last executing test programs: 12m54.132363555s ago: executing program 0 (id=262): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7fffffff, 0x1}}, 0x30) 12m53.937454329s ago: executing program 0 (id=263): fspick(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") r3 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000002100)=ANY=[], 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) 12m50.581527789s ago: executing program 0 (id=270): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000005d40)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="10000000000000000000c0"], 0x10}}], 0x1, 0x400c0) sendfile(r2, r1, 0x0, 0x20000023893) 12m48.951621664s ago: executing program 0 (id=274): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000050000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m46.782365569s ago: executing program 4 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x7, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x24, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x640100ff}}}}) socket$packet(0x11, 0x3, 0x300) 12m42.129858778s ago: executing program 4 (id=283): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 12m41.795855975s ago: executing program 0 (id=284): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, 0x0, 0x0, 0x400c0) sendfile(r2, r1, 0x0, 0x20000023893) 12m37.503621395s ago: executing program 4 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 12m36.3646114s ago: executing program 0 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) clock_gettime(0x0, &(0x7f00000002c0)) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r4, 0x200000000114, 0x2715, 0x0, &(0x7f00000000c0)) 12m34.717240194s ago: executing program 4 (id=292): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x18) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 12m29.401092736s ago: executing program 4 (id=295): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x1}, {0x0, 0x0, 0x1}, 0x0, 0x4}, {{@in, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="16000000000000"], 0x50) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) socket$inet(0x2, 0x3, 0x2) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0xe, 0x7130, 0x6}) 12m26.819564591s ago: executing program 4 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x7, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x24, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x640100ff}}}}) socket$packet(0x11, 0x3, 0x300) 12m19.813665939s ago: executing program 32 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) clock_gettime(0x0, &(0x7f00000002c0)) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r4, 0x200000000114, 0x2715, 0x0, &(0x7f00000000c0)) 12m10.340947459s ago: executing program 33 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x7, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x24, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x640100ff}}}}) socket$packet(0x11, 0x3, 0x300) 10m10.91047714s ago: executing program 1 (id=451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 10m7.744204477s ago: executing program 1 (id=453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008a1f, &(0x7f0000000300), 0x1, 0x4cc, &(0x7f0000000f00)="$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") r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x1004c000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @enum]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51]}}, &(0x7f0000000080)=""/159, 0x47, 0x9f, 0x1, 0x0, 0x0, @void, @value}, 0x28) 10m1.833407702s ago: executing program 1 (id=458): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x7, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x24, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x640100ff}}}}) socket$packet(0x11, 0x3, 0x300) 9m56.087550073s ago: executing program 1 (id=466): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x278, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8) getpid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0) 9m54.514231786s ago: executing program 1 (id=470): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r8}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) socket(0x10, 0x5, 0x4) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) eventfd2(0x0, 0x0) io_submit(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 9m52.159584706s ago: executing program 1 (id=472): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) io_submit(0x0, 0x0, 0x0) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) syz_io_uring_complete(0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 9m36.014412747s ago: executing program 34 (id=472): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) io_submit(0x0, 0x0, 0x0) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) syz_io_uring_complete(0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 4m27.131795176s ago: executing program 2 (id=849): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m25.696606535s ago: executing program 2 (id=851): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m24.932941205s ago: executing program 2 (id=855): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 4m24.50829793s ago: executing program 2 (id=857): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95"], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x10) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m24.181093465s ago: executing program 2 (id=863): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 4m23.898931598s ago: executing program 2 (id=865): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0xa) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 4m8.245596661s ago: executing program 35 (id=865): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0xa) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 6.172752309s ago: executing program 8 (id=1607): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0xfffffffc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0), 0x27, 0x4001c00) 4.724437348s ago: executing program 6 (id=1612): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x801}, 0x40018c7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000000000000", @ANYRES32, @ANYBLOB="4fa7567c094ac5080df08b94f0d333826b4ac4c46cf5e662572c427884228c5201777711781f0b7424332e75ad26a8277278d7eca8b1b3391594731bdeac92322437d562ab71915f9f38d8a65fd882135612c9fd6070465518ebe7845163520bd871f1465eac30ff7560a105000000000000008e", @ANYRES32], 0x20) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.493144111s ago: executing program 8 (id=1614): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000050000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.320843013s ago: executing program 6 (id=1616): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900, 0x4064}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}}, 0x0) 4.251075124s ago: executing program 8 (id=1617): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0xd82, &(0x7f0000000c80)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xd4c, 0x6, 0x0, @loopback, @local, {[@routing={0x21, 0x8, 0x0, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2c}, @loopback, @mcast2, @loopback]}, @dstopts={0x87, 0x13, '\x00', [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x8, 0x5, [0x6bf1d9dd, 0x9, 0x1cbe, 0xcd85, 0x2, 0x6]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0xdf, 0x9, [0xbd4e, 0x9, 0x0, 0x3b4ac682]}}]}, @routing={0x790c9904c12c96ed, 0x0, 0x2, 0x1}, @routing={0x21, 0xe, 0x0, 0x0, 0x0, [@private2, @dev={0xfe, 0x80, '\x00', 0x3f}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x0, 0x3, '\x00', [@pad1, @ra, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x18}}]}, @dstopts={0x2f, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x1}, @ra]}, @hopopts={0x3a, 0x16f, '\x00', [@generic={0xf, 0xb77, "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"}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) 4.100061016s ago: executing program 3 (id=1619): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000050000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.795836181s ago: executing program 8 (id=1620): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000001880)=0xd1, 0x4) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) 3.248736968s ago: executing program 6 (id=1622): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630140000000000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.03164991s ago: executing program 3 (id=1624): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95"], 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.961598701s ago: executing program 6 (id=1626): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x801}, 0x40018c7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000000000000", @ANYRES32, @ANYBLOB="4fa7567c094ac5080df08b94f0d333826b4ac4c46cf5e662572c427884228c5201777711781f0b7424332e75ad26a8277278d7eca8b1b3391594731bdeac92322437d562ab71915f9f38d8a65fd882135612c9fd6070465518ebe7845163520bd871f1465eac30ff7560a105000000000000008e", @ANYRES32], 0x20) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.855811283s ago: executing program 5 (id=1627): timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8000, &(0x7f0000000440)={[{@errors_remount}, {@grpid}, {@init_itable}, {@orlov}, {@grpid}]}, 0x0, 0x63b, &(0x7f0000001bc0)="$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") timerfd_gettime(0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rt_tgsigqueueinfo(r0, r0, 0x24, &(0x7f0000000400)={0x1e, 0xffffffff, 0x6}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x101) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000040)={0x8}) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) 2.774295834s ago: executing program 3 (id=1628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700"], 0x90}}, 0x0) 2.725241524s ago: executing program 7 (id=1629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 2.673073775s ago: executing program 6 (id=1630): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4c208f68ab3815a3a918db58d9fdb302c7ff2"], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d0000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x10) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.510047817s ago: executing program 7 (id=1631): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) fsmount(0xffffffffffffffff, 0xdfd72f8b669113ff, 0x1) open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) wait4(0x0, 0x0, 0x8, 0x0) 2.509371117s ago: executing program 3 (id=1632): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x280}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80c00) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f00000000c0)=0xfff, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a310000000005000500020000"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x1, 0x0, "c433c73e1af0a9f651091f234acb76c00f7bbeb6c6f44fec31147d465ed218f0699fc6605937709c2075032f44ea462ca4b27041f01030ae0ff13c9e4a43514e32638f9142e1dc2afc62d2760cc5da28"}, 0xd8) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) 2.378530319s ago: executing program 3 (id=1633): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4c208f68ab3815a3a918db58d9fdb302c7ff2"], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.623914269s ago: executing program 6 (id=1634): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004001000e27f10000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) bpf$ITER_CREATE(0x22, &(0x7f0000000040)={r6}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000440)={0x0, 0x57, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fbdbdf2508000000100004808d912eaaef76538ffac271578e7acb773424e34bc8b18d9a7141585af2bb59da3afa545c15581d68ab741b567a61daf48feb0333a6edd6a0230240aa3ba0a9833e1dfbe29d3ea3c46ceea305c7ce29208abe29858caf19f7ef75d89841507ced1e5848f4cf49957da10dd6c7fa99"], 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) 1.623414789s ago: executing program 8 (id=1635): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x278, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8) getpid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0) 1.620197718s ago: executing program 5 (id=1636): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000050000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.289307813s ago: executing program 3 (id=1637): syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011003d7e6a940ba152b00fb040102030109021b000205464006090401030032580a010904bb181efa093fcecb29043b44cc1a5fe970bf9beaf4ab95948ef840ad593d5fc78513d290fe0201cfdc1a90d8c4d269bc67724f92ba9de5bb435a1bf3fedd325d872412e3bfeb4967c16b334bfbf83958949feb6343c3c466c9d1e1a4b7a379cf21ff4aa2ba38d0a4"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x12080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1.130926315s ago: executing program 5 (id=1638): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4c208f68ab3815a3a"], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x10) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.129730855s ago: executing program 7 (id=1639): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95"], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 855.837099ms ago: executing program 7 (id=1640): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x801}, 0x40018c7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000000000000", @ANYRES32, @ANYBLOB="4fa7567c094ac5080df08b94f0d333826b4ac4c46cf5e662572c427884228c5201777711781f0b7424332e75ad26a8277278d7eca8b1b3391594731bdeac92322437d562ab71915f9f38d8a65fd882135612c9fd6070465518ebe7845163520bd871f1465eac30ff7560a105000000000000008e", @ANYRES32], 0x20) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 757.391509ms ago: executing program 5 (id=1641): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x280}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80c00) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f00000000c0)=0xfff, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x1, 0x0, "c433c73e1af0a9f651091f234acb76c00f7bbeb6c6f44fec31147d465ed218f0699fc6605937709c2075032f44ea462ca4b27041f01030ae0ff13c9e4a43514e32638f9142e1dc2afc62d2760cc5da28"}, 0xd8) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) 369.760165ms ago: executing program 8 (id=1642): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r8}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)='V', 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) socket(0x10, 0x5, 0x4) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) r9 = eventfd2(0x0, 0x0) read$eventfd(r9, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 298.356576ms ago: executing program 7 (id=1643): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700"], 0x90}}, 0x0) 278.807186ms ago: executing program 5 (id=1644): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="83", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x801}, 0x40018c7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000000000000", @ANYRES32, @ANYBLOB="4fa7567c094ac5080df08b94f0d333826b4ac4c46cf5e662572c427884228c5201777711781f0b7424332e75ad26a8277278d7eca8b1b3391594731bdeac92322437d562ab71915f9f38d8a65fd882135612c9fd6070465518ebe7845163520bd871f1465eac30ff7560a105000000000000008e", @ANYRES32], 0x20) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendto$unix(r0, &(0x7f0000000780)="aa9fe64976b5fbec93c4826c654f768d20efa4291209e2aa63ac41b722742ba7240a872aae6c3e1eda80307f7c5816ec721976bc06b02f5c5110a75191f29281436bd1c0927cf409e68e08a0758f3e88043d3bd2fdc521504dfbdac53da3", 0x5e, 0x40, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 413.36µs ago: executing program 5 (id=1645): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000001880)=0xd1, 0x4) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) 0s ago: executing program 7 (id=1646): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) kernel console output (not intermixed with test programs): : batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.902354][ T8560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.944746][ T4261] Bluetooth: hci0: command 0x0419 tx timeout [ 759.012565][ T8560] device hsr_slave_0 entered promiscuous mode [ 759.028290][ T8560] device hsr_slave_1 entered promiscuous mode [ 759.040671][ T8560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 759.086805][ T8560] Cannot create hsr debugfs directory [ 759.219113][ T8676] loop7: detected capacity change from 0 to 16 [ 759.226171][ T8676] /dev/loop7: Can't open blockdev [ 759.269349][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 759.923908][ T26] audit: type=1326 audit(1746023504.252:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.7.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 759.991608][ T26] audit: type=1326 audit(1746023504.252:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.7.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 760.453275][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.796'. [ 760.510143][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.7.796'. [ 760.552585][ T8690] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.561796][ T8690] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.570856][ T8690] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.579802][ T8690] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.788524][ T8699] netlink: 28 bytes leftover after parsing attributes in process `syz.6.797'. [ 761.683202][ T4539] device hsr_slave_0 left promiscuous mode [ 761.707106][ T8713] loop2: detected capacity change from 0 to 1024 [ 761.718157][ T4539] device hsr_slave_1 left promiscuous mode [ 761.736243][ T8713] EXT4-fs: Ignoring removed orlov option [ 761.742414][ T8713] /dev/loop2: Can't open blockdev [ 761.949099][ T4539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.989002][ T4539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.721864][ T4539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.759113][ T4539] device bridge_slave_1 left promiscuous mode [ 763.773947][ T4539] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.805812][ T4539] device bridge_slave_0 left promiscuous mode [ 763.812185][ T4539] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.859270][ T4539] device veth1_macvtap left promiscuous mode [ 763.882706][ T4539] device veth0_macvtap left promiscuous mode [ 763.899598][ T4539] device veth1_vlan left promiscuous mode [ 763.914932][ T4539] device veth0_vlan left promiscuous mode [ 764.526168][ T4539] team0 (unregistering): Port device team_slave_1 removed [ 764.572463][ T4539] team0 (unregistering): Port device team_slave_0 removed [ 764.623729][ T4539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.672850][ T4539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.166834][ T4539] bond0 (unregistering): Released all slaves [ 765.250127][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.801'. [ 765.258981][ T8712] netlink: 20 bytes leftover after parsing attributes in process `syz.6.801'. [ 765.271944][ T8712] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.280761][ T8712] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.289826][ T8712] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.298621][ T8712] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.309376][ T8722] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 765.319348][ T8722] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 765.653983][ T8743] loop3: detected capacity change from 0 to 512 [ 765.684833][ T8743] EXT4-fs error (device loop3): __ext4_fill_super:5390: inode #2: comm syz.3.807: iget: bad i_size value: -1 [ 765.696607][ T8743] EXT4-fs (loop3): get root inode failed [ 765.702273][ T8743] EXT4-fs (loop3): mount failed [ 769.138862][ T8770] device netdevsim0 entered promiscuous mode [ 769.163473][ T8770] device netdevsim0 left promiscuous mode [ 769.984297][ T8779] loop3: detected capacity change from 0 to 16 [ 769.991552][ T8779] /dev/loop3: Can't open blockdev [ 770.117650][ T8780] loop2: detected capacity change from 0 to 2048 [ 770.222617][ T8780] loop2: p1 < > p3 p4 < > [ 770.255165][ T8780] loop2: p3 start 4284289 is beyond EOD, truncated [ 771.174862][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 772.544409][ T8784] loop6: detected capacity change from 0 to 131072 [ 773.145187][ T26] audit: type=1326 audit(1746023517.492:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 773.637134][ T8560] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 773.755245][ T26] audit: type=1326 audit(1746023517.492:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 773.783891][ T26] audit: type=1326 audit(1746023517.492:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 773.813495][ T26] audit: type=1326 audit(1746023517.492:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 773.851451][ T8560] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 773.927376][ T8560] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 773.935866][ T8794] loop3: detected capacity change from 0 to 16 [ 773.944824][ T26] audit: type=1326 audit(1746023517.492:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 773.968245][ T8560] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 773.989920][ T8794] /dev/loop3: Can't open blockdev [ 774.010627][ T26] audit: type=1326 audit(1746023517.492:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 774.068600][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 774.160153][ T26] audit: type=1326 audit(1746023517.492:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 774.246912][ T26] audit: type=1326 audit(1746023517.492:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 774.278725][ T8560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.298656][ T8804] loop2: detected capacity change from 0 to 512 [ 774.313995][ T26] audit: type=1326 audit(1746023517.492:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 774.322707][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 774.378082][ T8804] /dev/loop2: Can't open blockdev [ 774.389362][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 774.404526][ T8560] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.417903][ T26] audit: type=1326 audit(1746023517.492:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 774.453193][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 774.488113][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 774.586559][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.593743][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.617512][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 774.631530][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 774.836671][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 774.885540][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.892657][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.366663][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 775.421918][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 775.473731][ T8560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 775.516685][ T8560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 775.590652][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 775.617347][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 775.648032][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 775.686026][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 775.711729][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 775.732730][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 775.758861][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 775.772315][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 775.790151][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 775.801245][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 776.103364][ T8835] loop2: detected capacity change from 0 to 512 [ 776.192799][ T8835] /dev/loop2: Can't open blockdev [ 776.960657][ T7145] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 777.220580][ T8849] loop7: detected capacity change from 0 to 512 [ 777.309889][ T8849] EXT4-fs error (device loop7): __ext4_fill_super:5390: inode #2: comm syz.7.828: iget: bad i_size value: -1 [ 777.321620][ T8849] EXT4-fs (loop7): get root inode failed [ 777.327363][ T8849] EXT4-fs (loop7): mount failed [ 777.970280][ T8850] loop6: detected capacity change from 0 to 1024 [ 777.979755][ T8850] EXT4-fs: Ignoring removed nobh option [ 777.996183][ T8850] EXT4-fs: Ignoring removed bh option [ 778.002458][ T8850] /dev/loop6: Can't open blockdev [ 778.167332][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 778.513909][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 778.742162][ T7145] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 778.752147][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 778.834186][ T8560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.633179][ T8872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.831'. [ 780.216161][ T8876] loop7: detected capacity change from 0 to 512 [ 780.223271][ T8876] /dev/loop7: Can't open blockdev [ 780.404344][ T8883] netlink: 16 bytes leftover after parsing attributes in process `syz.3.833'. [ 781.504566][ T8894] fuse: Bad value for 'group_id' [ 781.635008][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 781.669928][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 781.713505][ T8560] device veth0_vlan entered promiscuous mode [ 781.724465][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 781.735984][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 781.759263][ T8560] device veth1_vlan entered promiscuous mode [ 781.793969][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 781.823086][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 781.864145][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 782.534269][ T8560] device veth0_macvtap entered promiscuous mode [ 782.593558][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 782.631534][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 782.655355][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 782.664061][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 782.675763][ T8560] device veth1_macvtap entered promiscuous mode [ 782.737640][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.763437][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.794143][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.884871][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.960449][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.024928][ T4247] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 784.034944][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.045389][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.064701][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.080890][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.100102][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 784.111286][ T8919] loop2: detected capacity change from 0 to 1024 [ 784.118673][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 784.136528][ T8919] EXT4-fs: Ignoring removed orlov option [ 784.142424][ T8919] /dev/loop2: Can't open blockdev [ 784.209562][ T4247] usb 8-1: Using ep0 maxpacket: 16 [ 784.216567][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.369925][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.385562][ T4247] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 784.393765][ T4247] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.409775][ T4247] usb 8-1: config 0 has no interface number 0 [ 784.416128][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.426903][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.443341][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.465968][ T4247] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 784.476659][ T8924] loop3: detected capacity change from 0 to 512 [ 784.486122][ T4247] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.488414][ T8924] /dev/loop3: Can't open blockdev [ 784.499397][ T4247] usb 8-1: Product: syz [ 784.503579][ T4247] usb 8-1: Manufacturer: syz [ 784.514887][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.542957][ T4247] usb 8-1: SerialNumber: syz [ 784.553798][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.673500][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.808472][ T4247] usb 8-1: config 0 descriptor?? [ 784.816007][ T4247] usb 8-1: Found UVC 0.00 device syz (046d:08f3) [ 784.832694][ T4247] usb 8-1: No valid video chain found. [ 784.950179][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.002558][ T8560] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.046673][ T4259] Bluetooth: hci3: command 0x0406 tx timeout [ 785.076427][ T8560] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.091508][ T8560] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.100792][ T8560] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.127868][ T8907] KVM: debugfs: duplicate directory 8907-5 [ 785.141965][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 785.152647][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 785.164395][ T8922] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 785.194066][ T8930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.209981][ T8922] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 785.235292][ T8930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.409598][ T4440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.428688][ T4440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.477463][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 785.499817][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.528687][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.552063][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 786.429909][ T4247] usb 8-1: USB disconnect, device number 2 [ 786.685492][ T8952] fuse: Bad value for 'fd' [ 786.701160][ T8956] loop3: detected capacity change from 0 to 512 [ 786.753629][ T8956] /dev/loop3: Can't open blockdev [ 787.036157][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 787.490567][ T8968] netlink: 28 bytes leftover after parsing attributes in process `syz.7.848'. [ 788.971636][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.852'. [ 789.163208][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.855'. [ 789.173305][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.855'. [ 789.200644][ T8991] device gretap0 entered promiscuous mode [ 789.213166][ T8991] device gretap0 left promiscuous mode [ 789.250412][ T8994] device netdevsim0 entered promiscuous mode [ 789.273835][ T8994] device netdevsim0 left promiscuous mode [ 789.342038][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 789.676794][ T9012] fuse: Bad value for 'group_id' [ 789.700675][ T9015] loop7: detected capacity change from 0 to 512 [ 789.718627][ T9015] EXT4-fs error (device loop7): __ext4_fill_super:5390: inode #2: comm syz.7.861: iget: bad i_size value: -1 [ 789.730431][ T9015] EXT4-fs (loop7): get root inode failed [ 789.736343][ T9015] EXT4-fs (loop7): mount failed [ 789.817125][ T9021] netlink: 'syz.2.863': attribute type 19 has an invalid length. [ 789.837183][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 789.863885][ T9023] loop3: detected capacity change from 0 to 512 [ 789.943654][ T9023] EXT4-fs error (device loop3): __ext4_fill_super:5390: inode #2: comm syz.3.862: iget: bad i_size value: -1 [ 789.955634][ T9023] EXT4-fs (loop3): get root inode failed [ 789.961365][ T9023] EXT4-fs (loop3): mount failed [ 791.831558][ T9043] loop6: detected capacity change from 0 to 512 [ 791.897384][ T9043] /dev/loop6: Can't open blockdev [ 792.215202][ T9032] loop2: detected capacity change from 0 to 1024 [ 793.684614][ T9062] netlink: 'syz.7.870': attribute type 19 has an invalid length. [ 793.848231][ T9065] loop5: detected capacity change from 0 to 512 [ 793.946516][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.7.873'. [ 793.959624][ T9065] EXT4-fs (loop5): 1 orphan inode deleted [ 793.990025][ T4436] __quota_error: 4 callbacks suppressed [ 793.990041][ T4436] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 794.024855][ T9065] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 794.044779][ T9072] netlink: 24 bytes leftover after parsing attributes in process `syz.7.873'. [ 794.079737][ T9065] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 794.114593][ T4436] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:12: Failed to release dquot type 1 [ 794.193130][ T9080] loop3: detected capacity change from 0 to 512 [ 794.290093][ T9080] /dev/loop3: Can't open blockdev [ 794.335590][ T9084] loop7: detected capacity change from 0 to 512 [ 794.461070][ T9084] EXT4-fs error (device loop7): __ext4_fill_super:5390: inode #2: comm syz.7.877: iget: bad i_size value: -1 [ 794.473066][ T9084] EXT4-fs (loop7): get root inode failed [ 794.479632][ T9084] EXT4-fs (loop7): mount failed [ 794.566745][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 795.377413][ T8560] EXT4-fs (loop5): unmounting filesystem. [ 797.680936][ T9099] netlink: 16 bytes leftover after parsing attributes in process `syz.7.880'. [ 797.862789][ T9099] syz.7.880 uses obsolete (PF_INET,SOCK_PACKET) [ 801.796428][ T4296] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 801.981097][ T9132] loop6: detected capacity change from 0 to 512 [ 802.000268][ T9132] EXT4-fs error (device loop6): __ext4_fill_super:5390: inode #2: comm syz.6.888: iget: bad i_size value: -1 [ 802.012024][ T9132] EXT4-fs (loop6): get root inode failed [ 802.018038][ T9132] EXT4-fs (loop6): mount failed [ 802.074815][ T4296] usb 6-1: Using ep0 maxpacket: 16 [ 802.102263][ T4296] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 802.119851][ T4296] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.201284][ T4296] usb 6-1: config 0 has no interface number 0 [ 802.207691][ T4325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 802.292821][ T4296] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 802.312970][ T9140] loop7: detected capacity change from 0 to 512 [ 802.394968][ T4325] usb 4-1: Using ep0 maxpacket: 16 [ 802.427841][ T4325] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 802.576195][ T9140] /dev/loop7: Can't open blockdev [ 802.709226][ T4325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.903843][ T4296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.912035][ T4296] usb 6-1: Product: syz [ 802.916249][ T4296] usb 6-1: Manufacturer: syz [ 802.920873][ T4296] usb 6-1: SerialNumber: syz [ 802.970604][ T4296] usb 6-1: config 0 descriptor?? [ 803.029593][ T4296] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 803.064807][ T4296] usb 6-1: No valid video chain found. [ 803.175674][ T4325] usb 4-1: config 0 has no interface number 0 [ 803.196282][ T4325] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 803.214743][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.234715][ T4325] usb 4-1: Product: syz [ 803.239223][ T4325] usb 4-1: Manufacturer: syz [ 803.244145][ T4325] usb 4-1: SerialNumber: syz [ 803.775882][ T4325] usb 4-1: config 0 descriptor?? [ 804.506524][ T4325] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 804.576955][ T9150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.604766][ T4325] usb 4-1: No valid video chain found. [ 804.626298][ T9150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.627736][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.398065][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.425715][ T9163] device netdevsim0 entered promiscuous mode [ 805.446152][ T9163] device netdevsim0 left promiscuous mode [ 808.586938][ T4325] usb 6-1: USB disconnect, device number 2 [ 808.593420][ T4296] usb 4-1: USB disconnect, device number 2 [ 809.818497][ T9192] loop5: detected capacity change from 0 to 512 [ 809.841518][ T9196] loop3: detected capacity change from 0 to 16 [ 809.848617][ T9196] /dev/loop3: Can't open blockdev [ 809.888622][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 810.012191][ T9192] EXT4-fs (loop5): 1 orphan inode deleted [ 810.032910][ T9192] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 810.088472][ T9192] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.088514][ T8356] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 810.111543][ T8356] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:23: Failed to release dquot type 1 [ 810.216183][ T26] audit: type=1326 audit(1746023554.592:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 810.658954][ T26] audit: type=1326 audit(1746023554.602:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 811.474830][ T26] audit: type=1326 audit(1746023554.602:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 811.618527][ T4259] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 811.627817][ T4259] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 811.636823][ T4259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 811.645997][ T4259] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 811.653684][ T4259] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 811.662474][ T4259] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 811.754680][ T26] audit: type=1326 audit(1746023554.602:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 811.977679][ T26] audit: type=1326 audit(1746023554.602:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 812.020550][ T9205] loop6: detected capacity change from 0 to 131072 [ 812.075374][ T7145] I/O error, dev loop6, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 812.382770][ T26] audit: type=1326 audit(1746023554.602:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 812.507742][ T26] audit: type=1326 audit(1746023554.612:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 812.666698][ T26] audit: type=1326 audit(1746023554.612:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 813.644688][ T26] audit: type=1326 audit(1746023554.612:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 813.669210][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.675564][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.707397][ T9212] chnl_net:caif_netlink_parms(): no params data found [ 813.744886][ T4259] Bluetooth: hci1: command 0x0409 tx timeout [ 814.121453][ T8560] EXT4-fs (loop5): unmounting filesystem. [ 814.291598][ T9212] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.317516][ T9212] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.350863][ T9212] device bridge_slave_0 entered promiscuous mode [ 814.387619][ T9237] device netdevsim0 entered promiscuous mode [ 814.413014][ T9237] device netdevsim0 left promiscuous mode [ 814.486501][ T9212] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.507879][ T9212] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.559829][ T9212] device bridge_slave_1 entered promiscuous mode [ 814.749468][ T9212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.952872][ T1286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.991256][ T9255] loop5: detected capacity change from 0 to 512 [ 815.004806][ T1286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.039273][ T9212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.194258][ T9251] device netdevsim0 entered promiscuous mode [ 815.359165][ T9251] device netdevsim0 left promiscuous mode [ 815.761350][ T9255] EXT4-fs (loop5): 1 orphan inode deleted [ 815.774085][ T9269] loop3: detected capacity change from 0 to 512 [ 815.811546][ T9255] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 815.845475][ T9269] /dev/loop3: Can't open blockdev [ 815.851545][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 815.859086][ T1286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.870737][ T8356] __quota_error: 5 callbacks suppressed [ 815.870752][ T8356] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 815.925042][ T9255] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 815.956730][ T8356] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:23: Failed to release dquot type 1 [ 815.973939][ T1286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.182270][ T9212] team0: Port device team_slave_0 added [ 816.201471][ T9212] team0: Port device team_slave_1 added [ 816.248537][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.261943][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.325507][ T9212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.966013][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.977877][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.071563][ T8560] EXT4-fs (loop5): unmounting filesystem. [ 817.072383][ T9212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.186969][ T1286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.224770][ T1286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.372557][ T9289] loop7: detected capacity change from 0 to 1024 [ 817.427969][ T9291] loop6: detected capacity change from 0 to 512 [ 817.448525][ T9291] /dev/loop6: Can't open blockdev [ 817.471550][ T9289] EXT4-fs: Ignoring removed orlov option [ 817.647004][ T9289] /dev/loop7: Can't open blockdev [ 818.993940][ T4259] Bluetooth: hci1: command 0x040f tx timeout [ 819.026774][ T1286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.215291][ T1286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.634333][ T9212] device hsr_slave_0 entered promiscuous mode [ 819.683178][ T9212] device hsr_slave_1 entered promiscuous mode [ 819.705251][ T9212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 819.721667][ T9212] Cannot create hsr debugfs directory [ 819.794730][ T9303] netlink: 132 bytes leftover after parsing attributes in process `syz.3.923'. [ 819.837878][ T9301] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 819.847660][ T9301] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 820.406664][ T9323] loop7: detected capacity change from 0 to 16 [ 820.414060][ T9323] /dev/loop7: Can't open blockdev [ 820.574772][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 820.905094][ T26] audit: type=1326 audit(1746023565.292:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 821.026131][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 821.183857][ T9212] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 821.418221][ T26] audit: type=1326 audit(1746023565.292:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 821.457350][ T26] audit: type=1326 audit(1746023565.372:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 821.480594][ T26] audit: type=1326 audit(1746023565.372:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 821.503027][ T26] audit: type=1326 audit(1746023565.372:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 821.526666][ T26] audit: type=1326 audit(1746023565.372:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 821.605336][ T26] audit: type=1326 audit(1746023565.372:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 821.665747][ T9212] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 821.692306][ T9212] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 821.705036][ T26] audit: type=1326 audit(1746023565.372:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 821.773561][ T9212] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 821.783844][ T26] audit: type=1326 audit(1746023565.382:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 821.907661][ T26] audit: type=1326 audit(1746023565.382:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 822.183640][ T9346] loop7: detected capacity change from 0 to 512 [ 822.212209][ T9212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.233050][ T9346] /dev/loop7: Can't open blockdev [ 822.374258][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 822.398034][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 822.436278][ T9212] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.098538][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 823.130999][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 823.195915][ T4539] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.203071][ T4539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.226588][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 823.276367][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 823.302868][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 823.473156][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.480371][ T4562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.546590][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 823.562647][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 824.084532][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 824.119014][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 824.185524][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 824.194583][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 824.206654][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 824.260193][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 824.271611][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 824.280316][ T9366] netlink: 132 bytes leftover after parsing attributes in process `syz.3.933'. [ 824.313103][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 824.345676][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 824.529821][ T9212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 826.323520][ T9384] loop7: detected capacity change from 0 to 131072 [ 826.824405][ T7145] I/O error, dev loop7, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 826.858158][ T1286] device hsr_slave_0 left promiscuous mode [ 826.870791][ T1286] device hsr_slave_1 left promiscuous mode [ 826.910352][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.945639][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.970907][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.982707][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.990644][ T1286] device bridge_slave_1 left promiscuous mode [ 827.000103][ T1286] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.008514][ T1286] device bridge_slave_0 left promiscuous mode [ 827.014788][ T1286] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.043047][ T9388] loop5: detected capacity change from 0 to 16 [ 827.051540][ T9388] erofs: (device loop5): mounted with root inode @ nid 36. [ 827.203862][ T1286] device veth1_macvtap left promiscuous mode [ 827.222644][ T1286] device veth0_macvtap left promiscuous mode [ 827.229097][ T1286] device veth1_vlan left promiscuous mode [ 827.241503][ T1286] device veth0_vlan left promiscuous mode [ 828.434917][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 828.434997][ T26] audit: type=1326 audit(1746023572.792:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 828.490768][ T26] audit: type=1326 audit(1746023572.792:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 828.514144][ T26] audit: type=1326 audit(1746023572.792:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 828.541143][ T26] audit: type=1326 audit(1746023572.802:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 828.649796][ T26] audit: type=1326 audit(1746023572.802:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 828.672958][ T26] audit: type=1326 audit(1746023572.802:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 828.728947][ T26] audit: type=1326 audit(1746023572.802:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 828.770045][ T9394] loop5: detected capacity change from 0 to 512 [ 828.772817][ T26] audit: type=1326 audit(1746023572.802:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 828.822058][ T26] audit: type=1326 audit(1746023572.802:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 828.829104][ T9394] EXT4-fs (loop5): 1 orphan inode deleted [ 828.846392][ T26] audit: type=1326 audit(1746023572.802:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 828.858583][ T9394] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 828.884970][ T4562] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:15: Failed to release dquot type 1 [ 828.891484][ T9394] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 830.062521][ T1286] team0 (unregistering): Port device team_slave_1 removed [ 830.117225][ T1286] team0 (unregistering): Port device team_slave_0 removed [ 830.195261][ T1286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.259721][ T1286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.675906][ T1286] bond0 (unregistering): Released all slaves [ 830.778202][ T5843] bond0: (slave bond_slave_0): interface is now down [ 830.908132][ T5843] bond0: (slave bond_slave_1): interface is now down [ 831.005327][ T5843] bond0: (slave bond_slave_0): interface is now down [ 831.012067][ T5843] bond0: (slave bond_slave_1): interface is now down [ 831.055733][ T8560] EXT4-fs (loop5): unmounting filesystem. [ 831.091464][ T4332] bond0: (slave bond_slave_0): interface is now down [ 831.098350][ T4332] bond0: (slave bond_slave_1): interface is now down [ 831.628058][ T4332] bond0: now running without any active interface! [ 831.871171][ T9419] loop5: detected capacity change from 0 to 512 [ 831.916609][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 831.939774][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 831.970010][ T9419] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.944: casefold flag without casefold feature [ 831.971962][ T9212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.041029][ T9419] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.944: couldn't read orphan inode 15 (err -117) [ 832.119299][ T9419] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 833.689683][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 833.710184][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 833.743919][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 833.779533][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 833.809818][ T9455] loop6: detected capacity change from 0 to 512 [ 833.819715][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 833.835642][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 833.855824][ T9455] /dev/loop6: Can't open blockdev [ 833.865078][ T9212] device veth0_vlan entered promiscuous mode [ 833.891031][ T9212] device veth1_vlan entered promiscuous mode [ 834.874186][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 834.893088][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 834.940635][ T9212] device veth0_macvtap entered promiscuous mode [ 835.006574][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 835.039405][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 835.059011][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 835.182745][ T9470] loop6: detected capacity change from 0 to 512 [ 835.201593][ T9469] loop7: detected capacity change from 0 to 512 [ 835.208952][ T9469] /dev/loop7: Can't open blockdev [ 835.230729][ T9470] /dev/loop6: Can't open blockdev [ 835.238168][ T9212] device veth1_macvtap entered promiscuous mode [ 835.253888][ T8560] EXT4-fs (loop5): unmounting filesystem. [ 835.315114][ T7913] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 835.404059][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.608166][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.780029][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.880655][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 835.998597][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.246917][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.268409][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.286782][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.824469][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.873062][ T9212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.912627][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.943284][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.975599][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.986099][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.995960][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.006423][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.016266][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.027018][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.038222][ T9212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.049432][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 837.120432][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 837.129545][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 837.138925][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 837.153233][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 837.266917][ T9212] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.327310][ T9212] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.362641][ T9212] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.392543][ T9212] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.877350][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.898248][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.908526][ T9512] loop7: detected capacity change from 0 to 16 [ 837.915870][ T9512] /dev/loop7: Can't open blockdev [ 837.964311][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 838.039553][ T5450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.095937][ T5450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.120229][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 838.284819][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 838.284851][ T26] audit: type=1326 audit(1746023582.662:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 838.777914][ T26] audit: type=1326 audit(1746023582.662:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 838.882930][ T26] audit: type=1326 audit(1746023582.662:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 839.673305][ T26] audit: type=1326 audit(1746023582.662:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 839.734872][ T26] audit: type=1326 audit(1746023582.662:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 840.101930][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.966'. [ 840.395005][ T9520] loop6: detected capacity change from 0 to 131072 [ 841.027379][ T7145] I/O error, dev loop6, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 841.041876][ T26] audit: type=1326 audit(1746023582.662:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 841.064813][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.966'. [ 841.179428][ T9525] device bond0 entered promiscuous mode [ 841.207111][ T9525] device bond_slave_0 entered promiscuous mode [ 841.239450][ T26] audit: type=1326 audit(1746023582.672:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 841.273115][ T9525] device bond_slave_1 entered promiscuous mode [ 841.313163][ T9525] device bridge0 entered promiscuous mode [ 841.336644][ T26] audit: type=1326 audit(1746023582.672:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 841.361172][ T26] audit: type=1326 audit(1746023582.672:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 841.366895][ T9534] 9pnet_fd: Insufficient options for proto=fd [ 841.386082][ T9527] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 841.399325][ T9527] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 841.508141][ T9535] loop5: detected capacity change from 0 to 512 [ 841.555057][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 841.580795][ T26] audit: type=1326 audit(1746023582.672:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 841.625649][ T9538] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551609) [ 841.639491][ T9535] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.967: invalid indirect mapped block 10 (level 1) [ 841.688089][ T9538] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 841.713944][ T9543] loop3: detected capacity change from 0 to 16 [ 841.721335][ T9543] /dev/loop3: Can't open blockdev [ 841.835215][ T9535] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.967: invalid indirect mapped block 8 (level 1) [ 841.905799][ T9535] EXT4-fs (loop5): 1 truncate cleaned up [ 841.911593][ T9535] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 842.823440][ T8560] EXT4-fs (loop5): unmounting filesystem. [ 842.891752][ T9558] device netdevsim0 entered promiscuous mode [ 842.958059][ T9560] loop3: detected capacity change from 0 to 1024 [ 842.983086][ T9560] EXT4-fs: Ignoring removed orlov option [ 842.994672][ T9560] /dev/loop3: Can't open blockdev [ 843.016752][ T9558] device netdevsim0 left promiscuous mode [ 843.250370][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.5.977'. [ 843.263129][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.5.977'. [ 843.293839][ T9563] device bond0 entered promiscuous mode [ 843.574941][ T9563] device bond_slave_0 entered promiscuous mode [ 843.658972][ T9563] device bond_slave_1 entered promiscuous mode [ 844.035443][ T9563] device bridge0 entered promiscuous mode [ 844.065224][ T9563] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 844.104189][ T9563] Cannot create hsr debugfs directory [ 844.125566][ T9575] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 844.129694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 844.135250][ T9575] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 844.516130][ T9593] loop5: detected capacity change from 0 to 512 [ 844.628752][ T9593] EXT4-fs (loop5): 1 orphan inode deleted [ 844.644986][ T4447] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 844.657898][ T5450] __quota_error: 18 callbacks suppressed [ 844.657925][ T5450] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 844.684863][ T9593] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 844.725645][ T9593] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 844.744186][ T5450] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:17: Failed to release dquot type 1 [ 844.974758][ T4447] usb 7-1: Using ep0 maxpacket: 16 [ 844.981713][ T4447] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 844.994703][ T4447] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.014794][ T4447] usb 7-1: config 0 has no interface number 0 [ 845.041740][ T4447] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 845.445029][ T4447] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.457013][ T4447] usb 7-1: Product: syz [ 845.461340][ T4447] usb 7-1: Manufacturer: syz [ 845.466465][ T4447] usb 7-1: SerialNumber: syz [ 845.473799][ T4447] usb 7-1: config 0 descriptor?? [ 845.481807][ T9609] netlink: 28 bytes leftover after parsing attributes in process `syz.7.985'. [ 845.501856][ T4447] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 845.510588][ T9609] netlink: 28 bytes leftover after parsing attributes in process `syz.7.985'. [ 845.528946][ T4447] usb 7-1: No valid video chain found. [ 845.661735][ T9609] device bond0 entered promiscuous mode [ 845.682191][ T9609] device bond_slave_0 entered promiscuous mode [ 845.685698][ T8560] EXT4-fs (loop5): unmounting filesystem. [ 845.689008][ T9609] device bond_slave_1 entered promiscuous mode [ 845.743595][ T9609] device bridge0 entered promiscuous mode [ 845.780533][ T9609] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 845.816009][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.828250][ T9609] Cannot create hsr debugfs directory [ 845.835963][ T9609] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 845.859784][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.870989][ T9599] netlink: 132 bytes leftover after parsing attributes in process `syz.3.984'. [ 845.886096][ T9603] ªªªªªª: renamed from lo [ 846.005741][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 846.209045][ T9626] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 846.218755][ T9626] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 846.886736][ T9636] device netdevsim0 entered promiscuous mode [ 846.941768][ T9636] device netdevsim0 left promiscuous mode [ 847.158277][ T4447] usb 7-1: USB disconnect, device number 3 [ 847.581046][ T9642] netlink: 132 bytes leftover after parsing attributes in process `syz.5.989'. [ 848.417210][ T9668] device netdevsim0 entered promiscuous mode [ 848.430821][ T9669] loop6: detected capacity change from 0 to 1024 [ 848.450776][ T9668] device netdevsim0 left promiscuous mode [ 848.453646][ T9669] EXT4-fs: Ignoring removed orlov option [ 848.499245][ T9669] /dev/loop6: Can't open blockdev [ 848.607127][ T9673] netlink: 132 bytes leftover after parsing attributes in process `syz.7.997'. [ 849.179949][ T9674] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 849.191197][ T9674] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 849.682691][ T9688] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1001'. [ 850.780137][ T9708] loop6: detected capacity change from 0 to 1024 [ 850.818710][ T9708] EXT4-fs: Ignoring removed orlov option [ 850.853409][ T9708] /dev/loop6: Can't open blockdev [ 852.185186][ T9716] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 852.194723][ T9716] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 853.289702][ T9723] loop8: detected capacity change from 0 to 1024 [ 853.334540][ T9723] EXT4-fs: Ignoring removed orlov option [ 854.041697][ T9743] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 854.051332][ T9743] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 854.982952][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1016'. [ 855.009879][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1016'. [ 855.239019][ T9763] loop8: detected capacity change from 0 to 16 [ 855.345995][ T9763] erofs: (device loop8): mounted with root inode @ nid 36. [ 857.258916][ T26] audit: type=1326 audit(1746023601.262:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 857.514327][ T26] audit: type=1326 audit(1746023601.262:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 857.749377][ T26] audit: type=1326 audit(1746023601.262:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 857.840897][ T26] audit: type=1326 audit(1746023601.262:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 857.905151][ T26] audit: type=1326 audit(1746023601.262:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 857.936469][ T26] audit: type=1326 audit(1746023601.262:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 858.054675][ T26] audit: type=1326 audit(1746023601.262:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 858.130554][ T26] audit: type=1326 audit(1746023601.262:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 858.517679][ T26] audit: type=1326 audit(1746023601.262:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 858.601334][ T26] audit: type=1326 audit(1746023601.262:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 858.649238][ T9805] loop8: detected capacity change from 0 to 16 [ 858.656984][ T9805] erofs: (device loop8): mounted with root inode @ nid 36. [ 860.086339][ T9812] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1030'. [ 860.937444][ T9828] loop5: detected capacity change from 0 to 16 [ 860.950930][ T9828] erofs: (device loop5): mounted with root inode @ nid 36. [ 861.707405][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1035'. [ 861.756951][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1035'. [ 861.838175][ T9837] device bond0 entered promiscuous mode [ 861.884898][ T9837] device bond_slave_0 entered promiscuous mode [ 861.891491][ T9837] device bond_slave_1 entered promiscuous mode [ 861.967220][ T9837] device bridge0 entered promiscuous mode [ 861.978722][ T9837] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 862.014779][ T9837] Cannot create hsr debugfs directory [ 862.193972][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 862.734309][ T9848] loop3: detected capacity change from 0 to 512 [ 862.978401][ T9848] EXT4-fs error (device loop3): __ext4_fill_super:5390: inode #2: comm syz.3.1036: iget: bad i_size value: -1 [ 862.991121][ T9848] EXT4-fs (loop3): get root inode failed [ 862.996862][ T9848] EXT4-fs (loop3): mount failed [ 864.201486][ T9875] loop5: detected capacity change from 0 to 1024 [ 864.215690][ T9875] EXT4-fs: Ignoring removed orlov option [ 864.367922][ T9884] loop8: detected capacity change from 0 to 512 [ 864.480194][ T9884] EXT4-fs error (device loop8): __ext4_fill_super:5390: inode #2: comm syz.8.1045: iget: bad i_size value: -1 [ 864.493102][ T9884] EXT4-fs (loop8): get root inode failed [ 864.499486][ T9884] EXT4-fs (loop8): mount failed [ 865.566344][ T9897] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 865.575904][ T9897] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 866.130452][ T9911] loop5: detected capacity change from 0 to 512 [ 866.239379][ T4247] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 866.559659][ T4247] usb 7-1: unable to get BOS descriptor or descriptor too short [ 866.765736][ T4247] usb 7-1: config 5 has an invalid interface number: 187 but max is 1 [ 866.774335][ T4247] usb 7-1: config 5 has no interface number 0 [ 866.783515][ T4247] usb 7-1: config 5 interface 187 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 866.786409][ T9911] EXT4-fs error (device loop5): __ext4_fill_super:5390: inode #2: comm syz.5.1050: iget: bad i_size value: -1 [ 866.814256][ T9911] EXT4-fs (loop5): get root inode failed [ 866.819955][ T9911] EXT4-fs (loop5): mount failed [ 866.842089][ T4247] usb 7-1: config 5 interface 1 has no altsetting 0 [ 866.871446][ T4247] usb 7-1: config 5 interface 187 has no altsetting 0 [ 866.916095][ T4247] usb 7-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice= 4.fb [ 867.091809][ T4247] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.114672][ T4247] usb 7-1: Product: syz [ 867.118880][ T4247] usb 7-1: Manufacturer: syz [ 867.123484][ T4247] usb 7-1: SerialNumber: syz [ 867.704135][ T4247] ftdi_sio 7-1:5.1: FTDI USB Serial Device converter detected [ 867.771702][ T4247] ftdi_sio ttyUSB0: unknown device type: 0x4fb [ 867.834346][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 867.877073][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 867.912854][ T4247] usb 7-1: USB disconnect, device number 4 [ 867.935291][ T4247] ftdi_sio 7-1:5.1: device disconnected [ 867.942894][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 868.003877][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 868.030844][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 868.061689][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 868.098387][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 868.120859][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1057'. [ 868.160020][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1057'. [ 869.056311][ T9943] loop8: detected capacity change from 0 to 512 [ 869.086797][ T9943] EXT4-fs error (device loop8): __ext4_fill_super:5390: inode #2: comm syz.8.1059: iget: bad i_size value: -1 [ 869.113890][ T9943] EXT4-fs (loop8): get root inode failed [ 869.120157][ T9943] EXT4-fs (loop8): mount failed [ 870.385026][ T9958] loop6: detected capacity change from 0 to 1024 [ 870.392267][ T9958] EXT4-fs: Ignoring removed nobh option [ 870.397884][ T9958] EXT4-fs: Ignoring removed bh option [ 870.403347][ T9958] /dev/loop6: Can't open blockdev [ 870.505014][ T4247] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 870.925024][ T4247] usb 6-1: Using ep0 maxpacket: 16 [ 870.933043][ T4247] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 871.181729][ T4247] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.198335][ T4247] usb 6-1: config 0 has no interface number 0 [ 872.097117][ T4247] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 872.166070][ T4247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.191258][ T4247] usb 6-1: Product: syz [ 872.201821][ T4247] usb 6-1: Manufacturer: syz [ 872.218729][ T4247] usb 6-1: SerialNumber: syz [ 872.248246][ T4247] usb 6-1: config 0 descriptor?? [ 872.302761][ T4247] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 872.354900][ T4247] usb 6-1: No valid video chain found. [ 872.472032][ T4247] usb 6-1: USB disconnect, device number 3 [ 874.068251][ T9993] loop8: detected capacity change from 0 to 512 [ 874.215836][ T9993] EXT4-fs (loop8): 1 orphan inode deleted [ 874.232606][ T9993] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 874.266064][ T9993] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 874.394967][ T7820] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 874.403628][T10002] loop6: detected capacity change from 0 to 1024 [ 874.499204][T10002] EXT4-fs: Ignoring removed orlov option [ 874.537923][T10002] /dev/loop6: Can't open blockdev [ 874.666265][ T7820] usb 4-1: Using ep0 maxpacket: 16 [ 874.716198][ T7820] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 874.771543][ T7820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.831111][ T7820] usb 4-1: config 0 has no interface number 0 [ 874.883176][ T7820] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 874.939354][ T7820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.950107][ T7820] usb 4-1: Product: syz [ 874.954471][ T7820] usb 4-1: Manufacturer: syz [ 874.978851][ T7820] usb 4-1: SerialNumber: syz [ 874.984766][ T4539] __quota_error: 32 callbacks suppressed [ 874.984778][ T4539] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 875.019609][ T7820] usb 4-1: config 0 descriptor?? [ 875.043467][ T7820] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 875.055305][ T4539] EXT4-fs error (device loop8): ext4_release_dquot:6838: comm kworker/u4:14: Failed to release dquot type 1 [ 875.109856][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.125764][ T7820] usb 4-1: No valid video chain found. [ 875.145400][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.340570][ T9988] KVM: debugfs: duplicate directory 9988-5 [ 875.417993][T10013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.444412][T10013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.735151][T10008] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 876.078415][T10008] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 876.126746][T10020] loop5: detected capacity change from 0 to 512 [ 876.818377][T10020] EXT4-fs (loop5): 1 orphan inode deleted [ 876.824167][T10020] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 876.867241][T10020] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.893818][ T5843] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 876.940442][ T5843] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:19: Failed to release dquot type 1 [ 877.195327][ T4259] Bluetooth: hci0: command 0x0406 tx timeout [ 877.653834][T10031] loop6: detected capacity change from 0 to 1024 [ 877.664570][T10031] EXT4-fs: Ignoring removed nobh option [ 877.670351][T10031] EXT4-fs: Ignoring removed bh option [ 877.676397][T10031] /dev/loop6: Can't open blockdev [ 877.875142][ T41] usb 4-1: USB disconnect, device number 3 [ 879.931813][T10035] loop7: detected capacity change from 0 to 131072 [ 880.437693][ T8560] EXT4-fs (loop5): unmounting filesystem. [ 881.654853][ T9212] EXT4-fs (loop8): unmounting filesystem. [ 883.596785][T10077] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1092'. [ 883.787093][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1091'. [ 885.838128][T10109] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1097'. [ 885.910354][T10109] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1097'. [ 886.852193][T10122] loop3: detected capacity change from 0 to 1024 [ 886.915459][T10122] EXT4-fs: Ignoring removed orlov option [ 886.921208][T10122] /dev/loop3: Can't open blockdev [ 887.006214][T10131] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1104'. [ 887.092928][T10134] device netdevsim0 entered promiscuous mode [ 887.136730][T10134] device netdevsim0 left promiscuous mode [ 887.162366][T10135] loop5: detected capacity change from 0 to 512 [ 887.199928][T10139] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1107'. [ 887.455835][T10135] EXT4-fs (loop5): 1 orphan inode deleted [ 887.462817][T10135] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 887.472420][T10135] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 888.114805][ T4562] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 888.138958][ T4562] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:15: Failed to release dquot type 1 [ 888.420000][T10162] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 888.429863][T10162] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 889.520254][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1110'. [ 889.647173][ T8560] EXT4-fs (loop5): unmounting filesystem. [ 889.764865][ T14] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 889.864528][T10177] netlink: 'syz.7.1113': attribute type 10 has an invalid length. [ 889.939428][T10177] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.987456][T10177] device team0 entered promiscuous mode [ 890.016973][ T1286] bond0: (slave team0): interface is now down [ 890.029182][T10177] device team_slave_0 entered promiscuous mode [ 890.040599][ T14] usb 7-1: unable to get BOS descriptor or descriptor too short [ 890.055030][ T6346] bond0: (slave team0): interface is now down [ 890.065216][ T14] usb 7-1: config 5 has an invalid interface number: 187 but max is 1 [ 890.092320][T10177] device team_slave_1 entered promiscuous mode [ 890.099278][ T6346] bond0: (slave team0): interface is now down [ 890.114447][ T14] usb 7-1: config 5 has no interface number 0 [ 890.130041][T10177] bond0: (slave team0): Enslaving as an active interface with an up link [ 890.140223][ T6346] bond0: (slave team0): interface is now down [ 890.163323][ T14] usb 7-1: config 5 interface 187 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 890.175208][T10183] netlink: 'syz.3.1112': attribute type 10 has an invalid length. [ 890.182006][ T4426] bond0: (slave team0): interface is now down [ 890.526686][ T5843] bond0: (slave team0): interface is now down [ 890.667648][ T4422] bond0: (slave team0): interface is now down [ 890.758400][T10183] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.799946][ T14] usb 7-1: config 5 interface 1 has no altsetting 0 [ 890.806492][ T5843] bond0: (slave team0): interface is now down [ 890.819252][ T14] usb 7-1: config 5 interface 187 has no altsetting 0 [ 890.908885][ T5843] bond0: (slave team0): interface is now down [ 890.936562][ T14] usb 7-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice= 4.fb [ 890.947563][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.957568][T10183] device team0 entered promiscuous mode [ 890.963315][T10183] device team_slave_0 entered promiscuous mode [ 890.974939][ T14] usb 7-1: Product: syz [ 890.979125][ T14] usb 7-1: Manufacturer: syz [ 890.994833][ T4426] bond0: (slave team0): interface is now down [ 891.011123][ T14] usb 7-1: SerialNumber: syz [ 891.019799][ T4426] bond0: (slave team0): interface is now down [ 891.066761][T10183] device team_slave_1 entered promiscuous mode [ 891.084836][T10183] bond0: (slave team0): Enslaving as an active interface with an up link [ 891.095230][ T4426] bond0: (slave team0): interface is now down [ 891.130238][ T4426] bond0: (slave team0): interface is now down [ 891.155051][ T4426] bond0: now running without any active interface! [ 891.269853][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1116'. [ 891.369125][T10199] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1115'. [ 892.021916][ T14] ftdi_sio 7-1:5.1: FTDI USB Serial Device converter detected [ 892.034957][ T14] ftdi_sio ttyUSB0: unknown device type: 0x4fb [ 892.196099][ T14] usb 7-1: USB disconnect, device number 5 [ 892.202716][ T14] ftdi_sio 7-1:5.1: device disconnected [ 894.318193][T10224] loop5: detected capacity change from 0 to 1024 [ 894.329142][T10224] EXT4-fs: Ignoring removed nobh option [ 894.334923][T10224] EXT4-fs: Ignoring removed bh option [ 894.356645][T10224] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 894.631618][T10224] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 894.787915][T10224] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3841: comm syz.5.1118: Allocating blocks 497-513 which overlap fs metadata [ 894.817944][T10224] EXT4-fs (loop5): pa ffff8880563372a0: logic 256, phys. 385, len 8 [ 894.826098][T10224] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 896.811721][T10232] loop8: detected capacity change from 0 to 131072 [ 896.821218][T10241] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1123'. [ 896.831430][T10240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'. [ 896.917553][T10232] F2FS-fs (loop8): QUOTA feature is enabled, so ignore qf_name [ 896.952583][T10232] F2FS-fs (loop8): invalid crc value [ 897.551963][T10232] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 897.599210][T10232] F2FS-fs (loop8): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [1027, 3] run fsck to fix. [ 897.611900][T10232] F2FS-fs (loop8): Failed to read root inode [ 898.436183][ T8560] EXT4-fs (loop5): unmounting filesystem. [ 898.880150][T10269] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1125'. [ 899.506280][T10273] device netdevsim0 entered promiscuous mode [ 899.531292][T10272] loop6: detected capacity change from 0 to 1024 [ 899.592563][T10272] EXT4-fs: Ignoring removed orlov option [ 899.620761][T10272] /dev/loop6: Can't open blockdev [ 899.817623][T10273] device netdevsim0 left promiscuous mode [ 902.359082][T10280] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 902.368793][T10280] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 902.621625][T10298] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1134'. [ 902.636179][T10296] loop7: detected capacity change from 0 to 1024 [ 902.668892][T10296] EXT4-fs: Ignoring removed orlov option [ 902.694778][T10296] /dev/loop7: Can't open blockdev [ 902.890983][ T4293] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 904.147117][T10311] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 904.157206][T10311] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 904.204984][ T4293] usb 9-1: unable to get BOS descriptor or descriptor too short [ 904.281582][ T4293] usb 9-1: config 5 has an invalid interface number: 187 but max is 1 [ 904.326324][ T4293] usb 9-1: config 5 has no interface number 0 [ 904.360826][ T4293] usb 9-1: config 5 interface 187 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 904.503603][T10322] loop7: detected capacity change from 0 to 512 [ 904.519887][ T4293] usb 9-1: config 5 interface 1 has no altsetting 0 [ 905.066101][T10322] EXT4-fs error (device loop7): __ext4_fill_super:5390: inode #2: comm syz.7.1140: iget: bad i_size value: -1 [ 905.078263][T10322] EXT4-fs (loop7): get root inode failed [ 905.083903][T10322] EXT4-fs (loop7): mount failed [ 905.270474][ T4293] usb 9-1: config 5 interface 187 has no altsetting 0 [ 905.507294][ T4293] usb 9-1: string descriptor 0 read error: -71 [ 905.513603][ T4293] usb 9-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice= 4.fb [ 905.713292][ T4293] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.194364][ T4293] usb 9-1: can't set config #5, error -71 [ 907.260496][ T4293] usb 9-1: USB disconnect, device number 2 [ 909.313446][T10363] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1142'. [ 909.358768][T10361] loop6: detected capacity change from 0 to 1024 [ 909.370200][T10361] EXT4-fs: Ignoring removed nobh option [ 909.375982][T10361] EXT4-fs: Ignoring removed bh option [ 909.382047][T10361] /dev/loop6: Can't open blockdev [ 910.132433][T10374] loop6: detected capacity change from 0 to 16 [ 910.139969][T10374] /dev/loop6: Can't open blockdev [ 910.187202][ T7145] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 910.430120][T10378] device netdevsim0 entered promiscuous mode [ 910.454821][T10378] device netdevsim0 left promiscuous mode [ 910.837897][ T26] audit: type=1326 audit(1746023655.242:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 910.922579][ T26] audit: type=1326 audit(1746023655.242:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 911.023174][ T26] audit: type=1326 audit(1746023655.262:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 911.131414][ T26] audit: type=1326 audit(1746023655.262:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 911.242694][ T26] audit: type=1326 audit(1746023655.262:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 911.298756][ T26] audit: type=1326 audit(1746023655.262:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 911.437392][ T26] audit: type=1326 audit(1746023655.262:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 911.574067][T10401] netlink: 'syz.5.1157': attribute type 10 has an invalid length. [ 911.614389][ T26] audit: type=1326 audit(1746023655.262:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 911.654500][T10396] loop8: detected capacity change from 0 to 16 [ 911.684131][T10401] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.692433][T10401] device team0 entered promiscuous mode [ 911.703931][T10401] device team_slave_0 entered promiscuous mode [ 911.710813][T10401] device team_slave_1 entered promiscuous mode [ 911.718241][T10396] erofs: (device loop8): mounted with root inode @ nid 36. [ 911.831581][T10401] bond0: (slave team0): Enslaving as an active interface with an up link [ 912.043224][ T26] audit: type=1326 audit(1746023655.262:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 912.318963][ T26] audit: type=1326 audit(1746023655.262:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 912.593103][T10413] netlink: 'syz.7.1159': attribute type 10 has an invalid length. [ 912.828650][T10421] loop3: detected capacity change from 0 to 1024 [ 912.836220][T10421] EXT4-fs: Ignoring removed nobh option [ 912.841804][T10421] EXT4-fs: Ignoring removed bh option [ 912.847419][T10421] /dev/loop3: Can't open blockdev [ 913.491230][T10430] netlink: 'syz.6.1164': attribute type 10 has an invalid length. [ 913.710951][T10430] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.376117][T10430] bond0: (slave team0): Enslaving as an active interface with an up link [ 914.468028][ T8281] bond0: (slave team0): link status definitely up, 20000 Mbps full duplex [ 914.555577][T10451] device netdevsim0 entered promiscuous mode [ 914.602928][T10451] device netdevsim0 left promiscuous mode [ 916.841680][T10475] device netdevsim0 entered promiscuous mode [ 916.907845][T10475] device netdevsim0 left promiscuous mode [ 917.005558][T10480] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1174'. [ 917.496588][T10491] loop7: detected capacity change from 0 to 1024 [ 917.503838][T10491] EXT4-fs: Ignoring removed nobh option [ 917.511440][T10491] EXT4-fs: Ignoring removed bh option [ 917.517034][T10491] /dev/loop7: Can't open blockdev [ 917.542816][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 918.902335][T10503] loop6: detected capacity change from 0 to 131072 [ 920.540549][T10526] device netdevsim0 entered promiscuous mode [ 920.607733][T10526] device netdevsim0 left promiscuous mode [ 920.810888][T10533] netlink: 'syz.3.1188': attribute type 29 has an invalid length. [ 920.856728][T10533] netlink: 'syz.3.1188': attribute type 29 has an invalid length. [ 921.275659][T10544] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1192'. [ 921.328367][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1192'. [ 921.449156][T10554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1193'. [ 925.186694][T10602] loop3: detected capacity change from 0 to 512 [ 925.207079][T10602] EXT4-fs error (device loop3): __ext4_fill_super:5390: inode #2: comm syz.3.1203: iget: bad i_size value: -1 [ 925.218888][T10602] EXT4-fs (loop3): get root inode failed [ 925.224537][T10602] EXT4-fs (loop3): mount failed [ 925.300430][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 925.359830][T10607] device netdevsim0 entered promiscuous mode [ 925.425773][T10607] device netdevsim0 left promiscuous mode [ 927.834322][T10623] loop6: detected capacity change from 0 to 512 [ 927.866772][T10623] EXT4-fs error (device loop6): __ext4_fill_super:5390: inode #2: comm syz.6.1209: iget: bad i_size value: -1 [ 927.878916][T10623] EXT4-fs (loop6): get root inode failed [ 927.884731][T10623] EXT4-fs (loop6): mount failed [ 928.069708][ T7145] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 928.692016][T10633] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1210'. [ 929.834313][T10651] loop6: detected capacity change from 0 to 512 [ 929.895618][T10651] EXT4-fs error (device loop6): __ext4_fill_super:5390: inode #2: comm syz.6.1214: iget: bad i_size value: -1 [ 929.907616][T10651] EXT4-fs (loop6): get root inode failed [ 929.913263][T10651] EXT4-fs (loop6): mount failed [ 931.669095][T10671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1217'. [ 933.506013][T10699] device netdevsim0 entered promiscuous mode [ 933.685466][T10704] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1222'. [ 935.297650][T10699] device netdevsim0 left promiscuous mode [ 935.596850][T10716] netlink: 'syz.7.1228': attribute type 10 has an invalid length. [ 935.641819][T10718] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1227'. [ 936.725346][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.731729][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.809313][T10735] device netdevsim0 entered promiscuous mode [ 937.034088][T10732] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1231'. [ 938.595384][T10779] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1243'. [ 938.625050][ T4259] Bluetooth: hci1: command 0x0406 tx timeout [ 939.356849][T10800] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1250'. [ 939.559238][T10813] loop3: detected capacity change from 0 to 512 [ 939.602041][T10813] EXT4-fs error (device loop3): __ext4_fill_super:5390: inode #2: comm syz.3.1256: iget: bad i_size value: -1 [ 939.614705][T10813] EXT4-fs (loop3): get root inode failed [ 939.620362][T10813] EXT4-fs (loop3): mount failed [ 939.701240][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 940.881935][T10831] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 940.897877][T10831] bond1: (slave vti0): Error -95 calling set_mac_address [ 941.434089][T10850] loop8: detected capacity change from 0 to 16 [ 941.455091][T10850] erofs: (device loop8): mounted with root inode @ nid 36. [ 941.552544][T10846] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1264'. [ 942.089457][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 942.089474][ T26] audit: type=1326 audit(1746023686.442:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.8.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 942.164445][ T26] audit: type=1326 audit(1746023686.442:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.8.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 942.598859][T10868] loop5: detected capacity change from 0 to 1024 [ 942.700593][T10868] EXT4-fs: Ignoring removed orlov option [ 942.734247][T10872] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1269'. [ 943.845928][T10883] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 943.855671][T10883] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 946.274762][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1279'. [ 947.174484][T10914] loop8: detected capacity change from 0 to 16 [ 947.255146][T10914] erofs: (device loop8): mounted with root inode @ nid 36. [ 947.326051][T10906] loop6: detected capacity change from 0 to 131072 [ 947.666035][ T26] audit: type=1326 audit(1746023692.002:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 949.061699][ T26] audit: type=1326 audit(1746023692.002:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 949.085989][ T26] audit: type=1326 audit(1746023692.002:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 949.118948][ T26] audit: type=1326 audit(1746023692.002:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 949.143491][ T26] audit: type=1326 audit(1746023692.002:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 949.294718][ T26] audit: type=1326 audit(1746023692.002:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 949.361878][ T26] audit: type=1326 audit(1746023692.002:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 949.386734][T10919] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1282'. [ 949.414988][ T26] audit: type=1326 audit(1746023692.002:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 949.519609][ T26] audit: type=1326 audit(1746023692.002:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 949.659645][ T26] audit: type=1326 audit(1746023692.002:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 950.168582][T10944] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1285'. [ 950.218877][T10950] loop7: detected capacity change from 0 to 1024 [ 950.267987][T10950] EXT4-fs: Ignoring removed orlov option [ 950.336881][T10950] /dev/loop7: Can't open blockdev [ 950.554447][T10960] loop6: detected capacity change from 0 to 16 [ 950.595608][T10960] /dev/loop6: Can't open blockdev [ 950.697576][ T7913] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 951.086607][T10963] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 951.096174][T10963] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 951.233683][T10968] loop8: detected capacity change from 0 to 1024 [ 951.343674][T10964] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1292'. [ 951.371976][T10968] EXT4-fs: Ignoring removed orlov option [ 952.808577][T10982] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 952.818232][T10982] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 953.076728][T10986] loop3: detected capacity change from 0 to 1024 [ 953.083830][T10986] EXT4-fs: Ignoring removed orlov option [ 953.138555][T10986] /dev/loop3: Can't open blockdev [ 953.170706][T10992] loop6: detected capacity change from 0 to 512 [ 953.285658][T10992] /dev/loop6: Can't open blockdev [ 953.580176][T10999] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 953.596361][T10999] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 954.151945][T10996] loop7: detected capacity change from 0 to 1024 [ 954.160759][ T7145] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 954.350120][T10996] EXT4-fs: Ignoring removed orlov option [ 954.370283][T10996] /dev/loop7: Can't open blockdev [ 955.052515][T10996] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 955.062111][T10996] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 955.482965][T11018] KVM: debugfs: duplicate directory 11018-4 [ 958.591905][T11038] loop7: detected capacity change from 0 to 131072 [ 960.417419][T11053] loop3: detected capacity change from 0 to 131072 [ 960.430486][T11052] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1314'. [ 962.153460][T11080] loop7: detected capacity change from 0 to 1024 [ 962.160885][T11080] EXT4-fs: Ignoring removed nobh option [ 962.166547][T11080] EXT4-fs: Ignoring removed bh option [ 962.172026][T11080] /dev/loop7: Can't open blockdev [ 962.270020][T11081] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1318'. [ 964.024844][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 964.551808][T11109] loop7: detected capacity change from 0 to 16 [ 964.559658][T11109] /dev/loop7: Can't open blockdev [ 965.190834][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 965.190850][ T26] audit: type=1326 audit(1746023709.582:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 965.299216][ T26] audit: type=1326 audit(1746023709.582:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 965.431487][ T26] audit: type=1326 audit(1746023709.582:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 965.473474][ T26] audit: type=1326 audit(1746023709.592:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 965.515824][ T26] audit: type=1326 audit(1746023709.592:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 965.611822][ T26] audit: type=1326 audit(1746023709.592:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 965.714615][ T26] audit: type=1326 audit(1746023709.592:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 966.217679][T11124] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1328'. [ 966.238236][ T26] audit: type=1326 audit(1746023709.592:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 966.262296][ T26] audit: type=1326 audit(1746023709.592:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 966.291753][ T26] audit: type=1326 audit(1746023709.592:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000 [ 966.343284][T11133] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1330'. [ 966.572682][T11132] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1332'. [ 966.671187][T11144] loop3: detected capacity change from 0 to 512 [ 966.716375][T11144] /dev/loop3: Can't open blockdev [ 966.762234][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 967.942131][T11157] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1337'. [ 968.131725][T11174] loop5: detected capacity change from 0 to 1024 [ 968.180457][T11178] loop6: detected capacity change from 0 to 1024 [ 968.226272][T11174] EXT4-fs: Ignoring removed orlov option [ 968.233689][T11178] EXT4-fs: Ignoring removed orlov option [ 968.266037][T11178] /dev/loop6: Can't open blockdev [ 968.325804][T11180] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1341'. [ 969.418387][T11189] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 969.428281][T11189] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 969.711776][T11195] loop6: detected capacity change from 0 to 16 [ 969.719213][T11195] /dev/loop6: Can't open blockdev [ 969.764174][ T7145] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 971.648324][T11205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 971.657895][T11205] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 971.670842][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 971.670857][ T26] audit: type=1326 audit(1746023716.072:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 971.690759][T11202] loop3: detected capacity change from 0 to 512 [ 971.725728][T11202] /dev/loop3: Can't open blockdev [ 972.030989][T11210] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1348'. [ 972.061302][ T26] audit: type=1326 audit(1746023716.072:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 972.577178][ T26] audit: type=1326 audit(1746023716.072:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 972.701877][ T26] audit: type=1326 audit(1746023716.072:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 972.784459][ T26] audit: type=1326 audit(1746023716.072:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 972.881533][ T26] audit: type=1326 audit(1746023716.072:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 972.984967][ T26] audit: type=1326 audit(1746023716.072:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 973.063490][ T26] audit: type=1326 audit(1746023716.072:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 973.129344][ T26] audit: type=1326 audit(1746023716.072:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 973.273477][ T26] audit: type=1326 audit(1746023716.072:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000 [ 973.345124][T11236] loop7: detected capacity change from 0 to 512 [ 973.379029][T11236] /dev/loop7: Can't open blockdev [ 973.403221][T11238] loop8: detected capacity change from 0 to 1024 [ 973.445331][T11238] EXT4-fs: Ignoring removed orlov option [ 974.278105][T11254] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1360'. [ 974.665308][T11249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1359'. [ 975.243154][T11259] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 975.252904][T11259] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 975.558693][T11267] loop6: detected capacity change from 0 to 512 [ 975.565956][T11267] /dev/loop6: Can't open blockdev [ 975.587617][T11271] loop8: detected capacity change from 0 to 1024 [ 975.607890][T11271] EXT4-fs: Ignoring removed orlov option [ 975.657815][ T7145] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 977.053148][T11283] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 977.062763][T11283] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 979.305330][T11314] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1370'. [ 980.286939][T11333] loop3: detected capacity change from 0 to 512 [ 980.299307][T11333] /dev/loop3: Can't open blockdev [ 980.808161][T11335] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1372'. [ 981.801832][T11354] loop8: detected capacity change from 0 to 512 [ 982.506510][T11354] EXT4-fs (loop8): 1 orphan inode deleted [ 982.516186][T11354] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 982.582385][T11354] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.610656][ T5828] __quota_error: 4 callbacks suppressed [ 982.610671][ T5828] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 982.634470][ T5828] EXT4-fs error (device loop8): ext4_release_dquot:6838: comm kworker/u4:18: Failed to release dquot type 1 [ 982.733975][T11365] loop3: detected capacity change from 0 to 512 [ 982.762780][T11365] EXT4-fs error (device loop3): __ext4_fill_super:5390: inode #2: comm syz.3.1386: iget: bad i_size value: -1 [ 982.774674][T11365] EXT4-fs (loop3): get root inode failed [ 982.780326][T11365] EXT4-fs (loop3): mount failed [ 984.709780][ T9212] EXT4-fs (loop8): unmounting filesystem. [ 984.762573][T11387] loop3: detected capacity change from 0 to 512 [ 984.790088][T11387] /dev/loop3: Can't open blockdev [ 985.079854][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 986.678658][T11408] loop8: detected capacity change from 0 to 1024 [ 986.753045][T11408] EXT4-fs: Ignoring removed orlov option [ 986.791097][T11406] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1395'. [ 987.164240][T11423] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 987.174063][T11423] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 993.150721][T11449] netlink: 'syz.6.1403': attribute type 10 has an invalid length. [ 993.309527][ T8281] bond0: (slave team0): link status definitely down, disabling slave [ 994.096149][T11460] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1409'. [ 994.246769][T11472] loop8: detected capacity change from 0 to 512 [ 994.483957][T11472] EXT4-fs (loop8): 1 orphan inode deleted [ 994.495026][ T1286] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 994.521328][T11472] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 994.555290][ T1286] EXT4-fs error (device loop8): ext4_release_dquot:6838: comm kworker/u4:5: Failed to release dquot type 1 [ 994.570047][T11473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1412'. [ 994.590894][T11472] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 995.502359][ T9212] EXT4-fs (loop8): unmounting filesystem. [ 995.526805][T11494] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1416'. [ 995.703398][T11508] device netdevsim0 entered promiscuous mode [ 995.744946][T11508] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 995.933458][T11514] loop5: detected capacity change from 0 to 512 [ 996.064088][T11514] EXT4-fs (loop5): 1 orphan inode deleted [ 996.074903][ T9] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 996.131740][T11514] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 996.163600][T11521] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1421'. [ 996.191062][T11522] fuse: Bad value for 'fd' [ 996.238694][T11514] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.266837][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:0: Failed to release dquot type 1 [ 997.733573][ T8560] EXT4-fs (loop5): unmounting filesystem. [ 997.989171][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.995539][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.023000][T11545] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1428'. [ 998.220625][T11549] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1424'. [ 998.599322][T11559] loop5: detected capacity change from 0 to 16 [ 998.607535][T11559] erofs: (device loop5): mounted with root inode @ nid 36. [ 999.710561][ T26] audit: type=1326 audit(1746023743.432:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 999.953122][ T26] audit: type=1326 audit(1746023743.432:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 999.976426][ T26] audit: type=1326 audit(1746023743.432:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 1000.000430][ T26] audit: type=1326 audit(1746023743.432:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 1000.046182][ T26] audit: type=1326 audit(1746023743.432:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 1000.084355][T11577] fuse: Bad value for 'fd' [ 1000.124944][T11579] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1433'. [ 1000.540283][ T26] audit: type=1326 audit(1746023743.432:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 1000.744623][ T26] audit: type=1326 audit(1746023743.432:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 1000.767683][ T26] audit: type=1326 audit(1746023743.432:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 1000.791178][ T26] audit: type=1326 audit(1746023743.432:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 1000.814307][ T26] audit: type=1326 audit(1746023743.432:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000 [ 1000.844508][T11583] loop6: detected capacity change from 0 to 1024 [ 1000.902819][T11583] EXT4-fs: Ignoring removed orlov option [ 1000.917178][T11583] /dev/loop6: Can't open blockdev [ 1001.536179][T11599] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1001.546061][T11599] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1002.363788][T11605] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1443'. [ 1002.823956][T11616] loop7: detected capacity change from 0 to 1024 [ 1002.851972][T11616] EXT4-fs: Ignoring removed orlov option [ 1003.574496][T11616] /dev/loop7: Can't open blockdev [ 1003.742093][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1004.107203][T11636] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1004.116848][T11636] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1004.771185][T11642] loop5: detected capacity change from 0 to 1024 [ 1004.774754][T11638] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1447'. [ 1004.778541][T11642] EXT4-fs: Ignoring removed orlov option [ 1005.267121][T11651] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1005.276733][T11651] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1006.002355][T11657] loop8: detected capacity change from 0 to 512 [ 1006.015534][T11657] EXT4-fs error (device loop8): __ext4_fill_super:5390: inode #2: comm syz.8.1455: iget: bad i_size value: -1 [ 1006.028107][T11657] EXT4-fs (loop8): get root inode failed [ 1006.033778][T11657] EXT4-fs (loop8): mount failed [ 1006.191755][T11666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1456'. [ 1009.092638][T11693] device syzkaller0 entered promiscuous mode [ 1010.237894][T11718] loop3: detected capacity change from 0 to 16 [ 1010.245131][T11718] /dev/loop3: Can't open blockdev [ 1011.046215][T11719] loop7: detected capacity change from 0 to 131072 [ 1011.637004][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1012.001746][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1012.003350][ T7913] I/O error, dev loop7, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1012.923554][ T26] audit: type=1326 audit(1746023756.302:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 1013.011817][ T26] audit: type=1326 audit(1746023756.302:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 1013.074217][ T26] audit: type=1326 audit(1746023756.302:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 1013.124622][ T26] audit: type=1326 audit(1746023756.302:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 1013.162300][ T26] audit: type=1326 audit(1746023756.302:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 1013.206304][ T26] audit: type=1326 audit(1746023756.302:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 1013.246138][ T26] audit: type=1326 audit(1746023756.302:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 1013.272043][ T26] audit: type=1326 audit(1746023756.302:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 1013.349481][ T26] audit: type=1326 audit(1746023756.302:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 1013.419616][ T26] audit: type=1326 audit(1746023756.302:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000 [ 1016.532413][T11773] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1478'. [ 1016.938905][T11787] loop6: detected capacity change from 0 to 512 [ 1016.959765][T11787] /dev/loop6: Can't open blockdev [ 1016.972933][T11786] tipc: Started in network mode [ 1016.993826][T11786] tipc: Node identity 3231f7cc9e1b, cluster identity 4711 [ 1017.047600][T11786] tipc: Enabled bearer , priority 0 [ 1017.723672][ T7145] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1017.959528][T11786] device syzkaller0 entered promiscuous mode [ 1018.131056][ T4325] tipc: Node number set to 2888497100 [ 1018.177847][T11786] tipc: Resetting bearer [ 1018.744921][T11785] tipc: Resetting bearer [ 1022.219432][T11785] tipc: Disabling bearer [ 1022.241495][T11826] tipc: Enabling of bearer rejected, failed to enable media [ 1022.603830][T11874] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1494'. [ 1024.477177][T11905] loop8: detected capacity change from 0 to 16 [ 1024.485062][T11905] erofs: (device loop8): mounted with root inode @ nid 36. [ 1024.577136][T11914] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1508'. [ 1025.316139][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1025.316156][ T26] audit: type=1326 audit(1746023769.212:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 1025.458007][ T26] audit: type=1326 audit(1746023769.212:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 1025.483132][ T26] audit: type=1326 audit(1746023769.242:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 1025.513386][ T26] audit: type=1326 audit(1746023769.242:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 1025.609697][ T26] audit: type=1326 audit(1746023769.242:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 1025.755671][ T26] audit: type=1326 audit(1746023769.272:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 1025.857037][ T26] audit: type=1326 audit(1746023769.272:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 1026.447169][ T26] audit: type=1326 audit(1746023769.272:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 1026.486702][ T26] audit: type=1326 audit(1746023769.282:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 1027.350985][ T26] audit: type=1326 audit(1746023769.292:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000 [ 1027.540804][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1518'. [ 1027.875948][T11971] tipc: Started in network mode [ 1027.893305][T11971] tipc: Node identity 823955be0a65, cluster identity 4711 [ 1027.923263][T11971] tipc: Enabled bearer , priority 0 [ 1028.049663][T11977] device syzkaller0 entered promiscuous mode [ 1028.070009][T11977] tipc: Resetting bearer [ 1028.153367][T11970] tipc: Resetting bearer [ 1028.240819][T11984] loop6: detected capacity change from 0 to 512 [ 1028.273992][T11984] /dev/loop6: Can't open blockdev [ 1029.168394][ T5340] tipc: Node number set to 2287752638 [ 1031.307076][T12014] loop5: detected capacity change from 0 to 512 [ 1031.341724][T12014] EXT4-fs error (device loop5): __ext4_fill_super:5390: inode #2: comm syz.5.1529: iget: bad i_size value: -1 [ 1031.354990][T12014] EXT4-fs (loop5): get root inode failed [ 1031.360656][T12014] EXT4-fs (loop5): mount failed [ 1033.756390][T11970] tipc: Disabling bearer [ 1036.441619][T12096] loop3: detected capacity change from 0 to 1024 [ 1036.515973][T12096] EXT4-fs: Ignoring removed orlov option [ 1036.574876][T12096] /dev/loop3: Can't open blockdev [ 1037.831932][T12113] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1037.841601][T12113] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1037.857513][ T4999] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1038.636626][ T4999] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1038.660324][ T4999] usb 7-1: config 5 has an invalid interface number: 187 but max is 1 [ 1038.692041][T12125] loop8: detected capacity change from 0 to 512 [ 1038.705371][ T4999] usb 7-1: config 5 has no interface number 0 [ 1038.711553][ T4999] usb 7-1: config 5 interface 187 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 1038.744100][T12125] EXT4-fs error (device loop8): __ext4_fill_super:5390: inode #2: comm syz.8.1566: iget: bad i_size value: -1 [ 1038.766626][T12125] EXT4-fs (loop8): get root inode failed [ 1038.772330][T12125] EXT4-fs (loop8): mount failed [ 1038.810367][ T4999] usb 7-1: config 5 interface 1 has no altsetting 0 [ 1038.836544][ T4999] usb 7-1: config 5 interface 187 has no altsetting 0 [ 1038.867730][ T4999] usb 7-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice= 4.fb [ 1039.063358][ T4999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.072182][ T4999] usb 7-1: Product: syz [ 1039.076625][ T4999] usb 7-1: Manufacturer: syz [ 1039.081240][ T4999] usb 7-1: SerialNumber: syz [ 1039.822032][ T4999] ftdi_sio 7-1:5.1: FTDI USB Serial Device converter detected [ 1039.872842][ T4999] ftdi_sio ttyUSB0: unknown device type: 0x4fb [ 1039.928194][ T4999] usb 7-1: USB disconnect, device number 6 [ 1039.954900][T12145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.970834][ T4999] ftdi_sio 7-1:5.1: device disconnected [ 1040.027318][T12145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.979585][T12206] loop7: detected capacity change from 0 to 512 [ 1041.996600][T12206] EXT4-fs error (device loop7): __ext4_fill_super:5390: inode #2: comm syz.7.1589: iget: bad i_size value: -1 [ 1042.008679][T12206] EXT4-fs (loop7): get root inode failed [ 1042.014331][T12206] EXT4-fs (loop7): mount failed [ 1044.562182][T12220] loop5: detected capacity change from 0 to 512 [ 1044.895015][T12220] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1591: casefold flag without casefold feature [ 1045.150638][T12220] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1591: couldn't read orphan inode 15 (err -117) [ 1045.207419][T12220] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1045.512351][T12237] loop7: detected capacity change from 0 to 512 [ 1045.988548][T12237] EXT4-fs error (device loop7): __ext4_fill_super:5390: inode #2: comm syz.7.1596: iget: bad i_size value: -1 [ 1046.001720][T12237] EXT4-fs (loop7): get root inode failed [ 1046.007496][T12237] EXT4-fs (loop7): mount failed [ 1047.484086][ T8560] EXT4-fs (loop5): unmounting filesystem. [ 1047.879989][T12272] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1604'. [ 1048.535734][T12283] device bpq0 entered promiscuous mode [ 1048.939738][T12287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.354189][T12287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.706418][T12301] loop5: detected capacity change from 0 to 512 [ 1049.772806][T12303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.788073][T12303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.814855][T12301] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1615: casefold flag without casefold feature [ 1049.843874][T12301] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1615: couldn't read orphan inode 15 (err -117) [ 1049.875718][T12301] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1050.778601][ T8560] EXT4-fs (loop5): unmounting filesystem. [ 1051.147947][T12347] loop5: detected capacity change from 0 to 1024 [ 1051.203764][T12347] EXT4-fs: Ignoring removed orlov option [ 1051.253361][T12350] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1628'. [ 1051.489173][T12358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1632'. [ 1051.632113][T12361] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1051.641819][T12361] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1052.216392][T12360] loop7: detected capacity change from 0 to 512 [ 1052.225383][T12360] /dev/loop7: Can't open blockdev [ 1052.354846][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1052.515071][T12368] loop8: detected capacity change from 0 to 512 [ 1052.632782][T12368] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.1635: casefold flag without casefold feature [ 1052.656011][T12368] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1635: couldn't read orphan inode 15 (err -117) [ 1052.707620][T12368] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1053.144926][ T4473] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1053.421780][ T4473] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1053.461197][ T4473] usb 4-1: config 5 has an invalid interface number: 187 but max is 1 [ 1053.509855][ T4473] usb 4-1: config 5 has no interface number 0 [ 1053.544334][ T4473] usb 4-1: config 5 interface 187 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 1053.623218][ T4473] usb 4-1: config 5 interface 1 has no altsetting 0 [ 1053.665488][ T4473] usb 4-1: config 5 interface 187 has no altsetting 0 [ 1053.682501][ T9212] EXT4-fs (loop8): unmounting filesystem. [ 1053.696070][ T4473] usb 4-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice= 4.fb [ 1053.768513][T12401] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1643'. [ 1054.016696][T12406] ================================================================== [ 1054.027108][T12406] BUG: KASAN: use-after-free in rose_get_neigh+0x17e/0x550 [ 1054.034345][T12406] Read of size 1 at addr ffff88805a6cd030 by task syz.7.1646/12406 [ 1054.042250][T12406] [ 1054.044693][T12406] CPU: 1 PID: 12406 Comm: syz.7.1646 Not tainted 6.1.135-syzkaller #0 [ 1054.052846][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1054.062917][T12406] Call Trace: [ 1054.066199][T12406] [ 1054.069140][T12406] dump_stack_lvl+0x168/0x22e [ 1054.074021][T12406] ? __lock_acquire+0x7c50/0x7c50 [ 1054.079069][T12406] ? show_regs_print_info+0x12/0x12 [ 1054.084276][T12406] ? load_image+0x3b0/0x3b0 [ 1054.088960][T12406] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1054.094342][T12406] ? __virt_addr_valid+0x188/0x540 [ 1054.099462][T12406] ? __virt_addr_valid+0x465/0x540 [ 1054.104577][T12406] ? rose_get_neigh+0x17e/0x550 [ 1054.109429][T12406] print_report+0xa8/0x220 [ 1054.113845][T12406] kasan_report+0x10b/0x140 [ 1054.118361][T12406] ? rose_get_neigh+0x17e/0x550 [ 1054.123222][T12406] rose_get_neigh+0x17e/0x550 [ 1054.128173][T12406] rose_connect+0x412/0x1380 [ 1054.128586][ T4473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.132759][T12406] ? aa_sk_perm+0x7e5/0x920 [ 1054.140804][ T4473] usb 4-1: Product: syz [ 1054.145382][T12406] ? rose_bind+0xa90/0xa90 [ 1054.145408][T12406] ? aa_af_perm+0x280/0x2b0 [ 1054.145428][T12406] ? tomoyo_socket_connect_permission+0x195/0x280 [ 1054.149597][ T4473] usb 4-1: Manufacturer: syz [ 1054.154016][T12406] ? __might_fault+0xa6/0x120 [ 1054.158575][ T4473] usb 4-1: SerialNumber: syz [ 1054.164906][T12406] ? bpf_lsm_socket_connect+0x5/0x10 [ 1054.165009][T12406] ? security_socket_connect+0x7c/0xa0 [ 1054.165040][T12406] ? rose_bind+0xa90/0xa90 [ 1054.165056][T12406] __sys_connect+0x389/0x410 [ 1054.165079][T12406] ? __sys_connect_file+0x170/0x170 [ 1054.165105][T12406] __x64_sys_connect+0x76/0x80 [ 1054.165126][T12406] do_syscall_64+0x4c/0xa0 [ 1054.165145][T12406] ? clear_bhb_loop+0x45/0xa0 [ 1054.165162][T12406] ? clear_bhb_loop+0x45/0xa0 [ 1054.165180][T12406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.165203][T12406] RIP: 0033:0x7f1aac58e969 [ 1054.165233][T12406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.165251][T12406] RSP: 002b:00007f1aad4d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1054.165273][T12406] RAX: ffffffffffffffda RBX: 00007f1aac7b5fa0 RCX: 00007f1aac58e969 [ 1054.165286][T12406] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 1054.165298][T12406] RBP: 00007f1aac610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1054.165310][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.165322][T12406] R13: 0000000000000000 R14: 00007f1aac7b5fa0 R15: 00007ffdc16ed458 [ 1054.165340][T12406] [ 1054.165346][T12406] [ 1054.165350][T12406] Allocated by task 9005: [ 1054.165358][T12406] kasan_set_track+0x4b/0x70 [ 1054.165379][T12406] __kasan_kmalloc+0x8e/0xa0 [ 1054.165399][T12406] rose_add_node+0x227/0xdb0 [ 1054.165415][T12406] rose_rt_ioctl+0xa4c/0xe90 [ 1054.165430][T12406] rose_ioctl+0x27a/0x790 [ 1054.165444][T12406] sock_do_ioctl+0xd3/0x2f0 [ 1054.165458][T12406] sock_ioctl+0x4ed/0x6e0 [ 1054.165477][T12406] __se_sys_ioctl+0xfa/0x170 [ 1054.165496][T12406] do_syscall_64+0x4c/0xa0 [ 1054.165512][T12406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.165533][T12406] [ 1054.165536][T12406] Freed by task 12283: [ 1054.165543][T12406] kasan_set_track+0x4b/0x70 [ 1054.165562][T12406] kasan_save_free_info+0x2d/0x50 [ 1054.165577][T12406] ____kasan_slab_free+0x126/0x1e0 [ 1054.165596][T12406] slab_free_freelist_hook+0x131/0x1a0 [ 1054.165613][T12406] __kmem_cache_free+0xb6/0x1f0 [ 1054.165627][T12406] rose_rt_device_down+0x3e5/0x430 [ 1054.165640][T12406] rose_device_event+0x600/0x690 [ 1054.165652][T12406] raw_notifier_call_chain+0xcb/0x160 [ 1054.165668][T12406] __dev_notify_flags+0x178/0x2d0 [ 1054.165685][T12406] dev_change_flags+0xe3/0x1a0 [ 1054.165701][T12406] dev_ifsioc+0x159/0xe90 [ 1054.165715][T12406] dev_ioctl+0x578/0xea0 [ 1054.165728][T12406] sock_do_ioctl+0x222/0x2f0 [ 1054.165741][T12406] sock_ioctl+0x4ed/0x6e0 [ 1054.165760][T12406] __se_sys_ioctl+0xfa/0x170 [ 1054.165778][T12406] do_syscall_64+0x4c/0xa0 [ 1054.165793][T12406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.445717][T12406] [ 1054.448111][T12406] The buggy address belongs to the object at ffff88805a6cd000 [ 1054.448111][T12406] which belongs to the cache kmalloc-512 of size 512 [ 1054.462233][T12406] The buggy address is located 48 bytes inside of [ 1054.462233][T12406] 512-byte region [ffff88805a6cd000, ffff88805a6cd200) [ 1054.475593][T12406] [ 1054.477912][T12406] The buggy address belongs to the physical page: [ 1054.484410][T12406] page:ffffea000169b300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a6cc [ 1054.494545][T12406] head:ffffea000169b300 order:2 compound_mapcount:0 compound_pincount:0 [ 1054.502858][T12406] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1054.510855][T12406] raw: 00fff00000010200 ffffea000164b500 dead000000000002 ffff888017441c80 [ 1054.519526][T12406] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1054.528091][T12406] page dumped because: kasan: bad access detected [ 1054.534499][T12406] page_owner tracks the page as allocated [ 1054.540213][T12406] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4245, tgid 4245 (syz-executor), ts 60332390465, free_ts 12474406152 [ 1054.561572][T12406] post_alloc_hook+0x173/0x1a0 [ 1054.566452][T12406] get_page_from_freelist+0x1a26/0x1ac0 [ 1054.571994][T12406] __alloc_pages+0x1df/0x4e0 [ 1054.576941][T12406] alloc_slab_page+0x5d/0x160 [ 1054.581691][T12406] new_slab+0x87/0x2c0 [ 1054.585746][T12406] ___slab_alloc+0xbc6/0x1220 [ 1054.590407][T12406] __kmem_cache_alloc_node+0x1a0/0x260 [ 1054.595878][T12406] __kmalloc_node_track_caller+0x9e/0x230 [ 1054.601665][T12406] __alloc_skb+0x22a/0x7e0 [ 1054.606068][T12406] netlink_ack+0x372/0x1100 [ 1054.610559][T12406] netlink_rcv_skb+0x263/0x420 [ 1054.615307][T12406] netlink_unicast+0x74c/0x8c0 [ 1054.620053][T12406] netlink_sendmsg+0x89e/0xbc0 [ 1054.624830][T12406] __sys_sendto+0x44f/0x5c0 [ 1054.629323][T12406] __x64_sys_sendto+0xda/0xf0 [ 1054.633985][T12406] do_syscall_64+0x4c/0xa0 [ 1054.638486][T12406] page last free stack trace: [ 1054.643154][T12406] free_unref_page_prepare+0x8b4/0x9a0 [ 1054.648688][T12406] free_unref_page+0x2e/0x3f0 [ 1054.653347][T12406] free_contig_range+0x9d/0x150 [ 1054.658268][T12406] destroy_args+0xef/0x8bf [ 1054.662771][T12406] debug_vm_pgtable+0x32a/0x37e [ 1054.667617][T12406] do_one_initcall+0x214/0x7a0 [ 1054.672395][T12406] do_initcall_level+0x137/0x1e4 [ 1054.677367][T12406] do_initcalls+0x4b/0x8a [ 1054.681695][T12406] kernel_init_freeable+0x3fa/0x5ac [ 1054.686893][T12406] kernel_init+0x19/0x1b0 [ 1054.691204][T12406] ret_from_fork+0x1f/0x30 [ 1054.695869][T12406] [ 1054.698174][T12406] Memory state around the buggy address: [ 1054.703871][T12406] ffff88805a6ccf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1054.711911][T12406] ffff88805a6ccf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1054.719954][T12406] >ffff88805a6cd000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1054.728250][T12406] ^ [ 1054.733866][T12406] ffff88805a6cd080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1054.741910][T12406] ffff88805a6cd100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1054.750063][T12406] ================================================================== [ 1054.758200][T12406] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1054.765393][T12406] CPU: 1 PID: 12406 Comm: syz.7.1646 Not tainted 6.1.135-syzkaller #0 [ 1054.773552][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1054.783698][T12406] Call Trace: [ 1054.786984][T12406] [ 1054.789920][T12406] dump_stack_lvl+0x168/0x22e [ 1054.794617][T12406] ? memcpy+0x3c/0x60 [ 1054.798608][T12406] ? show_regs_print_info+0x12/0x12 [ 1054.803811][T12406] ? load_image+0x3b0/0x3b0 [ 1054.808589][T12406] panic+0x2c9/0x710 [ 1054.812236][ T4473] ftdi_sio 4-1:5.1: FTDI USB Serial Device converter detected [ 1054.813082][ T4473] ftdi_sio ttyUSB0: unknown device type: 0x4fb [ 1054.826084][T12406] ? asm_common_interrupt+0x22/0x40 [ 1054.831312][T12406] ? bpf_jit_dump+0xd0/0xd0 [ 1054.835833][T12406] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 1054.841745][T12406] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1054.847666][T12406] ? _raw_spin_unlock+0x40/0x40 [ 1054.849586][ T4473] usb 4-1: USB disconnect, device number 4 [ 1054.852448][ T4473] ftdi_sio 4-1:5.1: device disconnected [ 1054.863865][T12406] check_panic_on_warn+0x80/0xa0 [ 1054.868849][T12406] ? rose_get_neigh+0x17e/0x550 [ 1054.873817][T12406] end_report+0x66/0x110 [ 1054.878085][T12406] kasan_report+0x118/0x140 [ 1054.882609][T12406] ? rose_get_neigh+0x17e/0x550 [ 1054.887571][T12406] rose_get_neigh+0x17e/0x550 [ 1054.892266][T12406] rose_connect+0x412/0x1380 [ 1054.896865][T12406] ? aa_sk_perm+0x7e5/0x920 [ 1054.901378][T12406] ? rose_bind+0xa90/0xa90 [ 1054.905803][T12406] ? aa_af_perm+0x280/0x2b0 [ 1054.910332][T12406] ? tomoyo_socket_connect_permission+0x195/0x280 [ 1054.916763][T12406] ? __might_fault+0xa6/0x120 [ 1054.921462][T12406] ? bpf_lsm_socket_connect+0x5/0x10 [ 1054.926765][T12406] ? security_socket_connect+0x7c/0xa0 [ 1054.932246][T12406] ? rose_bind+0xa90/0xa90 [ 1054.936707][T12406] __sys_connect+0x389/0x410 [ 1054.941313][T12406] ? __sys_connect_file+0x170/0x170 [ 1054.946625][T12406] __x64_sys_connect+0x76/0x80 [ 1054.951407][T12406] do_syscall_64+0x4c/0xa0 [ 1054.955835][T12406] ? clear_bhb_loop+0x45/0xa0 [ 1054.960607][T12406] ? clear_bhb_loop+0x45/0xa0 [ 1054.965301][T12406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.971212][T12406] RIP: 0033:0x7f1aac58e969 [ 1054.975631][T12406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.995509][T12406] RSP: 002b:00007f1aad4d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1055.003940][T12406] RAX: ffffffffffffffda RBX: 00007f1aac7b5fa0 RCX: 00007f1aac58e969 [ 1055.011924][T12406] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 1055.019908][T12406] RBP: 00007f1aac610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1055.027972][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.036121][T12406] R13: 0000000000000000 R14: 00007f1aac7b5fa0 R15: 00007ffdc16ed458 [ 1055.044106][T12406] [ 1055.047385][T12406] Kernel Offset: disabled [ 1055.051700][T12406] Rebooting in 86400 seconds..