last executing test programs:

5m10.223585968s ago: executing program 3 (id=4):
io_uring_setup(0x220c, &(0x7f00000000c0)={0x0, 0xfffffffa, 0x40, 0x0, 0x6f})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x2010414, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f0000000380)="$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")
r1 = open(&(0x7f0000000680)='.\x00', 0x20000, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r1, <r5=>0xffffffffffffffff}, 0x4)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x92}}, 0x0)
getsockname$packet(r8, &(0x7f0000000880)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000019e00)=@newqdisc={0x74, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0xfffffffb}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x810c, 0x7, 0x3, 0x3, 0x2}}]}]}}}]}, 0x74}}, 0x0)
sendto$packet(r6, 0x0, 0x0, 0x4000830, &(0x7f0000000ac0)={0x11, 0x8100, r9, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000019dc0)={&(0x7f0000019d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000019d80)={&(0x7f0000019d40)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000024}, 0x20000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x12, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x1, 0x2, 0x3, 0x3, 0x5, 0x20, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000007c0)='GPL\x00', 0x40, 0x0, 0x0, 0x40f00, 0x8, '\x00', r9, 0x25, r1, 0x8, &(0x7f0000000b00)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0xd, 0x4, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r1, r1, r1], 0x0, 0x10, 0x9}, 0x94)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000c80)='net/fib_trie\x00')
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
close_range(r0, 0xffffffffffffffff, 0x0)

5m8.462072239s ago: executing program 3 (id=8):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000280)={0x1, 0x8003}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000002c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000340)="05031620d3fc14031c004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0)
ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0)
syz_read_part_table(0x1053, &(0x7f0000000700)="$eJzsz7ENwjAQBdAPJlFoyAqMwhJZhRq2YAZGoKNgJkqjOAVMABTvFbbOuvPXhZ861iHZpB9LksPyVstyd/OxzqMV5T0zJDl32eWSZ92PQ9lm6Wz6fPSfVrcpc0Dutc21/1vAXE3XrywJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/uFQAA//+lZw2H")
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)

5m1.497965343s ago: executing program 3 (id=16):
r0 = gettid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000440), 0x400000000000041, 0x0)
pidfd_getfd(r4, r4, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x2)
recvmmsg(r3, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2800091, &(0x7f0000000b00)=ANY=[@ANYRES64=0x0, @ANYRES8=r4, @ANYRESHEX, @ANYRES32, @ANYRESOCT=r0, @ANYRES32], 0x55, 0x1be, &(0x7f0000001bc0)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0xfffffffffffffe4c, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000500)=0x2, 0x4)
bind$inet6(r8, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1fc}, 0x1c)
add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500), 0x0, 0xfffffffffffffffe)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffff1b65}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040050)

4m51.482748379s ago: executing program 3 (id=34):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x4, 0x53d, &(0x7f0000000580)="$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")
mount$bind(&(0x7f0000000ac0)='.\x00', &(0x7f0000000b00)='./file0\x00', 0x0, 0x81899, 0x0)
lstat(&(0x7f0000000b80)='./file0/../file0\x00', &(0x7f0000000bc0))
epoll_wait(0xffffffffffffffff, &(0x7f0000000c40)=[{}], 0x1, 0x400)
prlimit64(0x0, 0xe, &(0x7f0000000c80)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000cc0)=0x8)
sched_setaffinity(0x0, 0x42, &(0x7f0000000d00)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000d40)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000dc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000e40), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000e80), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000ec0)=0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000f00)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000f40)={0x2, 0x4, @multicast2}, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
sendmmsg(r3, &(0x7f00000011c0), 0x800001d, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x9)
epoll_create1(0x0)
close_range(r5, r5, 0x2)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c)

4m39.997058686s ago: executing program 3 (id=51):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x80}, 0x1, 0x7}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000480)=@device_b, &(0x7f00000004c0)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000500)={0x0, 0x4c4b40}, &(0x7f0000000540))
syz_80211_inject_frame(&(0x7f0000000580)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000900)="3019", 0x2}], 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f00000009c0)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b4000000000000006b113600000000009f000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000100))
sendmsg$nl_crypto(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@del={0xe0, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {{'lrw-camellia-asm\x00'}, '\x00', '\x00', 0x2000, 0x200}}, 0xe0}, 0x1, 0x0, 0x0, 0x20040810}, 0x850)

4m36.548453299s ago: executing program 3 (id=62):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000006240)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000006280)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f00000062c0)=0x7)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006300)={<r0=>0xffffffffffffffff})
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000012c0)={0x7, 0x1b, 0x2}, 0x7)
io_setup(0x8f0, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])
r2 = fsopen(&(0x7f00000003c0)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x0)
getdents64(r4, 0x0, 0x0)
getdents64(r4, &(0x7f0000001300)=""/4096, 0x1000)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002300)=@o_path={&(0x7f0000000080)='./file0\x00', r3, 0x4000, r0}, 0x18)
chown(&(0x7f0000002380)='.\x00', 0x0, 0xffffffffffffffff)
recvmmsg(r0, &(0x7f0000006400), 0x4000087, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)

4m36.328712492s ago: executing program 32 (id=62):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000006240)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000006280)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f00000062c0)=0x7)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006300)={<r0=>0xffffffffffffffff})
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000012c0)={0x7, 0x1b, 0x2}, 0x7)
io_setup(0x8f0, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])
r2 = fsopen(&(0x7f00000003c0)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x0)
getdents64(r4, 0x0, 0x0)
getdents64(r4, &(0x7f0000001300)=""/4096, 0x1000)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002300)=@o_path={&(0x7f0000000080)='./file0\x00', r3, 0x4000, r0}, 0x18)
chown(&(0x7f0000002380)='.\x00', 0x0, 0xffffffffffffffff)
recvmmsg(r0, &(0x7f0000006400), 0x4000087, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)

4m21.392898093s ago: executing program 2 (id=121):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)="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", 0x224}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="cca8bf0c9f", 0x5}], 0x1}}], 0x2, 0x240184c4)

4m18.659450513s ago: executing program 1 (id=130):
r0 = open(&(0x7f0000000380)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
r1 = open(&(0x7f00000003c0)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000400)='.\x00', 0x100000, 0x0)
flock(r2, 0x1)
flock(r0, 0x5)

4m17.827820568s ago: executing program 2 (id=136):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
fremovexattr(r0, 0xffffffffffffffff)

4m17.696903842s ago: executing program 1 (id=138):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000e80)=ANY=[@ANYBLOB="0000000000f78480901d40cab070f997"], 0x10)

4m17.665337575s ago: executing program 2 (id=139):
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xffffffc1)
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r1, &(0x7f0000000340), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0xd0f, 0x170bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {}, {0xe, 0xa}, {0xf, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48045}, 0x0)
recvfrom$inet(r1, &(0x7f00000005c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r1, 0x0)
shutdown(r0, 0x1)
recvfrom$inet(r0, &(0x7f0000000280)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, 0xffffffffffffffff, 0x0)
ioctl$OCFS2_IOC_UNRESVSP(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x2, 0x0, 0x6, 0xcc7, 0x7ff, 0xa6a0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

4m17.61537195s ago: executing program 1 (id=140):
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100022fd6bc10ef171e57c390010203010902"], 0xfffffffffffffffe)

4m17.510232741s ago: executing program 2 (id=142):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket(0x10, 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0xa, 0x3, 0xff)
socket$packet(0x11, 0x2, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

4m17.279946255s ago: executing program 2 (id=145):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x80}, 0x1, 0x7}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000480)=@device_b, &(0x7f00000004c0)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000500)={0x0, 0x4c4b40}, &(0x7f0000000540))
syz_80211_inject_frame(&(0x7f0000000580)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000900)="3019", 0x2}], 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f00000009c0)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b4000000000000006b113600000000009f000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000100))
sendmsg$nl_crypto(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@del={0xe0, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {{'lrw-camellia-asm\x00'}, '\x00', '\x00', 0x2000, 0x200}}, 0xe0}, 0x1, 0x0, 0x0, 0x20040810}, 0x850)

4m15.824905773s ago: executing program 2 (id=150):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x48}}, 0x0)
read(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000380), 0x80002c1, 0x2, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21ce4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2a}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000001bc0)={r3}, 0xc)
clock_adjtime(0x0, &(0x7f0000000900)={0xce, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0x6, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x8000000000006, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x2, 0x8, 0x8})
clock_adjtime(0x0, &(0x7f0000000a00)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6})

4m15.407558416s ago: executing program 1 (id=154):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001380)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x8, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x4000009, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x3ff, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x3, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x394, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7ffffffc, 0x100, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x40006, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x80485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x5, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0x7, 0x9, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8003, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x2000008, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x1, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0xfad, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x2bc57d86, 0x8, 0x8, 0x101, 0x1df, 0x4, 0x4, 0x8, 0x4, 0x4, 0x6, 0x1, 0x6, 0x8, 0x2e, 0x7fff, 0xfffffffd, 0x5, 0xfffffffb, 0x9, 0x3, 0x7, 0x5, 0x8000, 0x7ff, 0x1cd6800, 0x8, 0x9, 0x5d4, 0xb2, 0x6, 0x10001, 0x3, 0x5, 0x5, 0x8, 0x4, 0x1, 0x40, 0x442f78ef, 0x8, 0xfffffff8, 0x8, 0x8, 0x7, 0xffffffff, 0xc, 0x401, 0x1, 0x2, 0x0, 0x1000, 0x7, 0x30000, 0x5, 0xff, 0xfffff001, 0x5, 0xdc3, 0x8, 0x93, 0xffffffff, 0x5, 0x7, 0x8001, 0x1, 0x4e, 0x6f, 0x6, 0x5, 0xffffffac, 0xfd, 0x0, 0x4, 0xc, 0x6, 0xc, 0x199, 0x2, 0x6, 0xfffffff7, 0x9, 0x6, 0x3, 0x11, 0x80000001, 0x200, 0x5, 0x4, 0x9, 0x7, 0x1, 0x6cef9ab9, 0x4, 0x5, 0x7, 0x2dcd, 0x448, 0x2, 0x4, 0xcc48, 0x4, 0x7, 0x8, 0x40, 0x454000, 0x9, 0x68, 0x3, 0x80000001, 0x4, 0x4, 0x3, 0x3, 0x2, 0x7, 0x4, 0x40000f, 0x6, 0x6, 0x6, 0x3f3e, 0x6, 0xc91c, 0xff, 0xc, 0x101, 0x4, 0x5, 0x1, 0x10, 0x4, 0x9, 0x0, 0x3, 0x8, 0x1, 0x0, 0xffffffff, 0x400, 0x7, 0x2, 0x5, 0x3, 0x18a, 0xfe5, 0x10000, 0x3, 0x3, 0x9a8734cc, 0x7d, 0x65fa, 0x4, 0x0, 0xe, 0x9, 0x946, 0x8, 0x8, 0x40, 0x80, 0xd3, 0x80000000, 0x4, 0x6, 0xc, 0x3, 0x8000, 0xe, 0xd4db, 0x118f, 0x1e0000, 0x1, 0x161b, 0x6, 0xfffffffc, 0xb, 0x40, 0x2, 0x0, 0x6, 0x0, 0x48, 0x7fffffff, 0x100, 0xc72, 0x8, 0x4, 0xc, 0x6, 0x6, 0x0, 0x4, 0xb20, 0x5, 0x1, 0x80, 0x3, 0x6, 0x546, 0xffffffff, 0x8, 0xb848, 0xfec, 0x5, 0x9, 0x2, 0xffff, 0x3, 0x7ff, 0x30, 0xdc, 0xae6a, 0x5, 0xffff, 0x10001, 0x2, 0x6, 0xfffffffb, 0x80, 0x4, 0x3c35, 0x0, 0x4, 0x6, 0x2, 0x6, 0x8, 0x9, 0x2000000, 0x200, 0xb, 0x0, 0x9, 0x1, 0x8, 0x4, 0x2, 0xce2, 0x4, 0x5, 0x9, 0x7, 0x81, 0x6, 0xfffffff9, 0x3, 0x0, 0x10000, 0x9, 0x7, 0xb8, 0x101, 0x9, 0x4b7d, 0x7fff]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x40000)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000001140)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001180)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000001280)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, 0x0}, 0x4)

4m15.07887788s ago: executing program 1 (id=156):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\v'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x24044014}, 0x40)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

4m14.278117202s ago: executing program 1 (id=159):
r0 = syz_open_dev$usbfs(&(0x7f00000006c0), 0x206, 0x20182)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000900)='./cgroup\x00', 0x1800011, &(0x7f0000000080)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@abort}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000000c0)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_open_procfs(0x0, &(0x7f0000000700)='attr/prev\x00')
prlimit64(0x0, 0xe, &(0x7f0000000740)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000800)={@id={0x2, 0x0, @d}})
sched_setscheduler(r1, 0x1, &(0x7f0000000840)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000008c0)={0x0, &(0x7f0000000900)})
statfs(0x0, &(0x7f0000000940)=""/216)
connect$unix(r2, &(0x7f0000000a40)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000ac0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000b00), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
gettid()
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000b40)={&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000}, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000b80)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4")
ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000c40)={0x0})
ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0)

4m0.385270587s ago: executing program 33 (id=150):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x48}}, 0x0)
read(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000380), 0x80002c1, 0x2, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21ce4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2a}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000001bc0)={r3}, 0xc)
clock_adjtime(0x0, &(0x7f0000000900)={0xce, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0x6, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x8000000000006, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x2, 0x8, 0x8})
clock_adjtime(0x0, &(0x7f0000000a00)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6})

3m59.064580722s ago: executing program 34 (id=159):
r0 = syz_open_dev$usbfs(&(0x7f00000006c0), 0x206, 0x20182)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000900)='./cgroup\x00', 0x1800011, &(0x7f0000000080)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@abort}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000000c0)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_open_procfs(0x0, &(0x7f0000000700)='attr/prev\x00')
prlimit64(0x0, 0xe, &(0x7f0000000740)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000800)={@id={0x2, 0x0, @d}})
sched_setscheduler(r1, 0x1, &(0x7f0000000840)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000008c0)={0x0, &(0x7f0000000900)})
statfs(0x0, &(0x7f0000000940)=""/216)
connect$unix(r2, &(0x7f0000000a40)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000ac0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000b00), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
gettid()
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000b40)={&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000}, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000b80)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4")
ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000c40)={0x0})
ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0)

3m58.6893505s ago: executing program 5 (id=202):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)

3m58.29552203s ago: executing program 5 (id=203):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x0)

3m58.179058483s ago: executing program 5 (id=204):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\v'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x24044014}, 0x40)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

3m57.560476116s ago: executing program 5 (id=207):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x9, &(0x7f0000000600)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m56.563617928s ago: executing program 5 (id=209):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000000000020010000000000000000000000000001000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000050000000000000000001f00000000000000fd0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350003"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="e8010000160001002bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2200000a00802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac14141000000000000000000000000008000000e1000000b507000000000000000000000000000006000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0200000001000100f9ffffff2abd70"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000090}, 0x400c8c0)

3m55.290947978s ago: executing program 5 (id=212):
unshare(0x60000600)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="000000005acb7c683a504fb20800000085000000a5000000950c000000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0x1005, &(0x7f00000005c0)=""/4101, 0x0, 0xc}, 0x22)

3m39.692802797s ago: executing program 35 (id=212):
unshare(0x60000600)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="000000005acb7c683a504fb20800000085000000a5000000950c000000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0x1005, &(0x7f00000005c0)=""/4101, 0x0, 0xc}, 0x22)

3m4.494122993s ago: executing program 0 (id=320):
r0 = syz_open_dev$usbfs(&(0x7f00000006c0), 0x206, 0x20182)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000900)='./cgroup\x00', 0x1800011, &(0x7f0000000080)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@abort}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000000c0)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_open_procfs(0x0, &(0x7f0000000700)='attr/prev\x00')
prlimit64(0x0, 0xe, &(0x7f0000000740)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000800)={@id={0x2, 0x0, @d}})
sched_setscheduler(r1, 0x1, &(0x7f0000000840)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000008c0)={0x0, &(0x7f0000000900)})
statfs(0x0, &(0x7f0000000940)=""/216)
connect$unix(r2, &(0x7f0000000a40)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000ac0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000b00), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
gettid()
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000b40)={&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000}, 0x0)
ptrace(0x10, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000b80)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4")
ptrace$getregset(0x4205, 0x0, 0x2, 0x0)
ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={0x0})
ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0)

3m2.350987162s ago: executing program 0 (id=335):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000a80), 0x7ff, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0x8, r0}, 0x38)

3m2.210702387s ago: executing program 0 (id=338):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c5eaaf07391c763e1daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket(0x10, 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0xa, 0x3, 0xff)
socket$packet(0x11, 0x2, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

3m2.020298926s ago: executing program 0 (id=342):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f00000004c0), 0x8)

3m1.846056184s ago: executing program 0 (id=344):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000a0404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

3m1.809995498s ago: executing program 0 (id=345):
r0 = syz_open_dev$usbfs(&(0x7f00000006c0), 0x206, 0x20182)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000900)='./cgroup\x00', 0x1800011, &(0x7f0000000080)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@abort}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000000c0)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_open_procfs(0x0, &(0x7f0000000700)='attr/prev\x00')
prlimit64(0x0, 0xe, &(0x7f0000000740)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000800)={@id={0x2, 0x0, @d}})
sched_setscheduler(r1, 0x1, &(0x7f0000000840)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000008c0)={0x0, &(0x7f0000000900)})
statfs(0x0, &(0x7f0000000940)=""/216)
connect$unix(r2, &(0x7f0000000a40)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000ac0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000b00), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
gettid()
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000b80)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4")
ptrace$getregset(0x4205, r4, 0x2, 0x0)
ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000c40)={0x0})
ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0)

2m45.10555527s ago: executing program 36 (id=345):
r0 = syz_open_dev$usbfs(&(0x7f00000006c0), 0x206, 0x20182)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000900)='./cgroup\x00', 0x1800011, &(0x7f0000000080)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@abort}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000000c0)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_open_procfs(0x0, &(0x7f0000000700)='attr/prev\x00')
prlimit64(0x0, 0xe, &(0x7f0000000740)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000800)={@id={0x2, 0x0, @d}})
sched_setscheduler(r1, 0x1, &(0x7f0000000840)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000008c0)={0x0, &(0x7f0000000900)})
statfs(0x0, &(0x7f0000000940)=""/216)
connect$unix(r2, &(0x7f0000000a40)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000ac0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000b00), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
gettid()
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000b80)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4")
ptrace$getregset(0x4205, r4, 0x2, 0x0)
ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000c40)={0x0})
ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0)

8.208913219s ago: executing program 4 (id=884):
syz_open_dev$loop(&(0x7f00000000c0), 0x75f, 0x4c042)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d00ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000100000000000000", 0x58}], 0x1)
r1 = add_key(0x0, 0x0, &(0x7f00000003c0)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a300806035504031301413068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a85030701010302034100020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202", 0x10f, 0xfffffffffffffffd)
r2 = request_key(&(0x7f0000000500)='encrypted\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)='-*.\x00', r1)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000005c0)={r2}, &(0x7f0000000600)=ANY=[@ANYBLOB='enc=raw hash=streebog256-generic\x00'/56], 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x15}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @random="000300"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r6, &(0x7f0000000940)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmmsg$unix(r6, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c05c}}], 0x1, 0x2000c080)
syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902"], 0x0)
sendmsg(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = io_uring_setup(0x4850, &(0x7f0000000b00)={0x0, 0xa974, 0x2, 0x0, 0x170})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2$watch_queue(&(0x7f0000000b80)={<r9=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x8)
connect$inet6(r8, &(0x7f0000000bc0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x8, 0x9, 0x4010, r7, 0x20000000)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r10 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TCGETS2(r10, 0x802c542a, &(0x7f0000000c00))
timer_create(0x3, &(0x7f0000000c40)={0x0, 0x9, 0x1, @thr={0x0, 0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

6.126184862s ago: executing program 4 (id=899):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x18, 0x18, 0x1, 0x70bd25, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0)

5.936866161s ago: executing program 4 (id=901):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000580)={0x80000001, 0x1, &(0x7f0000000480)=[0x800], &(0x7f00000004c0), &(0x7f0000000500), 0x0})

5.863868259s ago: executing program 4 (id=903):
setuid(0xee00)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4d840}, 0x4000010)

5.839340802s ago: executing program 9 (id=904):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000780)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000880), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000008c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x6)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/partitions\x00', 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
read$char_usb(r4, &(0x7f0000000a40)=""/120, 0x78)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='mountinfo\x00')
sendfile(r5, r5, &(0x7f0000000b40)=0x2eb4, 0x2000007ff)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x200800, &(0x7f0000000c40)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x34, 0x68, 0x1, 0x100003, 0x25dfdbfb, {0x0, 0x0, 0x3}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x15}, {0x2, 0x4}, {0x0, 0x9}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
pipe2$9p(&(0x7f0000000180), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_io_uring_setup(0xd3a, &(0x7f0000000540)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640))

5.825846203s ago: executing program 7 (id=905):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xcc, 0x0, 0x7fff0000}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000001a40)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001a80)={@in6={{0xa, 0x4e21, 0x8, @loopback, 0x4}}, 0x0, 0x0, 0x2, 0x0, "c5f37081326dd7522df6283901be8b18078b072cc2cce27a675619ed2697db7edc31f32d5569fa033509f3db509c9aad33269479cd3503f15b4291d3e07d92ac46029d5384c936377e56629c4b37cee1"}, 0xd8)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001b80)='veth0_macvtap\x00', 0x10)
r2 = fcntl$dupfd(r1, 0x0, r1)
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, 0x0, 0x4000)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=ANY=[], 0x7c70}, 0x1, 0x0, 0x0, 0x90}, 0x8080)
close_range(r0, 0xffffffffffffffff, 0x0)

5.748721681s ago: executing program 4 (id=906):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, &(0x7f0000000440)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)

5.734746812s ago: executing program 4 (id=907):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000880), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000008c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000900)=0x2)
listen(0xffffffffffffffff, 0x6)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1c)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000000b00)='mountinfo\x00')
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x200800, &(0x7f0000000c40)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x34, 0x68, 0x1, 0x100003, 0x25dfdbfb, {0x0, 0x0, 0x3}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x15}, {0x2, 0x4}, {0x0, 0x9}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

4.818186576s ago: executing program 9 (id=909):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0)
preadv2(r0, &(0x7f00000005c0)=[{&(0x7f0000000880)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000000c80)={&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/115, 0x73}, {&(0x7f0000000b00)=""/52, 0x34}, {&(0x7f0000000b40)=""/115, 0x73}], 0x3, &(0x7f0000000c00)=""/85, 0x55}, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x812}, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
r4 = syz_open_dev$usbfs(0x0, 0x80, 0x113201)
read$usbfs(r4, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0)
write(r5, &(0x7f00000000c0)='1\x00', 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)

4.798013938s ago: executing program 7 (id=910):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='1', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
execveat(r2, &(0x7f00000001c0)='./proc/net/rpc/use-gss-proxy\x00', &(0x7f0000000500)={[&(0x7f0000000300)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='-/\x00', &(0x7f00000003c0)='\\\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='wlan0\x00', &(0x7f0000000480)='m\\,\x00', &(0x7f00000004c0)='proc\x00']}, &(0x7f0000000900)={[&(0x7f0000000700)='(+)\x00', &(0x7f0000000800)='proc\x00', &(0x7f0000000840)='\x03\x03\x03\x03\x03\x03', &(0x7f0000000880)='@\'$}\\\x00', &(0x7f00000008c0)='%\x00']}, 0x1000)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r5, &(0x7f00000006c0)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

4.752381523s ago: executing program 8 (id=911):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4f4})
pselect6(0x40, &(0x7f0000000340)={0x0, 0xfffffffffffffff9, 0x7, 0xa9bb, 0x800, 0x4, 0x8000001000000000}, 0x0, &(0x7f0000000380)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xec776000)

3.460963655s ago: executing program 8 (id=912):
r0 = fsopen(&(0x7f0000004000)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000004040)='source\x00', &(0x7f0000004080)='127.0.0.1:/export_path_with_very_long_name_to_increase_xdr_payload_length\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000004100)='addr\x00', &(0x7f0000004140)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000004180)='vers\x00', &(0x7f00000041c0)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000004200)='mountaddr\x00', &(0x7f0000004240)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

2.693767604s ago: executing program 7 (id=914):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000480)={0xdb, 0x0, 0x6})

2.408831853s ago: executing program 8 (id=915):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x6, 0x16e, &(0x7f00000005c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0)

2.04509284s ago: executing program 7 (id=916):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000200)="0a000000010001", 0x7)

1.678744878s ago: executing program 9 (id=917):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x87, 0x7ffc0201}]})
gettimeofday(0x0, 0x0)

1.604854226s ago: executing program 6 (id=918):
r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x4000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xffffffff)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)

1.604555816s ago: executing program 7 (id=919):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000780)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000880), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000008c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x6)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/partitions\x00', 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
read$char_usb(r4, &(0x7f0000000a40)=""/120, 0x78)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='mountinfo\x00')
sendfile(r5, r5, &(0x7f0000000b40)=0x2eb4, 0x2000007ff)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x200800, &(0x7f0000000c40)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x34, 0x68, 0x1, 0x100003, 0x25dfdbfb, {0x0, 0x0, 0x3}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x15}, {0x2, 0x4}, {0x0, 0x9}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
pipe2$9p(&(0x7f0000000180), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_io_uring_setup(0xd3a, &(0x7f0000000540)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640))

1.503205926s ago: executing program 9 (id=920):
r0 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000)=0xefbe, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0041, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x1000)
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="9b773c3773c4"], 0xfdef)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001d80)={'wlan0\x00'})
add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)="0005001ac402", 0x6, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x482, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000540))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0)
mkdir(&(0x7f0000000780)='./sys\x00', 0x0)
mount(0x0, &(0x7f00000007c0)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x1, 0x0)
r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0)
close(r5)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000900)={0x0, &(0x7f0000000940)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000980)={0x0, 0x0, r7, 0x0, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2000, 0xfffffffe, 0x0, 0xfffffffe, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}})
write(r4, &(0x7f0000000a00)='1', 0x1)

1.46775983s ago: executing program 6 (id=921):
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bc1000/0x400000)=nil)
r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
capset(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x43d20711f7dd0504, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000480)="76ea0900", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

568.926352ms ago: executing program 8 (id=922):
r0 = socket(0xa, 0x5, 0x0)
sendmmsg$inet(r0, &(0x7f00000063c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000000340)='s', 0x1}], 0x1}}], 0x1, 0x28040)
sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f00000015c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001640)="af", 0x1}], 0x1, &(0x7f0000001680)=ANY=[@ANYBLOB="18"], 0x18, 0x20000001}, 0x20048054)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f00000016c0)=@assoc_value={<r2=>0x0}, &(0x7f0000001700)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001740)={r2, 0x3}, 0x8)

566.369462ms ago: executing program 7 (id=923):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10)
r1 = landlock_create_ruleset(&(0x7f0000000340)={0x120, 0xd, 0x3}, 0x30, 0x0)
landlock_restrict_self(r1, 0xe)
sendmmsg(r0, &(0x7f0000000780), 0x800001d, 0x0)

456.397093ms ago: executing program 8 (id=924):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x118)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152)
r3 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$tcp_congestion(r3, &(0x7f0000000100)='reno\x00', 0x5)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4920}, 0x2044c61)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000400)=0x2, 0xffffffffffffffe8)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000540)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x10000}, 0x1c)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xcc}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
syz_emit_ethernet(0x62, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, {[@nop, @nop, @nop, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ab519c9940eb739563a3c52b43aee4a2"}, @md5sig={0x13, 0x12, "625fbe96fc97dc524d8a397b7b38957f"}]}}}}}}}, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000880)=ANY=[@ANYBLOB="0380c2000000bbbbbbbb000000019078ac1e0001ac1414aa0c0090781200183f2500000000000000000100007f0000017f0000015a7526332c9b4296cbb70e9268dc9817d26d737aa4bd4fea59d8c52091f770cddbfa81b48ae4cefad415812275a42bd47051430b46cb71bf59e160dbb2fcb70716c836c86581f33f6d11f611babee14aaaff27012fddc5a0368a4f9eeb66813f99f33eb8acdc9c00"/165], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}, 0x1, 0xba01}, 0x0)

440.452115ms ago: executing program 6 (id=925):
socket(0x1e, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(r0, &(0x7f0000000280)={0x40000000, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000440), 0x400008a, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f00000005c0)={0x0, 0xf20f, 0x40, 0x4, 0x19, 0x0, r1}, 0x0, &(0x7f0000000640), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$netlink(0x10, 0x3, 0x15)
writev(r3, &(0x7f0000000780)=[{&(0x7f00000007c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
close(r4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)

250.177924ms ago: executing program 6 (id=926):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)

234.283806ms ago: executing program 9 (id=927):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
ioctl$FE_DISEQC_SEND_BURST(0xffffffffffffffff, 0x6f41, 0x0)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0x4, 0x10}, {0xd, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0xc8a1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

134.434406ms ago: executing program 6 (id=928):
r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedreceive(r0, &(0x7f0000000100)=""/124, 0x7c, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

131.932767ms ago: executing program 8 (id=929):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001a00)={0xaa, 0x414})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001a40)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000001a80)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

12.276679ms ago: executing program 9 (id=930):
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x0, 0x0, 0x4, 0x1, 0xfffffff7}, @enum64={0x5, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x30, 0x61, 0x61, 0x5f, 0x2e, 0x2e, 0x30, 0x5f]}}, &(0x7f00000001c0)=""/138, 0x3a, 0x8a, 0x1}, 0x28)
recvmmsg(r1, &(0x7f00000006c0), 0x4000087, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x338, 0x11, 0x148, 0x0, 0x0, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @local, 0xffffffff, 0x0, 'bridge_slave_1\x00', 'rose0\x00', {}, {}, 0x84, 0x3, 0x8}, 0x0, 0x2f0, 0x338, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x2, [0x4e24, 0x4e20, 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x4e21, 0x4e21, 0x4e24, 0x4e22, 0x4e21, 0x2, 0x4e20, 0x4e21, 0x4e23], [0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'erspan0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xd, 0x6, 0x4, 0x9}, 0x50)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000001580)={0x2020}, 0x2020)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00')
inotify_add_watch(r5, 0x0, 0xa5000613)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000100)={[{@test_dummy_encryption}]}, 0xfe, 0x4da, &(0x7f0000000f40)="$eJzs3N1vFFUfAODfbD8oUGhfXl5eQdAqGokfLS0fcuGFGk1M1MREL/CytgWRhRpaEyCNVmPwmsR746WJl155541RLox/gCZeGhKijQnFxKRmdmbKdrvbD9qysH2eZLvnzJyZc87MOduzc3YmgE2rL/2TRHRHxC8R0ZNFFyboy95mZ6ZGbs1MjSQxN/fmH0kl3c2ZqZEiabHd9jxyqBRR+jSJ55PF+U5cunx2uFweu5DHBybPvT8wcenyM2fODZ8eOz12fujEiaNHBp89PnRswXZ1drXI1jrL0nrd3Pfh+P69r7x99fWRk1ff+fHrdF97DmTrq+uxrFuLSvFqvWR96VH7c66idt3jK87s/rCjKpy0N7EgrEpbRKSnq6PS/3uiLW6fvJ54+ZOmFg7YUOn/pi2NV0/PAS0siWaXAGiO4h99+v23eMU/d2nwcQ+48UJEZx6enZkamZ2/DtAepXx5xwbm3xcRJ6f//iJ9xWqvQwAA3IHK2ObpmvFfRSn2VN6zuY6d+RxKb0T8JyJ2RcR/I2J3RPwvopL2/xHxQLbxXM8K8++riS8e/5Su1y3zOknHf89Vjf1mq+qfv/W25bEdlfp3JKfOlMcO58fkUHRsSeODS+Tx3UudDddVj//SV5p/MRbMC3C9PbtAN7+T0eHJ4fU6CDc+jtjXXq/+yfxMQNoC9kbEvtXtemcROPPkV/sbJVq+/ktYh3mmuS8jnsjO/3TU1L+QNJifTNv48aFjA11RHjs8ULSKxa79fOWN+UjN5OSa6r8O0vO/bWH7r0nR81eSzdd2RLk8dmFi9Xlc+fWzht9p0vrv3ZaFl2n/89L235m8VZmz/undbNnF4cnJC4MRnclrlXjeWboiXT50e9uLebxIn9b/0MH6/X9Xvk1a/wcjIm3EByJ2PhQRD+dlfyQiHo2Ig0vU/4cXH3tvifonkURTz/9o3c+/+fbfm1TP1zcMNE7Tdvb7bxvN26/s8+9oTFc+azOVz79lLFXS6sAaDx8AAADcF0oR0R1JqT8L93VHqdTfn/2Gf3dsK5XHJyafOjX+wfnR7B6B3ugoFVe6eqquhw4m0/kes/hQfq24WH8kv278edvWSrx/ZLw8Gl1Nrj1sbtsX9v8o+n/q97Zmlw7YcI3n0Za4NQBoCbX9v9SkcgB330p+R+O7ALSmOv2/3jM0gBbkeS2wedXr/x/VxBeN/40QoCUs7v+/1XlkHdCKjP9h89L/YfNaff/3CwFoASu6SX7dA8XNAksmLopYN03Xiu/wv7cD1/JKrn2HxeNhNrLMW+P2kihVAt3R9GN4Z4GelSSOiG/WnFfbOpQ57TF39/hUPXAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgPvZvAAAA///Lvdd/")
openat(0xffffffffffffff9c, &(0x7f0000001440)='./file1\x00', 0x42, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000014c0)='2', 0x1, 0x8080c61)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000000)=@base={0x5, 0x1, 0x6c02, 0x41}, 0x48)

0s ago: executing program 6 (id=931):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='2\x00', 0x1)
close(r0)

kernel console output (not intermixed with test programs):

x610/0x10a0
[  140.581954][ T5142]  ? up_write+0x1b6/0x410
[  140.586349][ T5142]  fuse_fill_super+0x173/0x1f0
[  140.591158][ T5142]  ? fuse_reconfigure+0xb0/0xb0
[  140.596084][ T5142]  get_tree_nodev+0xb0/0x160
[  140.600717][ T5142]  fuse_get_tree+0x2d7/0x4d0
[  140.605403][ T5142]  vfs_get_tree+0x88/0x270
[  140.609864][ T5142]  do_new_mount+0x247/0xa50
[  140.614435][ T5142]  __se_sys_mount+0x2e3/0x3d0
[  140.619164][ T5142]  ? __x64_sys_mount+0xc0/0xc0
[  140.623977][ T5142]  ? lockdep_hardirqs_on+0x94/0x140
[  140.629250][ T5142]  ? __x64_sys_mount+0x1c/0xc0
[  140.634061][ T5142]  do_syscall_64+0x4c/0xa0
[  140.638519][ T5142]  ? clear_bhb_loop+0x30/0x80
[  140.643242][ T5142]  ? clear_bhb_loop+0x30/0x80
[  140.647967][ T5142]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  140.653918][ T5142] RIP: 0033:0x7f4b5bcb04d9
[  140.658594][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  140.678353][ T5142] RSP: 002b:00007f4b59efd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  140.686817][ T5142] RAX: ffffffffffffffda RBX: 00007f4b5bf2cfa0 RCX: 00007f4b5bcb04d9
[  140.694840][ T5142] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: 0000000000000000
[  140.702873][ T5142] RBP: 00007f4b5bd3f04e R08: 0000200000000440 R09: 0000000000000000
[  140.710981][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.718995][ T5142] R13: 00007f4b5bf2d038 R14: 00007f4b5bf2cfa0 R15: 00007fff56104058
[  140.727069][ T5142]  </TASK>
[  140.758777][ T5139] EXT4-fs (loop5): filesystem is read-only
[  141.871310][ T5151] loop5: detected capacity change from 0 to 256
[  142.445833][ T5151] Cannot find add_set index 6 as target
[  143.369398][ T5198] device batadv_slave_1 entered promiscuous mode
[  143.670402][ T5201] rxe_eth0 speed is unknown, defaulting to 1000
[  143.824349][ T5196] device batadv_slave_1 left promiscuous mode
[  143.909357][ T5194] rxe_eth0 speed is unknown, defaulting to 1000
[  144.961548][ T5220] loop0: detected capacity change from 0 to 33792
[  145.072275][ T5220] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  145.155583][ T5220] EXT4-fs (loop0): invalid journal inode
[  145.161338][ T5220] EXT4-fs (loop0): can't get journal size
[  145.189702][ T5220] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback.
[  145.237630][ T5221] rxe_eth0 speed is unknown, defaulting to 1000
[  145.265384][ T4262] Bluetooth: hci5: command 0x0409 tx timeout
[  146.409041][ T5194] chnl_net:caif_netlink_parms(): no params data found
[  146.594559][ T5253] netlink: 240 bytes leftover after parsing attributes in process `syz.5.209'.
[  147.386531][   T23] Bluetooth: hci6: command 0x0409 tx timeout
[  147.397445][   T23] Bluetooth: hci5: command 0x041b tx timeout
[  147.837084][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.855175][ T5194] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.900369][ T5194] device bridge_slave_0 entered promiscuous mode
[  147.947872][ T5266] rxe_eth0 speed is unknown, defaulting to 1000
[  147.976773][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.011656][ T5194] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.049485][ T5194] device bridge_slave_1 entered promiscuous mode
[  148.078046][ T4200] syz-executor (4200) used greatest stack depth: 19136 bytes left
[  148.219151][ T5194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.290966][ T5221] chnl_net:caif_netlink_parms(): no params data found
[  148.325811][ T5194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.453452][ T5194] team0: Port device team_slave_0 added
[  148.531364][ T5194] team0: Port device team_slave_1 added
[  148.752544][ T5194] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.772571][ T5194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.920123][ T5194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.973507][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.985297][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.014293][ T5221] device bridge_slave_0 entered promiscuous mode
[  149.187114][ T5194] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.204610][ T5194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.305127][ T5194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.326388][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.413104][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.425228][ T4263] Bluetooth: hci5: command 0x040f tx timeout
[  149.429886][ T5221] device bridge_slave_1 entered promiscuous mode
[  149.438218][   T23] Bluetooth: hci6: command 0x041b tx timeout
[  149.598828][ T5194] device hsr_slave_0 entered promiscuous mode
[  149.632438][ T5194] device hsr_slave_1 entered promiscuous mode
[  149.681717][ T5194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.697067][ T5194] Cannot create hsr debugfs directory
[  149.715268][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.837709][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.019679][ T5221] team0: Port device team_slave_0 added
[  150.107025][ T5221] team0: Port device team_slave_1 added
[  150.410416][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.432920][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.507438][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.569639][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.596534][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.685095][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.929103][ T5221] device hsr_slave_0 entered promiscuous mode
[  150.969392][ T5221] device hsr_slave_1 entered promiscuous mode
[  151.001086][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.027808][ T5221] Cannot create hsr debugfs directory
[  151.123805][ T5194] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  151.185233][ T5194] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  151.247810][ T5194] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  151.287607][ T5194] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  151.505284][ T4202] Bluetooth: hci6: command 0x040f tx timeout
[  151.511726][ T4202] Bluetooth: hci5: command 0x0419 tx timeout
[  151.669234][ T5194] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.736498][ T5221] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  151.804094][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  151.826261][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  151.890648][ T5221] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  151.941294][ T5194] 8021q: adding VLAN 0 to HW filter on device team0
[  152.164556][ T5221] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  152.340527][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  152.466884][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  152.678110][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.685329][ T4344] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.965713][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  153.016598][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  153.068080][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.075472][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.177019][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  153.238008][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  153.289096][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  153.351428][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  153.406156][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  153.476457][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  153.535463][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  153.585210][ T4177] Bluetooth: hci6: command 0x0419 tx timeout
[  153.604180][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  153.666081][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  153.714438][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  153.756080][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  153.805247][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  153.914902][ T5221] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  154.489259][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  154.504004][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  154.555470][ T5194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.635670][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.684806][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.702589][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.779009][ T5221] 8021q: adding VLAN 0 to HW filter on device team0
[  154.858071][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  154.896940][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.930329][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.937538][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.984011][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.021099][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.061588][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.100345][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.107559][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.155566][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.205717][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.245825][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.266258][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.956273][ T5315] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.964554][ T5315] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.672887][ T5315] batman_adv: batadv0: Interface deactivated: dummy0
[  158.060053][ T5315] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.098744][ T5315] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.480087][ T5315] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.489178][ T5315] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.499825][ T5315] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.508880][ T5315] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.641665][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  158.656291][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  158.666216][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  158.675399][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  158.684658][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  158.695788][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  158.731971][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  158.741482][ T5318] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.749793][ T5318] 8021q: adding VLAN 0 to HW filter on device team0
[  158.758387][ T5318] batman_adv: batadv0: Interface activated: dummy0
[  158.765001][ T5318] net_ratelimit: 10 callbacks suppressed
[  158.765011][ T5318] batadv0: mtu less than device minimum
[  158.779580][ T5318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  158.792079][ T5318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  158.804675][ T5318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  158.817301][ T5318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  158.829876][ T5318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  158.842544][ T5318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  158.854651][ T5318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  158.867162][ T5318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  158.879749][ T5318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  158.914650][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  158.947596][ T5364] netlink: 'syz.4.221': attribute type 1 has an invalid length.
[  159.003867][ T5221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  159.079521][ T5221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  159.115654][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  159.135874][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  159.156394][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  159.175703][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  159.238535][ T5118] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.313655][ T5194] device veth0_vlan entered promiscuous mode
[  159.372969][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  159.388389][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  159.419699][ T5118] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.474639][ T5194] device veth1_vlan entered promiscuous mode
[  159.482539][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  159.496713][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  159.514226][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  161.797738][ T5118] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.208606][ T5194] device veth0_macvtap entered promiscuous mode
[  162.507873][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  162.577766][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  162.724315][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  163.136277][ T5413] device syzkaller0 entered promiscuous mode
[  163.164570][ T5118] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.186287][ T5194] device veth1_macvtap entered promiscuous mode
[  163.294077][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  163.311937][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  163.445196][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.486521][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.566574][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.845144][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.875597][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.914355][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.934158][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.953245][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.986204][ T5194] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.023474][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.171929][ T5421] rxe_eth0 speed is unknown, defaulting to 1000
[  164.320230][ T5433] netlink: 76 bytes leftover after parsing attributes in process `syz.4.231'.
[  164.349050][ T5433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.231'.
[  164.370080][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  164.383552][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  164.395432][ T5433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.231'.
[  164.404378][ T5433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.231'.
[  164.426281][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.461782][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.475437][ T5437] capability: warning: `syz.0.232' uses deprecated v2 capabilities in a way that may be insecure
[  164.500577][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.519439][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.534265][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.547035][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.557333][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.578392][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.614147][ T5194] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.674650][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  164.684188][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  164.738529][ T5194] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.773119][ T5194] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.795112][ T5194] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.803874][ T5194] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.107805][ T5118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.352031][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  165.516435][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  165.585241][ T5371] Bluetooth: hci1: command 0x0409 tx timeout
[  165.607481][ T5118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.900257][ T5221] device veth0_vlan entered promiscuous mode
[  165.931024][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  165.940806][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  165.959760][ T5118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.991180][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  166.003213][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.011682][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.026617][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  166.034793][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  166.124147][ T5460] overlayfs: failed to clone upperpath
[  166.253404][ T5221] device veth1_vlan entered promiscuous mode
[  167.173276][ T5118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.434730][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.443798][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.475343][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  167.691764][   T21] Bluetooth: hci1: command 0x041b tx timeout
[  167.717124][ T5421] chnl_net:caif_netlink_parms(): no params data found
[  169.512410][ T5221] device veth0_macvtap entered promiscuous mode
[  169.764575][ T4202] Bluetooth: hci1: command 0x040f tx timeout
[  169.798147][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  170.166959][ T5527] loop6: detected capacity change from 0 to 2048
[  170.211257][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  171.467629][ T5221] device veth1_macvtap entered promiscuous mode
[  172.458580][ T5390]  loop6: p1 < > p4
[  172.458580][ T5390]  p4: <netbsd: >
[  172.459192][   T21] Bluetooth: hci1: command 0x0419 tx timeout
[  172.485449][ T5390] loop6: p4 size 722688 extends beyond EOD, truncated
[  173.091179][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.120549][ T5421] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.146412][ T5421] device bridge_slave_0 entered promiscuous mode
[  173.171239][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.195267][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.220885][ T5421] device bridge_slave_1 entered promiscuous mode
[  173.300698][ T5421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.337907][ T5421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.441024][ T5421] team0: Port device team_slave_0 added
[  173.477280][ T5421] team0: Port device team_slave_1 added
[  173.565471][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.572478][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.655147][ T5421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.705343][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.712352][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.795278][ T5421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.049701][ T5527]  loop6: p1 < > p4
[  174.049701][ T5527]  p4: <netbsd: >
[  174.058370][ T5527] loop6: p4 size 722688 extends beyond EOD, truncated
[  174.079353][ T5421] device hsr_slave_0 entered promiscuous mode
[  174.096806][ T5421] device hsr_slave_1 entered promiscuous mode
[  174.115498][ T5421] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.123109][ T5421] Cannot create hsr debugfs directory
[  174.141756][ T5526] netlink: 772 bytes leftover after parsing attributes in process `syz.6.245'.
[  174.152615][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  174.339166][ T5118] tipc: Left network mode
[  174.352452][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.376759][ T5427] udevd[5427]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  174.391075][ T5390] udevd[5390]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  174.418374][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.443164][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.462202][ T5427] udevd[5427]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  174.481645][ T5537] xt_hashlimit: max too large, truncated to 1048576
[  174.491662][ T5390] udevd[5390]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  174.529731][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.565690][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.598964][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.635106][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.651012][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.664133][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.679140][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.691513][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.749767][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  174.759904][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  174.794595][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.825212][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.845200][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.863226][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.884016][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.915109][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.934689][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.973947][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.014277][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.039272][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.072696][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.174637][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  175.205979][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  175.250903][ T5221] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.270095][ T5221] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.301241][ T5221] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.310367][ T5221] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.925733][ T5573] loop6: detected capacity change from 0 to 40427
[  177.005997][ T5573] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  177.013714][ T5573] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  177.094819][ T5573] F2FS-fs (loop6): invalid crc value
[  177.141674][ T5573] F2FS-fs (loop6): Found nat_bits in checkpoint
[  177.325847][ T5573] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  177.355315][ T5573] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  177.524023][ T5573] attempt to access beyond end of device
[  177.524023][ T5573] loop6: rw=2051, want=45064, limit=40427
[  177.565464][ T5573] attempt to access beyond end of device
[  177.565464][ T5573] loop6: rw=2051, want=65536, limit=40427
[  177.595796][ T5573] F2FS-fs (loop6): Issue discard(4614, 4614, 1019) failed, ret: -5
[  177.595844][ T5573] F2FS-fs (loop6): Issue discard(5637, 5637, 2555) failed, ret: -5
[  178.024835][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.036120][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.062086][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  178.175679][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.176049][ T5421] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  178.183556][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.337376][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  178.345682][ T5600] loop6: detected capacity change from 0 to 33792
[  178.364628][ T5421] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  178.425143][ T5600] EXT4-fs (loop6): Ignoring removed orlov option
[  178.463755][ T5600] EXT4-fs (loop6): inline encryption not supported
[  178.929996][ T5600] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  179.267067][ T5421] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  179.288316][ T5600] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869)
[  179.315532][ T5600] EXT4-fs (loop6): invalid journal inode
[  179.321280][ T5600] EXT4-fs (loop6): can't get journal size
[  179.338289][ T5421] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  179.360203][ T5600] EXT4-fs (loop6): mounted filesystem without journal. Opts: orlov,norecovery,inlinecrypt,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  180.626410][ T5421] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.716493][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  180.736759][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  180.787152][ T5421] 8021q: adding VLAN 0 to HW filter on device team0
[  180.866529][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  180.883993][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  180.936406][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.943690][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.960098][ T5637] loop7: detected capacity change from 0 to 33280
[  181.022156][ T5637] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  181.074075][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  181.125993][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  181.156666][ T5637] EXT4-fs (loop7): orphan cleanup on readonly fs
[  181.163796][ T5637] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:510: comm syz.7.271: Block bitmap for bg 0 marked uninitialized
[  181.210079][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  181.247522][ T5643] syz.4.273 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  181.282127][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.289334][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.317445][ T5637] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  181.368627][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  181.388229][ T5637] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:510: comm syz.7.271: Block bitmap for bg 0 marked uninitialized
[  181.436934][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  181.459273][ T5637] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  181.470051][ T5637] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:510: comm syz.7.271: Block bitmap for bg 0 marked uninitialized
[  181.483713][ T5637] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  181.502523][ T5646] rxe_eth0 speed is unknown, defaulting to 1000
[  182.049701][ T5637] EXT4-fs (loop7): 1 orphan inode deleted
[  182.089558][ T5637] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  182.126095][ T5421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  182.208687][ T5421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  183.040420][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  183.068246][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  183.079223][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  183.092817][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  183.102633][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  184.048084][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  184.076955][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  184.101458][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  184.121114][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  184.150503][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  184.464861][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  184.488834][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  184.522269][ T5421] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.039016][ T5118] device hsr_slave_0 left promiscuous mode
[  185.097067][ T5118] device hsr_slave_1 left promiscuous mode
[  185.172338][ T5118] batman_adv: batadv0: Interface deactivated: dummy0
[  185.196245][ T5118] batman_adv: batadv0: Removing interface: dummy0
[  185.226198][ T5118] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.233718][ T5118] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.430013][ T5118] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.485636][ T5118] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.541113][ T5118] device bridge_slave_1 left promiscuous mode
[  185.574674][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.932385][ T5118] device bridge_slave_0 left promiscuous mode
[  186.115377][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.264390][ T5118] device hsr_slave_0 left promiscuous mode
[  186.265000][ T5118] device hsr_slave_1 left promiscuous mode
[  186.266121][ T5118] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.266182][ T5118] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.266876][ T5118] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.266908][ T5118] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.277286][ T5118] device bridge_slave_1 left promiscuous mode
[  186.277409][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.316882][ T5118] device bridge_slave_0 left promiscuous mode
[  186.317005][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.355545][ T5118] device veth1_macvtap left promiscuous mode
[  186.355653][ T5118] device veth0_macvtap left promiscuous mode
[  186.355774][ T5118] device veth1_vlan left promiscuous mode
[  186.355846][ T5118] device veth0_vlan left promiscuous mode
[  186.369120][ T5118] device veth1_macvtap left promiscuous mode
[  186.369173][ T5118] device veth0_macvtap left promiscuous mode
[  186.369417][ T5118] device veth1_vlan left promiscuous mode
[  186.369488][ T5118] device veth0_vlan left promiscuous mode
[  188.819891][ T5720] Cannot find add_set index 0 as target
[  191.134471][ T5118] team0 (unregistering): Port device team_slave_1 removed
[  191.143608][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.6.293'.
[  191.176772][ T5118] team0 (unregistering): Port device team_slave_0 removed
[  191.214979][ T5118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.242405][ T5118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.352184][ T5118] bond0 (unregistering): Released all slaves
[  191.506078][ T4263] Bluetooth: hci2: command 0x0406 tx timeout
[  191.514599][ T4263] Bluetooth: hci4: command 0x0406 tx timeout
[  191.584107][ T5118] team0 (unregistering): Port device team_slave_1 removed
[  191.622707][ T5118] team0 (unregistering): Port device team_slave_0 removed
[  191.653428][ T5118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.683376][ T5118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.699686][ T5748] loop7: detected capacity change from 0 to 33792
[  191.736335][ T5748] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  191.752388][ T5748] EXT4-fs (loop7): invalid journal inode
[  191.765369][ T5748] EXT4-fs (loop7): can't get journal size
[  191.789174][ T5748] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback.
[  191.872044][ T5118] bond0 (unregistering): Released all slaves
[  192.661091][ T5727] rxe_eth0 speed is unknown, defaulting to 1000
[  193.159859][ T5421] device veth0_vlan entered promiscuous mode
[  193.218710][ T5421] device veth1_vlan entered promiscuous mode
[  193.350617][ T5421] device veth0_macvtap entered promiscuous mode
[  193.397097][ T5421] device veth1_macvtap entered promiscuous mode
[  193.473917][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  193.483503][ T5767] loop6: detected capacity change from 0 to 33280
[  193.528006][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  193.561905][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  193.584137][ T5767] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 33619980: comm syz.6.305: invalid block
[  193.636532][ T5767] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.305: bg 0: block 507: padding at end of block bitmap is not set
[  193.680325][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  193.720229][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  193.739178][ T5767] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  193.771428][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  193.793286][ T5767] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.305: attempt to clear invalid blocks 983260 len 1
[  193.827836][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  193.863170][ T5767] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.305: invalid indirect mapped block 2683928664 (level 0)
[  193.879088][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  193.910293][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  193.931765][ T5767] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.305: Invalid inode table block 0 in block_group 0
[  193.970612][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready
[  194.019696][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready
[  194.041643][ T5767] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  194.086102][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  194.124486][ T5767] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  194.153090][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  194.181534][ T5767] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.305: Invalid inode table block 0 in block_group 0
[  194.205906][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  194.247089][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.253517][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  194.264388][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.277079][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.286994][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.297541][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.301346][ T5767] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  194.307425][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.307447][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.307462][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.307477][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.311534][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.352766][ T5767] EXT4-fs error (device loop6): ext4_truncate:4286: inode #13: comm syz.6.305: mark_inode_dirty error
[  194.403365][ T5767] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  194.424166][ T5767] EXT4-fs (loop6): 1 truncate cleaned up
[  194.430528][ T5767] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none.
[  194.720534][ T5777] netlink: 'syz.0.307': attribute type 3 has an invalid length.
[  194.729683][ T5777] netlink: 'syz.0.307': attribute type 3 has an invalid length.
[  196.452446][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  196.487689][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  197.148015][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.193193][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.260154][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.302006][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.362810][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.423812][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.460529][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.471290][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.489042][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.509634][ T5808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.607299][ T5808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.639943][ T5796] device ip6gre1 entered promiscuous mode
[  197.648177][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  197.669304][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  198.531179][ T5421] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.676185][ T5421] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.871834][ T5421] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.165233][ T5421] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.595810][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.632447][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.743840][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.770523][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.799161][ T5856] device macvlan1 entered promiscuous mode
[  200.199813][ T5870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.260680][ T5870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.451906][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  200.462742][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  200.485932][ T5852] netlink: 'syz.6.326': attribute type 1 has an invalid length.
[  200.670308][ T5881] netlink: 276 bytes leftover after parsing attributes in process `syz.7.333'.
[  200.689714][ T5885] TCP: TCP_TX_DELAY enabled
[  201.140264][ T5908] netlink: 'syz.7.343': attribute type 1 has an invalid length.
[  202.321966][ T5914] device wlan1 entered promiscuous mode
[  202.467148][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.347'.
[  202.889466][ T5936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.971013][ T5936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.537326][ T5958] netlink: 'syz.7.358': attribute type 1 has an invalid length.
[  203.587024][ T5958] bond1: (slave veth0_to_bond): making interface the new active one
[  203.596950][ T5958] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  203.682128][ T5964] loop6: detected capacity change from 0 to 256
[  207.503589][ T6004] netlink: 'syz.8.369': attribute type 1 has an invalid length.
[  207.609321][ T6007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.697849][ T6010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.739476][ T6012] tipc: Started in network mode
[  207.744429][ T6012] tipc: Node identity 068187a95e1, cluster identity 4711
[  207.773588][ T6012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.812707][ T6012] device syzkaller0 entered promiscuous mode
[  207.880197][ T6012] tipc: Resetting bearer <eth:syzkaller0>
[  207.946306][ T6011] tipc: Resetting bearer <eth:syzkaller0>
[  207.993750][ T6011] tipc: Disabling bearer <eth:syzkaller0>
[  208.507673][ T6002] loop6: detected capacity change from 0 to 40427
[  208.568508][ T6002] F2FS-fs (loop6): invalid crc value
[  208.939400][ T6002] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  209.757027][ T6002] F2FS-fs (loop6): Start checkpoint disabled!
[  209.793918][ T6002] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e7
[  211.136154][ T6057] netlink: 'syz.7.381': attribute type 1 has an invalid length.
[  212.103938][   T26] audit: type=1800 audit(1794590950.595:6): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.367" name="bus" dev="loop6" ino=10 res=0 errno=0
[  212.519907][ T6061] bond1: (slave veth0_to_bond): Releasing active interface
[  213.510693][ T6061] bond2: (slave veth0_to_bond): making interface the new active one
[  213.556587][ T6061] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  213.675256][ T6076] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  213.849283][ T4349] attempt to access beyond end of device
[  213.849283][ T4349] loop6: rw=2049, want=45104, limit=40427
[  214.117383][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.8.390'.
[  214.168855][ T6092] netlink: 112 bytes leftover after parsing attributes in process `syz.7.389'.
[  215.026870][ T6117] rxe_eth0 speed is unknown, defaulting to 1000
[  215.863226][ T6117] net_ratelimit: 11 callbacks suppressed
[  215.863268][ T6117] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  217.863475][ T4345] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.059117][ T6123] device syzkaller1 entered promiscuous mode
[  218.154741][ T6129] tipc: Started in network mode
[  218.160539][ T6129] tipc: Node identity bec2fb8988aa, cluster identity 4711
[  218.175303][ T6129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.209572][ T4345] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.285867][ T6129] device syzkaller0 entered promiscuous mode
[  218.366951][ T6129] tipc: Resetting bearer <eth:syzkaller0>
[  218.456456][ T4345] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.568135][ T6128] tipc: Resetting bearer <eth:syzkaller0>
[  218.595323][ T6128] tipc: Disabling bearer <eth:syzkaller0>
[  218.633374][ T4345] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.820377][ T6141] rxe_eth0 speed is unknown, defaulting to 1000
[  219.519611][ T6166] loop6: detected capacity change from 0 to 33280
[  222.144507][ T6166] fscrypt: Error allocating hmac(sha512): -2
[  222.150666][ T6166] EXT4-fs (loop6): Error processing option "test_dummy_encryption" [-2]
[  222.387645][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[  222.639587][ T6141] chnl_net:caif_netlink_parms(): no params data found
[  222.787623][ T6191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.832260][ T6191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.936644][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.964629][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.973211][ T6141] device bridge_slave_0 entered promiscuous mode
[  222.982092][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.989336][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.006448][ T6141] device bridge_slave_1 entered promiscuous mode
[  223.076574][ T6141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.089024][ T6141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.121164][ T6141] team0: Port device team_slave_0 added
[  223.160480][ T6141] team0: Port device team_slave_1 added
[  223.245368][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.260802][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.303433][ T6141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.319629][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.334350][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.370449][ T6141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.419112][ T6201] device syzkaller1 entered promiscuous mode
[  223.497537][ T6202] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4198] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6202]
[  223.528479][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.7.409'.
[  223.547746][ T6202] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  223.585720][ T6141] device hsr_slave_0 entered promiscuous mode
[  223.606264][ T6141] device hsr_slave_1 entered promiscuous mode
[  223.614880][ T6141] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  223.632311][ T6141] Cannot create hsr debugfs directory
[  223.814106][ T6215] netlink: 128 bytes leftover after parsing attributes in process `syz.6.412'.
[  224.144021][ T6141] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  224.271933][ T6230] loop6: detected capacity change from 0 to 33280
[  225.908929][ T6181] Bluetooth: hci0: command 0x041b tx timeout
[  226.911386][ T6141] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  227.126219][ T6141] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  227.387473][ T6141] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  227.483417][ T6241] netlink: 'syz.6.419': attribute type 1 has an invalid length.
[  227.722168][ T6241] 8021q: adding VLAN 0 to HW filter on device bond1
[  227.833668][ T6260] fuse: Bad value for 'fd'
[  228.508721][ T6249] device macvlan2 entered promiscuous mode
[  228.633415][ T6181] Bluetooth: hci0: command 0x040f tx timeout
[  228.646689][ T6249] device bond1 entered promiscuous mode
[  228.653389][ T6249] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  228.685474][ T6249] team0: Port device macvlan2 added
[  228.738853][ T6264] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5
[  228.749548][ T6252] device syzkaller1 entered promiscuous mode
[  229.007251][   T26] audit: type=1326 audit(1794590967.555:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32ab174d9 code=0x7ffc0000
[  229.039121][ T6141] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.466367][   T26] audit: type=1326 audit(1794590967.585:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32ab174d9 code=0x7ffc0000
[  229.801276][   T26] audit: type=1326 audit(1794590967.705:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fa32ab174d9 code=0x7ffc0000
[  229.826856][   T26] audit: type=1326 audit(1794590967.705:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32ab174d9 code=0x7ffc0000
[  229.852007][   T26] audit: type=1326 audit(1794590967.715:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32ab174d9 code=0x7ffc0000
[  229.930861][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  229.961967][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  229.993926][ T4345] device hsr_slave_0 left promiscuous mode
[  230.008337][ T4345] device hsr_slave_1 left promiscuous mode
[  230.022836][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.298984][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.424455][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.561921][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.685637][ T4345] device bridge_slave_1 left promiscuous mode
[  230.715724][ T4262] Bluetooth: hci0: command 0x0419 tx timeout
[  230.795699][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.905892][ T4345] device bridge_slave_0 left promiscuous mode
[  231.912172][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.900270][ T4268] Bluetooth: hci0: command 0x1407 tx timeout
[  232.925816][ T4345] device veth1_macvtap left promiscuous mode
[  232.932088][ T4345] device veth0_macvtap left promiscuous mode
[  233.240339][ T4345] device veth1_vlan left promiscuous mode
[  233.254568][ T4345] device veth0_vlan left promiscuous mode
[  233.656942][ T6310] loop8: detected capacity change from 0 to 33280
[  235.051377][ T4345] team0 (unregistering): Port device team_slave_1 removed
[  235.411741][ T4345] team0 (unregistering): Port device team_slave_0 removed
[  235.768990][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.877093][ T6310] EXT4-fs (loop8): Test dummy encryption mode enabled
[  235.897707][ T6310] EXT4-fs error (device loop8): ext4_orphan_get:1410: inode #15: comm syz.8.435: inode has both inline data and extents flags
[  235.911725][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.921886][ T6310] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.435: couldn't read orphan inode 15 (err -117)
[  235.934195][ T6310] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  236.045252][ T6310] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  236.265099][ T4345] bond0 (unregistering): Released all slaves
[  236.553723][ T6141] 8021q: adding VLAN 0 to HW filter on device team0
[  236.594644][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  236.604111][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  236.622895][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.630074][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.646279][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  236.750574][ T6300] netlink: 'syz.7.434': attribute type 1 has an invalid length.
[  236.892162][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  236.913503][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  236.936304][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.943499][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.971940][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  238.925295][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  238.926292][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  238.927154][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  238.927735][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  238.928332][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  238.928986][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  239.934780][ T6339] device syzkaller1 entered promiscuous mode
[  240.233451][ T6141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  240.290395][ T6141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  240.306147][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  240.317424][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  240.336440][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  240.346321][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  240.356714][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  240.874234][ T4262] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  242.160448][ T6369] fido_id[6369]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  242.807172][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  242.834953][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  242.895251][ T6141] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.699844][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.460'.
[  245.725281][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  245.739328][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  245.796698][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.7.463'.
[  246.085172][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.7.463'.
[  246.384684][ T6141] device veth0_vlan entered promiscuous mode
[  246.428814][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  246.448856][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  246.496044][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  246.515821][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  246.599510][ T6141] device veth1_vlan entered promiscuous mode
[  246.735619][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  247.465400][ T6470] device syzkaller1 entered promiscuous mode
[  247.610935][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  247.632199][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  247.663391][ T6141] device veth0_macvtap entered promiscuous mode
[  247.681663][ T6141] device veth1_macvtap entered promiscuous mode
[  247.743274][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.794132][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.825293][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.848049][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.870942][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.893426][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.914623][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.930215][ T5533] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  247.952707][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.979995][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.005989][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  248.018952][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  248.039232][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  248.063662][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  248.083547][ T6479] device syzkaller1 entered promiscuous mode
[  248.108047][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.132660][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.170479][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.199307][ T5533] usb 8-1: Using ep0 maxpacket: 16
[  248.201400][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.224564][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.255120][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.267525][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.291612][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.316845][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.325280][ T5533] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  248.344752][ T5533] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  248.460583][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  248.478876][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  248.512758][ T6141] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.541885][ T6141] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.551271][ T5533] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  248.565151][ T5533] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.585129][ T6141] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.600650][ T5533] usb 8-1: Product: syz
[  248.625162][ T5533] usb 8-1: Manufacturer: syz
[  248.633731][ T6141] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.643444][ T5533] usb 8-1: SerialNumber: syz
[  248.794483][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.471'.
[  248.840356][ T6499] device syzkaller0 entered promiscuous mode
[  248.891522][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  248.923312][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.954547][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  249.015368][ T5533] usb 8-1: 0:2 : does not exist
[  249.070083][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.093623][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.132877][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  249.166016][ T5533] usb 8-1: USB disconnect, device number 2
[  249.386110][ T6514] netlink: 'syz.9.395': attribute type 1 has an invalid length.
[  249.457342][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.9.395'.
[  249.469407][ T6367] udevd[6367]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  249.486354][ T6510] FAULT_INJECTION: forcing a failure.
[  249.486354][ T6510] name failslab, interval 1, probability 0, space 0, times 0
[  249.572921][ T6510] CPU: 1 PID: 6510 Comm: syz.8.473 Not tainted syzkaller #0
[  249.580308][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  249.590442][ T6510] Call Trace:
[  249.593766][ T6510]  <TASK>
[  249.596836][ T6510]  dump_stack_lvl+0x188/0x250
[  249.601577][ T6510]  ? show_regs_print_info+0x20/0x20
[  249.606819][ T6510]  ? load_image+0x410/0x410
[  249.611380][ T6510]  should_fail+0x383/0x4b0
[  249.615854][ T6510]  should_failslab+0x5/0x20
[  249.620435][ T6510]  slab_pre_alloc_hook+0x51/0xc0
[  249.625424][ T6510]  ? anon_vma_clone+0xbc/0x4d0
[  249.630315][ T6510]  kmem_cache_alloc+0x3d/0x280
[  249.635130][ T6510]  anon_vma_clone+0xbc/0x4d0
[  249.639883][ T6510]  __split_vma+0x1ab/0x410
[  249.644376][ T6510]  __do_munmap+0x38a/0xe10
[  249.648861][ T6510]  ? mremap_userfaultfd_prep+0xd1/0x1b0
[  249.654482][ T6510]  move_vma+0x8fd/0xe20
[  249.658726][ T6510]  ? vma_expandable+0x110/0x110
[  249.663618][ T6510]  ? cap_mmap_addr+0x153/0x2c0
[  249.668444][ T6510]  ? bpf_lsm_file_ioctl_compat+0x10/0x10
[  249.674811][ T6510]  ? security_mmap_addr+0x6e/0x90
[  249.679883][ T6510]  ? get_unmapped_area+0x2f0/0x360
[  249.685057][ T6510]  mremap_to+0x556/0x6b0
[  249.689365][ T6510]  __se_sys_mremap+0x412/0x950
[  249.694182][ T6510]  ? __x64_sys_mremap+0xc0/0xc0
[  249.699076][ T6510]  ? lock_chain_count+0x20/0x20
[  249.703981][ T6510]  ? lockdep_hardirqs_on+0x94/0x140
[  249.709232][ T6510]  ? __x64_sys_mremap+0x1c/0xc0
[  249.714127][ T6510]  do_syscall_64+0x4c/0xa0
[  249.718581][ T6510]  ? clear_bhb_loop+0x30/0x80
[  249.723322][ T6510]  ? clear_bhb_loop+0x30/0x80
[  249.728163][ T6510]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  249.734096][ T6510] RIP: 0033:0x7fb6f2fa34d9
[  249.738547][ T6510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  249.758207][ T6510] RSP: 002b:00007fb6f11f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  249.766677][ T6510] RAX: ffffffffffffffda RBX: 00007fb6f321ffa0 RCX: 00007fb6f2fa34d9
[  249.774694][ T6510] RDX: 000000000000faff RSI: 0000000000002000 RDI: 0000200000ffc000
[  249.782710][ T6510] RBP: 00007fb6f303204e R08: 0000200000006000 R09: 0000000000000000
[  249.790724][ T6510] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  249.798754][ T6510] R13: 00007fb6f3220038 R14: 00007fb6f321ffa0 R15: 00007fff9d7b81d8
[  249.806792][ T6510]  </TASK>
[  250.889548][ T6530] FAULT_INJECTION: forcing a failure.
[  250.889548][ T6530] name failslab, interval 1, probability 0, space 0, times 0
[  250.960048][ T6530] CPU: 0 PID: 6530 Comm: syz.9.476 Not tainted syzkaller #0
[  250.967422][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  250.977600][ T6530] Call Trace:
[  250.980904][ T6530]  <TASK>
[  250.983867][ T6530]  dump_stack_lvl+0x188/0x250
[  250.988576][ T6530]  ? show_regs_print_info+0x20/0x20
[  250.993810][ T6530]  ? load_image+0x410/0x410
[  250.998347][ T6530]  ? __might_sleep+0xf0/0xf0
[  251.002996][ T6530]  ? __lock_acquire+0x7d40/0x7d40
[  251.008061][ T6530]  ? do_dentry_open+0x7f7/0xf90
[  251.012930][ T6530]  should_fail+0x383/0x4b0
[  251.017376][ T6530]  should_failslab+0x5/0x20
[  251.021900][ T6530]  slab_pre_alloc_hook+0x51/0xc0
[  251.026859][ T6530]  kmem_cache_alloc_trace+0x47/0x290
[  251.032161][ T6530]  ? alloc_tty_struct+0xa3/0x7d0
[  251.037131][ T6530]  alloc_tty_struct+0xa3/0x7d0
[  251.041927][ T6530]  ? tty_init_dev+0x470/0x470
[  251.046632][ T6530]  pty_common_install+0x16a/0x790
[  251.051686][ T6530]  tty_init_dev+0xbb/0x470
[  251.056141][ T6530]  ptmx_open+0xe1/0x2c0
[  251.060322][ T6530]  ? pty_start+0x140/0x140
[  251.064764][ T6530]  chrdev_open+0x585/0x5f0
[  251.069216][ T6530]  ? cd_forget+0x160/0x160
[  251.073660][ T6530]  ? fsnotify_perm+0x3a7/0x560
[  251.078449][ T6530]  ? cd_forget+0x160/0x160
[  251.082890][ T6530]  do_dentry_open+0x7f7/0xf90
[  251.087591][ T6530]  ? vfs_open+0x2b/0x80
[  251.091775][ T6530]  path_openat+0x2718/0x2fb0
[  251.096427][ T6530]  ? do_filp_open+0x400/0x400
[  251.101143][ T6530]  do_filp_open+0x1df/0x400
[  251.105681][ T6530]  ? vfs_tmpfile+0x300/0x300
[  251.110335][ T6530]  ? _raw_spin_unlock+0x24/0x40
[  251.115229][ T6530]  ? alloc_fd+0x59e/0x650
[  251.119585][ T6530]  do_sys_openat2+0x14b/0x500
[  251.124281][ T6530]  ? __lock_acquire+0x7d40/0x7d40
[  251.129343][ T6530]  ? do_sys_open+0xe0/0xe0
[  251.133780][ T6530]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  251.139791][ T6530]  ? lock_chain_count+0x20/0x20
[  251.144667][ T6530]  __x64_sys_openat+0x135/0x160
[  251.149540][ T6530]  do_syscall_64+0x4c/0xa0
[  251.153977][ T6530]  ? clear_bhb_loop+0x30/0x80
[  251.158676][ T6530]  ? clear_bhb_loop+0x30/0x80
[  251.163377][ T6530]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  251.169288][ T6530] RIP: 0033:0x7fdddeb744d9
[  251.173720][ T6530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.193342][ T6530] RSP: 002b:00007fdddcdc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  251.201791][ T6530] RAX: ffffffffffffffda RBX: 00007fdddedf0fa0 RCX: 00007fdddeb744d9
[  251.209784][ T6530] RDX: 000000000000a241 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  251.217776][ T6530] RBP: 00007fdddec0304e R08: 0000000000000000 R09: 0000000000000000
[  251.225764][ T6530] R10: 00000000000000eb R11: 0000000000000246 R12: 0000000000000000
[  251.233773][ T6530] R13: 00007fdddedf1038 R14: 00007fdddedf0fa0 R15: 00007fff75b5d808
[  251.241784][ T6530]  </TASK>
[  251.255315][ T4296] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  252.401209][ T6540] FAULT_INJECTION: forcing a failure.
[  252.401209][ T6540] name failslab, interval 1, probability 0, space 0, times 0
[  252.425288][ T4296] usb 8-1: Using ep0 maxpacket: 32
[  252.435128][ T6540] CPU: 1 PID: 6540 Comm: syz.8.479 Not tainted syzkaller #0
[  252.442559][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  252.452822][ T6540] Call Trace:
[  252.456131][ T6540]  <TASK>
[  252.459109][ T6540]  dump_stack_lvl+0x188/0x250
[  252.463846][ T6540]  ? show_regs_print_info+0x20/0x20
[  252.469083][ T6540]  ? load_image+0x410/0x410
[  252.473632][ T6540]  ? __might_sleep+0xf0/0xf0
[  252.478251][ T6540]  ? __lock_acquire+0x7d40/0x7d40
[  252.483307][ T6540]  ? aa_get_newest_label+0xf5/0x5a0
[  252.488542][ T6540]  should_fail+0x383/0x4b0
[  252.493012][ T6540]  should_failslab+0x5/0x20
[  252.497654][ T6540]  slab_pre_alloc_hook+0x51/0xc0
[  252.502649][ T6540]  ? skb_clone+0x1bd/0x350
[  252.507102][ T6540]  kmem_cache_alloc+0x3d/0x280
[  252.511908][ T6540]  skb_clone+0x1bd/0x350
[  252.516214][ T6540]  ? nfnetlink_rcv+0x4a7/0x2450
[  252.521108][ T6540]  nfnetlink_rcv+0x4e0/0x2450
[  252.525848][ T6540]  ? __local_bh_enable_ip+0x136/0x1c0
[  252.531259][ T6540]  ? lockdep_hardirqs_on+0x94/0x140
[  252.536498][ T6540]  ? __local_bh_enable_ip+0x136/0x1c0
[  252.542039][ T6540]  ? __dev_queue_xmit+0x1b64/0x2e50
[  252.547293][ T6540]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  252.552885][ T6540]  ? dev_queue_xmit+0x20/0x20
[  252.557596][ T6540]  ? __copy_skb_header+0x3ba/0x4f0
[  252.562747][ T6540]  ? memcpy+0x3c/0x60
[  252.566773][ T6540]  ? __copy_skb_header+0x3ba/0x4f0
[  252.571930][ T6540]  ? __skb_clone+0x446/0x6c0
[  252.576602][ T6540]  ? rcu_lock_release+0x5/0x20
[  252.581410][ T6540]  ? __lock_acquire+0x7d40/0x7d40
[  252.586495][ T6540]  netlink_unicast+0x804/0x9e0
[  252.591328][ T6540]  netlink_sendmsg+0x8ba/0xbe0
[  252.596140][ T6540]  ? netlink_getsockopt+0x570/0x570
[  252.601373][ T6540]  ? aa_sock_msg_perm+0x94/0x150
[  252.606348][ T6540]  ? apparmor_socket_sendmsg+0x88/0x230
[  252.611944][ T6540]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  252.617287][ T6540]  ? security_socket_sendmsg+0x7c/0xa0
[  252.622802][ T6540]  ? netlink_getsockopt+0x570/0x570
[  252.628082][ T6540]  ____sys_sendmsg+0x5be/0x8f0
[  252.632894][ T6540]  ? __sys_sendmsg_sock+0x30/0x30
[  252.638000][ T6540]  ? import_iovec+0x6f/0xa0
[  252.642549][ T6540]  ___sys_sendmsg+0x236/0x2e0
[  252.647279][ T6540]  ? __sys_sendmsg+0x290/0x290
[  252.652121][ T6540]  __se_sys_sendmsg+0x1b7/0x2a0
[  252.657044][ T6540]  ? __x64_sys_sendmsg+0x80/0x80
[  252.662049][ T6540]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  252.668113][ T6540]  ? lockdep_hardirqs_on+0x94/0x140
[  252.673446][ T6540]  do_syscall_64+0x4c/0xa0
[  252.677912][ T6540]  ? clear_bhb_loop+0x30/0x80
[  252.682640][ T6540]  ? clear_bhb_loop+0x30/0x80
[  252.687358][ T6540]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  252.693303][ T6540] RIP: 0033:0x7fb6f2fa34d9
[  252.697759][ T6540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.717403][ T6540] RSP: 002b:00007fb6f11f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.725870][ T6540] RAX: ffffffffffffffda RBX: 00007fb6f321ffa0 RCX: 00007fb6f2fa34d9
[  252.734148][ T6540] RDX: 0000000004000090 RSI: 00002000000004c0 RDI: 0000000000000005
[  252.742154][ T6540] RBP: 00007fb6f303204e R08: 0000000000000000 R09: 0000000000000000
[  252.750166][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  252.758199][ T6540] R13: 00007fb6f3220038 R14: 00007fb6f321ffa0 R15: 00007fff9d7b81d8
[  252.766237][ T6540]  </TASK>
[  252.835314][ T4296] usb 8-1: string descriptor 0 read error: -71
[  252.844580][ T4296] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  252.885255][ T4296] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.937644][ T4296] usb 8-1: config 0 descriptor??
[  252.965480][ T4296] usb 8-1: can't set config #0, error -71
[  253.002152][ T4296] usb 8-1: USB disconnect, device number 3
[  253.031253][ T6550] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks
[  253.065138][ T6550] EXT4-fs warning (device sda1): ext4_resize_fs:2004: can't shrink FS - resize aborted
[  253.449220][ T4296] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  253.664183][ T6567] netlink: 'syz.6.485': attribute type 1 has an invalid length.
[  253.780669][ T6574] bond2: (slave veth0_to_bond): making interface the new active one
[  253.794854][ T6574] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  253.845746][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.6.485'.
[  253.855442][ T4296] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  253.864539][ T4296] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.905997][ T4296] usb 8-1: config 0 descriptor??
[  255.070800][ T4296] [drm] Initialized udl 0.0.1 20120220 for 8-1:0.0 on minor 2
[  255.086873][ T4296] [drm] Initialized udl on minor 2
[  255.245274][ T6181] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  255.259724][ T6602] tipc: Started in network mode
[  255.282412][ T6602] tipc: Node identity 96ff2c6438c1, cluster identity 4711
[  255.291129][ T4296] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  255.323371][ T4296] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  255.336772][ T6602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.362260][ T6602] device syzkaller0 entered promiscuous mode
[  255.384535][ T4296] usb 8-1: USB disconnect, device number 4
[  255.392312][ T4262] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  255.433193][ T4262] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  255.458482][ T4262] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  255.482166][ T6610] tipc: Resetting bearer <eth:syzkaller0>
[  255.533008][ T6601] tipc: Resetting bearer <eth:syzkaller0>
[  255.566249][ T6601] tipc: Disabling bearer <eth:syzkaller0>
[  255.656536][ T6615] device syzkaller1 entered promiscuous mode
[  255.679295][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  255.685743][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  255.690495][ T6181] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  255.727085][ T6181] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.782832][ T6181] usb 9-1: config 0 descriptor??
[  255.956288][ T6626] netlink: 'syz.7.500': attribute type 1 has an invalid length.
[  256.051188][ T4345] device hsr_slave_0 left promiscuous mode
[  256.059507][ T4345] device hsr_slave_1 left promiscuous mode
[  256.078484][ T4345] batman_adv: batadv0: Interface deactivated: dummy0
[  256.086840][ T4345] batman_adv: batadv0: Removing interface: dummy0
[  256.093931][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0
[  256.112150][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1
[  256.126759][ T6635] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  256.183861][ T4345] device bridge_slave_1 left promiscuous mode
[  256.192521][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.209462][ T4345] device bridge_slave_0 left promiscuous mode
[  256.216196][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.246301][ T4345] bond2 (unregistering): Released all slaves
[  256.258130][ T4345] bond1 (unregistering): Released all slaves
[  256.278410][ T6181] [drm] Initialized udl 0.0.1 20120220 for 9-1:0.0 on minor 2
[  256.337808][ T6181] [drm] Initialized udl on minor 2
[  256.495320][ T6181] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  256.510483][ T6181] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  256.528668][ T6181] usb 9-1: USB disconnect, device number 2
[  256.536883][ T4262] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  256.557533][ T4262] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  256.567609][ T4262] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  256.754376][ T4345] team0 (unregistering): Port device team_slave_1 removed
[  256.781908][ T4345] team0 (unregistering): Port device team_slave_0 removed
[  256.813741][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.833535][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.939610][ T4345] bond0 (unregistering): Released all slaves
[  256.970490][ T6629] bond2: (slave veth0_to_bond): Releasing active interface
[  256.987059][ T6629] bond3: (slave veth0_to_bond): making interface the new active one
[  257.008604][ T6629] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  257.018863][ T6633] netlink: 'syz.9.502': attribute type 4 has an invalid length.
[  257.054806][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.7.500'.
[  257.280588][ T6656] netlink: 830 bytes leftover after parsing attributes in process `syz.7.511'.
[  257.293706][ T6657] FAULT_INJECTION: forcing a failure.
[  257.293706][ T6657] name failslab, interval 1, probability 0, space 0, times 0
[  257.324449][ T6657] CPU: 0 PID: 6657 Comm: syz.6.508 Not tainted syzkaller #0
[  257.331823][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  257.341927][ T6657] Call Trace:
[  257.345255][ T6657]  <TASK>
[  257.348212][ T6657]  dump_stack_lvl+0x188/0x250
[  257.352940][ T6657]  ? show_regs_print_info+0x20/0x20
[  257.358182][ T6657]  ? load_image+0x410/0x410
[  257.362734][ T6657]  ? __might_sleep+0xf0/0xf0
[  257.367366][ T6657]  ? __lock_acquire+0x7d40/0x7d40
[  257.372442][ T6657]  should_fail+0x383/0x4b0
[  257.376912][ T6657]  should_failslab+0x5/0x20
[  257.381454][ T6657]  slab_pre_alloc_hook+0x51/0xc0
[  257.386467][ T6657]  __kmalloc+0x6b/0x340
[  257.390659][ T6657]  ? traceprobe_set_print_fmt+0x58/0xb0
[  257.396255][ T6657]  traceprobe_set_print_fmt+0x58/0xb0
[  257.401684][ T6657]  __trace_uprobe_create+0x9ab/0xb50
[  257.407033][ T6657]  ? trace_uprobe_match+0x4c0/0x4c0
[  257.412306][ T6657]  ? argv_split+0x377/0x400
[  257.416889][ T6657]  trace_probe_create+0xc4/0x130
[  257.421841][ T6657]  ? trace_uprobe_match+0x4c0/0x4c0
[  257.427059][ T6657]  ? trace_probe_match_command_args+0x200/0x200
[  257.433369][ T6657]  dyn_event_create+0x44/0x60
[  257.438097][ T6657]  ? probes_open+0x130/0x130
[  257.442768][ T6657]  create_or_delete_trace_uprobe+0x61/0x90
[  257.448738][ T6657]  trace_parse_run_command+0x1a8/0x2c0
[  257.454254][ T6657]  ? uprobe_buffer_disable+0x1d0/0x1d0
[  257.459774][ T6657]  vfs_write+0x304/0xd70
[  257.464094][ T6657]  ? file_end_write+0x250/0x250
[  257.469036][ T6657]  ? mutex_lock_nested+0x17/0x20
[  257.474046][ T6657]  ? __fdget_pos+0x2bf/0x370
[  257.478700][ T6657]  ? ksys_write+0x70/0x260
[  257.483163][ T6657]  ksys_write+0x153/0x260
[  257.487541][ T6657]  ? __ia32_sys_read+0x80/0x80
[  257.492352][ T6657]  ? lockdep_hardirqs_on+0x94/0x140
[  257.497665][ T6657]  do_syscall_64+0x4c/0xa0
[  257.502138][ T6657]  ? clear_bhb_loop+0x30/0x80
[  257.506858][ T6657]  ? clear_bhb_loop+0x30/0x80
[  257.511588][ T6657]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  257.517533][ T6657] RIP: 0033:0x7fa32ab174d9
[  257.521987][ T6657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.541671][ T6657] RSP: 002b:00007fa328d64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  257.550138][ T6657] RAX: ffffffffffffffda RBX: 00007fa32ad93fa0 RCX: 00007fa32ab174d9
[  257.558157][ T6657] RDX: 000000000000000f RSI: 0000200000000140 RDI: 0000000000000005
[  257.566177][ T6657] RBP: 00007fa32aba604e R08: 0000000000000000 R09: 0000000000000000
[  257.574200][ T6657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.582219][ T6657] R13: 00007fa32ad94038 R14: 00007fa32ad93fa0 R15: 00007fff06202a08
[  257.590262][ T6657]  </TASK>
[  257.731154][ T6667] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  258.816664][ T6683] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  259.590994][ T6687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.739366][ T6687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.811404][ T6697] netlink: 'syz.4.520': attribute type 4 has an invalid length.
[  260.146388][ T6704] netlink: 'syz.6.521': attribute type 1 has an invalid length.
[  260.291736][ T6707] bond2: (slave veth0_to_bond): Releasing active interface
[  260.318608][ T6707] bond3: (slave veth0_to_bond): making interface the new active one
[  260.328922][ T6707] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  260.381979][ T6717] Unsupported digest algo: 92
[  260.837956][ T6738] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  261.618805][ T6736] netlink: 'syz.6.532': attribute type 4 has an invalid length.
[  261.789580][ T6742] FAULT_INJECTION: forcing a failure.
[  261.789580][ T6742] name failslab, interval 1, probability 0, space 0, times 0
[  261.898017][ T6742] CPU: 1 PID: 6742 Comm: syz.9.533 Not tainted syzkaller #0
[  261.905419][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  261.915595][ T6742] Call Trace:
[  261.918923][ T6742]  <TASK>
[  261.921886][ T6742]  dump_stack_lvl+0x188/0x250
[  261.926613][ T6742]  ? show_regs_print_info+0x20/0x20
[  261.931845][ T6742]  ? load_image+0x410/0x410
[  261.936394][ T6742]  ? __might_sleep+0xf0/0xf0
[  261.941016][ T6742]  ? __lock_acquire+0x7d40/0x7d40
[  261.946086][ T6742]  should_fail+0x383/0x4b0
[  261.950564][ T6742]  should_failslab+0x5/0x20
[  261.955096][ T6742]  slab_pre_alloc_hook+0x51/0xc0
[  261.960067][ T6742]  __kmalloc+0x6b/0x340
[  261.964244][ T6742]  ? ops_init+0x8a/0x5f0
[  261.968528][ T6742]  ops_init+0x8a/0x5f0
[  261.972633][ T6742]  setup_net+0x39e/0xa10
[  261.976915][ T6742]  ? copy_net_ns+0x5b0/0x5b0
[  261.981545][ T6742]  ? copy_net_ns+0x324/0x5b0
[  261.986171][ T6742]  ? down_read_killable+0x1ce/0x340
[  261.991412][ T6742]  copy_net_ns+0x33e/0x5b0
[  261.995867][ T6742]  create_new_namespaces+0x3ce/0x700
[  262.001216][ T6742]  unshare_nsproxy_namespaces+0x116/0x160
[  262.006975][ T6742]  ksys_unshare+0x4f6/0x8e0
[  262.011518][ T6742]  ? __lock_acquire+0x7d40/0x7d40
[  262.016584][ T6742]  ? sighand_ctor+0x40/0x40
[  262.021116][ T6742]  ? lock_chain_count+0x20/0x20
[  262.026015][ T6742]  ? syscall_enter_from_user_mode+0x21/0x70
[  262.031951][ T6742]  __x64_sys_unshare+0x34/0x40
[  262.036746][ T6742]  do_syscall_64+0x4c/0xa0
[  262.041187][ T6742]  ? clear_bhb_loop+0x30/0x80
[  262.045893][ T6742]  ? clear_bhb_loop+0x30/0x80
[  262.050607][ T6742]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  262.056529][ T6742] RIP: 0033:0x7fdddeb744d9
[  262.060972][ T6742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.080801][ T6742] RSP: 002b:00007fdddcdc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  262.089255][ T6742] RAX: ffffffffffffffda RBX: 00007fdddedf0fa0 RCX: 00007fdddeb744d9
[  262.097256][ T6742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  262.105288][ T6742] RBP: 00007fdddec0304e R08: 0000000000000000 R09: 0000000000000000
[  262.113290][ T6742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.121284][ T6742] R13: 00007fdddedf1038 R14: 00007fdddedf0fa0 R15: 00007fff75b5d808
[  262.129306][ T6742]  </TASK>
[  262.214021][ T6749] netlink: 'syz.6.535': attribute type 1 has an invalid length.
[  262.445218][ T6751] bond3: (slave veth0_to_bond): Releasing active interface
[  262.516706][ T6751] bond4: (slave veth0_to_bond): making interface the new active one
[  262.593073][ T6751] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  262.622268][ T6758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.683288][ T6758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  263.525670][ T6778] loop6: detected capacity change from 0 to 33280
[  263.732682][ T6778] EXT4-fs (loop6): Test dummy encryption mode enabled
[  263.962344][ T6778] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.540: inode has both inline data and extents flags
[  263.984039][ T6778] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.540: couldn't read orphan inode 15 (err -117)
[  263.998931][ T6778] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  264.228479][ T6778] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  265.818952][ T6799] FAULT_INJECTION: forcing a failure.
[  265.818952][ T6799] name failslab, interval 1, probability 0, space 0, times 0
[  265.975244][ T6799] CPU: 1 PID: 6799 Comm: syz.7.544 Not tainted syzkaller #0
[  265.982612][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  265.992700][ T6799] Call Trace:
[  265.996015][ T6799]  <TASK>
[  265.998973][ T6799]  dump_stack_lvl+0x188/0x250
[  266.003695][ T6799]  ? show_regs_print_info+0x20/0x20
[  266.008935][ T6799]  ? load_image+0x410/0x410
[  266.013482][ T6799]  ? __might_sleep+0xf0/0xf0
[  266.018114][ T6799]  ? __lock_acquire+0x7d40/0x7d40
[  266.023231][ T6799]  ? do_dentry_open+0x7f7/0xf90
[  266.028137][ T6799]  should_fail+0x383/0x4b0
[  266.032601][ T6799]  should_failslab+0x5/0x20
[  266.037136][ T6799]  slab_pre_alloc_hook+0x51/0xc0
[  266.042114][ T6799]  kmem_cache_alloc_trace+0x47/0x290
[  266.047434][ T6799]  ? alloc_tty_struct+0xa3/0x7d0
[  266.052420][ T6799]  alloc_tty_struct+0xa3/0x7d0
[  266.057249][ T6799]  ? tty_init_dev+0x470/0x470
[  266.061971][ T6799]  pty_common_install+0x16a/0x790
[  266.067081][ T6799]  tty_init_dev+0xbb/0x470
[  266.071540][ T6799]  ptmx_open+0xe1/0x2c0
[  266.075746][ T6799]  ? pty_start+0x140/0x140
[  266.080204][ T6799]  chrdev_open+0x585/0x5f0
[  266.084670][ T6799]  ? cd_forget+0x160/0x160
[  266.089129][ T6799]  ? fsnotify_perm+0x3a7/0x560
[  266.093931][ T6799]  ? cd_forget+0x160/0x160
[  266.098579][ T6799]  do_dentry_open+0x7f7/0xf90
[  266.103406][ T6799]  ? vfs_open+0x2b/0x80
[  266.107613][ T6799]  path_openat+0x2718/0x2fb0
[  266.112278][ T6799]  ? do_filp_open+0x400/0x400
[  266.117009][ T6799]  do_filp_open+0x1df/0x400
[  266.121553][ T6799]  ? vfs_tmpfile+0x300/0x300
[  266.126246][ T6799]  ? _raw_spin_unlock+0x24/0x40
[  266.131136][ T6799]  ? alloc_fd+0x59e/0x650
[  266.135542][ T6799]  do_sys_openat2+0x14b/0x500
[  266.140268][ T6799]  ? __lock_acquire+0x7d40/0x7d40
[  266.145332][ T6799]  ? do_sys_open+0xe0/0xe0
[  266.149778][ T6799]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  266.155818][ T6799]  ? lock_chain_count+0x20/0x20
[  266.160717][ T6799]  __x64_sys_openat+0x135/0x160
[  266.165953][ T6799]  do_syscall_64+0x4c/0xa0
[  266.170410][ T6799]  ? clear_bhb_loop+0x30/0x80
[  266.175117][ T6799]  ? clear_bhb_loop+0x30/0x80
[  266.179921][ T6799]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  266.185847][ T6799] RIP: 0033:0x7f82077b44d9
[  266.190291][ T6799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.209939][ T6799] RSP: 002b:00007f8205a01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  266.218487][ T6799] RAX: ffffffffffffffda RBX: 00007f8207a30fa0 RCX: 00007f82077b44d9
[  266.226521][ T6799] RDX: 000000000000a241 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  266.234533][ T6799] RBP: 00007f820784304e R08: 0000000000000000 R09: 0000000000000000
[  266.242558][ T6799] R10: 00000000000000eb R11: 0000000000000246 R12: 0000000000000000
[  266.250658][ T6799] R13: 00007f8207a31038 R14: 00007f8207a30fa0 R15: 00007ffc50763e28
[  266.258667][ T6799]  </TASK>
[  266.929517][ T6828] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  267.985907][ T5371] Bluetooth: hci5: command 0x0406 tx timeout
[  267.992110][ T5371] Bluetooth: hci6: command 0x0406 tx timeout
[  268.895897][ T6838] device-mapper: table: 248:0: integrity: Bitmap mode can be only used with internal hash
[  268.896016][ T6838] device-mapper: ioctl: error adding target to table
[  271.943545][ T6855] device syzkaller1 entered promiscuous mode
[  273.451124][ T6880] loop8: detected capacity change from 0 to 33280
[  274.340825][ T6880] EXT4-fs (loop8): 1 orphan inode deleted
[  274.400669][ T6893] loop9: detected capacity change from 0 to 128
[  274.415168][ T6880] EXT4-fs (loop8): mounted filesystem without journal. Opts: sysvgroups,,errors=continue. Quota mode: writeback.
[  274.529044][ T6880] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.785487][ T5371] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  274.948479][ T6896] EXT4-fs error (device loop8): ext4_lookup:1864: inode #2: comm syz.8.565: deleted inode referenced: 16
[  275.525084][ T5371] usb 8-1: Using ep0 maxpacket: 32
[  278.541193][ T6909] netlink: 772 bytes leftover after parsing attributes in process `syz.9.573'.
[  278.566549][ T6909] loop9: detected capacity change from 0 to 2048
[  278.615536][ T5371] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  278.985865][ T5371] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.993930][ T5371] usb 8-1: Product: syz
[  279.029083][ T6367]  loop9: p1 < > p4
[  279.029083][ T6367]  p4: <netbsd: >
[  279.068826][ T6367] loop9: p4 size 722688 extends beyond EOD, truncated
[  279.145860][ T5371] usb 8-1: config 0 descriptor??
[  279.212519][ T6909]  loop9: p1 < > p4
[  279.212519][ T6909]  p4: <netbsd: >
[  279.222342][ T6909] loop9: p4 size 722688 extends beyond EOD, truncated
[  279.242836][ T5371] usb 8-1: can't set config #0, error -71
[  279.284265][ T5371] usb 8-1: USB disconnect, device number 5
[  279.335270][ T6916] input: syz0 as /devices/virtual/input/input6
[  279.536381][ T6920] loop6: detected capacity change from 0 to 33792
[  279.647384][ T6920] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  283.044950][ T6938] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.239474][ T6948] netlink: 'syz.8.583': attribute type 1 has an invalid length.
[  283.313137][ T6948] 8021q: adding VLAN 0 to HW filter on device bond1
[  283.335661][ T6953] device macvlan2 entered promiscuous mode
[  283.373511][ T6953] device bond1 entered promiscuous mode
[  283.414510][ T6953] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  283.438185][ T6953] team0: Port device macvlan2 added
[  283.933330][ T6938] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.120908][ T6938] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.221664][ T6938] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.373097][ T6938] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.401697][ T6938] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.422439][ T6938] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.435322][ T4296] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  284.456520][ T6938] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.725315][ T4296] usb 9-1: Using ep0 maxpacket: 32
[  284.819962][ T6959] FAULT_INJECTION: forcing a failure.
[  284.819962][ T6959] name failslab, interval 1, probability 0, space 0, times 0
[  284.885350][ T6959] CPU: 1 PID: 6959 Comm: syz.8.584 Not tainted syzkaller #0
[  284.892737][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  284.902854][ T6959] Call Trace:
[  284.906174][ T6959]  <TASK>
[  284.909138][ T6959]  dump_stack_lvl+0x188/0x250
[  284.913865][ T6959]  ? show_regs_print_info+0x20/0x20
[  284.919129][ T6959]  ? load_image+0x410/0x410
[  284.923689][ T6959]  ? __might_sleep+0xf0/0xf0
[  284.928324][ T6959]  ? __lock_acquire+0x7d40/0x7d40
[  284.933402][ T6959]  should_fail+0x383/0x4b0
[  284.937872][ T6959]  should_failslab+0x5/0x20
[  284.942414][ T6959]  slab_pre_alloc_hook+0x51/0xc0
[  284.947395][ T6959]  ? ceph_msg_new2+0x3c/0x4a0
[  284.952114][ T6959]  kmem_cache_alloc+0x3d/0x280
[  284.956927][ T6959]  ceph_msg_new2+0x3c/0x4a0
[  284.961476][ T6959]  msgpool_alloc+0x7c/0x1b0
[  284.966014][ T6959]  ? ceph_msgpool_init+0x180/0x180
[  284.971173][ T6959]  mempool_init_node+0x1e5/0x480
[  284.976163][ T6959]  ? msgpool_alloc+0x1b0/0x1b0
[  284.981002][ T6959]  ? ceph_msgpool_init+0x180/0x180
[  284.986157][ T6959]  mempool_create+0x7d/0xc0
[  284.990704][ T6959]  ceph_msgpool_init+0xa3/0x180
[  284.995601][ T6959]  ceph_osdc_init+0x56e/0x8a0
[  285.000335][ T6959]  ceph_create_client+0x242/0x300
[  285.005408][ T6959]  ceph_get_tree+0xf6/0x1290
[  285.010036][ T6959]  ? bpf_lsm_capable+0x5/0x10
[  285.014782][ T6959]  ? security_capable+0x85/0xb0
[  285.019711][ T6959]  vfs_get_tree+0x88/0x270
[  285.024207][ T6959]  do_new_mount+0x247/0xa50
[  285.028849][ T6959]  __se_sys_mount+0x2e3/0x3d0
[  285.033572][ T6959]  ? __x64_sys_mount+0xc0/0xc0
[  285.038387][ T6959]  ? lockdep_hardirqs_on+0x94/0x140
[  285.043622][ T6959]  ? __x64_sys_mount+0x1c/0xc0
[  285.048438][ T6959]  do_syscall_64+0x4c/0xa0
[  285.052895][ T6959]  ? clear_bhb_loop+0x30/0x80
[  285.057835][ T6959]  ? clear_bhb_loop+0x30/0x80
[  285.062553][ T6959]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  285.068491][ T6959] RIP: 0033:0x7fb6f2fa34d9
[  285.072958][ T6959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.092614][ T6959] RSP: 002b:00007fb6f11f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  285.101086][ T6959] RAX: ffffffffffffffda RBX: 00007fb6f321ffa0 RCX: 00007fb6f2fa34d9
[  285.109100][ T6959] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840
[  285.117118][ T6959] RBP: 00007fb6f303204e R08: 0000000000000000 R09: 0000000000000000
[  285.125132][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  285.133146][ T6959] R13: 00007fb6f3220038 R14: 00007fb6f321ffa0 R15: 00007fff9d7b81d8
[  285.141204][ T6959]  </TASK>
[  285.385313][ T4296] usb 9-1: unable to get BOS descriptor or descriptor too short
[  287.536766][ T6982] sctp: failed to load transform for md5: -2
[  287.775297][ T6996] netlink: 'syz.7.594': attribute type 1 has an invalid length.
[  287.903181][ T6996] 8021q: adding VLAN 0 to HW filter on device bond4
[  287.982582][ T6997] device macvlan2 entered promiscuous mode
[  288.063830][ T6997] device bond4 entered promiscuous mode
[  288.125968][ T6997] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  288.221775][ T6997] team0: Port device macvlan2 added
[  288.227418][ T4296] usb 9-1: unable to read config index 0 descriptor/start: -71
[  288.509113][ T7010] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  288.520804][ T4296] usb 9-1: can't read configurations, error -71
[  288.700936][ T4266] Bluetooth: hci1: command 0x0406 tx timeout
[  289.794673][ T7023] loop9: detected capacity change from 0 to 33792
[  289.965826][ T7023] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  290.024818][ T7038] FAULT_INJECTION: forcing a failure.
[  290.024818][ T7038] name failslab, interval 1, probability 0, space 0, times 0
[  290.075199][ T7038] CPU: 1 PID: 7038 Comm: syz.8.601 Not tainted syzkaller #0
[  290.082566][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  290.092675][ T7038] Call Trace:
[  290.096002][ T7038]  <TASK>
[  290.098995][ T7038]  dump_stack_lvl+0x188/0x250
[  290.103745][ T7038]  ? show_regs_print_info+0x20/0x20
[  290.109028][ T7038]  ? load_image+0x410/0x410
[  290.113589][ T7038]  ? __might_sleep+0xf0/0xf0
[  290.118250][ T7038]  ? __lock_acquire+0x7d40/0x7d40
[  290.123359][ T7038]  should_fail+0x383/0x4b0
[  290.127928][ T7038]  should_failslab+0x5/0x20
[  290.132471][ T7038]  slab_pre_alloc_hook+0x51/0xc0
[  290.137458][ T7038]  ? snd_pcm_hw_rule_add+0x188/0x7f0
[  290.142802][ T7038]  __kmalloc_track_caller+0x69/0x330
[  290.148130][ T7038]  ? snd_pcm_hw_rule_add+0x188/0x7f0
[  290.153470][ T7038]  krealloc+0x5a/0xf0
[  290.157533][ T7038]  snd_pcm_hw_rule_add+0x188/0x7f0
[  290.162700][ T7038]  ? snd_pcm_post_pause+0x290/0x290
[  290.167944][ T7038]  ? __raw_spin_lock_init+0x41/0x100
[  290.173270][ T7038]  ? snd_interval_ranges+0x300/0x300
[  290.178612][ T7038]  ? snd_pcm_attach_substream+0x83a/0xac0
[  290.184388][ T7038]  snd_pcm_open_substream+0xb93/0x2570
[  290.189911][ T7038]  ? snd_pcm_drop+0x250/0x250
[  290.194643][ T7038]  snd_pcm_oss_open+0x1084/0x1e60
[  290.199742][ T7038]  ? snd_pcm_oss_mmap+0x440/0x440
[  290.204808][ T7038]  ? soundcore_open+0x270/0x4b0
[  290.209701][ T7038]  ? __lock_acquire+0x7d40/0x7d40
[  290.214805][ T7038]  ? sched_dynamic_update+0x210/0x210
[  290.220235][ T7038]  ? do_raw_spin_unlock+0x11d/0x230
[  290.225496][ T7038]  chrdev_open+0x585/0x5f0
[  290.229979][ T7038]  ? cd_forget+0x160/0x160
[  290.234444][ T7038]  ? fsnotify_perm+0x3a7/0x560
[  290.239252][ T7038]  ? cd_forget+0x160/0x160
[  290.243748][ T7038]  do_dentry_open+0x7f7/0xf90
[  290.249021][ T7038]  ? vfs_open+0x2b/0x80
[  290.253230][ T7038]  path_openat+0x2718/0x2fb0
[  290.257899][ T7038]  ? __kasan_slab_alloc+0xa9/0xc0
[  290.262979][ T7038]  ? do_filp_open+0x400/0x400
[  290.267730][ T7038]  do_filp_open+0x1df/0x400
[  290.272287][ T7038]  ? vfs_tmpfile+0x300/0x300
[  290.276955][ T7038]  ? _raw_spin_unlock+0x24/0x40
[  290.281875][ T7038]  ? alloc_fd+0x59e/0x650
[  290.286276][ T7038]  do_sys_openat2+0x14b/0x500
[  290.290994][ T7038]  ? __lock_acquire+0x7d40/0x7d40
[  290.296067][ T7038]  ? do_sys_open+0xe0/0xe0
[  290.300532][ T7038]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  290.306595][ T7038]  ? lock_chain_count+0x20/0x20
[  290.311509][ T7038]  __x64_sys_openat+0x135/0x160
[  290.316432][ T7038]  do_syscall_64+0x4c/0xa0
[  290.320890][ T7038]  ? clear_bhb_loop+0x30/0x80
[  290.325608][ T7038]  ? clear_bhb_loop+0x30/0x80
[  290.330345][ T7038]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  290.336298][ T7038] RIP: 0033:0x7fb6f2fa34d9
[  290.340756][ T7038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.360440][ T7038] RSP: 002b:00007fb6f11f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  290.368908][ T7038] RAX: ffffffffffffffda RBX: 00007fb6f321ffa0 RCX: 00007fb6f2fa34d9
[  290.376927][ T7038] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  290.384948][ T7038] RBP: 00007fb6f303204e R08: 0000000000000000 R09: 0000000000000000
[  290.392964][ T7038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.400981][ T7038] R13: 00007fb6f3220038 R14: 00007fb6f321ffa0 R15: 00007fff9d7b81d8
[  290.409019][ T7038]  </TASK>
[  292.209722][ T7060] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.295796][ T7063] netlink: 'syz.8.606': attribute type 1 has an invalid length.
[  292.399198][ T7063] 8021q: adding VLAN 0 to HW filter on device bond2
[  292.471244][ T7065] device macvlan3 entered promiscuous mode
[  292.491460][ T7065] device bond2 entered promiscuous mode
[  292.509833][ T7065] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  292.519002][ T7065] team0: Port device macvlan3 added
[  292.782902][ T7060] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.899458][ T7076] loop8: detected capacity change from 0 to 33792
[  292.903122][ T7060] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.012653][ T7076] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  293.028956][ T7060] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.368657][ T7097] jffs2: notice: (7097) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  296.680436][ T7116] netlink: 'syz.8.620': attribute type 1 has an invalid length.
[  296.743843][ T7116] 8021q: adding VLAN 0 to HW filter on device bond3
[  296.761774][ T7121] device macvlan4 entered promiscuous mode
[  296.778444][ T7121] device bond3 entered promiscuous mode
[  296.784551][ T7121] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  296.816120][ T7121] team0: Port device macvlan4 added
[  296.941475][ T7125] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  303.524547][ T7060] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.128818][ T7060] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.236220][ T7060] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.376172][ T7060] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.411760][ T7209] loop9: detected capacity change from 0 to 33280
[  307.234642][ T7209] EXT4-fs (loop9): Test dummy encryption mode enabled
[  307.889070][ T7209] EXT4-fs: failed to create workqueue
[  307.894548][ T7209] EXT4-fs (loop9): mount failed
[  308.868796][ T7245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  309.303833][ T7247] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.215125][ T7254] loop8: detected capacity change from 0 to 33280
[  312.233714][ T7254] EXT4-fs (loop8): Test dummy encryption mode enabled
[  312.241318][ T7254] EXT4-fs: failed to create workqueue
[  312.246839][ T7254] EXT4-fs (loop8): mount failed
[  312.481179][ T7247] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.834301][ T7247] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.976134][ T7247] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.354876][ T7247] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.126234][ T7247] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.204360][ T7247] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.292344][ T7247] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.948782][ T7297] loop8: detected capacity change from 0 to 33792
[  316.109847][ T7306] Cannot find add_set index 0 as target
[  316.368309][ T7297] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  317.196891][ T7316] loop6: detected capacity change from 0 to 33280
[  318.187357][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  318.193761][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  318.344481][ T7316] EXT4-fs (loop6): Test dummy encryption mode enabled
[  318.659877][ T7316] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.661: inode has both inline data and extents flags
[  318.679833][ T7316] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.661: couldn't read orphan inode 15 (err -117)
[  318.694406][ T7316] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  318.921438][ T7316] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  319.761237][ T7341] loop9: detected capacity change from 0 to 33280
[  319.878355][ T7341] EXT4-fs (loop9): Test dummy encryption mode enabled
[  319.992951][ T7341] EXT4-fs error (device loop9): ext4_orphan_get:1410: inode #15: comm syz.9.668: inode has both inline data and extents flags
[  320.009635][ T7341] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.668: couldn't read orphan inode 15 (err -117)
[  320.025846][ T7341] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  320.212349][ T7341] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  323.295725][ T7389] loop6: detected capacity change from 0 to 33792
[  323.543831][ T7383] loop8: detected capacity change from 0 to 33280
[  323.565859][ T7399] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  323.635900][ T7389] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  323.685053][ T7383] EXT4-fs (loop8): Test dummy encryption mode enabled
[  323.719377][ T7383] EXT4-fs error (device loop8): ext4_orphan_get:1410: inode #15: comm syz.8.680: inode has both inline data and extents flags
[  323.733075][ T7383] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.680: couldn't read orphan inode 15 (err -117)
[  323.748215][ T7383] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  323.977715][ T7383] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  328.318847][ T7479] loop9: detected capacity change from 0 to 33792
[  328.545933][ T7482] loop8: detected capacity change from 0 to 33280
[  328.596256][ T7482] EXT4-fs (loop8): Test dummy encryption mode enabled
[  330.248387][ T7482] EXT4-fs error (device loop8): ext4_orphan_get:1410: inode #15: comm syz.8.685: inode has both inline data and extents flags
[  330.268615][ T7482] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.685: couldn't read orphan inode 15 (err -117)
[  330.283160][ T7482] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  330.510549][ T7482] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  330.586808][ T7479] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  334.337940][ T7556] netlink: 60 bytes leftover after parsing attributes in process `syz.7.711'.
[  334.431761][ T7556] netlink: 60 bytes leftover after parsing attributes in process `syz.7.711'.
[  334.496467][ T7564] netlink: 60 bytes leftover after parsing attributes in process `syz.7.711'.
[  334.583751][ T7556] netlink: 60 bytes leftover after parsing attributes in process `syz.7.711'.
[  334.605739][ T7566] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  339.520114][ T7623] netlink: 872 bytes leftover after parsing attributes in process `syz.6.730'.
[  340.681778][ T7653] loop8: detected capacity change from 0 to 33792
[  341.243142][ T7653] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  341.789220][ T7673] netlink: 'syz.4.746': attribute type 29 has an invalid length.
[  341.817899][ T7673] netlink: 'syz.4.746': attribute type 29 has an invalid length.
[  341.851339][ T7673] netlink: 'syz.4.746': attribute type 29 has an invalid length.
[  344.348958][ T7719] loop9: detected capacity change from 0 to 33792
[  344.368781][ T7713] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  344.423852][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.764'.
[  344.566149][ T7719] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  346.796980][ T7770] netlink: 'syz.8.776': attribute type 15 has an invalid length.
[  347.247973][ T7770] device vxlan0 entered promiscuous mode
[  348.873938][ T7797] netlink: 'syz.9.784': attribute type 10 has an invalid length.
[  348.902280][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.910697][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.038168][ T7799] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  350.194631][ T7797] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.202249][ T7797] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.210599][ T7797] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.217765][ T7797] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.986590][ T7797] team0: Port device bridge0 added
[  351.354782][ T7845] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  352.486856][ T7870] fuse: Bad value for 'fd'
[  352.598605][ T7872] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  354.688541][ T7883] netlink: 148 bytes leftover after parsing attributes in process `syz.4.798'.
[  354.909865][ T7883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.798'.
[  355.151069][ T7883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.798'.
[  355.528623][ T7903] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  355.550600][ T7903] device syzkaller0 entered promiscuous mode
[  356.911554][ T7934] loop8: detected capacity change from 0 to 256
[  357.335162][ T7961] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  358.288934][ T7953] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.327633][ T7971] device syzkaller0 entered promiscuous mode
[  358.410472][ T7984] loop8: detected capacity change from 0 to 33792
[  358.597465][ T7984] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  358.614615][ T7953] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.734567][ T8013] netlink: 'syz.6.831': attribute type 16 has an invalid length.
[  358.801224][ T8013] netlink: 156 bytes leftover after parsing attributes in process `syz.6.831'.
[  358.948305][ T7953] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.000718][ T8016] netlink: 'syz.4.832': attribute type 1 has an invalid length.
[  359.508114][ T8028] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  359.762906][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  360.183053][ T1111] Bluetooth: hci0: command 0x0406 tx timeout
[  361.198893][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  361.218312][ T8023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  361.310153][ T7953] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.504299][ T7953] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.575658][ T7953] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.636058][ T7953] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.690770][ T7953] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  362.428958][ T8081] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  364.795006][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  364.815004][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  364.825018][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  364.845005][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  364.855014][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  364.885038][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  364.895024][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  364.905023][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  364.915021][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  364.925016][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  365.154207][   T26] audit: type=1326 audit(1794591103.695:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.8.852" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2fa34d9 code=0x7ffc0000
[  365.413872][   T26] audit: type=1326 audit(1794591103.725:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.8.852" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2fa34d9 code=0x7ffc0000
[  366.742009][   T26] audit: type=1326 audit(1794591103.725:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.8.852" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2fa34d9 code=0x7ffc0000
[  366.991532][ T8111] FAULT_INJECTION: forcing a failure.
[  366.991532][ T8111] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  367.116317][   T26] audit: type=1326 audit(1794591103.725:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.8.852" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fb6f2fa34d9 code=0x7ffc0000
[  367.209633][ T8111] CPU: 0 PID: 8111 Comm: syz.7.854 Not tainted syzkaller #0
[  367.217009][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  367.227108][ T8111] Call Trace:
[  367.230424][ T8111]  <TASK>
[  367.233387][ T8111]  dump_stack_lvl+0x188/0x250
[  367.238147][ T8111]  ? show_regs_print_info+0x20/0x20
[  367.243653][ T8111]  ? load_image+0x410/0x410
[  367.248302][ T8111]  ? __lock_acquire+0x7d40/0x7d40
[  367.253383][ T8111]  should_fail+0x383/0x4b0
[  367.257850][ T8111]  prepare_alloc_pages+0x1e3/0x5b0
[  367.263387][ T8111]  __alloc_pages+0x11b/0x480
[  367.268044][ T8111]  ? zone_statistics+0x170/0x170
[  367.273029][ T8111]  ? mark_lock+0x94/0x320
[  367.277404][ T8111]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  367.283425][ T8111]  ? alloc_pages+0x452/0x560
[  367.288056][ T8111]  pte_alloc_one+0x7b/0x310
[  367.292604][ T8111]  ? rcu_lock_release+0x20/0x20
[  367.297601][ T8111]  ? lockdep_hardirqs_on+0x94/0x140
[  367.302853][ T8111]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  367.308821][ T8111]  __pte_alloc+0x21/0x150
[  367.313239][ T8111]  handle_mm_fault+0x39d9/0x4440
[  367.318238][ T8111]  ? get_page+0xe0/0xe0
[  367.322447][ T8111]  ? vmacache_find+0x340/0x590
[  367.327256][ T8111]  ? find_vma+0xd2/0x230
[  367.331685][ T8111]  do_user_addr_fault+0x494/0xc90
[  367.336883][ T8111]  exc_page_fault+0x60/0x100
[  367.341523][ T8111]  ? clear_bhb_loop+0x30/0x80
[  367.346278][ T8111]  asm_exc_page_fault+0x22/0x30
[  367.351171][ T8111] RIP: 0033:0x7f8207672706
[  367.355623][ T8111] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 4f 14 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 8c bf fe ff 4d 85 ed 0f 84 2b 0a 00
[  367.375269][ T8111] RSP: 002b:00007f82059fef60 EFLAGS: 00010206
[  367.381392][ T8111] RAX: 0000000000000000 RBX: 00007f8207a30fa0 RCX: 0000000000000000
[  367.389651][ T8111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f8207843b3f
[  367.397770][ T8111] RBP: 00007f820784304e R08: 00007f820765ea30 R09: 0000000000000000
[  367.405785][ T8111] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000003f
[  367.413793][ T8111] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc50763e28
[  367.421824][ T8111]  </TASK>
[  367.688157][   T26] audit: type=1326 audit(1794591103.725:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.8.852" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2fa34d9 code=0x7ffc0000
[  367.767609][ T8113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.004947][ T8113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.044039][   T26] audit: type=1326 audit(1794591103.725:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.8.852" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2fa34d9 code=0x7ffc0000
[  368.148576][ T8111] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  368.158254][   T26] audit: type=1326 audit(1794591103.725:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.8.852" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2fa34d9 code=0x7ffc0000
[  368.182889][   T26] audit: type=1326 audit(1794591103.725:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.8.852" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb6f2fa34d9 code=0x7ffc0000
[  368.212673][   T26] audit: type=1326 audit(1794591103.755:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.8.852" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2fa34d9 code=0x7ffc0000
[  368.241053][   T26] audit: type=1326 audit(1794591103.755:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.8.852" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2fa34d9 code=0x7ffc0000
[  368.748107][ T8150] device syzkaller0 entered promiscuous mode
[  368.947772][ T8165] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.024206][ T8169] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  369.908327][ T8165] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.230766][ T8165] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.399873][ T8165] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.032856][   T26] kauditd_printk_skb: 58 callbacks suppressed
[  372.032874][   T26] audit: type=1326 audit(1794591110.575:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.9.871" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdddeb744d9 code=0x7ffc0000
[  372.096156][ T8165] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.112835][   T26] audit: type=1326 audit(1794591110.625:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.9.871" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdddeb744d9 code=0x7ffc0000
[  372.159642][ T8165] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.233110][ T8165] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.265584][   T26] audit: type=1326 audit(1794591110.625:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.9.871" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdddeb744d9 code=0x7ffc0000
[  372.300902][ T8165] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.373396][   T26] audit: type=1326 audit(1794591110.685:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.9.871" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdddeb34d0e code=0x7ffc0000
[  372.729040][   T26] audit: type=1326 audit(1794591110.685:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.9.871" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fdddeb744d9 code=0x7ffc0000
[  373.255274][ T8206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  373.309455][   T26] audit: type=1326 audit(1794591110.685:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.9.871" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdddeb744d9 code=0x7ffc0000
[  373.394213][ T8206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  373.426566][   T26] audit: type=1326 audit(1794591110.685:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.9.871" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdddeb744d9 code=0x7ffc0000
[  373.481665][   T26] audit: type=1326 audit(1794591110.685:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.9.871" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdddeb744d9 code=0x7ffc0000
[  373.581026][   T26] audit: type=1326 audit(1794591110.685:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.9.871" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdddeb744d9 code=0x7ffc0000
[  376.909297][   T26] audit: type=1326 audit(1794591115.455:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.6.898" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa32ab174d9 code=0x0
[  377.212128][ T8321] block device autoloading is deprecated and will be removed.
[  378.548711][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  378.555304][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  381.367814][   T26] audit: type=1326 audit(1794591119.915:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.9.917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdddeb744d9 code=0x7ffc0000
[  381.441458][   T26] audit: type=1326 audit(1794591119.945:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.9.917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7fdddeb744d9 code=0x7ffc0000
[  381.547261][ T8401] fuse: Bad value for 'fd'
[  382.194600][   T26] audit: type=1326 audit(1794591119.945:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.9.917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdddeb744d9 code=0x7ffc0000
[  382.474325][   T26] audit: type=1326 audit(1794591119.945:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.9.917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdddeb744d9 code=0x7ffc0000
[  382.571437][ T8414] device syzkaller1 entered promiscuous mode
[  382.785467][ T8422] netlink: 24 bytes leftover after parsing attributes in process `syz.9.927'.
[  382.867250][ T8428] mmap: syz.8.929 (8428) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  382.917343][ T8428] ------------[ cut here ]------------
[  382.922872][ T8428] WARNING: CPU: 1 PID: 8428 at include/linux/fs.h:538 hugetlb_split+0x237/0x2a0
[  383.005146][ T8428] Modules linked in:
[  383.009247][ T8428] CPU: 0 PID: 8428 Comm: syz.8.929 Not tainted syzkaller #0
[  383.098223][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  383.159756][ T8428] RIP: 0010:hugetlb_split+0x237/0x2a0
[  383.165607][ T8428] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 35 7e bf ff 0f 0b e9 62 fe ff ff e8 29 7e bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 d4 65 6d 8e 80 e1 07 80 c1 03 38 c1
[  383.190106][ T8428] RSP: 0018:ffffc90003d97aa0 EFLAGS: 00010283
[  383.196697][ T8428] RAX: ffffffff81b9af67 RBX: 0000200000000000 RCX: 0000000000080000
[  383.204832][ T8428] RDX: ffffc9000e6db000 RSI: 0000000000002349 RDI: 000000000000234a
[  383.235013][ T8428] RBP: 0000000000000000 R08: ffff8880552cc93f R09: 1ffff1100aa59927
[  383.313628][ T8437] loop9: detected capacity change from 0 to 33280
[  383.500962][ T8437] EXT4-fs (loop9): Test dummy encryption mode enabled
[  383.592260][ T8428] R10: dffffc0000000000 R11: ffffed100aa59928 R12: ffff88802cb916d0
[  383.715691][ T8437] EXT4-fs error (device loop9): ext4_orphan_get:1410: inode #15: comm syz.9.930: inode has both inline data and extents flags
[  383.731981][ T8437] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.930: couldn't read orphan inode 15 (err -117)
[  383.747156][ T8437] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  383.966025][ T8437] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  384.052333][ T8428] R13: dffffc0000000000 R14: ffff88802cb91630 R15: ffff88802359f340
[  384.127343][ T8428] FS:  00007fb6f11f06c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  384.198237][ T8428] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  384.204910][ T8428] CR2: 00007f3045e71048 CR3: 0000000060e2b000 CR4: 00000000003506e0
[  384.213043][ T8428] Call Trace:
[  384.216559][ T8428]  <TASK>
[  384.219566][ T8428]  __vma_adjust+0x2da/0x1e30
[  384.224551][ T8428]  __split_vma+0x346/0x410
[  384.229374][ T8428]  __do_munmap+0x38a/0xe10
[  384.288034][ T8428]  mmap_region+0x977/0x1730
[  384.301858][ T8428]  ? get_unmapped_area+0x2f0/0x360
[  384.322359][ T8428]  ? file_mmap_ok+0x11f/0x170
[  384.338958][ T8428]  do_mmap+0x801/0xe30
[  384.365342][ T8428]  __se_sys_remap_file_pages+0x4a5/0x630
[  384.395882][ T8428]  do_syscall_64+0x4c/0xa0
[  384.425339][ T8428]  ? clear_bhb_loop+0x30/0x80
[  384.451454][ T8428]  ? clear_bhb_loop+0x30/0x80
[  384.480151][ T8428]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  384.509184][ T8428] RIP: 0033:0x7fb6f2fa34d9
[  384.530680][ T8428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  384.614930][ T8428] RSP: 002b:00007fb6f11f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  384.643860][ T8428] RAX: ffffffffffffffda RBX: 00007fb6f321ffa0 RCX: 00007fb6f2fa34d9
[  384.670302][ T8428] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000
[  384.690419][ T8428] RBP: 00007fb6f303204e R08: 0000000000010000 R09: 0000000000000000
[  384.714384][ T8428] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000000
[  384.739667][ T8428] R13: 00007fb6f3220038 R14: 00007fb6f321ffa0 R15: 00007fff9d7b81d8
[  384.770002][ T8428]  </TASK>
[  384.782755][ T8428] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  384.790107][ T8428] CPU: 1 PID: 8428 Comm: syz.8.929 Not tainted syzkaller #0
[  384.797460][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  384.807554][ T8428] Call Trace:
[  384.810863][ T8428]  <TASK>
[  384.813911][ T8428]  dump_stack_lvl+0x188/0x250
[  384.818659][ T8428]  ? show_regs_print_info+0x20/0x20
[  384.823901][ T8428]  ? load_image+0x410/0x410
[  384.828453][ T8428]  panic+0x2f8/0x850
[  384.832390][ T8428]  ? bpf_jit_dump+0xd0/0xd0
[  384.836945][ T8428]  ? hugetlb_split+0x237/0x2a0
[  384.841743][ T8428]  __warn+0x248/0x2b0
[  384.845769][ T8428]  ? hugetlb_split+0x237/0x2a0
[  384.850568][ T8428]  report_bug+0x1b9/0x2e0
[  384.854941][ T8428]  handle_bug+0x3a/0x70
[  384.859130][ T8428]  exc_invalid_op+0x16/0x40
[  384.863675][ T8428]  asm_exc_invalid_op+0x16/0x20
[  384.868565][ T8428] RIP: 0010:hugetlb_split+0x237/0x2a0
[  384.873972][ T8428] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 35 7e bf ff 0f 0b e9 62 fe ff ff e8 29 7e bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 d4 65 6d 8e 80 e1 07 80 c1 03 38 c1
[  384.893633][ T8428] RSP: 0018:ffffc90003d97aa0 EFLAGS: 00010283
[  384.899745][ T8428] RAX: ffffffff81b9af67 RBX: 0000200000000000 RCX: 0000000000080000
[  384.907780][ T8428] RDX: ffffc9000e6db000 RSI: 0000000000002349 RDI: 000000000000234a
[  384.915816][ T8428] RBP: 0000000000000000 R08: ffff8880552cc93f R09: 1ffff1100aa59927
[  384.923821][ T8428] R10: dffffc0000000000 R11: ffffed100aa59928 R12: ffff88802cb916d0
[  384.931828][ T8428] R13: dffffc0000000000 R14: ffff88802cb91630 R15: ffff88802359f340
[  384.939846][ T8428]  ? hugetlb_split+0x237/0x2a0
[  384.944659][ T8428]  __vma_adjust+0x2da/0x1e30
[  384.949322][ T8428]  __split_vma+0x346/0x410
[  384.953785][ T8428]  __do_munmap+0x38a/0xe10
[  384.958262][ T8428]  mmap_region+0x977/0x1730
[  384.962814][ T8428]  ? get_unmapped_area+0x2f0/0x360
[  384.967968][ T8428]  ? file_mmap_ok+0x11f/0x170
[  384.972688][ T8428]  do_mmap+0x801/0xe30
[  384.976832][ T8428]  __se_sys_remap_file_pages+0x4a5/0x630
[  384.982538][ T8428]  do_syscall_64+0x4c/0xa0
[  384.986989][ T8428]  ? clear_bhb_loop+0x30/0x80
[  384.991703][ T8428]  ? clear_bhb_loop+0x30/0x80
[  384.996413][ T8428]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  385.002345][ T8428] RIP: 0033:0x7fb6f2fa34d9
[  385.006791][ T8428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  385.026432][ T8428] RSP: 002b:00007fb6f11f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  385.034894][ T8428] RAX: ffffffffffffffda RBX: 00007fb6f321ffa0 RCX: 00007fb6f2fa34d9
[  385.042907][ T8428] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000
[  385.050911][ T8428] RBP: 00007fb6f303204e R08: 0000000000010000 R09: 0000000000000000
[  385.058949][ T8428] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000000
[  385.067067][ T8428] R13: 00007fb6f3220038 R14: 00007fb6f321ffa0 R15: 00007fff9d7b81d8
[  385.075098][ T8428]  </TASK>
[  385.078452][ T8428] Kernel Offset: disabled
[  385.083153][ T8428] Rebooting in 86400 seconds..