last executing test programs:

12m54.132363555s ago: executing program 0 (id=262):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7fffffff, 0x1}}, 0x30)

12m53.937454329s ago: executing program 0 (id=263):
fspick(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
r3 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000002100)=ANY=[], 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r6)

12m50.581527789s ago: executing program 0 (id=270):
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r2, 0x11, 0x1, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f0000005d40)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="10000000000000000000c0"], 0x10}}], 0x1, 0x400c0)
sendfile(r2, r1, 0x0, 0x20000023893)

12m48.951621664s ago: executing program 0 (id=274):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000050000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m46.782365569s ago: executing program 4 (id=279):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r5, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x7, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x24, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x640100ff}}}})
socket$packet(0x11, 0x3, 0x300)

12m42.129858778s ago: executing program 4 (id=283):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

12m41.795855975s ago: executing program 0 (id=284):
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r2, 0x0, 0x0, 0x400c0)
sendfile(r2, r1, 0x0, 0x20000023893)

12m37.503621395s ago: executing program 4 (id=288):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000180)=0x1, 0x4)
recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

12m36.3646114s ago: executing program 0 (id=290):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
clock_gettime(0x0, &(0x7f00000002c0))
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r4 = socket(0x15, 0x5, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
getsockopt(r4, 0x200000000114, 0x2715, 0x0, &(0x7f00000000c0))

12m34.717240194s ago: executing program 4 (id=292):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x18)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6(0xa, 0x2, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

12m29.401092736s ago: executing program 4 (id=295):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x1}, {0x0, 0x0, 0x1}, 0x0, 0x4}, {{@in, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="16000000000000"], 0x50)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
socket$inet(0x2, 0x3, 0x2)
ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0xe, 0x7130, 0x6})

12m26.819564591s ago: executing program 4 (id=297):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x7, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x24, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x640100ff}}}})
socket$packet(0x11, 0x3, 0x300)

12m19.813665939s ago: executing program 32 (id=290):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
clock_gettime(0x0, &(0x7f00000002c0))
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r4 = socket(0x15, 0x5, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
getsockopt(r4, 0x200000000114, 0x2715, 0x0, &(0x7f00000000c0))

12m10.340947459s ago: executing program 33 (id=297):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x7, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x24, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x640100ff}}}})
socket$packet(0x11, 0x3, 0x300)

10m10.91047714s ago: executing program 1 (id=451):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

10m7.744204477s ago: executing program 1 (id=453):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008a1f, &(0x7f0000000300), 0x1, 0x4cc, &(0x7f0000000f00)="$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")
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x1004c000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @enum]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51]}}, &(0x7f0000000080)=""/159, 0x47, 0x9f, 0x1, 0x0, 0x0, @void, @value}, 0x28)

10m1.833407702s ago: executing program 1 (id=458):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r5, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x7, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x24, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x640100ff}}}})
socket$packet(0x11, 0x3, 0x300)

9m56.087550073s ago: executing program 1 (id=466):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x278, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8)
getpid()
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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")
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0)

9m54.514231786s ago: executing program 1 (id=470):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r8}, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r9=>0x0})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(0xffffffffffffffff, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000)
socket(0x10, 0x5, 0x4)
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
eventfd2(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

9m52.159584706s ago: executing program 1 (id=472):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
io_submit(0x0, 0x0, 0x0)
creat(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
syz_io_uring_complete(0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

9m36.014412747s ago: executing program 34 (id=472):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
io_submit(0x0, 0x0, 0x0)
creat(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
syz_io_uring_complete(0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

4m27.131795176s ago: executing program 2 (id=849):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

4m25.696606535s ago: executing program 2 (id=851):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

4m24.932941205s ago: executing program 2 (id=855):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0)

4m24.50829793s ago: executing program 2 (id=857):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95"], 0x20)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x10)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4m24.181093465s ago: executing program 2 (id=863):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

4m23.898931598s ago: executing program 2 (id=865):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0xa)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

4m8.245596661s ago: executing program 35 (id=865):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0xa)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

6.172752309s ago: executing program 8 (id=1607):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0xfffffffc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0), 0x27, 0x4001c00)

4.724437348s ago: executing program 6 (id=1612):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x801}, 0x40018c7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000000000000", @ANYRES32, @ANYBLOB="4fa7567c094ac5080df08b94f0d333826b4ac4c46cf5e662572c427884228c5201777711781f0b7424332e75ad26a8277278d7eca8b1b3391594731bdeac92322437d562ab71915f9f38d8a65fd882135612c9fd6070465518ebe7845163520bd871f1465eac30ff7560a105000000000000008e", @ANYRES32], 0x20)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4.493144111s ago: executing program 8 (id=1614):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000050000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
readv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.320843013s ago: executing program 6 (id=1616):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r2 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r3 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900, 0x4064}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}}, 0x0)

4.251075124s ago: executing program 8 (id=1617):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40)
syz_emit_ethernet(0xd82, &(0x7f0000000c80)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xd4c, 0x6, 0x0, @loopback, @local, {[@routing={0x21, 0x8, 0x0, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2c}, @loopback, @mcast2, @loopback]}, @dstopts={0x87, 0x13, '\x00', [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x8, 0x5, [0x6bf1d9dd, 0x9, 0x1cbe, 0xcd85, 0x2, 0x6]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0xdf, 0x9, [0xbd4e, 0x9, 0x0, 0x3b4ac682]}}]}, @routing={0x790c9904c12c96ed, 0x0, 0x2, 0x1}, @routing={0x21, 0xe, 0x0, 0x0, 0x0, [@private2, @dev={0xfe, 0x80, '\x00', 0x3f}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x0, 0x3, '\x00', [@pad1, @ra, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x18}}]}, @dstopts={0x2f, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x1}, @ra]}, @hopopts={0x3a, 0x16f, '\x00', [@generic={0xf, 0xb77, "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"}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0)

4.100061016s ago: executing program 3 (id=1619):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000050000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$MSR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.795836181s ago: executing program 8 (id=1620):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000005c0), 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000001880)=0xd1, 0x4)
read(r0, &(0x7f00000027c0)=""/4073, 0xfe9)
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0)

3.248736968s ago: executing program 6 (id=1622):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630140000000000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

3.03164991s ago: executing program 3 (id=1624):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95"], 0x20)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.961598701s ago: executing program 6 (id=1626):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x801}, 0x40018c7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000000000000", @ANYRES32, @ANYBLOB="4fa7567c094ac5080df08b94f0d333826b4ac4c46cf5e662572c427884228c5201777711781f0b7424332e75ad26a8277278d7eca8b1b3391594731bdeac92322437d562ab71915f9f38d8a65fd882135612c9fd6070465518ebe7845163520bd871f1465eac30ff7560a105000000000000008e", @ANYRES32], 0x20)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.855811283s ago: executing program 5 (id=1627):
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8000, &(0x7f0000000440)={[{@errors_remount}, {@grpid}, {@init_itable}, {@orlov}, {@grpid}]}, 0x0, 0x63b, &(0x7f0000001bc0)="$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")
timerfd_gettime(0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
rt_tgsigqueueinfo(r0, r0, 0x24, &(0x7f0000000400)={0x1e, 0xffffffff, 0x6})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x101)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000040)={0x8})
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3)

2.774295834s ago: executing program 3 (id=1628):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700"], 0x90}}, 0x0)

2.725241524s ago: executing program 7 (id=1629):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)

2.673073775s ago: executing program 6 (id=1630):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4c208f68ab3815a3a918db58d9fdb302c7ff2"], 0x20)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d0000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x10)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.510047817s ago: executing program 7 (id=1631):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0xdfd72f8b669113ff, 0x1)
open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}})
wait4(0x0, 0x0, 0x8, 0x0)

2.509371117s ago: executing program 3 (id=1632):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4)
recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x4800)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg0\x00'})
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x280}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80c00)
setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f00000000c0)=0xfff, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a310000000005000500020000"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4080)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x1, 0x0, "c433c73e1af0a9f651091f234acb76c00f7bbeb6c6f44fec31147d465ed218f0699fc6605937709c2075032f44ea462ca4b27041f01030ae0ff13c9e4a43514e32638f9142e1dc2afc62d2760cc5da28"}, 0xd8)
getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0)

2.378530319s ago: executing program 3 (id=1633):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4c208f68ab3815a3a918db58d9fdb302c7ff2"], 0x20)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.623914269s ago: executing program 6 (id=1634):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004001000e27f10000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10)
bpf$ITER_CREATE(0x22, &(0x7f0000000040)={r6}, 0x8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000440)={0x0, 0x57, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fbdbdf2508000000100004808d912eaaef76538ffac271578e7acb773424e34bc8b18d9a7141585af2bb59da3afa545c15581d68ab741b567a61daf48feb0333a6edd6a0230240aa3ba0a9833e1dfbe29d3ea3c46ceea305c7ce29208abe29858caf19f7ef75d89841507ced1e5848f4cf49957da10dd6c7fa99"], 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x4000000)

1.623414789s ago: executing program 8 (id=1635):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x278, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8)
getpid()
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=")
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0)

1.620197718s ago: executing program 5 (id=1636):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000050000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.289307813s ago: executing program 3 (id=1637):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011003d7e6a940ba152b00fb040102030109021b000205464006090401030032580a010904bb181efa093fcecb29043b44cc1a5fe970bf9beaf4ab95948ef840ad593d5fc78513d290fe0201cfdc1a90d8c4d269bc67724f92ba9de5bb435a1bf3fedd325d872412e3bfeb4967c16b334bfbf83958949feb6343c3c466c9d1e1a4b7a379cf21ff4aa2ba38d0a4"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x12080, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

1.130926315s ago: executing program 5 (id=1638):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4c208f68ab3815a3a"], 0x20)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x10)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.129730855s ago: executing program 7 (id=1639):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95"], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500))
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

855.837099ms ago: executing program 7 (id=1640):
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x801}, 0x40018c7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000000000000", @ANYRES32, @ANYBLOB="4fa7567c094ac5080df08b94f0d333826b4ac4c46cf5e662572c427884228c5201777711781f0b7424332e75ad26a8277278d7eca8b1b3391594731bdeac92322437d562ab71915f9f38d8a65fd882135612c9fd6070465518ebe7845163520bd871f1465eac30ff7560a105000000000000008e", @ANYRES32], 0x20)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

757.391509ms ago: executing program 5 (id=1641):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4)
recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x4800)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg0\x00'})
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x280}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80c00)
setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f00000000c0)=0xfff, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4080)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x1, 0x0, "c433c73e1af0a9f651091f234acb76c00f7bbeb6c6f44fec31147d465ed218f0699fc6605937709c2075032f44ea462ca4b27041f01030ae0ff13c9e4a43514e32638f9142e1dc2afc62d2760cc5da28"}, 0xd8)
getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0)

369.760165ms ago: executing program 8 (id=1642):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r8}, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(0xffffffffffffffff, &(0x7f0000000240)='V', 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000)
socket(0x10, 0x5, 0x4)
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
r9 = eventfd2(0x0, 0x0)
read$eventfd(r9, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

298.356576ms ago: executing program 7 (id=1643):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700"], 0x90}}, 0x0)

278.807186ms ago: executing program 5 (id=1644):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="83", 0x1}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x801}, 0x40018c7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000000000000", @ANYRES32, @ANYBLOB="4fa7567c094ac5080df08b94f0d333826b4ac4c46cf5e662572c427884228c5201777711781f0b7424332e75ad26a8277278d7eca8b1b3391594731bdeac92322437d562ab71915f9f38d8a65fd882135612c9fd6070465518ebe7845163520bd871f1465eac30ff7560a105000000000000008e", @ANYRES32], 0x20)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendto$unix(r0, &(0x7f0000000780)="aa9fe64976b5fbec93c4826c654f768d20efa4291209e2aa63ac41b722742ba7240a872aae6c3e1eda80307f7c5816ec721976bc06b02f5c5110a75191f29281436bd1c0927cf409e68e08a0758f3e88043d3bd2fdc521504dfbdac53da3", 0x5e, 0x40, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

413.36µs ago: executing program 5 (id=1645):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000005c0), 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000001880)=0xd1, 0x4)
read(r0, &(0x7f00000027c0)=""/4073, 0xfe9)
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0)

0s ago: executing program 7 (id=1646):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c)
connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c)

kernel console output (not intermixed with test programs):

: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  758.902354][ T8560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  758.944746][ T4261] Bluetooth: hci0: command 0x0419 tx timeout
[  759.012565][ T8560] device hsr_slave_0 entered promiscuous mode
[  759.028290][ T8560] device hsr_slave_1 entered promiscuous mode
[  759.040671][ T8560] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  759.086805][ T8560] Cannot create hsr debugfs directory
[  759.219113][ T8676] loop7: detected capacity change from 0 to 16
[  759.226171][ T8676] /dev/loop7: Can't open blockdev
[  759.269349][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  759.923908][   T26] audit: type=1326 audit(1746023504.252:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.7.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  759.991608][   T26] audit: type=1326 audit(1746023504.252:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.7.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  760.453275][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.796'.
[  760.510143][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.7.796'.
[  760.552585][ T8690] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  760.561796][ T8690] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  760.570856][ T8690] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  760.579802][ T8690] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  760.788524][ T8699] netlink: 28 bytes leftover after parsing attributes in process `syz.6.797'.
[  761.683202][ T4539] device hsr_slave_0 left promiscuous mode
[  761.707106][ T8713] loop2: detected capacity change from 0 to 1024
[  761.718157][ T4539] device hsr_slave_1 left promiscuous mode
[  761.736243][ T8713] EXT4-fs: Ignoring removed orlov option
[  761.742414][ T8713] /dev/loop2: Can't open blockdev
[  761.949099][ T4539] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  761.989002][ T4539] batman_adv: batadv0: Removing interface: batadv_slave_0
[  763.721864][ T4539] batman_adv: batadv0: Removing interface: batadv_slave_1
[  763.759113][ T4539] device bridge_slave_1 left promiscuous mode
[  763.773947][ T4539] bridge0: port 2(bridge_slave_1) entered disabled state
[  763.805812][ T4539] device bridge_slave_0 left promiscuous mode
[  763.812185][ T4539] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.859270][ T4539] device veth1_macvtap left promiscuous mode
[  763.882706][ T4539] device veth0_macvtap left promiscuous mode
[  763.899598][ T4539] device veth1_vlan left promiscuous mode
[  763.914932][ T4539] device veth0_vlan left promiscuous mode
[  764.526168][ T4539] team0 (unregistering): Port device team_slave_1 removed
[  764.572463][ T4539] team0 (unregistering): Port device team_slave_0 removed
[  764.623729][ T4539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  764.672850][ T4539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  765.166834][ T4539] bond0 (unregistering): Released all slaves
[  765.250127][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.801'.
[  765.258981][ T8712] netlink: 20 bytes leftover after parsing attributes in process `syz.6.801'.
[  765.271944][ T8712] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  765.280761][ T8712] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  765.289826][ T8712] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  765.298621][ T8712] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  765.309376][ T8722] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  765.319348][ T8722] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  765.653983][ T8743] loop3: detected capacity change from 0 to 512
[  765.684833][ T8743] EXT4-fs error (device loop3): __ext4_fill_super:5390: inode #2: comm syz.3.807: iget: bad i_size value: -1
[  765.696607][ T8743] EXT4-fs (loop3): get root inode failed
[  765.702273][ T8743] EXT4-fs (loop3): mount failed
[  769.138862][ T8770] device netdevsim0 entered promiscuous mode
[  769.163473][ T8770] device netdevsim0 left promiscuous mode
[  769.984297][ T8779] loop3: detected capacity change from 0 to 16
[  769.991552][ T8779] /dev/loop3: Can't open blockdev
[  770.117650][ T8780] loop2: detected capacity change from 0 to 2048
[  770.222617][ T8780]  loop2: p1 < > p3 p4 < >
[  770.255165][ T8780] loop2: p3 start 4284289 is beyond EOD, truncated
[  771.174862][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  772.544409][ T8784] loop6: detected capacity change from 0 to 131072
[  773.145187][   T26] audit: type=1326 audit(1746023517.492:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  773.637134][ T8560] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  773.755245][   T26] audit: type=1326 audit(1746023517.492:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  773.783891][   T26] audit: type=1326 audit(1746023517.492:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  773.813495][   T26] audit: type=1326 audit(1746023517.492:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  773.851451][ T8560] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  773.927376][ T8560] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  773.935866][ T8794] loop3: detected capacity change from 0 to 16
[  773.944824][   T26] audit: type=1326 audit(1746023517.492:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  773.968245][ T8560] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  773.989920][ T8794] /dev/loop3: Can't open blockdev
[  774.010627][   T26] audit: type=1326 audit(1746023517.492:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  774.068600][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  774.160153][   T26] audit: type=1326 audit(1746023517.492:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  774.246912][   T26] audit: type=1326 audit(1746023517.492:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  774.278725][ T8560] 8021q: adding VLAN 0 to HW filter on device bond0
[  774.298656][ T8804] loop2: detected capacity change from 0 to 512
[  774.313995][   T26] audit: type=1326 audit(1746023517.492:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  774.322707][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  774.378082][ T8804] /dev/loop2: Can't open blockdev
[  774.389362][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  774.404526][ T8560] 8021q: adding VLAN 0 to HW filter on device team0
[  774.417903][   T26] audit: type=1326 audit(1746023517.492:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  774.453193][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  774.488113][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  774.586559][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.593743][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state
[  774.617512][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  774.631530][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  774.836671][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  774.885540][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.892657][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state
[  775.366663][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  775.421918][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  775.473731][ T8560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  775.516685][ T8560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  775.590652][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  775.617347][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  775.648032][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  775.686026][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  775.711729][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  775.732730][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  775.758861][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  775.772315][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  775.790151][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  775.801245][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  776.103364][ T8835] loop2: detected capacity change from 0 to 512
[  776.192799][ T8835] /dev/loop2: Can't open blockdev
[  776.960657][ T7145] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  777.220580][ T8849] loop7: detected capacity change from 0 to 512
[  777.309889][ T8849] EXT4-fs error (device loop7): __ext4_fill_super:5390: inode #2: comm syz.7.828: iget: bad i_size value: -1
[  777.321620][ T8849] EXT4-fs (loop7): get root inode failed
[  777.327363][ T8849] EXT4-fs (loop7): mount failed
[  777.970280][ T8850] loop6: detected capacity change from 0 to 1024
[  777.979755][ T8850] EXT4-fs: Ignoring removed nobh option
[  777.996183][ T8850] EXT4-fs: Ignoring removed bh option
[  778.002458][ T8850] /dev/loop6: Can't open blockdev
[  778.167332][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  778.513909][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  778.742162][ T7145] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  778.752147][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  778.834186][ T8560] 8021q: adding VLAN 0 to HW filter on device batadv0
[  779.633179][ T8872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.831'.
[  780.216161][ T8876] loop7: detected capacity change from 0 to 512
[  780.223271][ T8876] /dev/loop7: Can't open blockdev
[  780.404344][ T8883] netlink: 16 bytes leftover after parsing attributes in process `syz.3.833'.
[  781.504566][ T8894] fuse: Bad value for 'group_id'
[  781.635008][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  781.669928][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  781.713505][ T8560] device veth0_vlan entered promiscuous mode
[  781.724465][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  781.735984][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  781.759263][ T8560] device veth1_vlan entered promiscuous mode
[  781.793969][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  781.823086][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  781.864145][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  782.534269][ T8560] device veth0_macvtap entered promiscuous mode
[  782.593558][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  782.631534][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  782.655355][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  782.664061][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  782.675763][ T8560] device veth1_macvtap entered promiscuous mode
[  782.737640][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  782.763437][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  782.794143][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  782.884871][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  782.960449][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  784.024928][ T4247] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  784.034944][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  784.045389][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  784.064701][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  784.080890][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_0
[  784.100102][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  784.111286][ T8919] loop2: detected capacity change from 0 to 1024
[  784.118673][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  784.136528][ T8919] EXT4-fs: Ignoring removed orlov option
[  784.142424][ T8919] /dev/loop2: Can't open blockdev
[  784.209562][ T4247] usb 8-1: Using ep0 maxpacket: 16
[  784.216567][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  784.369925][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  784.385562][ T4247] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  784.393765][ T4247] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  784.409775][ T4247] usb 8-1: config 0 has no interface number 0
[  784.416128][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  784.426903][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  784.443341][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  784.465968][ T4247] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  784.476659][ T8924] loop3: detected capacity change from 0 to 512
[  784.486122][ T4247] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.488414][ T8924] /dev/loop3: Can't open blockdev
[  784.499397][ T4247] usb 8-1: Product: syz
[  784.503579][ T4247] usb 8-1: Manufacturer: syz
[  784.514887][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  784.542957][ T4247] usb 8-1: SerialNumber: syz
[  784.553798][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  784.673500][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  784.808472][ T4247] usb 8-1: config 0 descriptor??
[  784.816007][ T4247] usb 8-1: Found UVC 0.00 device syz (046d:08f3)
[  784.832694][ T4247] usb 8-1: No valid video chain found.
[  784.950179][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_1
[  785.002558][ T8560] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  785.046673][ T4259] Bluetooth: hci3: command 0x0406 tx timeout
[  785.076427][ T8560] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  785.091508][ T8560] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  785.100792][ T8560] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  785.127868][ T8907] KVM: debugfs: duplicate directory 8907-5
[  785.141965][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  785.152647][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  785.164395][ T8922] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  785.194066][ T8930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  785.209981][ T8922] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  785.235292][ T8930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  785.409598][ T4440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  785.428688][ T4440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  785.477463][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  785.499817][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  785.528687][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  785.552063][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  786.429909][ T4247] usb 8-1: USB disconnect, device number 2
[  786.685492][ T8952] fuse: Bad value for 'fd'
[  786.701160][ T8956] loop3: detected capacity change from 0 to 512
[  786.753629][ T8956] /dev/loop3: Can't open blockdev
[  787.036157][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  787.490567][ T8968] netlink: 28 bytes leftover after parsing attributes in process `syz.7.848'.
[  788.971636][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.852'.
[  789.163208][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.855'.
[  789.173305][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.855'.
[  789.200644][ T8991] device gretap0 entered promiscuous mode
[  789.213166][ T8991] device gretap0 left promiscuous mode
[  789.250412][ T8994] device netdevsim0 entered promiscuous mode
[  789.273835][ T8994] device netdevsim0 left promiscuous mode
[  789.342038][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  789.676794][ T9012] fuse: Bad value for 'group_id'
[  789.700675][ T9015] loop7: detected capacity change from 0 to 512
[  789.718627][ T9015] EXT4-fs error (device loop7): __ext4_fill_super:5390: inode #2: comm syz.7.861: iget: bad i_size value: -1
[  789.730431][ T9015] EXT4-fs (loop7): get root inode failed
[  789.736343][ T9015] EXT4-fs (loop7): mount failed
[  789.817125][ T9021] netlink: 'syz.2.863': attribute type 19 has an invalid length.
[  789.837183][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  789.863885][ T9023] loop3: detected capacity change from 0 to 512
[  789.943654][ T9023] EXT4-fs error (device loop3): __ext4_fill_super:5390: inode #2: comm syz.3.862: iget: bad i_size value: -1
[  789.955634][ T9023] EXT4-fs (loop3): get root inode failed
[  789.961365][ T9023] EXT4-fs (loop3): mount failed
[  791.831558][ T9043] loop6: detected capacity change from 0 to 512
[  791.897384][ T9043] /dev/loop6: Can't open blockdev
[  792.215202][ T9032] loop2: detected capacity change from 0 to 1024
[  793.684614][ T9062] netlink: 'syz.7.870': attribute type 19 has an invalid length.
[  793.848231][ T9065] loop5: detected capacity change from 0 to 512
[  793.946516][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.7.873'.
[  793.959624][ T9065] EXT4-fs (loop5): 1 orphan inode deleted
[  793.990025][ T4436] __quota_error: 4 callbacks suppressed
[  793.990041][ T4436] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  794.024855][ T9065] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  794.044779][ T9072] netlink: 24 bytes leftover after parsing attributes in process `syz.7.873'.
[  794.079737][ T9065] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  794.114593][ T4436] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:12: Failed to release dquot type 1
[  794.193130][ T9080] loop3: detected capacity change from 0 to 512
[  794.290093][ T9080] /dev/loop3: Can't open blockdev
[  794.335590][ T9084] loop7: detected capacity change from 0 to 512
[  794.461070][ T9084] EXT4-fs error (device loop7): __ext4_fill_super:5390: inode #2: comm syz.7.877: iget: bad i_size value: -1
[  794.473066][ T9084] EXT4-fs (loop7): get root inode failed
[  794.479632][ T9084] EXT4-fs (loop7): mount failed
[  794.566745][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  795.377413][ T8560] EXT4-fs (loop5): unmounting filesystem.
[  797.680936][ T9099] netlink: 16 bytes leftover after parsing attributes in process `syz.7.880'.
[  797.862789][ T9099] syz.7.880 uses obsolete (PF_INET,SOCK_PACKET)
[  801.796428][ T4296] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  801.981097][ T9132] loop6: detected capacity change from 0 to 512
[  802.000268][ T9132] EXT4-fs error (device loop6): __ext4_fill_super:5390: inode #2: comm syz.6.888: iget: bad i_size value: -1
[  802.012024][ T9132] EXT4-fs (loop6): get root inode failed
[  802.018038][ T9132] EXT4-fs (loop6): mount failed
[  802.074815][ T4296] usb 6-1: Using ep0 maxpacket: 16
[  802.102263][ T4296] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  802.119851][ T4296] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  802.201284][ T4296] usb 6-1: config 0 has no interface number 0
[  802.207691][ T4325] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  802.292821][ T4296] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  802.312970][ T9140] loop7: detected capacity change from 0 to 512
[  802.394968][ T4325] usb 4-1: Using ep0 maxpacket: 16
[  802.427841][ T4325] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  802.576195][ T9140] /dev/loop7: Can't open blockdev
[  802.709226][ T4325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  802.903843][ T4296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.912035][ T4296] usb 6-1: Product: syz
[  802.916249][ T4296] usb 6-1: Manufacturer: syz
[  802.920873][ T4296] usb 6-1: SerialNumber: syz
[  802.970604][ T4296] usb 6-1: config 0 descriptor??
[  803.029593][ T4296] usb 6-1: Found UVC 0.00 device syz (046d:08f3)
[  803.064807][ T4296] usb 6-1: No valid video chain found.
[  803.175674][ T4325] usb 4-1: config 0 has no interface number 0
[  803.196282][ T4325] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  803.214743][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.234715][ T4325] usb 4-1: Product: syz
[  803.239223][ T4325] usb 4-1: Manufacturer: syz
[  803.244145][ T4325] usb 4-1: SerialNumber: syz
[  803.775882][ T4325] usb 4-1: config 0 descriptor??
[  804.506524][ T4325] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  804.576955][ T9150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  804.604766][ T4325] usb 4-1: No valid video chain found.
[  804.626298][ T9150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  804.627736][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  805.398065][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  805.425715][ T9163] device netdevsim0 entered promiscuous mode
[  805.446152][ T9163] device netdevsim0 left promiscuous mode
[  808.586938][ T4325] usb 6-1: USB disconnect, device number 2
[  808.593420][ T4296] usb 4-1: USB disconnect, device number 2
[  809.818497][ T9192] loop5: detected capacity change from 0 to 512
[  809.841518][ T9196] loop3: detected capacity change from 0 to 16
[  809.848617][ T9196] /dev/loop3: Can't open blockdev
[  809.888622][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  810.012191][ T9192] EXT4-fs (loop5): 1 orphan inode deleted
[  810.032910][ T9192] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  810.088472][ T9192] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  810.088514][ T8356] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  810.111543][ T8356] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:23: Failed to release dquot type 1
[  810.216183][   T26] audit: type=1326 audit(1746023554.592:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  810.658954][   T26] audit: type=1326 audit(1746023554.602:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  811.474830][   T26] audit: type=1326 audit(1746023554.602:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  811.618527][ T4259] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  811.627817][ T4259] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  811.636823][ T4259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  811.645997][ T4259] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  811.653684][ T4259] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  811.662474][ T4259] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  811.754680][   T26] audit: type=1326 audit(1746023554.602:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  811.977679][   T26] audit: type=1326 audit(1746023554.602:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  812.020550][ T9205] loop6: detected capacity change from 0 to 131072
[  812.075374][ T7145] I/O error, dev loop6, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  812.382770][   T26] audit: type=1326 audit(1746023554.602:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  812.507742][   T26] audit: type=1326 audit(1746023554.612:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  812.666698][   T26] audit: type=1326 audit(1746023554.612:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  813.644688][   T26] audit: type=1326 audit(1746023554.612:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[  813.669210][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  813.675564][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  813.707397][ T9212] chnl_net:caif_netlink_parms(): no params data found
[  813.744886][ T4259] Bluetooth: hci1: command 0x0409 tx timeout
[  814.121453][ T8560] EXT4-fs (loop5): unmounting filesystem.
[  814.291598][ T9212] bridge0: port 1(bridge_slave_0) entered blocking state
[  814.317516][ T9212] bridge0: port 1(bridge_slave_0) entered disabled state
[  814.350863][ T9212] device bridge_slave_0 entered promiscuous mode
[  814.387619][ T9237] device netdevsim0 entered promiscuous mode
[  814.413014][ T9237] device netdevsim0 left promiscuous mode
[  814.486501][ T9212] bridge0: port 2(bridge_slave_1) entered blocking state
[  814.507879][ T9212] bridge0: port 2(bridge_slave_1) entered disabled state
[  814.559829][ T9212] device bridge_slave_1 entered promiscuous mode
[  814.749468][ T9212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  814.952872][ T1286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  814.991256][ T9255] loop5: detected capacity change from 0 to 512
[  815.004806][ T1286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.039273][ T9212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  815.194258][ T9251] device netdevsim0 entered promiscuous mode
[  815.359165][ T9251] device netdevsim0 left promiscuous mode
[  815.761350][ T9255] EXT4-fs (loop5): 1 orphan inode deleted
[  815.774085][ T9269] loop3: detected capacity change from 0 to 512
[  815.811546][ T9255] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  815.845475][ T9269] /dev/loop3: Can't open blockdev
[  815.851545][ T4259] Bluetooth: hci1: command 0x041b tx timeout
[  815.859086][ T1286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  815.870737][ T8356] __quota_error: 5 callbacks suppressed
[  815.870752][ T8356] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  815.925042][ T9255] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  815.956730][ T8356] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:23: Failed to release dquot type 1
[  815.973939][ T1286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.182270][ T9212] team0: Port device team_slave_0 added
[  816.201471][ T9212] team0: Port device team_slave_1 added
[  816.248537][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_0
[  816.261943][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  816.325507][ T9212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  816.966013][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_1
[  816.977877][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  817.071563][ T8560] EXT4-fs (loop5): unmounting filesystem.
[  817.072383][ T9212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  817.186969][ T1286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  817.224770][ T1286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.372557][ T9289] loop7: detected capacity change from 0 to 1024
[  817.427969][ T9291] loop6: detected capacity change from 0 to 512
[  817.448525][ T9291] /dev/loop6: Can't open blockdev
[  817.471550][ T9289] EXT4-fs: Ignoring removed orlov option
[  817.647004][ T9289] /dev/loop7: Can't open blockdev
[  818.993940][ T4259] Bluetooth: hci1: command 0x040f tx timeout
[  819.026774][ T1286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  819.215291][ T1286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.634333][ T9212] device hsr_slave_0 entered promiscuous mode
[  819.683178][ T9212] device hsr_slave_1 entered promiscuous mode
[  819.705251][ T9212] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  819.721667][ T9212] Cannot create hsr debugfs directory
[  819.794730][ T9303] netlink: 132 bytes leftover after parsing attributes in process `syz.3.923'.
[  819.837878][ T9301] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  819.847660][ T9301] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  820.406664][ T9323] loop7: detected capacity change from 0 to 16
[  820.414060][ T9323] /dev/loop7: Can't open blockdev
[  820.574772][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  820.905094][   T26] audit: type=1326 audit(1746023565.292:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  821.026131][ T4259] Bluetooth: hci1: command 0x0419 tx timeout
[  821.183857][ T9212] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  821.418221][   T26] audit: type=1326 audit(1746023565.292:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  821.457350][   T26] audit: type=1326 audit(1746023565.372:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  821.480594][   T26] audit: type=1326 audit(1746023565.372:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  821.503027][   T26] audit: type=1326 audit(1746023565.372:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  821.526666][   T26] audit: type=1326 audit(1746023565.372:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  821.605336][   T26] audit: type=1326 audit(1746023565.372:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  821.665747][ T9212] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  821.692306][ T9212] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  821.705036][   T26] audit: type=1326 audit(1746023565.372:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  821.773561][ T9212] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  821.783844][   T26] audit: type=1326 audit(1746023565.382:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  821.907661][   T26] audit: type=1326 audit(1746023565.382:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.7.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  822.183640][ T9346] loop7: detected capacity change from 0 to 512
[  822.212209][ T9212] 8021q: adding VLAN 0 to HW filter on device bond0
[  822.233050][ T9346] /dev/loop7: Can't open blockdev
[  822.374258][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  822.398034][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  822.436278][ T9212] 8021q: adding VLAN 0 to HW filter on device team0
[  823.098538][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  823.130999][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  823.195915][ T4539] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.203071][ T4539] bridge0: port 1(bridge_slave_0) entered forwarding state
[  823.226588][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  823.276367][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  823.302868][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  823.473156][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state
[  823.480371][ T4562] bridge0: port 2(bridge_slave_1) entered forwarding state
[  823.546590][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  823.562647][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  824.084532][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  824.119014][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  824.185524][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  824.194583][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  824.206654][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  824.260193][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  824.271611][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  824.280316][ T9366] netlink: 132 bytes leftover after parsing attributes in process `syz.3.933'.
[  824.313103][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  824.345676][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  824.529821][ T9212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  826.323520][ T9384] loop7: detected capacity change from 0 to 131072
[  826.824405][ T7145] I/O error, dev loop7, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  826.858158][ T1286] device hsr_slave_0 left promiscuous mode
[  826.870791][ T1286] device hsr_slave_1 left promiscuous mode
[  826.910352][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  826.945639][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_0
[  826.970907][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  826.982707][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_1
[  826.990644][ T1286] device bridge_slave_1 left promiscuous mode
[  827.000103][ T1286] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.008514][ T1286] device bridge_slave_0 left promiscuous mode
[  827.014788][ T1286] bridge0: port 1(bridge_slave_0) entered disabled state
[  827.043047][ T9388] loop5: detected capacity change from 0 to 16
[  827.051540][ T9388] erofs: (device loop5): mounted with root inode @ nid 36.
[  827.203862][ T1286] device veth1_macvtap left promiscuous mode
[  827.222644][ T1286] device veth0_macvtap left promiscuous mode
[  827.229097][ T1286] device veth1_vlan left promiscuous mode
[  827.241503][ T1286] device veth0_vlan left promiscuous mode
[  828.434917][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  828.434997][   T26] audit: type=1326 audit(1746023572.792:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[  828.490768][   T26] audit: type=1326 audit(1746023572.792:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[  828.514144][   T26] audit: type=1326 audit(1746023572.792:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[  828.541143][   T26] audit: type=1326 audit(1746023572.802:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[  828.649796][   T26] audit: type=1326 audit(1746023572.802:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[  828.672958][   T26] audit: type=1326 audit(1746023572.802:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[  828.728947][   T26] audit: type=1326 audit(1746023572.802:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[  828.770045][ T9394] loop5: detected capacity change from 0 to 512
[  828.772817][   T26] audit: type=1326 audit(1746023572.802:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[  828.822058][   T26] audit: type=1326 audit(1746023572.802:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[  828.829104][ T9394] EXT4-fs (loop5): 1 orphan inode deleted
[  828.846392][   T26] audit: type=1326 audit(1746023572.802:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.5.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[  828.858583][ T9394] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  828.884970][ T4562] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:15: Failed to release dquot type 1
[  828.891484][ T9394] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  830.062521][ T1286] team0 (unregistering): Port device team_slave_1 removed
[  830.117225][ T1286] team0 (unregistering): Port device team_slave_0 removed
[  830.195261][ T1286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  830.259721][ T1286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  830.675906][ T1286] bond0 (unregistering): Released all slaves
[  830.778202][ T5843] bond0: (slave bond_slave_0): interface is now down
[  830.908132][ T5843] bond0: (slave bond_slave_1): interface is now down
[  831.005327][ T5843] bond0: (slave bond_slave_0): interface is now down
[  831.012067][ T5843] bond0: (slave bond_slave_1): interface is now down
[  831.055733][ T8560] EXT4-fs (loop5): unmounting filesystem.
[  831.091464][ T4332] bond0: (slave bond_slave_0): interface is now down
[  831.098350][ T4332] bond0: (slave bond_slave_1): interface is now down
[  831.628058][ T4332] bond0: now running without any active interface!
[  831.871171][ T9419] loop5: detected capacity change from 0 to 512
[  831.916609][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  831.939774][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  831.970010][ T9419] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.944: casefold flag without casefold feature
[  831.971962][ T9212] 8021q: adding VLAN 0 to HW filter on device batadv0
[  832.041029][ T9419] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.944: couldn't read orphan inode 15 (err -117)
[  832.119299][ T9419] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  833.689683][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  833.710184][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  833.743919][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  833.779533][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  833.809818][ T9455] loop6: detected capacity change from 0 to 512
[  833.819715][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  833.835642][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  833.855824][ T9455] /dev/loop6: Can't open blockdev
[  833.865078][ T9212] device veth0_vlan entered promiscuous mode
[  833.891031][ T9212] device veth1_vlan entered promiscuous mode
[  834.874186][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  834.893088][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  834.940635][ T9212] device veth0_macvtap entered promiscuous mode
[  835.006574][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  835.039405][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  835.059011][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  835.182745][ T9470] loop6: detected capacity change from 0 to 512
[  835.201593][ T9469] loop7: detected capacity change from 0 to 512
[  835.208952][ T9469] /dev/loop7: Can't open blockdev
[  835.230729][ T9470] /dev/loop6: Can't open blockdev
[  835.238168][ T9212] device veth1_macvtap entered promiscuous mode
[  835.253888][ T8560] EXT4-fs (loop5): unmounting filesystem.
[  835.315114][ T7913] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  835.404059][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  835.608166][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  835.780029][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  835.880655][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  835.998597][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.246917][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  836.268409][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.286782][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  836.824469][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.873062][ T9212] batman_adv: batadv0: Interface activated: batadv_slave_0
[  836.912627][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  836.943284][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.975599][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  836.986099][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.995960][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  837.006423][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  837.016266][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  837.027018][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  837.038222][ T9212] batman_adv: batadv0: Interface activated: batadv_slave_1
[  837.049432][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  837.120432][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  837.129545][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  837.138925][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  837.153233][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  837.266917][ T9212] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  837.327310][ T9212] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  837.362641][ T9212] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  837.392543][ T9212] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  837.877350][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  837.898248][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.908526][ T9512] loop7: detected capacity change from 0 to 16
[  837.915870][ T9512] /dev/loop7: Can't open blockdev
[  837.964311][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  838.039553][ T5450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  838.095937][ T5450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  838.120229][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  838.284819][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  838.284851][   T26] audit: type=1326 audit(1746023582.662:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  838.777914][   T26] audit: type=1326 audit(1746023582.662:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  838.882930][   T26] audit: type=1326 audit(1746023582.662:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  839.673305][   T26] audit: type=1326 audit(1746023582.662:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  839.734872][   T26] audit: type=1326 audit(1746023582.662:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  840.101930][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.966'.
[  840.395005][ T9520] loop6: detected capacity change from 0 to 131072
[  841.027379][ T7145] I/O error, dev loop6, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  841.041876][   T26] audit: type=1326 audit(1746023582.662:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  841.064813][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.966'.
[  841.179428][ T9525] device bond0 entered promiscuous mode
[  841.207111][ T9525] device bond_slave_0 entered promiscuous mode
[  841.239450][   T26] audit: type=1326 audit(1746023582.672:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  841.273115][ T9525] device bond_slave_1 entered promiscuous mode
[  841.313163][ T9525] device bridge0 entered promiscuous mode
[  841.336644][   T26] audit: type=1326 audit(1746023582.672:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  841.361172][   T26] audit: type=1326 audit(1746023582.672:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  841.366895][ T9534] 9pnet_fd: Insufficient options for proto=fd
[  841.386082][ T9527] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  841.399325][ T9527] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  841.508141][ T9535] loop5: detected capacity change from 0 to 512
[  841.555057][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  841.580795][   T26] audit: type=1326 audit(1746023582.672:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.7.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  841.625649][ T9538] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551609)
[  841.639491][ T9535] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.967: invalid indirect mapped block 10 (level 1)
[  841.688089][ T9538] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  841.713944][ T9543] loop3: detected capacity change from 0 to 16
[  841.721335][ T9543] /dev/loop3: Can't open blockdev
[  841.835215][ T9535] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.967: invalid indirect mapped block 8 (level 1)
[  841.905799][ T9535] EXT4-fs (loop5): 1 truncate cleaned up
[  841.911593][ T9535] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  842.823440][ T8560] EXT4-fs (loop5): unmounting filesystem.
[  842.891752][ T9558] device netdevsim0 entered promiscuous mode
[  842.958059][ T9560] loop3: detected capacity change from 0 to 1024
[  842.983086][ T9560] EXT4-fs: Ignoring removed orlov option
[  842.994672][ T9560] /dev/loop3: Can't open blockdev
[  843.016752][ T9558] device netdevsim0 left promiscuous mode
[  843.250370][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.5.977'.
[  843.263129][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.5.977'.
[  843.293839][ T9563] device bond0 entered promiscuous mode
[  843.574941][ T9563] device bond_slave_0 entered promiscuous mode
[  843.658972][ T9563] device bond_slave_1 entered promiscuous mode
[  844.035443][ T9563] device bridge0 entered promiscuous mode
[  844.065224][ T9563] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  844.104189][ T9563] Cannot create hsr debugfs directory
[  844.125566][ T9575] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  844.129694][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  844.135250][ T9575] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  844.516130][ T9593] loop5: detected capacity change from 0 to 512
[  844.628752][ T9593] EXT4-fs (loop5): 1 orphan inode deleted
[  844.644986][ T4447] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  844.657898][ T5450] __quota_error: 18 callbacks suppressed
[  844.657925][ T5450] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  844.684863][ T9593] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  844.725645][ T9593] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  844.744186][ T5450] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:17: Failed to release dquot type 1
[  844.974758][ T4447] usb 7-1: Using ep0 maxpacket: 16
[  844.981713][ T4447] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  844.994703][ T4447] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  845.014794][ T4447] usb 7-1: config 0 has no interface number 0
[  845.041740][ T4447] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  845.445029][ T4447] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.457013][ T4447] usb 7-1: Product: syz
[  845.461340][ T4447] usb 7-1: Manufacturer: syz
[  845.466465][ T4447] usb 7-1: SerialNumber: syz
[  845.473799][ T4447] usb 7-1: config 0 descriptor??
[  845.481807][ T9609] netlink: 28 bytes leftover after parsing attributes in process `syz.7.985'.
[  845.501856][ T4447] usb 7-1: Found UVC 0.00 device syz (046d:08f3)
[  845.510588][ T9609] netlink: 28 bytes leftover after parsing attributes in process `syz.7.985'.
[  845.528946][ T4447] usb 7-1: No valid video chain found.
[  845.661735][ T9609] device bond0 entered promiscuous mode
[  845.682191][ T9609] device bond_slave_0 entered promiscuous mode
[  845.685698][ T8560] EXT4-fs (loop5): unmounting filesystem.
[  845.689008][ T9609] device bond_slave_1 entered promiscuous mode
[  845.743595][ T9609] device bridge0 entered promiscuous mode
[  845.780533][ T9609] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  845.816009][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  845.828250][ T9609] Cannot create hsr debugfs directory
[  845.835963][ T9609] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  845.859784][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  845.870989][ T9599] netlink: 132 bytes leftover after parsing attributes in process `syz.3.984'.
[  845.886096][ T9603] ������: renamed from lo
[  846.005741][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  846.209045][ T9626] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  846.218755][ T9626] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  846.886736][ T9636] device netdevsim0 entered promiscuous mode
[  846.941768][ T9636] device netdevsim0 left promiscuous mode
[  847.158277][ T4447] usb 7-1: USB disconnect, device number 3
[  847.581046][ T9642] netlink: 132 bytes leftover after parsing attributes in process `syz.5.989'.
[  848.417210][ T9668] device netdevsim0 entered promiscuous mode
[  848.430821][ T9669] loop6: detected capacity change from 0 to 1024
[  848.450776][ T9668] device netdevsim0 left promiscuous mode
[  848.453646][ T9669] EXT4-fs: Ignoring removed orlov option
[  848.499245][ T9669] /dev/loop6: Can't open blockdev
[  848.607127][ T9673] netlink: 132 bytes leftover after parsing attributes in process `syz.7.997'.
[  849.179949][ T9674] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  849.191197][ T9674] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  849.682691][ T9688] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1001'.
[  850.780137][ T9708] loop6: detected capacity change from 0 to 1024
[  850.818710][ T9708] EXT4-fs: Ignoring removed orlov option
[  850.853409][ T9708] /dev/loop6: Can't open blockdev
[  852.185186][ T9716] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  852.194723][ T9716] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  853.289702][ T9723] loop8: detected capacity change from 0 to 1024
[  853.334540][ T9723] EXT4-fs: Ignoring removed orlov option
[  854.041697][ T9743] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  854.051332][ T9743] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  854.982952][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1016'.
[  855.009879][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1016'.
[  855.239019][ T9763] loop8: detected capacity change from 0 to 16
[  855.345995][ T9763] erofs: (device loop8): mounted with root inode @ nid 36.
[  857.258916][   T26] audit: type=1326 audit(1746023601.262:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  857.514327][   T26] audit: type=1326 audit(1746023601.262:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  857.749377][   T26] audit: type=1326 audit(1746023601.262:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  857.840897][   T26] audit: type=1326 audit(1746023601.262:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  857.905151][   T26] audit: type=1326 audit(1746023601.262:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  857.936469][   T26] audit: type=1326 audit(1746023601.262:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  858.054675][   T26] audit: type=1326 audit(1746023601.262:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  858.130554][   T26] audit: type=1326 audit(1746023601.262:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  858.517679][   T26] audit: type=1326 audit(1746023601.262:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  858.601334][   T26] audit: type=1326 audit(1746023601.262:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.8.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  858.649238][ T9805] loop8: detected capacity change from 0 to 16
[  858.656984][ T9805] erofs: (device loop8): mounted with root inode @ nid 36.
[  860.086339][ T9812] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1030'.
[  860.937444][ T9828] loop5: detected capacity change from 0 to 16
[  860.950930][ T9828] erofs: (device loop5): mounted with root inode @ nid 36.
[  861.707405][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1035'.
[  861.756951][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1035'.
[  861.838175][ T9837] device bond0 entered promiscuous mode
[  861.884898][ T9837] device bond_slave_0 entered promiscuous mode
[  861.891491][ T9837] device bond_slave_1 entered promiscuous mode
[  861.967220][ T9837] device bridge0 entered promiscuous mode
[  861.978722][ T9837] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  862.014779][ T9837] Cannot create hsr debugfs directory
[  862.193972][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  862.734309][ T9848] loop3: detected capacity change from 0 to 512
[  862.978401][ T9848] EXT4-fs error (device loop3): __ext4_fill_super:5390: inode #2: comm syz.3.1036: iget: bad i_size value: -1
[  862.991121][ T9848] EXT4-fs (loop3): get root inode failed
[  862.996862][ T9848] EXT4-fs (loop3): mount failed
[  864.201486][ T9875] loop5: detected capacity change from 0 to 1024
[  864.215690][ T9875] EXT4-fs: Ignoring removed orlov option
[  864.367922][ T9884] loop8: detected capacity change from 0 to 512
[  864.480194][ T9884] EXT4-fs error (device loop8): __ext4_fill_super:5390: inode #2: comm syz.8.1045: iget: bad i_size value: -1
[  864.493102][ T9884] EXT4-fs (loop8): get root inode failed
[  864.499486][ T9884] EXT4-fs (loop8): mount failed
[  865.566344][ T9897] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  865.575904][ T9897] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  866.130452][ T9911] loop5: detected capacity change from 0 to 512
[  866.239379][ T4247] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  866.559659][ T4247] usb 7-1: unable to get BOS descriptor or descriptor too short
[  866.765736][ T4247] usb 7-1: config 5 has an invalid interface number: 187 but max is 1
[  866.774335][ T4247] usb 7-1: config 5 has no interface number 0
[  866.783515][ T4247] usb 7-1: config 5 interface 187 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 30
[  866.786409][ T9911] EXT4-fs error (device loop5): __ext4_fill_super:5390: inode #2: comm syz.5.1050: iget: bad i_size value: -1
[  866.814256][ T9911] EXT4-fs (loop5): get root inode failed
[  866.819955][ T9911] EXT4-fs (loop5): mount failed
[  866.842089][ T4247] usb 7-1: config 5 interface 1 has no altsetting 0
[  866.871446][ T4247] usb 7-1: config 5 interface 187 has no altsetting 0
[  866.916095][ T4247] usb 7-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice= 4.fb
[  867.091809][ T4247] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.114672][ T4247] usb 7-1: Product: syz
[  867.118880][ T4247] usb 7-1: Manufacturer: syz
[  867.123484][ T4247] usb 7-1: SerialNumber: syz
[  867.704135][ T4247] ftdi_sio 7-1:5.1: FTDI USB Serial Device converter detected
[  867.771702][ T4247] ftdi_sio ttyUSB0: unknown device type: 0x4fb
[  867.834346][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  867.877073][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  867.912854][ T4247] usb 7-1: USB disconnect, device number 4
[  867.935291][ T4247] ftdi_sio 7-1:5.1: device disconnected
[  867.942894][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  868.003877][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  868.030844][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  868.061689][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  868.098387][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  868.120859][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1057'.
[  868.160020][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1057'.
[  869.056311][ T9943] loop8: detected capacity change from 0 to 512
[  869.086797][ T9943] EXT4-fs error (device loop8): __ext4_fill_super:5390: inode #2: comm syz.8.1059: iget: bad i_size value: -1
[  869.113890][ T9943] EXT4-fs (loop8): get root inode failed
[  869.120157][ T9943] EXT4-fs (loop8): mount failed
[  870.385026][ T9958] loop6: detected capacity change from 0 to 1024
[  870.392267][ T9958] EXT4-fs: Ignoring removed nobh option
[  870.397884][ T9958] EXT4-fs: Ignoring removed bh option
[  870.403347][ T9958] /dev/loop6: Can't open blockdev
[  870.505014][ T4247] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  870.925024][ T4247] usb 6-1: Using ep0 maxpacket: 16
[  870.933043][ T4247] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  871.181729][ T4247] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  871.198335][ T4247] usb 6-1: config 0 has no interface number 0
[  872.097117][ T4247] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  872.166070][ T4247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.191258][ T4247] usb 6-1: Product: syz
[  872.201821][ T4247] usb 6-1: Manufacturer: syz
[  872.218729][ T4247] usb 6-1: SerialNumber: syz
[  872.248246][ T4247] usb 6-1: config 0 descriptor??
[  872.302761][ T4247] usb 6-1: Found UVC 0.00 device syz (046d:08f3)
[  872.354900][ T4247] usb 6-1: No valid video chain found.
[  872.472032][ T4247] usb 6-1: USB disconnect, device number 3
[  874.068251][ T9993] loop8: detected capacity change from 0 to 512
[  874.215836][ T9993] EXT4-fs (loop8): 1 orphan inode deleted
[  874.232606][ T9993] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  874.266064][ T9993] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  874.394967][ T7820] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  874.403628][T10002] loop6: detected capacity change from 0 to 1024
[  874.499204][T10002] EXT4-fs: Ignoring removed orlov option
[  874.537923][T10002] /dev/loop6: Can't open blockdev
[  874.666265][ T7820] usb 4-1: Using ep0 maxpacket: 16
[  874.716198][ T7820] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  874.771543][ T7820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  874.831111][ T7820] usb 4-1: config 0 has no interface number 0
[  874.883176][ T7820] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  874.939354][ T7820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.950107][ T7820] usb 4-1: Product: syz
[  874.954471][ T7820] usb 4-1: Manufacturer: syz
[  874.978851][ T7820] usb 4-1: SerialNumber: syz
[  874.984766][ T4539] __quota_error: 32 callbacks suppressed
[  874.984778][ T4539] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  875.019609][ T7820] usb 4-1: config 0 descriptor??
[  875.043467][ T7820] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  875.055305][ T4539] EXT4-fs error (device loop8): ext4_release_dquot:6838: comm kworker/u4:14: Failed to release dquot type 1
[  875.109856][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  875.125764][ T7820] usb 4-1: No valid video chain found.
[  875.145400][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  875.340570][ T9988] KVM: debugfs: duplicate directory 9988-5
[  875.417993][T10013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  875.444412][T10013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  875.735151][T10008] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  876.078415][T10008] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  876.126746][T10020] loop5: detected capacity change from 0 to 512
[  876.818377][T10020] EXT4-fs (loop5): 1 orphan inode deleted
[  876.824167][T10020] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  876.867241][T10020] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  876.893818][ T5843] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  876.940442][ T5843] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:19: Failed to release dquot type 1
[  877.195327][ T4259] Bluetooth: hci0: command 0x0406 tx timeout
[  877.653834][T10031] loop6: detected capacity change from 0 to 1024
[  877.664570][T10031] EXT4-fs: Ignoring removed nobh option
[  877.670351][T10031] EXT4-fs: Ignoring removed bh option
[  877.676397][T10031] /dev/loop6: Can't open blockdev
[  877.875142][   T41] usb 4-1: USB disconnect, device number 3
[  879.931813][T10035] loop7: detected capacity change from 0 to 131072
[  880.437693][ T8560] EXT4-fs (loop5): unmounting filesystem.
[  881.654853][ T9212] EXT4-fs (loop8): unmounting filesystem.
[  883.596785][T10077] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1092'.
[  883.787093][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1091'.
[  885.838128][T10109] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1097'.
[  885.910354][T10109] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1097'.
[  886.852193][T10122] loop3: detected capacity change from 0 to 1024
[  886.915459][T10122] EXT4-fs: Ignoring removed orlov option
[  886.921208][T10122] /dev/loop3: Can't open blockdev
[  887.006214][T10131] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1104'.
[  887.092928][T10134] device netdevsim0 entered promiscuous mode
[  887.136730][T10134] device netdevsim0 left promiscuous mode
[  887.162366][T10135] loop5: detected capacity change from 0 to 512
[  887.199928][T10139] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1107'.
[  887.455835][T10135] EXT4-fs (loop5): 1 orphan inode deleted
[  887.462817][T10135] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  887.472420][T10135] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  888.114805][ T4562] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  888.138958][ T4562] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:15: Failed to release dquot type 1
[  888.420000][T10162] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  888.429863][T10162] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  889.520254][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1110'.
[  889.647173][ T8560] EXT4-fs (loop5): unmounting filesystem.
[  889.764865][   T14] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  889.864528][T10177] netlink: 'syz.7.1113': attribute type 10 has an invalid length.
[  889.939428][T10177] 8021q: adding VLAN 0 to HW filter on device team0
[  889.987456][T10177] device team0 entered promiscuous mode
[  890.016973][ T1286] bond0: (slave team0): interface is now down
[  890.029182][T10177] device team_slave_0 entered promiscuous mode
[  890.040599][   T14] usb 7-1: unable to get BOS descriptor or descriptor too short
[  890.055030][ T6346] bond0: (slave team0): interface is now down
[  890.065216][   T14] usb 7-1: config 5 has an invalid interface number: 187 but max is 1
[  890.092320][T10177] device team_slave_1 entered promiscuous mode
[  890.099278][ T6346] bond0: (slave team0): interface is now down
[  890.114447][   T14] usb 7-1: config 5 has no interface number 0
[  890.130041][T10177] bond0: (slave team0): Enslaving as an active interface with an up link
[  890.140223][ T6346] bond0: (slave team0): interface is now down
[  890.163323][   T14] usb 7-1: config 5 interface 187 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 30
[  890.175208][T10183] netlink: 'syz.3.1112': attribute type 10 has an invalid length.
[  890.182006][ T4426] bond0: (slave team0): interface is now down
[  890.526686][ T5843] bond0: (slave team0): interface is now down
[  890.667648][ T4422] bond0: (slave team0): interface is now down
[  890.758400][T10183] 8021q: adding VLAN 0 to HW filter on device team0
[  890.799946][   T14] usb 7-1: config 5 interface 1 has no altsetting 0
[  890.806492][ T5843] bond0: (slave team0): interface is now down
[  890.819252][   T14] usb 7-1: config 5 interface 187 has no altsetting 0
[  890.908885][ T5843] bond0: (slave team0): interface is now down
[  890.936562][   T14] usb 7-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice= 4.fb
[  890.947563][   T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.957568][T10183] device team0 entered promiscuous mode
[  890.963315][T10183] device team_slave_0 entered promiscuous mode
[  890.974939][   T14] usb 7-1: Product: syz
[  890.979125][   T14] usb 7-1: Manufacturer: syz
[  890.994833][ T4426] bond0: (slave team0): interface is now down
[  891.011123][   T14] usb 7-1: SerialNumber: syz
[  891.019799][ T4426] bond0: (slave team0): interface is now down
[  891.066761][T10183] device team_slave_1 entered promiscuous mode
[  891.084836][T10183] bond0: (slave team0): Enslaving as an active interface with an up link
[  891.095230][ T4426] bond0: (slave team0): interface is now down
[  891.130238][ T4426] bond0: (slave team0): interface is now down
[  891.155051][ T4426] bond0: now running without any active interface!
[  891.269853][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1116'.
[  891.369125][T10199] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1115'.
[  892.021916][   T14] ftdi_sio 7-1:5.1: FTDI USB Serial Device converter detected
[  892.034957][   T14] ftdi_sio ttyUSB0: unknown device type: 0x4fb
[  892.196099][   T14] usb 7-1: USB disconnect, device number 5
[  892.202716][   T14] ftdi_sio 7-1:5.1: device disconnected
[  894.318193][T10224] loop5: detected capacity change from 0 to 1024
[  894.329142][T10224] EXT4-fs: Ignoring removed nobh option
[  894.334923][T10224] EXT4-fs: Ignoring removed bh option
[  894.356645][T10224] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  894.631618][T10224] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  894.787915][T10224] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3841: comm syz.5.1118: Allocating blocks 497-513 which overlap fs metadata
[  894.817944][T10224] EXT4-fs (loop5): pa ffff8880563372a0: logic 256, phys. 385, len 8
[  894.826098][T10224] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1
[  896.811721][T10232] loop8: detected capacity change from 0 to 131072
[  896.821218][T10241] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1123'.
[  896.831430][T10240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'.
[  896.917553][T10232] F2FS-fs (loop8): QUOTA feature is enabled, so ignore qf_name
[  896.952583][T10232] F2FS-fs (loop8): invalid crc value
[  897.551963][T10232] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  897.599210][T10232] F2FS-fs (loop8): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [1027, 3] run fsck to fix.
[  897.611900][T10232] F2FS-fs (loop8): Failed to read root inode
[  898.436183][ T8560] EXT4-fs (loop5): unmounting filesystem.
[  898.880150][T10269] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1125'.
[  899.506280][T10273] device netdevsim0 entered promiscuous mode
[  899.531292][T10272] loop6: detected capacity change from 0 to 1024
[  899.592563][T10272] EXT4-fs: Ignoring removed orlov option
[  899.620761][T10272] /dev/loop6: Can't open blockdev
[  899.817623][T10273] device netdevsim0 left promiscuous mode
[  902.359082][T10280] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  902.368793][T10280] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  902.621625][T10298] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1134'.
[  902.636179][T10296] loop7: detected capacity change from 0 to 1024
[  902.668892][T10296] EXT4-fs: Ignoring removed orlov option
[  902.694778][T10296] /dev/loop7: Can't open blockdev
[  902.890983][ T4293] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  904.147117][T10311] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  904.157206][T10311] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  904.204984][ T4293] usb 9-1: unable to get BOS descriptor or descriptor too short
[  904.281582][ T4293] usb 9-1: config 5 has an invalid interface number: 187 but max is 1
[  904.326324][ T4293] usb 9-1: config 5 has no interface number 0
[  904.360826][ T4293] usb 9-1: config 5 interface 187 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 30
[  904.503603][T10322] loop7: detected capacity change from 0 to 512
[  904.519887][ T4293] usb 9-1: config 5 interface 1 has no altsetting 0
[  905.066101][T10322] EXT4-fs error (device loop7): __ext4_fill_super:5390: inode #2: comm syz.7.1140: iget: bad i_size value: -1
[  905.078263][T10322] EXT4-fs (loop7): get root inode failed
[  905.083903][T10322] EXT4-fs (loop7): mount failed
[  905.270474][ T4293] usb 9-1: config 5 interface 187 has no altsetting 0
[  905.507294][ T4293] usb 9-1: string descriptor 0 read error: -71
[  905.513603][ T4293] usb 9-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice= 4.fb
[  905.713292][ T4293] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.194364][ T4293] usb 9-1: can't set config #5, error -71
[  907.260496][ T4293] usb 9-1: USB disconnect, device number 2
[  909.313446][T10363] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1142'.
[  909.358768][T10361] loop6: detected capacity change from 0 to 1024
[  909.370200][T10361] EXT4-fs: Ignoring removed nobh option
[  909.375982][T10361] EXT4-fs: Ignoring removed bh option
[  909.382047][T10361] /dev/loop6: Can't open blockdev
[  910.132433][T10374] loop6: detected capacity change from 0 to 16
[  910.139969][T10374] /dev/loop6: Can't open blockdev
[  910.187202][ T7145] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  910.430120][T10378] device netdevsim0 entered promiscuous mode
[  910.454821][T10378] device netdevsim0 left promiscuous mode
[  910.837897][   T26] audit: type=1326 audit(1746023655.242:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  910.922579][   T26] audit: type=1326 audit(1746023655.242:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  911.023174][   T26] audit: type=1326 audit(1746023655.262:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  911.131414][   T26] audit: type=1326 audit(1746023655.262:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  911.242694][   T26] audit: type=1326 audit(1746023655.262:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  911.298756][   T26] audit: type=1326 audit(1746023655.262:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  911.437392][   T26] audit: type=1326 audit(1746023655.262:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  911.574067][T10401] netlink: 'syz.5.1157': attribute type 10 has an invalid length.
[  911.614389][   T26] audit: type=1326 audit(1746023655.262:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  911.654500][T10396] loop8: detected capacity change from 0 to 16
[  911.684131][T10401] 8021q: adding VLAN 0 to HW filter on device team0
[  911.692433][T10401] device team0 entered promiscuous mode
[  911.703931][T10401] device team_slave_0 entered promiscuous mode
[  911.710813][T10401] device team_slave_1 entered promiscuous mode
[  911.718241][T10396] erofs: (device loop8): mounted with root inode @ nid 36.
[  911.831581][T10401] bond0: (slave team0): Enslaving as an active interface with an up link
[  912.043224][   T26] audit: type=1326 audit(1746023655.262:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  912.318963][   T26] audit: type=1326 audit(1746023655.262:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  912.593103][T10413] netlink: 'syz.7.1159': attribute type 10 has an invalid length.
[  912.828650][T10421] loop3: detected capacity change from 0 to 1024
[  912.836220][T10421] EXT4-fs: Ignoring removed nobh option
[  912.841804][T10421] EXT4-fs: Ignoring removed bh option
[  912.847419][T10421] /dev/loop3: Can't open blockdev
[  913.491230][T10430] netlink: 'syz.6.1164': attribute type 10 has an invalid length.
[  913.710951][T10430] 8021q: adding VLAN 0 to HW filter on device team0
[  914.376117][T10430] bond0: (slave team0): Enslaving as an active interface with an up link
[  914.468028][ T8281] bond0: (slave team0): link status definitely up, 20000 Mbps full duplex
[  914.555577][T10451] device netdevsim0 entered promiscuous mode
[  914.602928][T10451] device netdevsim0 left promiscuous mode
[  916.841680][T10475] device netdevsim0 entered promiscuous mode
[  916.907845][T10475] device netdevsim0 left promiscuous mode
[  917.005558][T10480] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1174'.
[  917.496588][T10491] loop7: detected capacity change from 0 to 1024
[  917.503838][T10491] EXT4-fs: Ignoring removed nobh option
[  917.511440][T10491] EXT4-fs: Ignoring removed bh option
[  917.517034][T10491] /dev/loop7: Can't open blockdev
[  917.542816][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  918.902335][T10503] loop6: detected capacity change from 0 to 131072
[  920.540549][T10526] device netdevsim0 entered promiscuous mode
[  920.607733][T10526] device netdevsim0 left promiscuous mode
[  920.810888][T10533] netlink: 'syz.3.1188': attribute type 29 has an invalid length.
[  920.856728][T10533] netlink: 'syz.3.1188': attribute type 29 has an invalid length.
[  921.275659][T10544] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1192'.
[  921.328367][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1192'.
[  921.449156][T10554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1193'.
[  925.186694][T10602] loop3: detected capacity change from 0 to 512
[  925.207079][T10602] EXT4-fs error (device loop3): __ext4_fill_super:5390: inode #2: comm syz.3.1203: iget: bad i_size value: -1
[  925.218888][T10602] EXT4-fs (loop3): get root inode failed
[  925.224537][T10602] EXT4-fs (loop3): mount failed
[  925.300430][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  925.359830][T10607] device netdevsim0 entered promiscuous mode
[  925.425773][T10607] device netdevsim0 left promiscuous mode
[  927.834322][T10623] loop6: detected capacity change from 0 to 512
[  927.866772][T10623] EXT4-fs error (device loop6): __ext4_fill_super:5390: inode #2: comm syz.6.1209: iget: bad i_size value: -1
[  927.878916][T10623] EXT4-fs (loop6): get root inode failed
[  927.884731][T10623] EXT4-fs (loop6): mount failed
[  928.069708][ T7145] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  928.692016][T10633] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1210'.
[  929.834313][T10651] loop6: detected capacity change from 0 to 512
[  929.895618][T10651] EXT4-fs error (device loop6): __ext4_fill_super:5390: inode #2: comm syz.6.1214: iget: bad i_size value: -1
[  929.907616][T10651] EXT4-fs (loop6): get root inode failed
[  929.913263][T10651] EXT4-fs (loop6): mount failed
[  931.669095][T10671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1217'.
[  933.506013][T10699] device netdevsim0 entered promiscuous mode
[  933.685466][T10704] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1222'.
[  935.297650][T10699] device netdevsim0 left promiscuous mode
[  935.596850][T10716] netlink: 'syz.7.1228': attribute type 10 has an invalid length.
[  935.641819][T10718] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1227'.
[  936.725346][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  936.731729][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  936.809313][T10735] device netdevsim0 entered promiscuous mode
[  937.034088][T10732] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1231'.
[  938.595384][T10779] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1243'.
[  938.625050][ T4259] Bluetooth: hci1: command 0x0406 tx timeout
[  939.356849][T10800] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1250'.
[  939.559238][T10813] loop3: detected capacity change from 0 to 512
[  939.602041][T10813] EXT4-fs error (device loop3): __ext4_fill_super:5390: inode #2: comm syz.3.1256: iget: bad i_size value: -1
[  939.614705][T10813] EXT4-fs (loop3): get root inode failed
[  939.620362][T10813] EXT4-fs (loop3): mount failed
[  939.701240][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  940.881935][T10831] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  940.897877][T10831] bond1: (slave vti0): Error -95 calling set_mac_address
[  941.434089][T10850] loop8: detected capacity change from 0 to 16
[  941.455091][T10850] erofs: (device loop8): mounted with root inode @ nid 36.
[  941.552544][T10846] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1264'.
[  942.089457][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  942.089474][   T26] audit: type=1326 audit(1746023686.442:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.8.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  942.164445][   T26] audit: type=1326 audit(1746023686.442:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.8.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  942.598859][T10868] loop5: detected capacity change from 0 to 1024
[  942.700593][T10868] EXT4-fs: Ignoring removed orlov option
[  942.734247][T10872] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1269'.
[  943.845928][T10883] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  943.855671][T10883] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  946.274762][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1279'.
[  947.174484][T10914] loop8: detected capacity change from 0 to 16
[  947.255146][T10914] erofs: (device loop8): mounted with root inode @ nid 36.
[  947.326051][T10906] loop6: detected capacity change from 0 to 131072
[  947.666035][   T26] audit: type=1326 audit(1746023692.002:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  949.061699][   T26] audit: type=1326 audit(1746023692.002:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  949.085989][   T26] audit: type=1326 audit(1746023692.002:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  949.118948][   T26] audit: type=1326 audit(1746023692.002:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  949.143491][   T26] audit: type=1326 audit(1746023692.002:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  949.294718][   T26] audit: type=1326 audit(1746023692.002:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  949.361878][   T26] audit: type=1326 audit(1746023692.002:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  949.386734][T10919] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1282'.
[  949.414988][   T26] audit: type=1326 audit(1746023692.002:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  949.519609][   T26] audit: type=1326 audit(1746023692.002:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  949.659645][   T26] audit: type=1326 audit(1746023692.002:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[  950.168582][T10944] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1285'.
[  950.218877][T10950] loop7: detected capacity change from 0 to 1024
[  950.267987][T10950] EXT4-fs: Ignoring removed orlov option
[  950.336881][T10950] /dev/loop7: Can't open blockdev
[  950.554447][T10960] loop6: detected capacity change from 0 to 16
[  950.595608][T10960] /dev/loop6: Can't open blockdev
[  950.697576][ T7913] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  951.086607][T10963] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  951.096174][T10963] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  951.233683][T10968] loop8: detected capacity change from 0 to 1024
[  951.343674][T10964] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1292'.
[  951.371976][T10968] EXT4-fs: Ignoring removed orlov option
[  952.808577][T10982] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  952.818232][T10982] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  953.076728][T10986] loop3: detected capacity change from 0 to 1024
[  953.083830][T10986] EXT4-fs: Ignoring removed orlov option
[  953.138555][T10986] /dev/loop3: Can't open blockdev
[  953.170706][T10992] loop6: detected capacity change from 0 to 512
[  953.285658][T10992] /dev/loop6: Can't open blockdev
[  953.580176][T10999] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  953.596361][T10999] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  954.151945][T10996] loop7: detected capacity change from 0 to 1024
[  954.160759][ T7145] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  954.350120][T10996] EXT4-fs: Ignoring removed orlov option
[  954.370283][T10996] /dev/loop7: Can't open blockdev
[  955.052515][T10996] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  955.062111][T10996] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  955.482965][T11018] KVM: debugfs: duplicate directory 11018-4
[  958.591905][T11038] loop7: detected capacity change from 0 to 131072
[  960.417419][T11053] loop3: detected capacity change from 0 to 131072
[  960.430486][T11052] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1314'.
[  962.153460][T11080] loop7: detected capacity change from 0 to 1024
[  962.160885][T11080] EXT4-fs: Ignoring removed nobh option
[  962.166547][T11080] EXT4-fs: Ignoring removed bh option
[  962.172026][T11080] /dev/loop7: Can't open blockdev
[  962.270020][T11081] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1318'.
[  964.024844][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  964.551808][T11109] loop7: detected capacity change from 0 to 16
[  964.559658][T11109] /dev/loop7: Can't open blockdev
[  965.190834][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  965.190850][   T26] audit: type=1326 audit(1746023709.582:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  965.299216][   T26] audit: type=1326 audit(1746023709.582:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  965.431487][   T26] audit: type=1326 audit(1746023709.582:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  965.473474][   T26] audit: type=1326 audit(1746023709.592:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  965.515824][   T26] audit: type=1326 audit(1746023709.592:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  965.611822][   T26] audit: type=1326 audit(1746023709.592:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  965.714615][   T26] audit: type=1326 audit(1746023709.592:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  966.217679][T11124] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1328'.
[  966.238236][   T26] audit: type=1326 audit(1746023709.592:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  966.262296][   T26] audit: type=1326 audit(1746023709.592:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  966.291753][   T26] audit: type=1326 audit(1746023709.592:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aac58e969 code=0x7ffc0000
[  966.343284][T11133] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1330'.
[  966.572682][T11132] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1332'.
[  966.671187][T11144] loop3: detected capacity change from 0 to 512
[  966.716375][T11144] /dev/loop3: Can't open blockdev
[  966.762234][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  967.942131][T11157] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1337'.
[  968.131725][T11174] loop5: detected capacity change from 0 to 1024
[  968.180457][T11178] loop6: detected capacity change from 0 to 1024
[  968.226272][T11174] EXT4-fs: Ignoring removed orlov option
[  968.233689][T11178] EXT4-fs: Ignoring removed orlov option
[  968.266037][T11178] /dev/loop6: Can't open blockdev
[  968.325804][T11180] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1341'.
[  969.418387][T11189] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  969.428281][T11189] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  969.711776][T11195] loop6: detected capacity change from 0 to 16
[  969.719213][T11195] /dev/loop6: Can't open blockdev
[  969.764174][ T7145] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  971.648324][T11205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  971.657895][T11205] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  971.670842][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  971.670857][   T26] audit: type=1326 audit(1746023716.072:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  971.690759][T11202] loop3: detected capacity change from 0 to 512
[  971.725728][T11202] /dev/loop3: Can't open blockdev
[  972.030989][T11210] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1348'.
[  972.061302][   T26] audit: type=1326 audit(1746023716.072:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  972.577178][   T26] audit: type=1326 audit(1746023716.072:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  972.701877][   T26] audit: type=1326 audit(1746023716.072:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  972.784459][   T26] audit: type=1326 audit(1746023716.072:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  972.881533][   T26] audit: type=1326 audit(1746023716.072:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  972.984967][   T26] audit: type=1326 audit(1746023716.072:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  973.063490][   T26] audit: type=1326 audit(1746023716.072:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  973.129344][   T26] audit: type=1326 audit(1746023716.072:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  973.273477][   T26] audit: type=1326 audit(1746023716.072:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db38e969 code=0x7ffc0000
[  973.345124][T11236] loop7: detected capacity change from 0 to 512
[  973.379029][T11236] /dev/loop7: Can't open blockdev
[  973.403221][T11238] loop8: detected capacity change from 0 to 1024
[  973.445331][T11238] EXT4-fs: Ignoring removed orlov option
[  974.278105][T11254] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1360'.
[  974.665308][T11249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1359'.
[  975.243154][T11259] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  975.252904][T11259] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  975.558693][T11267] loop6: detected capacity change from 0 to 512
[  975.565956][T11267] /dev/loop6: Can't open blockdev
[  975.587617][T11271] loop8: detected capacity change from 0 to 1024
[  975.607890][T11271] EXT4-fs: Ignoring removed orlov option
[  975.657815][ T7145] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  977.053148][T11283] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  977.062763][T11283] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  979.305330][T11314] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1370'.
[  980.286939][T11333] loop3: detected capacity change from 0 to 512
[  980.299307][T11333] /dev/loop3: Can't open blockdev
[  980.808161][T11335] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1372'.
[  981.801832][T11354] loop8: detected capacity change from 0 to 512
[  982.506510][T11354] EXT4-fs (loop8): 1 orphan inode deleted
[  982.516186][T11354] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  982.582385][T11354] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  982.610656][ T5828] __quota_error: 4 callbacks suppressed
[  982.610671][ T5828] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  982.634470][ T5828] EXT4-fs error (device loop8): ext4_release_dquot:6838: comm kworker/u4:18: Failed to release dquot type 1
[  982.733975][T11365] loop3: detected capacity change from 0 to 512
[  982.762780][T11365] EXT4-fs error (device loop3): __ext4_fill_super:5390: inode #2: comm syz.3.1386: iget: bad i_size value: -1
[  982.774674][T11365] EXT4-fs (loop3): get root inode failed
[  982.780326][T11365] EXT4-fs (loop3): mount failed
[  984.709780][ T9212] EXT4-fs (loop8): unmounting filesystem.
[  984.762573][T11387] loop3: detected capacity change from 0 to 512
[  984.790088][T11387] /dev/loop3: Can't open blockdev
[  985.079854][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  986.678658][T11408] loop8: detected capacity change from 0 to 1024
[  986.753045][T11408] EXT4-fs: Ignoring removed orlov option
[  986.791097][T11406] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1395'.
[  987.164240][T11423] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  987.174063][T11423] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  993.150721][T11449] netlink: 'syz.6.1403': attribute type 10 has an invalid length.
[  993.309527][ T8281] bond0: (slave team0): link status definitely down, disabling slave
[  994.096149][T11460] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1409'.
[  994.246769][T11472] loop8: detected capacity change from 0 to 512
[  994.483957][T11472] EXT4-fs (loop8): 1 orphan inode deleted
[  994.495026][ T1286] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  994.521328][T11472] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  994.555290][ T1286] EXT4-fs error (device loop8): ext4_release_dquot:6838: comm kworker/u4:5: Failed to release dquot type 1
[  994.570047][T11473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1412'.
[  994.590894][T11472] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  995.502359][ T9212] EXT4-fs (loop8): unmounting filesystem.
[  995.526805][T11494] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1416'.
[  995.703398][T11508] device netdevsim0 entered promiscuous mode
[  995.744946][T11508] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  995.933458][T11514] loop5: detected capacity change from 0 to 512
[  996.064088][T11514] EXT4-fs (loop5): 1 orphan inode deleted
[  996.074903][    T9] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  996.131740][T11514] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  996.163600][T11521] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1421'.
[  996.191062][T11522] fuse: Bad value for 'fd'
[  996.238694][T11514] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  996.266837][    T9] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:0: Failed to release dquot type 1
[  997.733573][ T8560] EXT4-fs (loop5): unmounting filesystem.
[  997.989171][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  997.995539][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  998.023000][T11545] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1428'.
[  998.220625][T11549] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1424'.
[  998.599322][T11559] loop5: detected capacity change from 0 to 16
[  998.607535][T11559] erofs: (device loop5): mounted with root inode @ nid 36.
[  999.710561][   T26] audit: type=1326 audit(1746023743.432:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[  999.953122][   T26] audit: type=1326 audit(1746023743.432:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[  999.976426][   T26] audit: type=1326 audit(1746023743.432:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[ 1000.000430][   T26] audit: type=1326 audit(1746023743.432:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[ 1000.046182][   T26] audit: type=1326 audit(1746023743.432:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[ 1000.084355][T11577] fuse: Bad value for 'fd'
[ 1000.124944][T11579] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1433'.
[ 1000.540283][   T26] audit: type=1326 audit(1746023743.432:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[ 1000.744623][   T26] audit: type=1326 audit(1746023743.432:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[ 1000.767683][   T26] audit: type=1326 audit(1746023743.432:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[ 1000.791178][   T26] audit: type=1326 audit(1746023743.432:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[ 1000.814307][   T26] audit: type=1326 audit(1746023743.432:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717858e969 code=0x7ffc0000
[ 1000.844508][T11583] loop6: detected capacity change from 0 to 1024
[ 1000.902819][T11583] EXT4-fs: Ignoring removed orlov option
[ 1000.917178][T11583] /dev/loop6: Can't open blockdev
[ 1001.536179][T11599] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1001.546061][T11599] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1002.363788][T11605] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1443'.
[ 1002.823956][T11616] loop7: detected capacity change from 0 to 1024
[ 1002.851972][T11616] EXT4-fs: Ignoring removed orlov option
[ 1003.574496][T11616] /dev/loop7: Can't open blockdev
[ 1003.742093][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1004.107203][T11636] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1004.116848][T11636] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1004.771185][T11642] loop5: detected capacity change from 0 to 1024
[ 1004.774754][T11638] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1447'.
[ 1004.778541][T11642] EXT4-fs: Ignoring removed orlov option
[ 1005.267121][T11651] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1005.276733][T11651] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1006.002355][T11657] loop8: detected capacity change from 0 to 512
[ 1006.015534][T11657] EXT4-fs error (device loop8): __ext4_fill_super:5390: inode #2: comm syz.8.1455: iget: bad i_size value: -1
[ 1006.028107][T11657] EXT4-fs (loop8): get root inode failed
[ 1006.033778][T11657] EXT4-fs (loop8): mount failed
[ 1006.191755][T11666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1456'.
[ 1009.092638][T11693] device syzkaller0 entered promiscuous mode
[ 1010.237894][T11718] loop3: detected capacity change from 0 to 16
[ 1010.245131][T11718] /dev/loop3: Can't open blockdev
[ 1011.046215][T11719] loop7: detected capacity change from 0 to 131072
[ 1011.637004][ T7145] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1012.001746][   T26] kauditd_printk_skb: 4 callbacks suppressed
[ 1012.003350][ T7913] I/O error, dev loop7, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1012.923554][   T26] audit: type=1326 audit(1746023756.302:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[ 1013.011817][   T26] audit: type=1326 audit(1746023756.302:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[ 1013.074217][   T26] audit: type=1326 audit(1746023756.302:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[ 1013.124622][   T26] audit: type=1326 audit(1746023756.302:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[ 1013.162300][   T26] audit: type=1326 audit(1746023756.302:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[ 1013.206304][   T26] audit: type=1326 audit(1746023756.302:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[ 1013.246138][   T26] audit: type=1326 audit(1746023756.302:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[ 1013.272043][   T26] audit: type=1326 audit(1746023756.302:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[ 1013.349481][   T26] audit: type=1326 audit(1746023756.302:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[ 1013.419616][   T26] audit: type=1326 audit(1746023756.302:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ce18e969 code=0x7ffc0000
[ 1016.532413][T11773] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1478'.
[ 1016.938905][T11787] loop6: detected capacity change from 0 to 512
[ 1016.959765][T11787] /dev/loop6: Can't open blockdev
[ 1016.972933][T11786] tipc: Started in network mode
[ 1016.993826][T11786] tipc: Node identity 3231f7cc9e1b, cluster identity 4711
[ 1017.047600][T11786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1017.723672][ T7145] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1017.959528][T11786] device syzkaller0 entered promiscuous mode
[ 1018.131056][ T4325] tipc: Node number set to 2888497100
[ 1018.177847][T11786] tipc: Resetting bearer <eth:syzkaller0>
[ 1018.744921][T11785] tipc: Resetting bearer <eth:syzkaller0>
[ 1022.219432][T11785] tipc: Disabling bearer <eth:syzkaller0>
[ 1022.241495][T11826] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1022.603830][T11874] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1494'.
[ 1024.477177][T11905] loop8: detected capacity change from 0 to 16
[ 1024.485062][T11905] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1024.577136][T11914] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1508'.
[ 1025.316139][   T26] kauditd_printk_skb: 4 callbacks suppressed
[ 1025.316156][   T26] audit: type=1326 audit(1746023769.212:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[ 1025.458007][   T26] audit: type=1326 audit(1746023769.212:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[ 1025.483132][   T26] audit: type=1326 audit(1746023769.242:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[ 1025.513386][   T26] audit: type=1326 audit(1746023769.242:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[ 1025.609697][   T26] audit: type=1326 audit(1746023769.242:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[ 1025.755671][   T26] audit: type=1326 audit(1746023769.272:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[ 1025.857037][   T26] audit: type=1326 audit(1746023769.272:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[ 1026.447169][   T26] audit: type=1326 audit(1746023769.272:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[ 1026.486702][   T26] audit: type=1326 audit(1746023769.282:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[ 1027.350985][   T26] audit: type=1326 audit(1746023769.292:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.8.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517858e969 code=0x7ffc0000
[ 1027.540804][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1518'.
[ 1027.875948][T11971] tipc: Started in network mode
[ 1027.893305][T11971] tipc: Node identity 823955be0a65, cluster identity 4711
[ 1027.923263][T11971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1028.049663][T11977] device syzkaller0 entered promiscuous mode
[ 1028.070009][T11977] tipc: Resetting bearer <eth:syzkaller0>
[ 1028.153367][T11970] tipc: Resetting bearer <eth:syzkaller0>
[ 1028.240819][T11984] loop6: detected capacity change from 0 to 512
[ 1028.273992][T11984] /dev/loop6: Can't open blockdev
[ 1029.168394][ T5340] tipc: Node number set to 2287752638
[ 1031.307076][T12014] loop5: detected capacity change from 0 to 512
[ 1031.341724][T12014] EXT4-fs error (device loop5): __ext4_fill_super:5390: inode #2: comm syz.5.1529: iget: bad i_size value: -1
[ 1031.354990][T12014] EXT4-fs (loop5): get root inode failed
[ 1031.360656][T12014] EXT4-fs (loop5): mount failed
[ 1033.756390][T11970] tipc: Disabling bearer <eth:syzkaller0>
[ 1036.441619][T12096] loop3: detected capacity change from 0 to 1024
[ 1036.515973][T12096] EXT4-fs: Ignoring removed orlov option
[ 1036.574876][T12096] /dev/loop3: Can't open blockdev
[ 1037.831932][T12113] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1037.841601][T12113] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1037.857513][ T4999] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1038.636626][ T4999] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1038.660324][ T4999] usb 7-1: config 5 has an invalid interface number: 187 but max is 1
[ 1038.692041][T12125] loop8: detected capacity change from 0 to 512
[ 1038.705371][ T4999] usb 7-1: config 5 has no interface number 0
[ 1038.711553][ T4999] usb 7-1: config 5 interface 187 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 30
[ 1038.744100][T12125] EXT4-fs error (device loop8): __ext4_fill_super:5390: inode #2: comm syz.8.1566: iget: bad i_size value: -1
[ 1038.766626][T12125] EXT4-fs (loop8): get root inode failed
[ 1038.772330][T12125] EXT4-fs (loop8): mount failed
[ 1038.810367][ T4999] usb 7-1: config 5 interface 1 has no altsetting 0
[ 1038.836544][ T4999] usb 7-1: config 5 interface 187 has no altsetting 0
[ 1038.867730][ T4999] usb 7-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice= 4.fb
[ 1039.063358][ T4999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1039.072182][ T4999] usb 7-1: Product: syz
[ 1039.076625][ T4999] usb 7-1: Manufacturer: syz
[ 1039.081240][ T4999] usb 7-1: SerialNumber: syz
[ 1039.822032][ T4999] ftdi_sio 7-1:5.1: FTDI USB Serial Device converter detected
[ 1039.872842][ T4999] ftdi_sio ttyUSB0: unknown device type: 0x4fb
[ 1039.928194][ T4999] usb 7-1: USB disconnect, device number 6
[ 1039.954900][T12145] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1039.970834][ T4999] ftdi_sio 7-1:5.1: device disconnected
[ 1040.027318][T12145] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1041.979585][T12206] loop7: detected capacity change from 0 to 512
[ 1041.996600][T12206] EXT4-fs error (device loop7): __ext4_fill_super:5390: inode #2: comm syz.7.1589: iget: bad i_size value: -1
[ 1042.008679][T12206] EXT4-fs (loop7): get root inode failed
[ 1042.014331][T12206] EXT4-fs (loop7): mount failed
[ 1044.562182][T12220] loop5: detected capacity change from 0 to 512
[ 1044.895015][T12220] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1591: casefold flag without casefold feature
[ 1045.150638][T12220] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1591: couldn't read orphan inode 15 (err -117)
[ 1045.207419][T12220] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1045.512351][T12237] loop7: detected capacity change from 0 to 512
[ 1045.988548][T12237] EXT4-fs error (device loop7): __ext4_fill_super:5390: inode #2: comm syz.7.1596: iget: bad i_size value: -1
[ 1046.001720][T12237] EXT4-fs (loop7): get root inode failed
[ 1046.007496][T12237] EXT4-fs (loop7): mount failed
[ 1047.484086][ T8560] EXT4-fs (loop5): unmounting filesystem.
[ 1047.879989][T12272] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1604'.
[ 1048.535734][T12283] device bpq0 entered promiscuous mode
[ 1048.939738][T12287] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1049.354189][T12287] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1049.706418][T12301] loop5: detected capacity change from 0 to 512
[ 1049.772806][T12303] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1049.788073][T12303] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1049.814855][T12301] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1615: casefold flag without casefold feature
[ 1049.843874][T12301] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1615: couldn't read orphan inode 15 (err -117)
[ 1049.875718][T12301] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1050.778601][ T8560] EXT4-fs (loop5): unmounting filesystem.
[ 1051.147947][T12347] loop5: detected capacity change from 0 to 1024
[ 1051.203764][T12347] EXT4-fs: Ignoring removed orlov option
[ 1051.253361][T12350] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1628'.
[ 1051.489173][T12358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1632'.
[ 1051.632113][T12361] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1051.641819][T12361] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1052.216392][T12360] loop7: detected capacity change from 0 to 512
[ 1052.225383][T12360] /dev/loop7: Can't open blockdev
[ 1052.354846][ T7145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1052.515071][T12368] loop8: detected capacity change from 0 to 512
[ 1052.632782][T12368] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.1635: casefold flag without casefold feature
[ 1052.656011][T12368] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1635: couldn't read orphan inode 15 (err -117)
[ 1052.707620][T12368] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1053.144926][ T4473] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1053.421780][ T4473] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1053.461197][ T4473] usb 4-1: config 5 has an invalid interface number: 187 but max is 1
[ 1053.509855][ T4473] usb 4-1: config 5 has no interface number 0
[ 1053.544334][ T4473] usb 4-1: config 5 interface 187 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 30
[ 1053.623218][ T4473] usb 4-1: config 5 interface 1 has no altsetting 0
[ 1053.665488][ T4473] usb 4-1: config 5 interface 187 has no altsetting 0
[ 1053.682501][ T9212] EXT4-fs (loop8): unmounting filesystem.
[ 1053.696070][ T4473] usb 4-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice= 4.fb
[ 1053.768513][T12401] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1643'.
[ 1054.016696][T12406] ==================================================================
[ 1054.027108][T12406] BUG: KASAN: use-after-free in rose_get_neigh+0x17e/0x550
[ 1054.034345][T12406] Read of size 1 at addr ffff88805a6cd030 by task syz.7.1646/12406
[ 1054.042250][T12406] 
[ 1054.044693][T12406] CPU: 1 PID: 12406 Comm: syz.7.1646 Not tainted 6.1.135-syzkaller #0
[ 1054.052846][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 1054.062917][T12406] Call Trace:
[ 1054.066199][T12406]  <TASK>
[ 1054.069140][T12406]  dump_stack_lvl+0x168/0x22e
[ 1054.074021][T12406]  ? __lock_acquire+0x7c50/0x7c50
[ 1054.079069][T12406]  ? show_regs_print_info+0x12/0x12
[ 1054.084276][T12406]  ? load_image+0x3b0/0x3b0
[ 1054.088960][T12406]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 1054.094342][T12406]  ? __virt_addr_valid+0x188/0x540
[ 1054.099462][T12406]  ? __virt_addr_valid+0x465/0x540
[ 1054.104577][T12406]  ? rose_get_neigh+0x17e/0x550
[ 1054.109429][T12406]  print_report+0xa8/0x220
[ 1054.113845][T12406]  kasan_report+0x10b/0x140
[ 1054.118361][T12406]  ? rose_get_neigh+0x17e/0x550
[ 1054.123222][T12406]  rose_get_neigh+0x17e/0x550
[ 1054.128173][T12406]  rose_connect+0x412/0x1380
[ 1054.128586][ T4473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.132759][T12406]  ? aa_sk_perm+0x7e5/0x920
[ 1054.140804][ T4473] usb 4-1: Product: syz
[ 1054.145382][T12406]  ? rose_bind+0xa90/0xa90
[ 1054.145408][T12406]  ? aa_af_perm+0x280/0x2b0
[ 1054.145428][T12406]  ? tomoyo_socket_connect_permission+0x195/0x280
[ 1054.149597][ T4473] usb 4-1: Manufacturer: syz
[ 1054.154016][T12406]  ? __might_fault+0xa6/0x120
[ 1054.158575][ T4473] usb 4-1: SerialNumber: syz
[ 1054.164906][T12406]  ? bpf_lsm_socket_connect+0x5/0x10
[ 1054.165009][T12406]  ? security_socket_connect+0x7c/0xa0
[ 1054.165040][T12406]  ? rose_bind+0xa90/0xa90
[ 1054.165056][T12406]  __sys_connect+0x389/0x410
[ 1054.165079][T12406]  ? __sys_connect_file+0x170/0x170
[ 1054.165105][T12406]  __x64_sys_connect+0x76/0x80
[ 1054.165126][T12406]  do_syscall_64+0x4c/0xa0
[ 1054.165145][T12406]  ? clear_bhb_loop+0x45/0xa0
[ 1054.165162][T12406]  ? clear_bhb_loop+0x45/0xa0
[ 1054.165180][T12406]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1054.165203][T12406] RIP: 0033:0x7f1aac58e969
[ 1054.165233][T12406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1054.165251][T12406] RSP: 002b:00007f1aad4d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1054.165273][T12406] RAX: ffffffffffffffda RBX: 00007f1aac7b5fa0 RCX: 00007f1aac58e969
[ 1054.165286][T12406] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004
[ 1054.165298][T12406] RBP: 00007f1aac610ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1054.165310][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1054.165322][T12406] R13: 0000000000000000 R14: 00007f1aac7b5fa0 R15: 00007ffdc16ed458
[ 1054.165340][T12406]  </TASK>
[ 1054.165346][T12406] 
[ 1054.165350][T12406] Allocated by task 9005:
[ 1054.165358][T12406]  kasan_set_track+0x4b/0x70
[ 1054.165379][T12406]  __kasan_kmalloc+0x8e/0xa0
[ 1054.165399][T12406]  rose_add_node+0x227/0xdb0
[ 1054.165415][T12406]  rose_rt_ioctl+0xa4c/0xe90
[ 1054.165430][T12406]  rose_ioctl+0x27a/0x790
[ 1054.165444][T12406]  sock_do_ioctl+0xd3/0x2f0
[ 1054.165458][T12406]  sock_ioctl+0x4ed/0x6e0
[ 1054.165477][T12406]  __se_sys_ioctl+0xfa/0x170
[ 1054.165496][T12406]  do_syscall_64+0x4c/0xa0
[ 1054.165512][T12406]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1054.165533][T12406] 
[ 1054.165536][T12406] Freed by task 12283:
[ 1054.165543][T12406]  kasan_set_track+0x4b/0x70
[ 1054.165562][T12406]  kasan_save_free_info+0x2d/0x50
[ 1054.165577][T12406]  ____kasan_slab_free+0x126/0x1e0
[ 1054.165596][T12406]  slab_free_freelist_hook+0x131/0x1a0
[ 1054.165613][T12406]  __kmem_cache_free+0xb6/0x1f0
[ 1054.165627][T12406]  rose_rt_device_down+0x3e5/0x430
[ 1054.165640][T12406]  rose_device_event+0x600/0x690
[ 1054.165652][T12406]  raw_notifier_call_chain+0xcb/0x160
[ 1054.165668][T12406]  __dev_notify_flags+0x178/0x2d0
[ 1054.165685][T12406]  dev_change_flags+0xe3/0x1a0
[ 1054.165701][T12406]  dev_ifsioc+0x159/0xe90
[ 1054.165715][T12406]  dev_ioctl+0x578/0xea0
[ 1054.165728][T12406]  sock_do_ioctl+0x222/0x2f0
[ 1054.165741][T12406]  sock_ioctl+0x4ed/0x6e0
[ 1054.165760][T12406]  __se_sys_ioctl+0xfa/0x170
[ 1054.165778][T12406]  do_syscall_64+0x4c/0xa0
[ 1054.165793][T12406]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1054.445717][T12406] 
[ 1054.448111][T12406] The buggy address belongs to the object at ffff88805a6cd000
[ 1054.448111][T12406]  which belongs to the cache kmalloc-512 of size 512
[ 1054.462233][T12406] The buggy address is located 48 bytes inside of
[ 1054.462233][T12406]  512-byte region [ffff88805a6cd000, ffff88805a6cd200)
[ 1054.475593][T12406] 
[ 1054.477912][T12406] The buggy address belongs to the physical page:
[ 1054.484410][T12406] page:ffffea000169b300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a6cc
[ 1054.494545][T12406] head:ffffea000169b300 order:2 compound_mapcount:0 compound_pincount:0
[ 1054.502858][T12406] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1054.510855][T12406] raw: 00fff00000010200 ffffea000164b500 dead000000000002 ffff888017441c80
[ 1054.519526][T12406] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 1054.528091][T12406] page dumped because: kasan: bad access detected
[ 1054.534499][T12406] page_owner tracks the page as allocated
[ 1054.540213][T12406] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4245, tgid 4245 (syz-executor), ts 60332390465, free_ts 12474406152
[ 1054.561572][T12406]  post_alloc_hook+0x173/0x1a0
[ 1054.566452][T12406]  get_page_from_freelist+0x1a26/0x1ac0
[ 1054.571994][T12406]  __alloc_pages+0x1df/0x4e0
[ 1054.576941][T12406]  alloc_slab_page+0x5d/0x160
[ 1054.581691][T12406]  new_slab+0x87/0x2c0
[ 1054.585746][T12406]  ___slab_alloc+0xbc6/0x1220
[ 1054.590407][T12406]  __kmem_cache_alloc_node+0x1a0/0x260
[ 1054.595878][T12406]  __kmalloc_node_track_caller+0x9e/0x230
[ 1054.601665][T12406]  __alloc_skb+0x22a/0x7e0
[ 1054.606068][T12406]  netlink_ack+0x372/0x1100
[ 1054.610559][T12406]  netlink_rcv_skb+0x263/0x420
[ 1054.615307][T12406]  netlink_unicast+0x74c/0x8c0
[ 1054.620053][T12406]  netlink_sendmsg+0x89e/0xbc0
[ 1054.624830][T12406]  __sys_sendto+0x44f/0x5c0
[ 1054.629323][T12406]  __x64_sys_sendto+0xda/0xf0
[ 1054.633985][T12406]  do_syscall_64+0x4c/0xa0
[ 1054.638486][T12406] page last free stack trace:
[ 1054.643154][T12406]  free_unref_page_prepare+0x8b4/0x9a0
[ 1054.648688][T12406]  free_unref_page+0x2e/0x3f0
[ 1054.653347][T12406]  free_contig_range+0x9d/0x150
[ 1054.658268][T12406]  destroy_args+0xef/0x8bf
[ 1054.662771][T12406]  debug_vm_pgtable+0x32a/0x37e
[ 1054.667617][T12406]  do_one_initcall+0x214/0x7a0
[ 1054.672395][T12406]  do_initcall_level+0x137/0x1e4
[ 1054.677367][T12406]  do_initcalls+0x4b/0x8a
[ 1054.681695][T12406]  kernel_init_freeable+0x3fa/0x5ac
[ 1054.686893][T12406]  kernel_init+0x19/0x1b0
[ 1054.691204][T12406]  ret_from_fork+0x1f/0x30
[ 1054.695869][T12406] 
[ 1054.698174][T12406] Memory state around the buggy address:
[ 1054.703871][T12406]  ffff88805a6ccf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1054.711911][T12406]  ffff88805a6ccf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1054.719954][T12406] >ffff88805a6cd000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1054.728250][T12406]                                      ^
[ 1054.733866][T12406]  ffff88805a6cd080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1054.741910][T12406]  ffff88805a6cd100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1054.750063][T12406] ==================================================================
[ 1054.758200][T12406] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1054.765393][T12406] CPU: 1 PID: 12406 Comm: syz.7.1646 Not tainted 6.1.135-syzkaller #0
[ 1054.773552][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 1054.783698][T12406] Call Trace:
[ 1054.786984][T12406]  <TASK>
[ 1054.789920][T12406]  dump_stack_lvl+0x168/0x22e
[ 1054.794617][T12406]  ? memcpy+0x3c/0x60
[ 1054.798608][T12406]  ? show_regs_print_info+0x12/0x12
[ 1054.803811][T12406]  ? load_image+0x3b0/0x3b0
[ 1054.808589][T12406]  panic+0x2c9/0x710
[ 1054.812236][ T4473] ftdi_sio 4-1:5.1: FTDI USB Serial Device converter detected
[ 1054.813082][ T4473] ftdi_sio ttyUSB0: unknown device type: 0x4fb
[ 1054.826084][T12406]  ? asm_common_interrupt+0x22/0x40
[ 1054.831312][T12406]  ? bpf_jit_dump+0xd0/0xd0
[ 1054.835833][T12406]  ? _raw_spin_unlock_irqrestore+0xa5/0x100
[ 1054.841745][T12406]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 1054.847666][T12406]  ? _raw_spin_unlock+0x40/0x40
[ 1054.849586][ T4473] usb 4-1: USB disconnect, device number 4
[ 1054.852448][ T4473] ftdi_sio 4-1:5.1: device disconnected
[ 1054.863865][T12406]  check_panic_on_warn+0x80/0xa0
[ 1054.868849][T12406]  ? rose_get_neigh+0x17e/0x550
[ 1054.873817][T12406]  end_report+0x66/0x110
[ 1054.878085][T12406]  kasan_report+0x118/0x140
[ 1054.882609][T12406]  ? rose_get_neigh+0x17e/0x550
[ 1054.887571][T12406]  rose_get_neigh+0x17e/0x550
[ 1054.892266][T12406]  rose_connect+0x412/0x1380
[ 1054.896865][T12406]  ? aa_sk_perm+0x7e5/0x920
[ 1054.901378][T12406]  ? rose_bind+0xa90/0xa90
[ 1054.905803][T12406]  ? aa_af_perm+0x280/0x2b0
[ 1054.910332][T12406]  ? tomoyo_socket_connect_permission+0x195/0x280
[ 1054.916763][T12406]  ? __might_fault+0xa6/0x120
[ 1054.921462][T12406]  ? bpf_lsm_socket_connect+0x5/0x10
[ 1054.926765][T12406]  ? security_socket_connect+0x7c/0xa0
[ 1054.932246][T12406]  ? rose_bind+0xa90/0xa90
[ 1054.936707][T12406]  __sys_connect+0x389/0x410
[ 1054.941313][T12406]  ? __sys_connect_file+0x170/0x170
[ 1054.946625][T12406]  __x64_sys_connect+0x76/0x80
[ 1054.951407][T12406]  do_syscall_64+0x4c/0xa0
[ 1054.955835][T12406]  ? clear_bhb_loop+0x45/0xa0
[ 1054.960607][T12406]  ? clear_bhb_loop+0x45/0xa0
[ 1054.965301][T12406]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1054.971212][T12406] RIP: 0033:0x7f1aac58e969
[ 1054.975631][T12406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1054.995509][T12406] RSP: 002b:00007f1aad4d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1055.003940][T12406] RAX: ffffffffffffffda RBX: 00007f1aac7b5fa0 RCX: 00007f1aac58e969
[ 1055.011924][T12406] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004
[ 1055.019908][T12406] RBP: 00007f1aac610ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1055.027972][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1055.036121][T12406] R13: 0000000000000000 R14: 00007f1aac7b5fa0 R15: 00007ffdc16ed458
[ 1055.044106][T12406]  </TASK>
[ 1055.047385][T12406] Kernel Offset: disabled
[ 1055.051700][T12406] Rebooting in 86400 seconds..