.4.3859'. [ 959.883424][T19095] kAFS: No cell specified [ 960.477519][ T26] audit: type=1326 audit(3923883267.153:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.9.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 961.074591][T19104] netlink: 173 bytes leftover after parsing attributes in process `syz.2.3858'. [ 962.578802][ T26] audit: type=1326 audit(3923883267.153:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.9.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 962.641474][ T26] audit: type=1326 audit(3923883267.153:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.9.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 962.666079][ T26] audit: type=1326 audit(3923883267.153:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.9.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 962.689662][ T26] audit: type=1326 audit(3923883267.153:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.9.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 962.712661][ T26] audit: type=1326 audit(3923883267.153:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.9.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 962.824496][ T26] audit: type=1326 audit(3923883267.153:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.9.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 962.848521][ T26] audit: type=1326 audit(3923883267.153:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.9.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 962.871240][ T26] audit: type=1326 audit(3923883267.153:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.9.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 962.895405][ T26] audit: type=1326 audit(3923883267.153:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.9.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 964.243471][T19137] netlink: 173 bytes leftover after parsing attributes in process `syz.2.3873'. [ 964.970950][T19143] kAFS: No cell specified [ 965.283202][T19142] netlink: 173 bytes leftover after parsing attributes in process `syz.4.3875'. [ 968.346768][T19194] netlink: 173 bytes leftover after parsing attributes in process `syz.2.3885'. [ 969.987168][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3883'. [ 970.013342][T19214] kAFS: No cell specified [ 972.288267][T19235] netlink: 173 bytes leftover after parsing attributes in process `syz.6.3892'. [ 975.826131][T19281] loop4: detected capacity change from 0 to 512 [ 983.058818][T19351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3922'. [ 983.139680][T19351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3922'. [ 983.377700][T19355] loop9: detected capacity change from 0 to 32768 [ 983.652298][T19355] /dev/loop9: Can't open blockdev [ 985.961223][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 985.968034][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 989.926937][T19406] loop9: detected capacity change from 0 to 32768 [ 990.211384][T19406] /dev/loop9: Can't open blockdev [ 992.826266][T19429] loop4: detected capacity change from 0 to 64 [ 993.171928][T19434] netlink: 6 bytes leftover after parsing attributes in process `syz.9.3945'. [ 993.222304][T19435] netlink: 173 bytes leftover after parsing attributes in process `syz.6.3938'. [ 994.613267][T19447] nfs4: Unknown parameter 'noa' [ 995.023450][T13381] hfs: node 4:3 still has 1 user(s)! [ 995.480783][ T26] kauditd_printk_skb: 93 callbacks suppressed [ 995.480797][ T26] audit: type=1326 audit(3923883300.565:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.6.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 996.037516][ T26] audit: type=1326 audit(3923883300.565:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.6.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 996.323812][ T26] audit: type=1326 audit(3923883300.565:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.6.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 996.351046][ T26] audit: type=1326 audit(3923883300.565:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.6.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7e74a36582 code=0x7ffc0000 [ 996.373505][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.380304][ T26] audit: type=1326 audit(3923883300.593:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.6.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7e74a36617 code=0x7ffc0000 [ 996.403813][ T26] audit: type=1326 audit(3923883300.593:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.6.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7e749f3511 code=0x7ffc0000 [ 996.426952][ C0] vkms_vblank_simulate: vblank timer overrun [ 998.970478][T19482] netlink: 173 bytes leftover after parsing attributes in process `syz.4.3960'. [ 999.325449][ T26] audit: type=1326 audit(3923883300.593:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.6.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7e74a37609 code=0x7ffc0000 [ 999.423750][ T26] audit: type=1326 audit(3923883300.593:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.6.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7e749f357b code=0x7ffc0000 [ 999.675997][ T26] audit: type=1326 audit(3923883300.603:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.6.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 999.900441][T19496] rdma_rxe: ignoring netdev event = 9 for ipvlan0 [ 999.911955][T19496] rdma_rxe: ignoring netdev event = 8 for ipvlan0 [ 1000.769799][T19511] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3967'. [ 1001.450237][T19518] netlink: 'syz.2.3968': attribute type 11 has an invalid length. [ 1001.458242][T19518] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.3968'. [ 1002.438721][T19516] loop9: detected capacity change from 0 to 8192 [ 1003.929706][T19531] netlink: 173 bytes leftover after parsing attributes in process `syz.4.3975'. [ 1004.008342][T19535] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3974'. [ 1007.456297][T11845] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1007.748027][T11845] usb 5-1: device descriptor read/64, error -71 [ 1014.894398][T19646] netlink: 173 bytes leftover after parsing attributes in process `syz.4.4008'. [ 1015.268682][T19652] loop4: detected capacity change from 0 to 32768 [ 1015.586315][T19652] XFS (loop4): Mounting V5 Filesystem [ 1015.800088][T19652] XFS (loop4): Ending clean mount [ 1015.822685][T19652] XFS (loop4): Quotacheck needed: Please wait. [ 1016.021122][T19652] XFS (loop4): Quotacheck: Done. [ 1017.280829][T13381] XFS (loop4): Unmounting Filesystem [ 1019.386404][T19700] loop9: detected capacity change from 0 to 32768 [ 1019.930099][T19711] netlink: 173 bytes leftover after parsing attributes in process `syz.2.4022'. [ 1019.957603][T19700] /dev/loop9: Can't open blockdev [ 1021.153815][ T26] audit: type=1326 audit(3923883324.530:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.6.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1022.602636][ T26] audit: type=1326 audit(3923883324.530:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.6.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1022.767458][ T26] audit: type=1326 audit(3923883324.530:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.6.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1022.818680][ T26] audit: type=1326 audit(3923883324.530:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.6.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1022.900234][ T26] audit: type=1326 audit(3923883324.530:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.6.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1022.923109][ T26] audit: type=1326 audit(3923883324.530:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.6.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1022.946418][ T26] audit: type=1326 audit(3923883324.540:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.6.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1022.969970][ T26] audit: type=1326 audit(3923883324.540:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.6.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1022.998816][ T26] audit: type=1326 audit(3923883324.540:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.6.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1023.060991][ T26] audit: type=1326 audit(3923883324.540:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.6.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1024.656838][T19754] netlink: 173 bytes leftover after parsing attributes in process `syz.6.4036'. [ 1025.189266][T19756] loop9: detected capacity change from 0 to 131072 [ 1029.280589][T19803] netlink: 173 bytes leftover after parsing attributes in process `syz.9.4050'. [ 1032.666860][T19842] kAFS: No cell specified [ 1033.840453][T19861] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.4064'. [ 1033.866682][T19861] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1033.874666][T19861] CPU: 1 PID: 19861 Comm: syz.6.4064 Not tainted syzkaller #0 [ 1033.882130][T19861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1033.892243][T19861] Call Trace: [ 1033.895530][T19861] [ 1033.898461][T19861] dump_stack_lvl+0x188/0x250 [ 1033.903194][T19861] ? show_regs_print_info+0x20/0x20 [ 1033.908418][T19861] ? load_image+0x400/0x400 [ 1033.912939][T19861] sysfs_warn_dup+0x8a/0xa0 [ 1033.917520][T19861] sysfs_do_create_link_sd+0xc0/0x110 [ 1033.922904][T19861] device_add+0x7ed/0xfb0 [ 1033.927334][T19861] wiphy_register+0x1e81/0x2c30 [ 1033.932256][T19861] ? cfg80211_event_work+0x40/0x40 [ 1033.937378][T19861] ? minstrel_ht_alloc+0x808/0x980 [ 1033.942581][T19861] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1033.948738][T19861] ieee80211_register_hw+0x2aa1/0x3af0 [ 1033.954260][T19861] ? ieee80211_tasklet_handler+0x20/0x20 [ 1033.959904][T19861] ? rcu_is_watching+0x11/0xa0 [ 1033.964729][T19861] ? memset+0x1e/0x40 [ 1033.968787][T19861] ? hrtimer_init+0x10c/0x220 [ 1033.973475][T19861] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1033.979291][T19861] hwsim_new_radio_nl+0xa6f/0xc40 [ 1033.984340][T19861] genl_rcv_msg+0xcea/0xf90 [ 1033.988936][T19861] ? genl_bind+0x380/0x380 [ 1033.993360][T19861] ? mark_lock+0x94/0x320 [ 1033.997745][T19861] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1034.003735][T19861] ? lock_chain_count+0x20/0x20 [ 1034.008599][T19861] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1034.014295][T19861] ? lockdep_hardirqs_on+0x94/0x140 [ 1034.019551][T19861] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1034.026083][T19861] ? netlink_rcv_skb+0x81/0x440 [ 1034.030946][T19861] netlink_rcv_skb+0x1f5/0x440 [ 1034.035712][T19861] ? genl_bind+0x380/0x380 [ 1034.040132][T19861] ? netlink_ack+0xb50/0xb50 [ 1034.044729][T19861] ? __lock_acquire+0x7d10/0x7d10 [ 1034.049764][T19861] ? down_read+0x1aa/0x2e0 [ 1034.054263][T19861] genl_rcv+0x24/0x40 [ 1034.058267][T19861] netlink_unicast+0x774/0x920 [ 1034.063056][T19861] netlink_sendmsg+0x8ba/0xbe0 [ 1034.067836][T19861] ? lockdep_hardirqs_on+0x94/0x140 [ 1034.073065][T19861] ? netlink_getsockopt+0x570/0x570 [ 1034.078282][T19861] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 1034.083850][T19861] ? security_socket_sendmsg+0x7c/0xa0 [ 1034.089402][T19861] ? netlink_getsockopt+0x570/0x570 [ 1034.094617][T19861] ____sys_sendmsg+0x5b7/0x8f0 [ 1034.099508][T19861] ? __sys_sendmsg_sock+0x30/0x30 [ 1034.104558][T19861] ? import_iovec+0x6f/0xa0 [ 1034.109178][T19861] ___sys_sendmsg+0x236/0x2e0 [ 1034.113881][T19861] ? __sys_sendmsg+0x2a0/0x2a0 [ 1034.118677][T19861] ? rcu_lock_release+0xe/0x20 [ 1034.123501][T19861] __se_sys_sendmsg+0x1af/0x290 [ 1034.128377][T19861] ? __x64_sys_sendmsg+0x80/0x80 [ 1034.133326][T19861] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1034.139334][T19861] ? lockdep_hardirqs_on+0x94/0x140 [ 1034.144549][T19861] do_syscall_64+0x4c/0xa0 [ 1034.148975][T19861] ? clear_bhb_loop+0x30/0x80 [ 1034.153656][T19861] ? clear_bhb_loop+0x30/0x80 [ 1034.158344][T19861] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1034.164254][T19861] RIP: 0033:0x7f7e74a36819 [ 1034.168682][T19861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.188298][T19861] RSP: 002b:00007f7e72c4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1034.196735][T19861] RAX: ffffffffffffffda RBX: 00007f7e74cb0180 RCX: 00007f7e74a36819 [ 1034.204720][T19861] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003 [ 1034.212695][T19861] RBP: 00007f7e74accc91 R08: 0000000000000000 R09: 0000000000000000 [ 1034.220670][T19861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.228648][T19861] R13: 00007f7e74cb0218 R14: 00007f7e74cb0180 R15: 00007ffc2f4c5658 [ 1034.236642][T19861] [ 1034.639123][T19871] netlink: 173 bytes leftover after parsing attributes in process `syz.4.4063'. [ 1035.497723][T19886] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1037.069244][T19916] kAFS: No cell specified [ 1039.970468][T19946] loop4: detected capacity change from 0 to 32768 [ 1040.884113][T19946] XFS (loop4): Mounting V5 Filesystem [ 1040.967879][T19946] XFS (loop4): Ending clean mount [ 1040.987752][T19946] XFS (loop4): Quotacheck needed: Please wait. [ 1041.942614][T19946] XFS (loop4): Quotacheck: Done. [ 1042.758202][T13381] XFS (loop4): Unmounting Filesystem [ 1044.487627][T20004] loop4: detected capacity change from 0 to 32768 [ 1045.006231][T20004] XFS (loop4): Mounting V5 Filesystem [ 1046.173366][T20004] XFS (loop4): Ending clean mount [ 1046.181148][T20004] XFS (loop4): Quotacheck needed: Please wait. [ 1046.749044][T20041] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4100'. [ 1047.481922][T20004] XFS (loop4): Quotacheck: Done. [ 1047.553124][T13381] XFS (loop4): Unmounting Filesystem [ 1049.599829][T20064] loop9: detected capacity change from 0 to 32768 [ 1050.820221][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1050.826575][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1050.884736][T20064] /dev/loop9: Can't open blockdev [ 1050.970690][T20069] netlink: 173 bytes leftover after parsing attributes in process `syz.6.4111'. [ 1053.433971][T20097] loop4: detected capacity change from 0 to 32768 [ 1053.788965][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4119'. [ 1054.045076][T20097] XFS (loop4): Mounting V5 Filesystem [ 1054.499749][T20097] XFS (loop4): Ending clean mount [ 1054.507102][T20097] XFS (loop4): Quotacheck needed: Please wait. [ 1054.700472][T20097] XFS (loop4): Quotacheck: Done. [ 1055.863296][T13381] XFS (loop4): Unmounting Filesystem [ 1057.786644][T20154] loop4: detected capacity change from 0 to 32768 [ 1057.921301][T20157] kAFS: No cell specified [ 1058.434176][T20152] netlink: 173 bytes leftover after parsing attributes in process `syz.2.4127'. [ 1058.719434][T20154] XFS (loop4): Mounting V5 Filesystem [ 1058.830200][T20154] XFS (loop4): Ending clean mount [ 1058.837600][T20154] XFS (loop4): Quotacheck needed: Please wait. [ 1058.981088][T20180] netlink: 173 bytes leftover after parsing attributes in process `syz.9.4131'. [ 1059.032946][T20154] XFS (loop4): Quotacheck: Done. [ 1060.546755][T13381] XFS (loop4): Unmounting Filesystem [ 1062.073575][T20207] kAFS: No cell specified [ 1065.125023][T20242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4149'. [ 1065.180109][T20242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4149'. [ 1067.970789][T20270] loop9: detected capacity change from 0 to 32768 [ 1068.300008][T20270] /dev/loop9: Can't open blockdev [ 1069.675459][T20289] 9pnet_virtio: no channels available for device syz [ 1070.576328][T20304] kAFS: No cell specified [ 1076.313058][T20362] kAFS: No cell specified [ 1079.294231][T20386] tipc: Enabling of bearer rejected, already enabled [ 1080.360585][T20400] tipc: Enabling of bearer rejected, already enabled [ 1081.642326][T20416] binder: 20415:20416 ioctl c0306201 0 returned -14 [ 1083.294301][T20433] loop9: detected capacity change from 0 to 32768 [ 1083.957051][T20441] xt_l2tp: v2 tid > 0xffff: 37482740 [ 1084.004122][T20433] /dev/loop9: Can't open blockdev [ 1095.168046][T20528] loop9: detected capacity change from 0 to 256 [ 1097.294432][T20528] /dev/loop9: Can't open blockdev [ 1097.614076][T20528] loop9: detected capacity change from 0 to 256 [ 1101.288709][T20582] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4232'. [ 1103.196734][T20602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.895944][T20602] device bridge_slave_1 left promiscuous mode [ 1103.902328][T20602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.980576][T20602] bond0: (slave bond_slave_0): Releasing backup interface [ 1104.050194][T20602] bond0: (slave bond_slave_1): Releasing backup interface [ 1104.111157][T20602] team0: Port device team_slave_0 removed [ 1104.135954][T20602] team0: Port device team_slave_1 removed [ 1104.147074][T20602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.176991][T20602] bond0: (slave wlan1): Releasing backup interface [ 1104.355587][T20602] device vlan2 left promiscuous mode [ 1104.360966][T20602] device bridge_slave_0 left promiscuous mode [ 1104.367417][T20602] bridge0: port 3(vlan2) entered disabled state [ 1105.029495][T20611] netlink: 173 bytes leftover after parsing attributes in process `syz.6.4244'. [ 1105.276274][T20637] loop9: detected capacity change from 0 to 32768 [ 1105.364208][T20637] /dev/loop9: Can't open blockdev [ 1108.754516][T20699] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4259'. [ 1111.196346][T20732] netlink: 173 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1116.443483][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.453774][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.336959][T20795] o2cb: This node has not been configured. [ 1117.343466][T20795] o2cb: Cluster check failed. Fix errors before retrying. [ 1117.350842][T20795] (syz.4.4284,20795,1):user_dlm_register:675 ERROR: status = -22 [ 1117.538485][T20795] (syz.4.4284,20795,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 1118.473837][T20809] netlink: 173 bytes leftover after parsing attributes in process `syz.6.4288'. [ 1122.577384][T20869] netlink: 173 bytes leftover after parsing attributes in process `syz.6.4302'. [ 1122.835679][T20871] loop9: detected capacity change from 0 to 32768 [ 1122.928640][T20871] /dev/loop9: Can't open blockdev [ 1128.172548][T20898] device bpq0 left promiscuous mode [ 1128.181937][T20898] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1134.846574][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4323'. [ 1135.470249][ T4231] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1135.768734][ T4231] usb 10-1: Using ep0 maxpacket: 32 [ 1135.992922][ T4231] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1136.000859][ T4231] usb 10-1: can't read configurations, error -71 [ 1136.250293][T20962] loop9: detected capacity change from 0 to 2048 [ 1141.598933][T20995] loop9: detected capacity change from 0 to 1024 [ 1145.496547][T21015] loop9: detected capacity change from 0 to 32768 [ 1145.503738][T21015] /dev/loop9: Can't open blockdev [ 1147.592253][T21037] netlink: 173 bytes leftover after parsing attributes in process `syz.2.4341'. [ 1150.054459][T21048] device bridge1 left promiscuous mode [ 1150.176041][T21048] device bond2 left promiscuous mode [ 1152.948687][T21087] tipc: Enabled bearer , priority 0 [ 1152.986803][T21087] device syzkaller0 entered promiscuous mode [ 1153.223495][T21087] tipc: Resetting bearer [ 1153.233251][T21086] tipc: Resetting bearer [ 1153.245383][T21086] tipc: Disabling bearer [ 1154.223568][T21113] netlink: 173 bytes leftover after parsing attributes in process `syz.6.4363'. [ 1154.573689][T21118] loop9: detected capacity change from 0 to 32768 [ 1154.765259][T21118] /dev/loop9: Can't open blockdev [ 1155.215780][T21123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4369'. [ 1155.760099][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 1155.760159][ T26] audit: type=1326 audit(3923883450.463:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.4.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1156.344894][ T26] audit: type=1326 audit(3923883450.463:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.4.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1156.385360][ T26] audit: type=1326 audit(3923883450.463:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.4.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1156.402201][T21136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4372'. [ 1156.451339][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4371'. [ 1156.466390][ T26] audit: type=1326 audit(3923883450.463:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.4.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1156.496290][T21131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.512283][ T26] audit: type=1326 audit(3923883450.463:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.4.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1156.622451][ T26] audit: type=1326 audit(3923883450.473:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.4.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1156.649522][ T26] audit: type=1326 audit(3923883450.473:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.4.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1156.672974][ T26] audit: type=1326 audit(3923883450.473:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.4.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1156.708977][ T26] audit: type=1326 audit(3923883450.473:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.4.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1156.742551][ T26] audit: type=1326 audit(3923883450.473:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.4.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1158.695844][T21158] kAFS: unable to lookup cell '' [ 1161.181151][ T26] audit: type=1326 audit(3923883455.009:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21176 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1161.403095][ T26] audit: type=1326 audit(3923883455.019:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21176 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1161.427682][ T26] audit: type=1326 audit(3923883455.019:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21176 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1161.451310][ T26] audit: type=1326 audit(3923883455.019:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21176 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1161.486093][ T26] audit: type=1326 audit(3923883455.019:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21176 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1161.739548][ T26] audit: type=1326 audit(3923883455.028:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21176 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1161.763210][ T26] audit: type=1326 audit(3923883455.037:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21176 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1161.811943][ T26] audit: type=1326 audit(3923883455.037:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21176 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1162.104454][ T26] audit: type=1326 audit(3923883455.037:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21176 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1162.531300][ T26] audit: type=1326 audit(3923883455.047:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21176 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1164.564276][T21218] lo speed is unknown, defaulting to 1000 [ 1164.580241][T21218] lo speed is unknown, defaulting to 1000 [ 1164.601402][T21218] lo speed is unknown, defaulting to 1000 [ 1164.651550][T21218] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1164.719256][T21218] lo speed is unknown, defaulting to 1000 [ 1164.740813][T21218] lo speed is unknown, defaulting to 1000 [ 1164.762748][T21218] lo speed is unknown, defaulting to 1000 [ 1164.783165][T21218] lo speed is unknown, defaulting to 1000 [ 1164.803408][T21218] lo speed is unknown, defaulting to 1000 [ 1164.823929][T21218] lo speed is unknown, defaulting to 1000 [ 1164.976708][T21222] netlink: 173 bytes leftover after parsing attributes in process `syz.6.4391'. [ 1170.834543][T21273] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4407'. [ 1170.901461][T21273] unsupported nlmsg_type 40 [ 1174.437396][T21316] netlink: 173 bytes leftover after parsing attributes in process `syz.4.4416'. [ 1175.894573][T21338] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4417'. [ 1181.173274][T21394] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4432'. [ 1182.754403][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.765868][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1186.598489][T21429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1187.505101][T21441] loop9: detected capacity change from 0 to 256 [ 1188.605458][T21453] loop9: detected capacity change from 0 to 32768 [ 1188.615247][T21453] /dev/loop9: Can't open blockdev [ 1190.746567][T21477] siw: device registration error -23 [ 1191.054886][T21483] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4463'. [ 1195.272414][T21509] netlink: 173 bytes leftover after parsing attributes in process `syz.6.4461'. [ 1198.688955][T21527] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4468'. [ 1201.470100][T21523] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4467'. [ 1201.974371][T21539] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4470'. [ 1202.001789][T21539] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1203.726594][T21556] netlink: 173 bytes leftover after parsing attributes in process `syz.2.4474'. [ 1205.287489][T21586] loop9: detected capacity change from 0 to 4096 [ 1209.568084][T21610] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4488'. [ 1209.836492][T21619] netlink: 173 bytes leftover after parsing attributes in process `syz.6.4489'. [ 1213.381245][T21651] netlink: 173 bytes leftover after parsing attributes in process `syz.2.4501'. [ 1214.068265][T21659] netlink: 173 bytes leftover after parsing attributes in process `syz.4.4503'. [ 1215.759966][T21666] loop9: detected capacity change from 0 to 128 [ 1216.901711][T21671] bridge0: port 3(ip6gretap0) entered blocking state [ 1216.908466][T21671] bridge0: port 3(ip6gretap0) entered disabled state [ 1216.916423][T21671] device ip6gretap0 entered promiscuous mode [ 1216.923062][T21671] bridge0: port 3(ip6gretap0) entered blocking state [ 1216.929789][T21671] bridge0: port 3(ip6gretap0) entered forwarding state [ 1217.004171][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4505'. [ 1217.235755][T21669] udevd[21669]: incorrect jbd checksum on /dev/loop9 [ 1217.423227][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1217.423262][ T26] audit: type=1326 audit(3923883508.084:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21663 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 1217.730781][ T26] audit: type=1326 audit(3923883508.084:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21663 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 1217.754728][ T26] audit: type=1326 audit(3923883508.084:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21663 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 1217.778248][ T26] audit: type=1326 audit(3923883508.093:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21663 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 1219.727092][ T26] audit: type=1326 audit(3923883508.093:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21663 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 1219.749761][ T26] audit: type=1326 audit(3923883508.093:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21663 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 1219.772801][ T26] audit: type=1326 audit(3923883508.093:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21663 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 1219.803137][T21701] loop9: detected capacity change from 0 to 16 [ 1220.005702][T21701] /dev/loop9: Can't open blockdev [ 1220.011384][ T26] audit: type=1326 audit(3923883508.093:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21663 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 1220.966924][ T26] audit: type=1326 audit(3923883508.093:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21663 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 1220.990338][ T26] audit: type=1326 audit(3923883508.093:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21663 comm="syz.9.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 1221.135618][T21725] netlink: 173 bytes leftover after parsing attributes in process `syz.2.4515'. [ 1221.492882][T21728] kAFS: No cell specified [ 1221.901324][T21732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4520'. [ 1222.786199][ T26] kauditd_printk_skb: 109 callbacks suppressed [ 1222.786215][ T26] audit: type=1326 audit(3923883513.023:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.9.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 1223.361286][ T26] audit: type=1326 audit(3923883513.023:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.9.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 1223.723476][ T26] audit: type=1326 audit(3923883513.060:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.9.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 1223.746931][ T26] audit: type=1326 audit(3923883513.098:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.9.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc34e626819 code=0x7ffc0000 [ 1224.776887][T21754] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4535'. [ 1227.101681][ T26] audit: type=1326 audit(3923883516.811:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1227.167436][ T26] audit: type=1326 audit(3923883516.811:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1227.171985][ T26] audit: type=1326 audit(3923883516.811:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1227.173128][ T26] audit: type=1326 audit(3923883516.811:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1227.173157][ T26] audit: type=1326 audit(3923883516.811:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1227.173185][ T26] audit: type=1326 audit(3923883516.811:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1228.662058][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 1228.662075][ T26] audit: type=1326 audit(3923883518.008:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21777 comm="syz.4.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1228.976772][ T26] audit: type=1326 audit(3923883518.065:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21777 comm="syz.4.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1229.597871][ T26] audit: type=1326 audit(3923883518.065:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21777 comm="syz.4.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1229.624222][ T26] audit: type=1326 audit(3923883518.065:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21777 comm="syz.4.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1229.784483][ T26] audit: type=1326 audit(3923883518.065:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21777 comm="syz.4.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1229.818354][ T26] audit: type=1326 audit(3923883518.065:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21777 comm="syz.4.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1229.847039][T21795] kAFS: No cell specified [ 1230.153094][ T26] audit: type=1326 audit(3923883518.065:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21777 comm="syz.4.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1230.366012][ T26] audit: type=1326 audit(3923883518.065:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21777 comm="syz.4.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1230.531289][ T26] audit: type=1326 audit(3923883518.074:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21777 comm="syz.4.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1230.555523][ T26] audit: type=1326 audit(3923883518.074:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21777 comm="syz.4.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe749839819 code=0x7ffc0000 [ 1231.366648][T21806] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4537'. [ 1231.378790][T21806] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1231.530520][T21812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4539'. [ 1233.116197][T21825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4544'. [ 1233.324742][T13133] smc: removing ib device syz0 [ 1235.657695][T21845] loop9: detected capacity change from 0 to 32768 [ 1235.736214][T21845] /dev/loop9: Can't open blockdev [ 1237.759335][T21857] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1237.770466][T21857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1240.624986][T21880] device syzkaller0 entered promiscuous mode [ 1242.275910][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1242.492903][ T26] kauditd_printk_skb: 91 callbacks suppressed [ 1242.492992][ T26] audit: type=1326 audit(3923883531.516:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21893 comm="syz.2.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1242.979627][ T26] audit: type=1326 audit(3923883531.516:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21893 comm="syz.2.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1243.002881][ T26] audit: type=1326 audit(3923883531.525:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21893 comm="syz.2.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1243.044057][ T26] audit: type=1326 audit(3923883531.525:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21893 comm="syz.2.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1243.150307][ T26] audit: type=1326 audit(3923883531.525:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21893 comm="syz.2.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1243.351111][ T26] audit: type=1326 audit(3923883531.525:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21893 comm="syz.2.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1243.383089][ T26] audit: type=1326 audit(3923883531.525:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21893 comm="syz.2.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1245.105624][ T26] audit: type=1326 audit(3923883531.525:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21893 comm="syz.2.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1245.132277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1245.171558][ T26] audit: type=1326 audit(3923883531.525:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21893 comm="syz.2.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1245.184668][T21930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4566'. [ 1245.196727][ T26] audit: type=1326 audit(3923883531.525:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21893 comm="syz.2.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1248.148234][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.157581][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.571696][T21955] Malformed UNC in devname [ 1248.571696][T21955] [ 1248.580951][T21955] CIFS: VFS: Malformed UNC in devname [ 1248.602476][T21955] SET target dimension over the limit! [ 1249.717115][T21969] overlayfs: failed to clone upperpath [ 1250.491820][T21984] loop9: detected capacity change from 0 to 512 [ 1252.750523][T21997] loop9: detected capacity change from 0 to 32768 [ 1252.770430][T21997] /dev/loop9: Can't open blockdev [ 1254.901513][T22032] loop9: detected capacity change from 0 to 128 [ 1256.840904][T22054] netlink: 173 bytes leftover after parsing attributes in process `syz.2.4605'. [ 1257.640743][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4609'. [ 1261.741199][T22106] netlink: 173 bytes leftover after parsing attributes in process `syz.6.4619'. [ 1263.738396][T22120] 9pnet: Insufficient options for proto=fd [ 1268.935393][T22163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4637'. [ 1268.957206][T22163] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1271.060936][T22178] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4641'. [ 1272.704165][ T4228] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1276.959511][ T4228] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1277.109120][ T4228] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1277.116825][ T4228] usb 10-1: can't read configurations, error -71 [ 1279.901937][T22241] netlink: 116 bytes leftover after parsing attributes in process `syz.9.4656'. [ 1280.830886][T22249] loop9: detected capacity change from 0 to 64 [ 1282.651582][T22243] netlink: 280 bytes leftover after parsing attributes in process `syz.0.4657'. [ 1296.024658][T22335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4680'. [ 1296.034049][T22335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4680'. [ 1304.666077][T22405] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4698'. [ 1307.528386][T22420] No such timeout policy "syz1" [ 1308.240059][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 1308.240077][ T26] audit: type=1326 audit(3923883593.093:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.2.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1308.310554][ T26] audit: type=1326 audit(3923883593.093:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.2.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1308.504113][ T26] audit: type=1326 audit(3923883593.093:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.2.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1309.477620][ T26] audit: type=1326 audit(3923883593.093:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.2.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1309.592660][ T26] audit: type=1326 audit(3923883593.093:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.2.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1309.615516][ T26] audit: type=1326 audit(3923883593.093:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.2.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1309.649861][ T26] audit: type=1326 audit(3923883593.093:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.2.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1309.819766][ T26] audit: type=1326 audit(3923883593.093:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.2.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1309.868867][ T26] audit: type=1326 audit(3923883593.149:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.2.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1309.955876][ T26] audit: type=1326 audit(3923883593.149:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.2.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1313.586051][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1313.592444][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1315.995366][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 1315.995588][ T26] audit: type=1107 audit(3923883600.361:883): pid=22516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ì€áK¹S+)Õ' [ 1322.418718][T22553] block device autoloading is deprecated and will be removed. [ 1326.533796][T22594] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1328.757654][T22591] loop9: detected capacity change from 0 to 2048 [ 1332.246177][T22635] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4758'. [ 1336.483347][T22668] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4767'. [ 1337.999846][T22681] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4771'. [ 1339.763655][T22702] fuse: Unknown parameter '00000000000000000000' [ 1341.022929][T22722] loop9: detected capacity change from 0 to 256 [ 1347.366451][T22732] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4785'. [ 1352.474097][T22773] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1352.484633][T22773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1354.358555][T22799] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4800'. [ 1355.643715][T22806] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1355.668880][T22806] IPVS: ip_vs_add_dest(): server weight less than zero [ 1355.713841][T22810] tipc: Cannot configure node identity twice [ 1357.986929][T22824] loop9: detected capacity change from 0 to 32768 [ 1358.207906][T22824] /dev/loop9: Can't open blockdev [ 1358.483201][T22832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1360.844612][T22836] fuse: Unknown parameter '00000000000000000000' [ 1363.750430][T22864] loop9: detected capacity change from 0 to 1024 [ 1364.132761][T22876] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1365.812591][ T26] audit: type=1800 audit(3923883646.972:884): pid=22879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.4826" name="/" dev="sockfs" ino=91833 res=0 errno=0 [ 1368.596060][T22925] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1379.792131][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1379.798443][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1380.629162][T23032] netlink: 'syz.2.4861': attribute type 10 has an invalid length. [ 1381.045795][T23032] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4861'. [ 1381.068568][T23032] device bond0 entered promiscuous mode [ 1381.074512][T23032] bridge0: port 1(bond0) entered blocking state [ 1381.140268][T23032] bridge0: port 1(bond0) entered disabled state [ 1382.108956][T23069] ±ÿþ€: renamed from team_slave_1 [ 1384.238115][ T26] audit: type=1326 audit(3923883664.202:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23076 comm="syz.9.4871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc34e626819 code=0x0 [ 1393.859866][T23150] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4890'. [ 1394.338459][T23167] overlayfs: failed to clone upperpath [ 1397.029411][T23181] fuse: Unknown parameter '00000000000000000000' [ 1401.413916][T17662] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1402.338408][T17662] usb 10-1: Using ep0 maxpacket: 32 [ 1402.915772][T17662] usb 10-1: unable to read config index 0 descriptor/all [ 1402.953433][T17662] usb 10-1: can't read configurations, error -71 [ 1404.809293][T23267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1404.873650][T23266] overlayfs: failed to clone lowerpath [ 1406.519528][ T26] audit: type=1326 audit(3923883685.052:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23276 comm="syz.6.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1406.566868][ T26] audit: type=1326 audit(3923883685.090:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23276 comm="syz.6.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1406.622648][ T26] audit: type=1326 audit(3923883685.146:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23276 comm="syz.6.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1406.703982][ T26] audit: type=1326 audit(3923883685.174:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23276 comm="syz.6.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1407.817285][T23274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4924'. [ 1407.975366][ T26] audit: type=1326 audit(3923883685.174:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23276 comm="syz.6.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1408.655688][ T26] audit: type=1326 audit(3923883685.174:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23276 comm="syz.6.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1409.281701][ T26] audit: type=1326 audit(3923883685.174:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23276 comm="syz.6.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1409.304188][ T26] audit: type=1326 audit(3923883685.174:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23276 comm="syz.6.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1409.337794][ T26] audit: type=1326 audit(3923883685.174:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23276 comm="syz.6.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1409.746157][ T26] audit: type=1326 audit(3923883685.174:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23276 comm="syz.6.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7e74a36819 code=0x7ffc0000 [ 1409.900091][T23320] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4934'. [ 1410.746815][T23332] loop9: detected capacity change from 0 to 16 [ 1410.759231][T23332] erofs: Unknown parameter 'd' [ 1410.766342][T23219] udevd[23219]: incorrect erofs checksum on /dev/loop9 [ 1414.212326][T23367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4943'. [ 1414.247806][T23367] netlink: 'syz.0.4943': attribute type 10 has an invalid length. [ 1414.283720][T23367] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 1415.408503][T23376] loop9: detected capacity change from 0 to 4096 [ 1415.444881][T23376] /dev/loop9: Can't open blockdev [ 1418.208763][T23406] loop9: detected capacity change from 0 to 2048 [ 1423.795421][T23457] kernel profiling enabled (shift: 9) [ 1429.524672][T23515] ip6t_REJECT: ECHOREPLY is not supported [ 1433.006414][T23539] 9pnet: Insufficient options for proto=fd [ 1433.897002][T23554] loop9: detected capacity change from 0 to 32768 [ 1433.983052][T23554] /dev/loop9: Can't open blockdev [ 1438.964623][T23594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5006'. [ 1439.691825][T23566] loop9: detected capacity change from 0 to 32768 [ 1439.705339][T23566] /dev/loop9: Can't open blockdev [ 1444.160108][T23634] device batadv_slave_0 entered promiscuous mode [ 1444.348576][T23634] loop9: detected capacity change from 0 to 1024 [ 1445.424817][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1445.431147][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1446.095908][T23634] EXT4-fs (loop9): INFO: recovery required on readonly filesystem [ 1446.103794][T23634] EXT4-fs (loop9): write access unavailable, cannot proceed (try mounting with noload) [ 1446.407084][T23649] overlayfs: failed to clone upperpath [ 1446.717441][T23628] device batadv_slave_0 left promiscuous mode [ 1448.886908][T23686] 9pnet: Insufficient options for proto=fd [ 1453.586344][T23723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5035'. [ 1459.676184][T23790] loop9: detected capacity change from 0 to 256 [ 1461.201475][T23809] netlink: 173 bytes leftover after parsing attributes in process `syz.9.5058'. [ 1462.201965][T23820] netlink: 173 bytes leftover after parsing attributes in process `syz.9.5069'. [ 1462.733341][T23835] ªªªªªª: renamed from bond_slave_0 [ 1470.274612][T23890] loop9: detected capacity change from 0 to 2048 [ 1472.046297][T23910] 9pnet: Insufficient options for proto=fd [ 1472.563668][T23912] loop9: detected capacity change from 0 to 2048 [ 1489.696496][T24048] bad cache= option: noney [ 1489.696496][T24048] [ 1489.703671][T24048] CIFS: VFS: bad cache= option: noney [ 1495.399990][T24134] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5145'. [ 1500.496887][T24199] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1501.983602][T24210] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1507.873675][T24282] overlayfs: failed to clone upperpath [ 1507.987533][T24281] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5186'. [ 1508.401094][T24289] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5188'. [ 1510.529410][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1510.537875][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1519.245993][T24421] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5221'. [ 1528.406296][T24523] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5250'. [ 1528.602602][T24524] lo speed is unknown, defaulting to 1000 [ 1548.481485][T24715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5309'. [ 1549.905901][T24733] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5313'. [ 1554.703495][T24809] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5330'. [ 1560.743691][T24877] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5349'. [ 1565.791554][T24919] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5360'. [ 1569.799901][T24971] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5373'. [ 1570.623761][T24986] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5375'. [ 1575.965399][T25030] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5387'. [ 1576.684654][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.691004][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1582.412050][T25104] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5405'. [ 1589.792409][T25200] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5421'. [ 1608.807950][T25378] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5467'. [ 1612.632137][T25432] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5482'. [ 1612.849224][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 1618.291247][T25483] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5494'. [ 1625.193967][T25534] 9pnet: Insufficient options for proto=fd [ 1627.636151][T25551] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5515'. [ 1633.714574][T25616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1633.722528][T25616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1633.741014][T25616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.790313][T25617] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5528'. [ 1634.829877][T25616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1637.577856][T25647] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1642.608657][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1642.615179][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1642.765336][T25689] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5550'. [ 1642.782015][T25684] overlayfs: failed to clone upperpath [ 1650.490535][T25760] lo speed is unknown, defaulting to 1000 [ 1658.982963][T25868] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1667.918549][T25953] xt_TCPMSS: Only works on TCP SYN packets [ 1670.099661][T25972] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5615'. [ 1675.959492][T26017] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1678.936621][T26052] No such timeout policy "syz0" [ 1679.968120][T26050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5633'. [ 1685.512556][T26100] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5644'. [ 1695.464249][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 1695.464260][ T26] audit: type=1326 audit(3923883955.404:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26169 comm="syz.2.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1695.790541][ T26] audit: type=1326 audit(3923883955.404:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26169 comm="syz.2.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1695.820137][ T26] audit: type=1326 audit(3923883955.432:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26169 comm="syz.2.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1696.246342][ T26] audit: type=1326 audit(3923883955.432:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26169 comm="syz.2.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1696.299162][ T26] audit: type=1326 audit(3923883955.432:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26169 comm="syz.2.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1699.539083][ T26] audit: type=1326 audit(3923883955.432:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26169 comm="syz.2.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1699.593080][ T26] audit: type=1326 audit(3923883955.432:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26169 comm="syz.2.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1699.627285][ T26] audit: type=1326 audit(3923883955.432:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26169 comm="syz.2.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1699.942035][ T26] audit: type=1326 audit(3923883955.432:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26169 comm="syz.2.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1699.965646][ T26] audit: type=1326 audit(3923883955.432:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26169 comm="syz.2.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1701.468496][ T26] audit: type=1326 audit(3923883955.432:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26169 comm="syz.2.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff807faa819 code=0x7ffc0000 [ 1704.348772][T26241] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1707.493502][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1707.500008][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1709.078211][T26283] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1710.093113][T26303] ptrace attach of "./syz-executor exec"[12541] was attempted by "./syz-executor exec"[26303] [ 1710.723262][T26272] lo speed is unknown, defaulting to 1000 [ 1711.374307][T11840] Bluetooth: hci3: command 0x0409 tx timeout [ 1711.930627][T26272] chnl_net:caif_netlink_parms(): no params data found [ 1711.951280][T26325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1712.062360][T26272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.084064][T26272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.232274][T26272] device bridge_slave_0 entered promiscuous mode [ 1712.256904][T26272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.264195][T26272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.122269][T26272] device bridge_slave_1 entered promiscuous mode [ 1713.922992][T11845] Bluetooth: hci3: command 0x041b tx timeout [ 1714.663740][T26272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1714.957610][T26272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1714.993441][T26356] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1715.176766][T26272] team0: Port device team_slave_0 added [ 1715.201839][T26272] team0: Port device team_slave_1 added [ 1715.763370][T13133] tipc: Left network mode [ 1715.768856][T26272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1715.884762][T26272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1715.916243][T26272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1716.669586][T26362] Bluetooth: hci3: command 0x040f tx timeout [ 1717.088391][T26272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1717.095396][T26272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1718.116441][T26272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1719.091834][T26362] Bluetooth: hci3: command 0x0419 tx timeout [ 1719.439429][T26272] device hsr_slave_0 entered promiscuous mode [ 1719.584840][T26272] device hsr_slave_1 entered promiscuous mode [ 1719.908007][T26272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1720.070959][T26272] Cannot create hsr debugfs directory [ 1731.408776][T13133] device hsr_slave_0 left promiscuous mode [ 1731.458803][T13133] device hsr_slave_1 left promiscuous mode [ 1731.519942][T13133] bond2 (unregistering): Released all slaves [ 1731.592654][T26542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5737'. [ 1731.717357][T13133] bond1 (unregistering): Released all slaves [ 1733.617999][T13133] bond0 (unregistering): Released all slaves [ 1734.052636][T26272] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1734.664371][T26575] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1735.092895][T26272] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1736.481310][T26272] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1736.611868][T26272] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1738.238538][T26613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5753'. [ 1738.248330][T26613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5753'. [ 1738.313329][T26272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1738.410385][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1738.480639][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1738.504297][T26272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1738.526137][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1738.539130][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1738.559406][ T4581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.566651][ T4581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1738.608917][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1738.626129][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1738.642555][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1738.652495][ T4581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.659594][ T4581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1738.667729][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1738.678340][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1739.106680][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1739.348465][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1739.364145][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1739.495058][T16653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1739.527182][T16653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1739.637571][T16653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1739.655117][T16653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1739.698023][T16653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1739.777077][T16653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1739.801763][T26272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1742.354715][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1742.398888][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1742.622718][T26272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1742.915524][ T26] audit: type=1326 audit(3923883999.808:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 1743.052383][ T26] audit: type=1326 audit(3923883999.808:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 1743.190667][ T26] audit: type=1326 audit(3923883999.808:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f35076a1c6c code=0x7ffc0000 [ 1743.330502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1743.340116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1743.349445][ T26] audit: type=1326 audit(3923883999.808:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f35076a1cce code=0x7ffc0000 [ 1743.437590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1743.499222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1743.511554][ T26] audit: type=1326 audit(3923883999.808:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35076e54ab code=0x7ffc0000 [ 1743.576762][T26272] device veth0_vlan entered promiscuous mode [ 1743.604838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1743.789896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1743.802678][T26272] device veth1_vlan entered promiscuous mode [ 1743.812058][ T26] audit: type=1326 audit(3923883999.808:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 1743.844275][ T26] audit: type=1326 audit(3923883999.808:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 1743.862684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1743.885254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1743.919010][T26272] device veth0_macvtap entered promiscuous mode [ 1743.954511][T26272] device veth1_macvtap entered promiscuous mode [ 1744.108743][T26272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.219293][T26272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.482299][ T26] audit: type=1326 audit(3923883999.808:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 1744.511359][ T26] audit: type=1326 audit(3923883999.845:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 1744.535541][T26272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1744.590306][ T26] audit: type=1326 audit(3923883999.845:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35076e5819 code=0x7ffc0000 [ 1744.616094][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1744.656177][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1744.668891][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1744.697080][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1746.102037][T26272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1746.159591][T26272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.212878][T26272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1746.278192][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1746.302610][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1746.379706][T26272] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.420129][T26272] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.474808][T26272] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.530220][T26272] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.325905][T12536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.356934][T12536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.651499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1747.669176][T12536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.677433][T12536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1748.328190][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1748.723535][T26774] loop5: detected capacity change from 0 to 128 [ 1748.959159][T26774] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1748.980967][T26774] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1750.338390][T26798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5783'. [ 1751.442530][T26827] loop5: detected capacity change from 0 to 128 [ 1751.691120][T26827] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1751.746735][T26827] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1756.407481][T26891] ptrace attach of "./syz-executor exec"[13381] was attempted by "./syz-executor exec"[26891] [ 1756.699555][T26886] loop5: detected capacity change from 0 to 128 [ 1757.393705][T26886] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1757.405768][T26886] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1757.492028][T26908] o2cb: This node has not been configured. [ 1757.498304][T26908] o2cb: Cluster check failed. Fix errors before retrying. [ 1757.505984][T26908] (syz.4.5805,26908,0):user_dlm_register:675 ERROR: status = -22 [ 1757.514483][T26908] (syz.4.5805,26908,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 1757.528967][T26908] o2cb: This node has not been configured. [ 1757.535061][T26908] o2cb: Cluster check failed. Fix errors before retrying. [ 1757.542544][T26908] (syz.4.5805,26908,0):user_dlm_register:675 ERROR: status = -22 [ 1757.551459][T26908] (syz.4.5805,26908,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 1757.859635][T26902] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1761.018311][T26956] ptrace attach of "./syz-executor exec"[26272] was attempted by "./syz-executor exec"[26956] [ 1762.461731][T26967] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5817'. [ 1764.392602][T26992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5826'. [ 1767.048227][T27028] loop5: detected capacity change from 0 to 512 [ 1768.336566][T27038] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5835'. [ 1768.663834][T27028] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1768.675426][T27028] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1769.807869][T27063] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1769.837152][T27063] loop5: detected capacity change from 0 to 256 [ 1770.452458][T27063] exfat: Deprecated parameter 'utf8' [ 1770.647530][T27063] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1770.661787][T27063] exfat filesystem being mounted at /12/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1772.118961][T27091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5847'. [ 1772.913776][T27097] loop5: detected capacity change from 0 to 128 [ 1772.973408][T27097] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1773.050700][T27097] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1773.158705][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1773.165083][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1775.356804][T27146] loop5: detected capacity change from 0 to 128 [ 1775.581759][T27146] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1777.042291][T27173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1780.015373][T27221] Cannot find add_set index 65532 as target [ 1785.634211][T27282] loop5: detected capacity change from 0 to 128 [ 1786.846242][T11845] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1786.954023][T27299] fuse: Unknown parameter 'fuse' [ 1789.397511][T11845] usb 6-1: Using ep0 maxpacket: 16 [ 1791.021975][T11845] usb 6-1: device descriptor read/all, error -71 [ 1807.828908][T27554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1812.064224][T27586] loop5: detected capacity change from 0 to 16 [ 1813.413429][T27586] erofs: (device loop5): mounted with root inode @ nid 36. [ 1813.433137][T27584] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1813.503568][ T4195] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 1813.538183][T27584] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 1813.565057][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 1813.565070][ T26] audit: type=1800 audit(1706.571:1007): pid=27584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5961" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 1815.850586][T27622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1820.172922][T27666] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5978'. [ 1831.170982][T27810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1836.224997][T27885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1836.892290][T27884] Cannot find add_set index 65532 as target [ 1840.573659][T27926] Cannot find add_set index 65532 as target [ 1840.619601][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1840.625959][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1841.066660][T27936] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6035'. [ 1842.484531][T27954] loop5: detected capacity change from 0 to 8 [ 1842.485918][T26480] Bluetooth: hci3: command 0x0406 tx timeout [ 1842.804809][T27961] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1843.952663][T27954] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1843.966789][T27954] SQUASHFS error: Failed to read block 0x4ec: -5 [ 1843.974099][T27954] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 1843.981518][T27954] SQUASHFS error: Unable to read inode 0x2011f [ 1845.194556][T28002] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6049'. [ 1848.460818][T28039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1849.308835][T28052] loop5: detected capacity change from 0 to 128 [ 1850.290612][T28052] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1852.364104][T28093] binder: 28086:28093 ioctl 4018620d 0 returned -22 [ 1853.013508][T28098] Cannot find add_set index 65532 as target [ 1856.407208][T28143] loop5: detected capacity change from 0 to 128 [ 1858.848126][T28143] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1867.054288][T28268] Cannot find add_set index 65532 as target [ 1873.922511][T28340] loop5: detected capacity change from 0 to 16 [ 1874.516406][T28340] erofs: (device loop5): mounted with root inode @ nid 36. [ 1874.531523][T28339] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1874.549341][ T4195] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 1874.579366][T28339] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 1874.779332][ T26] audit: type=1800 audit(1763.692:1008): pid=28339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6129" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 1875.337828][T28358] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6131'. [ 1880.655436][T28422] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6148'. [ 1889.301471][T28475] loop5: detected capacity change from 0 to 2048 [ 1889.315299][T28485] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6164'. [ 1889.444008][T28475] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 1890.004639][T28505] loop5: detected capacity change from 0 to 16 [ 1890.067398][T28505] erofs: (device loop5): mounted with root inode @ nid 36. [ 1890.089865][T28505] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1890.157672][ T26] audit: type=1800 audit(1778.253:1009): pid=28505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6167" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 1890.190615][ T4195] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 1892.616346][T28551] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6180'. [ 1893.369683][T28554] loop5: detected capacity change from 0 to 512 [ 1893.689026][T28563] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6184'. [ 1894.539870][T28554] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1898.993754][T28625] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6198'. [ 1900.154721][T28635] loop5: detected capacity change from 0 to 512 [ 1900.903438][T28635] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1904.710428][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1904.739183][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1905.383875][T28693] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6211'. [ 1908.510032][T28725] loop5: detected capacity change from 0 to 16 [ 1908.727047][T28725] erofs: (device loop5): mounted with root inode @ nid 36. [ 1908.742563][T28724] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1908.754357][ T4195] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 1908.779808][T28724] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 1908.815784][T28724] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 1908.842886][T28724] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 1908.877836][ T26] audit: type=1800 audit(1795.706:1010): pid=28724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6219" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 1910.652260][T28762] loop5: detected capacity change from 0 to 512 [ 1911.172129][T28762] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1922.921747][T28901] loop5: detected capacity change from 0 to 4096 [ 1923.012639][T28901] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 1923.345163][T28901] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1923.390072][T28901] ntfs3: loop5: Failed to load $Extend. [ 1925.916861][T28935] loop5: detected capacity change from 0 to 2048 [ 1927.649293][T28935] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 1937.142802][T29048] loop5: detected capacity change from 0 to 16 [ 1937.793947][T29048] erofs: (device loop5): mounted with root inode @ nid 36. [ 1938.138724][T29057] loop5: detected capacity change from 0 to 256 [ 1938.640119][T29057] FAT-fs (loop5): Directory bread(block 64) failed [ 1938.681182][T29057] FAT-fs (loop5): Directory bread(block 65) failed [ 1938.735862][T29057] FAT-fs (loop5): Directory bread(block 66) failed [ 1938.742435][T29057] FAT-fs (loop5): Directory bread(block 67) failed [ 1938.829397][T29057] FAT-fs (loop5): Directory bread(block 68) failed [ 1938.872457][T29057] FAT-fs (loop5): Directory bread(block 69) failed [ 1938.916291][T29057] FAT-fs (loop5): Directory bread(block 70) failed [ 1939.021923][T29057] FAT-fs (loop5): Directory bread(block 71) failed [ 1939.029242][T29057] FAT-fs (loop5): Directory bread(block 72) failed [ 1939.036798][T29057] FAT-fs (loop5): Directory bread(block 73) failed [ 1944.403037][T29160] loop5: detected capacity change from 0 to 128 [ 1944.645260][T29160] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1944.778427][T29172] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6327'. [ 1951.640324][T29240] loop5: detected capacity change from 0 to 128 [ 1961.086706][T29332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6362'. [ 1961.138918][T29332] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1967.139956][T29428] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1971.525234][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1971.533985][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.513624][T29610] loop5: detected capacity change from 0 to 16 [ 1982.501521][T29610] erofs: (device loop5): mounted with root inode @ nid 36. [ 1982.518088][T29608] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1982.529678][ T4195] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 1982.556387][T29608] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 1982.584061][ T26] audit: type=1800 audit(1864.749:1011): pid=29608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6435" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 1991.033073][T29707] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6462'. [ 1992.939368][T29715] netlink: 'syz.4.6466': attribute type 21 has an invalid length. [ 1992.961417][T29715] IPv6: NLM_F_CREATE should be specified when creating new route [ 1995.902701][T29747] loop5: detected capacity change from 0 to 2048 [ 1996.756405][T29747] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 1996.788511][ T26] audit: type=1804 audit(1878.038:1012): pid=29746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.6475" name="/newroot/109/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 2004.081278][T29833] loop5: detected capacity change from 0 to 2048 [ 2004.893701][T29833] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 2004.922831][ T26] audit: type=1804 audit(1885.646:1013): pid=29832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.6501" name="/newroot/112/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 2005.022696][T29832] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 2005.042529][T29832] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 2005.054811][T29832] EXT4-fs (loop5): This should not happen!! Data will be lost [ 2005.054811][T29832] [ 2005.064515][T29832] EXT4-fs (loop5): Total free blocks count 0 [ 2005.070508][T29832] EXT4-fs (loop5): Free/Dirty block details [ 2005.076586][T29832] EXT4-fs (loop5): free_blocks=66060288 [ 2005.082188][T29832] EXT4-fs (loop5): dirty_blocks=16 [ 2005.087358][T29832] EXT4-fs (loop5): Block reservation details [ 2005.093341][T29832] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 2009.518826][T29890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6520'. [ 2009.563527][T29890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6520'. [ 2014.971590][T29963] loop5: detected capacity change from 0 to 128 [ 2015.104925][T29963] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2017.957163][T29988] loop5: detected capacity change from 0 to 512 [ 2017.976274][T29988] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2018.020708][T29988] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2018.045329][T29988] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 2018.065924][T29990] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6551'. [ 2018.066772][T29988] System zones: 1-12 [ 2018.081195][T29988] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2018.089076][T29988] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.6550: invalid indirect mapped block 2 (level 2) [ 2018.105478][T29990] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6551'. [ 2018.144216][T29988] EXT4-fs (loop5): Remounting filesystem read-only [ 2018.162216][T29988] EXT4-fs (loop5): 1 truncate cleaned up [ 2018.168421][T29988] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,usrquota,errors=remount-ro,i_version. Quota mode: writeback. [ 2018.224371][T29988] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #2: block 5: comm syz.5.6550: lblock 0 mapped to illegal pblock 5 (length 1) [ 2018.270821][T29988] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.6550: error -117 reading directory block [ 2019.494184][T30019] loop5: detected capacity change from 0 to 4096 [ 2019.531828][T30019] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 2021.920006][T30052] loop5: detected capacity change from 0 to 4096 [ 2022.469419][T30052] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 2022.483511][T30054] netlink: 'syz.6.6574': attribute type 2 has an invalid length. [ 2022.491263][T30054] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6574'. [ 2023.110697][T26272] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 2023.137199][T26272] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 2023.143764][T26272] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 2023.378723][T30084] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6581'. [ 2023.399544][T30084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6581'. [ 2029.451055][T30111] loop5: detected capacity change from 0 to 32768 [ 2035.670473][T30207] loop5: detected capacity change from 0 to 512 [ 2035.728573][T30207] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2039.024139][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2039.547595][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2041.917642][T30258] ax25_connect(): syz.5.6627 uses autobind, please contact jreuter@yaina.de [ 2046.982108][T26655] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2047.412694][T26655] usb 6-1: Using ep0 maxpacket: 8 [ 2047.786774][T26655] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2048.096757][T26655] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2048.127572][T26655] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2048.306549][T26655] usb 6-1: Product: syz [ 2048.311397][T26655] usb 6-1: Manufacturer: syz [ 2048.316010][T26655] usb 6-1: SerialNumber: syz [ 2048.769978][T26655] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 2048.828675][T26655] visor: probe of 6-1:1.0 failed with error -110 [ 2049.928621][T11840] usb 6-1: USB disconnect, device number 5 [ 2050.033828][T30321] loop5: detected capacity change from 0 to 16 [ 2050.074832][T30321] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 2051.240962][T30342] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6650'. [ 2055.092314][T30396] loop5: detected capacity change from 0 to 2048 [ 2055.235383][T30396] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2064.849622][T30497] loop5: detected capacity change from 0 to 512 [ 2064.877129][T30499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6699'. [ 2065.039673][T30497] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2066.347307][T30524] bridge0 speed is unknown, defaulting to 1000 [ 2066.353991][T30524] bridge0 speed is unknown, defaulting to 1000 [ 2066.361409][T30524] bridge0 speed is unknown, defaulting to 1000 [ 2066.376047][T30524] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2066.413527][T30524] bridge0 speed is unknown, defaulting to 1000 [ 2066.425307][T30524] bridge0 speed is unknown, defaulting to 1000 [ 2066.484822][T30524] bridge0 speed is unknown, defaulting to 1000 [ 2066.521251][T30524] bridge0 speed is unknown, defaulting to 1000 [ 2066.556537][T30524] bridge0 speed is unknown, defaulting to 1000 [ 2066.603205][T30524] bridge0 speed is unknown, defaulting to 1000 [ 2066.768812][T30534] loop5: detected capacity change from 0 to 8192 [ 2067.451030][T30549] loop5: detected capacity change from 0 to 128 [ 2067.475518][T30550] xt_CT: No such helper "pptp" [ 2067.799170][T30549] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2068.286084][T30567] loop5: detected capacity change from 0 to 128 [ 2069.293362][T30567] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2075.491977][T30657] ax25_connect(): syz.5.6749 uses autobind, please contact jreuter@yaina.de [ 2080.437772][T30701] loop5: detected capacity change from 0 to 256 [ 2080.584535][T30701] FAT-fs (loop5): Directory bread(block 64) failed [ 2080.623510][T30701] FAT-fs (loop5): Directory bread(block 65) failed [ 2080.666731][T30701] FAT-fs (loop5): Directory bread(block 66) failed [ 2080.698956][T30701] FAT-fs (loop5): Directory bread(block 67) failed [ 2080.729465][T30701] FAT-fs (loop5): Directory bread(block 68) failed [ 2080.738380][T30701] FAT-fs (loop5): Directory bread(block 69) failed [ 2080.747565][T30701] FAT-fs (loop5): Directory bread(block 70) failed [ 2080.755024][T30701] FAT-fs (loop5): Directory bread(block 71) failed [ 2080.761929][T30701] FAT-fs (loop5): Directory bread(block 72) failed [ 2080.769531][T30701] FAT-fs (loop5): Directory bread(block 73) failed [ 2081.896717][T30717] ================================================================== [ 2081.905766][T30717] BUG: KASAN: use-after-free in ax25_addr_ax25dev+0x55/0x160 [ 2081.913256][T30717] Read of size 8 at addr ffff888024938b08 by task syz.5.6767/30717 [ 2081.921162][T30717] [ 2081.923496][T30717] CPU: 1 PID: 30717 Comm: syz.5.6767 Not tainted syzkaller #0 [ 2081.931659][T30717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2081.941986][T30717] Call Trace: [ 2081.945264][T30717] [ 2081.948287][T30717] dump_stack_lvl+0x188/0x250 [ 2081.952967][T30717] ? show_regs_print_info+0x20/0x20 [ 2081.958277][T30717] ? _printk+0xda/0x130 [ 2081.963058][T30717] ? ax25_addr_ax25dev+0x55/0x160 [ 2081.968222][T30717] ? load_image+0x400/0x400 [ 2081.973120][T30717] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 2081.978601][T30717] print_address_description+0x60/0x2d0 [ 2081.984151][T30717] ? ax25_addr_ax25dev+0x55/0x160 [ 2081.989187][T30717] kasan_report+0xdf/0x130 [ 2081.993862][T30717] ? ax25_addr_ax25dev+0x55/0x160 [ 2081.999003][T30717] ax25_addr_ax25dev+0x55/0x160 [ 2082.003886][T30717] ax25_bind+0x4ea/0xb60 [ 2082.008277][T30717] __sys_bind+0x2e9/0x3e0 [ 2082.012877][T30717] ? __ia32_sys_socketpair+0xb0/0xb0 [ 2082.018539][T30717] ? vtime_user_exit+0x2c8/0x3e0 [ 2082.024661][T30717] __x64_sys_bind+0x76/0x80 [ 2082.029469][T30717] do_syscall_64+0x4c/0xa0 [ 2082.033988][T30717] ? clear_bhb_loop+0x30/0x80 [ 2082.038900][T30717] ? clear_bhb_loop+0x30/0x80 [ 2082.043620][T30717] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2082.049541][T30717] RIP: 0033:0x7fca1d229819 [ 2082.053981][T30717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2082.074229][T30717] RSP: 002b:00007fca1b441028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2082.083007][T30717] RAX: ffffffffffffffda RBX: 00007fca1d4a3180 RCX: 00007fca1d229819 [ 2082.091418][T30717] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 0000000000000009 [ 2082.099500][T30717] RBP: 00007fca1d2bfc91 R08: 0000000000000000 R09: 0000000000000000 [ 2082.107559][T30717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2082.115786][T30717] R13: 00007fca1d4a3218 R14: 00007fca1d4a3180 R15: 00007fff97535278 [ 2082.124045][T30717] [ 2082.127175][T30717] [ 2082.129697][T30717] Allocated by task 4948: [ 2082.134142][T30717] __kasan_kmalloc+0xb5/0xf0 [ 2082.138743][T30717] ax25_dev_device_up+0x50/0x580 [ 2082.143805][T30717] ax25_device_event+0x483/0x4f0 [ 2082.148739][T30717] raw_notifier_call_chain+0xcb/0x160 [ 2082.154190][T30717] __dev_notify_flags+0x194/0x300 [ 2082.159280][T30717] dev_change_flags+0xe3/0x1a0 [ 2082.164150][T30717] dev_ifsioc+0x130/0xd50 [ 2082.168902][T30717] dev_ioctl+0x545/0xe30 [ 2082.173152][T30717] sock_do_ioctl+0x245/0x320 [ 2082.178015][T30717] sock_ioctl+0x4d2/0x710 [ 2082.182352][T30717] __se_sys_ioctl+0xfa/0x170 [ 2082.187648][T30717] do_syscall_64+0x4c/0xa0 [ 2082.192086][T30717] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2082.198009][T30717] [ 2082.200473][T30717] Freed by task 30657: [ 2082.204636][T30717] kasan_set_track+0x4b/0x70 [ 2082.209749][T30717] kasan_set_free_info+0x1f/0x40 [ 2082.214883][T30717] ____kasan_slab_free+0xd5/0x110 [ 2082.220181][T30717] slab_free_freelist_hook+0xea/0x170 [ 2082.225842][T30717] kfree+0xef/0x2a0 [ 2082.229927][T30717] ax25_release+0x661/0x870 [ 2082.234542][T30717] sock_close+0xd5/0x240 [ 2082.238882][T30717] __fput+0x234/0x930 [ 2082.243465][T30717] task_work_run+0x125/0x1a0 [ 2082.248358][T30717] do_exit+0x626/0x20c0 [ 2082.252847][T30717] do_group_exit+0x12e/0x300 [ 2082.257457][T30717] get_signal+0x6ca/0x12c0 [ 2082.261958][T30717] arch_do_signal_or_restart+0xe7/0x12c0 [ 2082.267723][T30717] exit_to_user_mode_loop+0x9e/0x130 [ 2082.273086][T30717] exit_to_user_mode_prepare+0xee/0x180 [ 2082.279074][T30717] syscall_exit_to_user_mode+0x16/0x40 [ 2082.284534][T30717] do_syscall_64+0x58/0xa0 [ 2082.288941][T30717] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2082.294825][T30717] [ 2082.297137][T30717] Last potentially related work creation: [ 2082.302839][T30717] kasan_save_stack+0x35/0x60 [ 2082.307504][T30717] kasan_record_aux_stack+0xb8/0x100 [ 2082.312785][T30717] insert_work+0x54/0x3d0 [ 2082.317103][T30717] __queue_work+0x9c5/0xd50 [ 2082.321765][T30717] queue_work_on+0x124/0x1f0 [ 2082.326344][T30717] netdevice_event+0x803/0x900 [ 2082.331169][T30717] raw_notifier_call_chain+0xcb/0x160 [ 2082.336551][T30717] dev_set_mac_address+0x2e8/0x400 [ 2082.341758][T30717] dev_set_mac_address_user+0x2d/0x50 [ 2082.347138][T30717] do_setlink+0x8b0/0x3d60 [ 2082.351635][T30717] rtnl_newlink+0x1658/0x1a50 [ 2082.356314][T30717] rtnetlink_rcv_msg+0x844/0xf30 [ 2082.361261][T30717] netlink_rcv_skb+0x1f5/0x440 [ 2082.366014][T30717] netlink_unicast+0x774/0x920 [ 2082.370768][T30717] netlink_sendmsg+0x8ba/0xbe0 [ 2082.375563][T30717] __sys_sendto+0x46d/0x620 [ 2082.380060][T30717] __x64_sys_sendto+0xda/0xf0 [ 2082.384732][T30717] do_syscall_64+0x4c/0xa0 [ 2082.389140][T30717] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2082.395026][T30717] [ 2082.397338][T30717] The buggy address belongs to the object at ffff888024938b00 [ 2082.397338][T30717] which belongs to the cache kmalloc-192 of size 192 [ 2082.411499][T30717] The buggy address is located 8 bytes inside of [ 2082.411499][T30717] 192-byte region [ffff888024938b00, ffff888024938bc0) [ 2082.424718][T30717] The buggy address belongs to the page: [ 2082.430358][T30717] page:ffffea0000924e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888024938900 pfn:0x24938 [ 2082.441802][T30717] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 2082.449373][T30717] raw: 00fff00000000200 ffffea000066ec88 ffffea000093a2c8 ffff888016c41a00 [ 2082.457961][T30717] raw: ffff888024938900 000000000010000f 00000001ffffffff 0000000000000000 [ 2082.466551][T30717] page dumped because: kasan: bad access detected [ 2082.472976][T30717] page_owner tracks the page as allocated [ 2082.478683][T30717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 10705849862, free_ts 10546800733 [ 2082.494301][T30717] get_page_from_freelist+0x1bbd/0x1ca0 [ 2082.499872][T30717] __alloc_pages+0x1ee/0x480 [ 2082.504454][T30717] alloc_page_interleave+0x24/0x1e0 [ 2082.509662][T30717] new_slab+0xc0/0x4b0 [ 2082.513717][T30717] ___slab_alloc+0x80a/0xdd0 [ 2082.518295][T30717] __kmalloc+0x1cd/0x330 [ 2082.522540][T30717] usb_alloc_urb+0x3f/0x140 [ 2082.527119][T30717] usb_control_msg+0x115/0x3e0 [ 2082.531897][T30717] usb_get_string+0xa1/0x3c0 [ 2082.536481][T30717] usb_string_sub+0x76/0x420 [ 2082.541059][T30717] usb_string+0x38b/0x760 [ 2082.545379][T30717] usb_cache_string+0x7b/0xf0 [ 2082.550044][T30717] usb_new_device+0x2ef/0x1660 [ 2082.554800][T30717] register_root_hub+0x278/0x580 [ 2082.559730][T30717] usb_add_hcd+0xa88/0xef0 [ 2082.564141][T30717] vhci_hcd_probe+0x140/0x370 [ 2082.568875][T30717] page last free stack trace: [ 2082.573536][T30717] free_unref_page_prepare+0x637/0x6c0 [ 2082.578991][T30717] free_unref_page_list+0x119/0x820 [ 2082.584183][T30717] release_pages+0x186c/0x1be0 [ 2082.588997][T30717] tlb_finish_mmu+0x176/0x300 [ 2082.593704][T30717] exit_mmap+0x3d0/0x640 [ 2082.597939][T30717] __mmput+0x115/0x3b0 [ 2082.602039][T30717] free_bprm+0x141/0x300 [ 2082.606277][T30717] kernel_execve+0x380/0x900 [ 2082.610853][T30717] call_usermodehelper_exec_async+0x207/0x350 [ 2082.616914][T30717] ret_from_fork+0x1f/0x30 [ 2082.621353][T30717] [ 2082.623664][T30717] Memory state around the buggy address: [ 2082.629282][T30717] ffff888024938a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2082.637331][T30717] ffff888024938a80: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2082.645383][T30717] >ffff888024938b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2082.653427][T30717] ^ [ 2082.657747][T30717] ffff888024938b80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2082.665798][T30717] ffff888024938c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2082.673847][T30717] ================================================================== [ 2082.681889][T30717] Disabling lock debugging due to kernel taint [ 2082.688171][T30717] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2082.695361][T30717] CPU: 1 PID: 30717 Comm: syz.5.6767 Tainted: G B syzkaller #0 [ 2082.704196][T30717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2082.714241][T30717] Call Trace: [ 2082.717507][T30717] [ 2082.720431][T30717] dump_stack_lvl+0x188/0x250 [ 2082.725110][T30717] ? show_regs_print_info+0x20/0x20 [ 2082.730298][T30717] ? load_image+0x400/0x400 [ 2082.734790][T30717] panic+0x2e5/0x810 [ 2082.738743][T30717] ? asm_common_interrupt+0x22/0x40 [ 2082.743931][T30717] ? bpf_jit_dump+0xd0/0xd0 [ 2082.748425][T30717] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 2082.754312][T30717] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2082.760198][T30717] ? _raw_spin_unlock+0x40/0x40 [ 2082.765035][T30717] ? ax25_addr_ax25dev+0x55/0x160 [ 2082.770050][T30717] check_panic_on_warn+0x80/0xa0 [ 2082.774979][T30717] ? ax25_addr_ax25dev+0x55/0x160 [ 2082.779995][T30717] end_report+0x6d/0xf0 [ 2082.784142][T30717] kasan_report+0x102/0x130 [ 2082.788635][T30717] ? ax25_addr_ax25dev+0x55/0x160 [ 2082.793651][T30717] ax25_addr_ax25dev+0x55/0x160 [ 2082.798498][T30717] ax25_bind+0x4ea/0xb60 [ 2082.802733][T30717] __sys_bind+0x2e9/0x3e0 [ 2082.807055][T30717] ? __ia32_sys_socketpair+0xb0/0xb0 [ 2082.812334][T30717] ? vtime_user_exit+0x2c8/0x3e0 [ 2082.817269][T30717] __x64_sys_bind+0x76/0x80 [ 2082.821762][T30717] do_syscall_64+0x4c/0xa0 [ 2082.826168][T30717] ? clear_bhb_loop+0x30/0x80 [ 2082.830832][T30717] ? clear_bhb_loop+0x30/0x80 [ 2082.835497][T30717] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2082.841380][T30717] RIP: 0033:0x7fca1d229819 [ 2082.845785][T30717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2082.865394][T30717] RSP: 002b:00007fca1b441028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2082.873803][T30717] RAX: ffffffffffffffda RBX: 00007fca1d4a3180 RCX: 00007fca1d229819 [ 2082.881764][T30717] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 0000000000000009 [ 2082.889729][T30717] RBP: 00007fca1d2bfc91 R08: 0000000000000000 R09: 0000000000000000 [ 2082.897694][T30717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2082.905654][T30717] R13: 00007fca1d4a3218 R14: 00007fca1d4a3180 R15: 00007fff97535278 [ 2082.913622][T30717] [ 2082.916931][T30717] Kernel Offset: disabled [ 2082.921246][T30717] Rebooting in 86400 seconds..