last executing test programs:

4m1.398675725s ago: executing program 32 (id=100):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
syz_open_dev$swradio(0x0, 0x1, 0x2) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) (rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000001140)={0x400, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) (async, rerun: 64)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, &(0x7f0000000100)='barrier') (async, rerun: 64)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046f41, &(0x7f0000000440)=0x40000000) (async)
r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000200)) (async, rerun: 32)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) (rerun: 32)
syz_open_dev$sndpcmp(&(0x7f00000010c0), 0x0, 0x1a7e24) (async, rerun: 32)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000340)=0x100000e) (async, rerun: 32)
writev(0xffffffffffffffff, &(0x7f000009de80), 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e25, @private=0xa010101}, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffad, &(0x7f0000001080)={&(0x7f0000001100)=ANY=[@ANYBLOB="6c0002006d4b0704070810ae3864003702559c00", @ANYRESOCT=r1, @ANYRESDEC=0x0], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x15)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001040)='memory.events\x00', 0x0, 0x0) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) (async, rerun: 32)
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00d0867e65d443152ee691a70d225b73c01164645c70ff689f607da7a169dbbfebbeb349b043f54d088bcd11a44f2074aa41532279b5718bc4d89fe5010d6bf465008743337cddaefbc0f0293d06483bec82e15366358709c5d5c0049ff9dcb7ea7e855e3c24bc3b4173720476fb379ce25c0ea42027ba6a7d"], 0x1, 0x13a, &(0x7f0000000280)="$eJzs2r9Kw1AUBvCjFoQ+glOhAauQ/1oHd0Fw8gkMbZIGb7wlEaSdiquD4nAdHV3dRDcfIbNPoC9xJW1q7b2zGvD7Lfej53J6s5zpmBlP3Sg3ibYmt8fvqxlPW11/rxe5UUAzh0TUKkMh5Z1FmpOveiEnlnah/VKdnVgcPUcJCz29BwAAAAAAAAAAAAAAAAAAAADAP9H+qEJzIPhDlLDQ/VbNR+PTgLEwy+e/GFTt6ND2Pd8v7/tL/ToNImO6v5OIg8uy7izVjXmnzYHgK+r/2efp0M5HYzNJgziMwzPP87vOjuPseva0l612NG6qN1Ehn4b6PpHxuNgnenP0fSJqzo7GRiKuL9Tui+9H+KlwRbV4hhrkWi2egVDPoM4P6q/77ddyflg9zvq/OD+0iQbwRz4DAAD//05cOC0=") (rerun: 32)
open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x20) (async, rerun: 64)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') (rerun: 64)
pread64(r4, &(0x7f0000000040)=""/4096, 0x1000, 0x2)

1m22.767042811s ago: executing program 6 (id=1157):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000)

1m22.685573897s ago: executing program 6 (id=1159):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)

1m22.411419853s ago: executing program 6 (id=1162):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000))

1m21.560153049s ago: executing program 6 (id=1166):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0)

1m21.338154846s ago: executing program 6 (id=1167):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x111, 0x0, &(0x7f0000000140)=<r0=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1m21.043352747s ago: executing program 6 (id=1171):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRES16, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRES16=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e1a, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x200000000000022e, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000ff090000000000005509010000000000950000000000e7ffbf91000000000000b702000001000000850000008500717486e5b56f7583520000b70000000000000099000000000000009aa599ee26ad6139"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x9c)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf251000000005000f00060000000600110041030000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006861736800000000140002800800074000000001080002400000000e0900010073797a3000000000090002000000000000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x400, @loopback}, 0x10)
connect$inet(r8, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)

1m17.821167323s ago: executing program 3 (id=1198):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)

1m17.623895322s ago: executing program 3 (id=1200):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$eJzs3M1rVFcbAPDn3nwYNb6JL/LyWkoNtGChOBrFSl2py9ZFof0DDHEiIdcPkhRMcBHbhXRVC910UWgXpX9AoetstNBV6aaVFrqXShHdp9zJnWQwM0mqMx4/fj84c8/HZM7z5JK555C5E8BLa6x8yCP2R8S5LGKk6s8jYrBRG4pYWn3eg/vXJh/evzaZxcrKB39nkVV9zdfKquPuqjEUEb+cyeK/n2ycd25hcWaiKOqzVfvw/MUrh+cWFg9NX5y4UL9QvzR+YvzY8RPHjr99pGu5vrv35tmvxk/t+f7Mrauv3fj9yyxOxXA11ppHt4zFWKxUWvv7I2Ki25Ml0lflk7X0Zf0JAwIAYFN5yxrufzESfbG+eBuJW78mDQ4AAADoipW+WPsfFQAAAPCiyuz/AQAA4AXX/BzAg/vXJpsl7ScSnq57pyNitF3+/bHUOA7FQETsepBF622t2eqPPbGxiNj30+iPZYke3Ye8maXrEfH/dvlnjfxHG3dxb8w/j4hu3Jk99kj7ecr/VBfmT50/AC+n5dOrF7KN1798bf0Tba5//W2uXY8j9fWv8/pvPf++Duu/97c5R/3Ap593Gmtd/xXfvnq7nL88PlFS/8K96xGv9Hde/5T5Zx3yP7fNOQb++PmHTmNl/mW+zfK081/5JuJg2/3P+jfaZJt/P9HhqemiXj22nePG7e/2dZq/9fyXpZy/uRd4Gsrzv6tD/lud/yvbnGP5r4N/dhrbOv/87mD2YaM2WPVcnZifnx2PGMzObuw/unkszec0X6PM/83XN//7b5d/+Z6wVP0eyr3A9epYtj9+ZM5D773zxuPn31tl/ucf8/zf3OYcX382e7fTWOr8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+5BExHFleW6vnea0WsTsi9sWuvLg8N//W1OWPLp0vxyJGYyCfmi7qRyJiZLWdle3xRn29ffSR9rGI2BsRX4zsbLRrk5eL86mTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM3uiBiOLK9FRB4RD0fyvFZLHRUAAADQdaOpAwAAAAB6zv4fAAAAXnz2/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTY3gPLd7KIWDq5s1FKg9XYQNLIgF7LUwcAJNOXOgAgmf7UAQDJ2OMD2RbjQx1HdnQ9FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeXQf3L9/JImLp5M5GKQ1WYwNJIwN6LU8dAJBMX+oAgGT6UwcAJGOPD2RbjA91HNnR9VgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHYNN0qW1yIib9TzvFaL2BMRozGQTU0X9SMR8Z+I+G1kYEfZHk8dNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF03t7A4M1EU9VkVFRWVtUrqdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFKYW1icmSiK+uxc6kgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA1OYWFmcmiqI+28NK6hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEjnnwAAAP///JMJmQ==")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

1m17.01830488s ago: executing program 3 (id=1205):
open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x202000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs")

1m13.968020074s ago: executing program 3 (id=1210):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2207, 0x4)

1m13.459944265s ago: executing program 3 (id=1217):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x0)
r3 = socket(0x28, 0x5, 0x0)
sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

1m12.970892842s ago: executing program 3 (id=1220):
socket(0x10, 0x3, 0x0)
io_uring_setup(0x31fa, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50)

1m5.863947208s ago: executing program 33 (id=1171):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRES16, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRES16=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e1a, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x200000000000022e, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000ff090000000000005509010000000000950000000000e7ffbf91000000000000b702000001000000850000008500717486e5b56f7583520000b70000000000000099000000000000009aa599ee26ad6139"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x9c)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf251000000005000f00060000000600110041030000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006861736800000000140002800800074000000001080002400000000e0900010073797a3000000000090002000000000000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x400, @loopback}, 0x10)
connect$inet(r8, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)

57.567492836s ago: executing program 34 (id=1220):
socket(0x10, 0x3, 0x0)
io_uring_setup(0x31fa, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50)

54.623590145s ago: executing program 2 (id=1367):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, 0x0, r1, 0x0, 0x46)
close(r1)

54.239863173s ago: executing program 2 (id=1369):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
pause()

53.220299185s ago: executing program 2 (id=1372):
gettid()
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101})
close(r0)

52.953806484s ago: executing program 2 (id=1375):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x200000, 0x27)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1)

52.607904801s ago: executing program 2 (id=1377):
socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)

51.659573415s ago: executing program 2 (id=1384):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061108c00000000007b0a00ff000000009500020c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010471bc30b00000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x40000084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@mpls_newroute={0xa0, 0x18, 0x2, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x14, 0x20, 0x81, 0xfd, 0x2, 0xfd, 0x8, 0x2000}, [@RTA_NEWDST={0x84, 0x13, [{0x0, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x40}, {0x5000, 0x0, 0x1}, {0x1}, {0x3}, {0xe}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xb90}, {0x5}, {}, {0x2}, {0x1}, {0x5}, {0xa155}, {0x400}, {0x5, 0x0, 0x1}, {0x3}, {0xacec}, {0x2e2}, {0xff, 0x0, 0x1}, {0x5a6a, 0x0, 0x1}, {0xc0000, 0x0, 0x1}, {0x7}, {0x4, 0x0, 0x1}, {0x8}, {0x5}, {0x6}, {0x2, 0x0, 0x1}, {0x5}]}]}, 0xa0}}, 0x88d5e9fd73e211d8)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r5=>0x0, 0x6, 0x4, 0x6, 0x9, 0x7f}, &(0x7f0000000040)=0x14)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r5, 0xc, 0x3, [0x9, 0xffff, 0x1350]}, &(0x7f00000000c0)=0xe)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r6, 0x400, 0x1)
link(&(0x7f0000000200)='./file1\x00', 0x0)
close(r0)

50.927145587s ago: executing program 35 (id=1384):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061108c00000000007b0a00ff000000009500020c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010471bc30b00000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x40000084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@mpls_newroute={0xa0, 0x18, 0x2, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x14, 0x20, 0x81, 0xfd, 0x2, 0xfd, 0x8, 0x2000}, [@RTA_NEWDST={0x84, 0x13, [{0x0, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x40}, {0x5000, 0x0, 0x1}, {0x1}, {0x3}, {0xe}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xb90}, {0x5}, {}, {0x2}, {0x1}, {0x5}, {0xa155}, {0x400}, {0x5, 0x0, 0x1}, {0x3}, {0xacec}, {0x2e2}, {0xff, 0x0, 0x1}, {0x5a6a, 0x0, 0x1}, {0xc0000, 0x0, 0x1}, {0x7}, {0x4, 0x0, 0x1}, {0x8}, {0x5}, {0x6}, {0x2, 0x0, 0x1}, {0x5}]}]}, 0xa0}}, 0x88d5e9fd73e211d8)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r5=>0x0, 0x6, 0x4, 0x6, 0x9, 0x7f}, &(0x7f0000000040)=0x14)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r5, 0xc, 0x3, [0x9, 0xffff, 0x1350]}, &(0x7f00000000c0)=0xe)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r6, 0x400, 0x1)
link(&(0x7f0000000200)='./file1\x00', 0x0)
close(r0)

32.464929552s ago: executing program 0 (id=1490):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2)

32.064941445s ago: executing program 0 (id=1493):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
socket$nl_route(0x10, 0x3, 0x0)

31.91207325s ago: executing program 0 (id=1494):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000)
socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

31.554259108s ago: executing program 0 (id=1497):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1)

31.265417146s ago: executing program 0 (id=1498):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)

30.295328746s ago: executing program 0 (id=1504):
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa18}}, './file0\x00'})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000014000e0a49bf925471e7fc50983f097013799b641ea79c734b6ef4a909f6c2743f53f288e526b45fe0769b612cae30d347d692db24c0a7fc637fa1cb855773a97058bb1e89ea2629a03a000f0f527000fbdb2d1b65fa9d7a12f86e4727da8c12d73cadf3961abdb1e575e65427efb303c637f2785cdb1d128d656102d655936b6ead69539ab7933768022578e97e1df45e204b804dce7f1b89c9e85251bbe2f57c3b4be994e3dfaefab23911bf72bf62214f8d1154befd11e305e47343dc4bc0e603181bc0bcd0a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="f5e6331418d17a49997cf97196f570478c44cdbb2fc03bd0c1402798b4b53a48db4ba178ce7a4791e63cda5ac1a33f2212d065e5b28615f2c3aedd1d6747824b671b51f0f4024876a50aed9f5f6bec6c91dc7b86c6558732dcdbac7a334ad3570a7751d35ff9c3b7c4066436206766cbfeac4de34d9c32d2a1c8c113f3f1d39dd458845bd4f840f3a530ffe712fbe3311312192c8bf40857439bdcd5041873d6a39d1b8b"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
mount(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000340)='btrfs\x00', 0x0, &(0x7f0000000900)='\x00'/10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

28.998379981s ago: executing program 36 (id=1504):
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa18}}, './file0\x00'})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000014000e0a49bf925471e7fc50983f097013799b641ea79c734b6ef4a909f6c2743f53f288e526b45fe0769b612cae30d347d692db24c0a7fc637fa1cb855773a97058bb1e89ea2629a03a000f0f527000fbdb2d1b65fa9d7a12f86e4727da8c12d73cadf3961abdb1e575e65427efb303c637f2785cdb1d128d656102d655936b6ead69539ab7933768022578e97e1df45e204b804dce7f1b89c9e85251bbe2f57c3b4be994e3dfaefab23911bf72bf62214f8d1154befd11e305e47343dc4bc0e603181bc0bcd0a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="f5e6331418d17a49997cf97196f570478c44cdbb2fc03bd0c1402798b4b53a48db4ba178ce7a4791e63cda5ac1a33f2212d065e5b28615f2c3aedd1d6747824b671b51f0f4024876a50aed9f5f6bec6c91dc7b86c6558732dcdbac7a334ad3570a7751d35ff9c3b7c4066436206766cbfeac4de34d9c32d2a1c8c113f3f1d39dd458845bd4f840f3a530ffe712fbe3311312192c8bf40857439bdcd5041873d6a39d1b8b"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH")
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
mount(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000340)='btrfs\x00', 0x0, &(0x7f0000000900)='\x00'/10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

10.01368146s ago: executing program 4 (id=1624):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f1f11a85418018, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000003c0)=0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x401}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)

8.42890342s ago: executing program 4 (id=1635):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000480)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r1 = gettid()
rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8)
tkill(r1, 0x12)

8.13665257s ago: executing program 4 (id=1640):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000d00)}, 0x589}], 0x1, 0x40010122, 0x0)
syz_open_procfs(0x0, &(0x7f0000000440)='cgroup\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

7.769869797s ago: executing program 4 (id=1643):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x34, r2, 0x1b, 0x0, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0)

7.326304705s ago: executing program 7 (id=1648):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f1f11a85418018, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000003c0)=0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x401}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)

6.725478405s ago: executing program 4 (id=1654):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0)

6.572831545s ago: executing program 5 (id=1657):
unshare(0x22020400)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10)

6.307540895s ago: executing program 5 (id=1659):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0)
listen(r0, 0x204)
socket$netlink(0x10, 0x3, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r0, 0x1, 0x70c4f1e97a26349, &(0x7f0000000200)=0x3, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@printk={@ld}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_OIF={0x8, 0x5, r9}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r7, 0x1, 0x2, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000)
epoll_create1(0x80000)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c2, &(0x7f0000000c40)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0))
setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4)
rename(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000001c0)='./bus/file0\x00')
sendmmsg$inet(r3, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@multicast1=0xe0000306]}]}}}], 0x18}}], 0x1, 0x4880)

5.783946771s ago: executing program 7 (id=1666):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0)

5.242472223s ago: executing program 7 (id=1669):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
r2 = dup3(r1, r0, 0x80000)
read(r2, &(0x7f00000000c0)=""/226, 0xe2)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000001c0)={0x3, 0x20800006, 0xa, 0xfbffffcf, 0x7, "65bd218c5fe001cafd41f5c2a95eec23bd62f8", 0x5, 0xe})
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

5.184007292s ago: executing program 8 (id=1670):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(r1, 0x5437, 0x0)

4.771150455s ago: executing program 8 (id=1674):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r3, {}, {0x1}, {0x4, 0x3d}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x3c}}, 0x40)

4.604169388s ago: executing program 5 (id=1675):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
mlock(&(0x7f0000656000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x34, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @hopopts], {0x0, 0x0, 0xfffffffffffffe35, 0x0, @gue={{0x1, 0x0, 0x1, 0xe, 0x0, @void}}}}}}}}, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180))

4.581827397s ago: executing program 8 (id=1676):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r1], 0x20}}, 0x0)

4.425864054s ago: executing program 8 (id=1678):
unshare(0x20000400)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000340)={0x0, 0x0})

4.251519744s ago: executing program 1 (id=1679):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
getpid()
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee1, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1})
io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600007842cf5", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

4.123929218s ago: executing program 7 (id=1681):
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f})
r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000240)={0x0, 0x5bc4, 0x1000, 0x80000ffc, 0x5cc}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x4c, 0x0, @fd_index=0x6, 0x9, 0x6, 0x1, 0x10, 0x1, {0x2}})
io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

4.096031259s ago: executing program 9 (id=1682):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x42ab, 0x24d417d6, 0xffffffffffffffff, 0x800, 0xe26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000)

3.454326845s ago: executing program 8 (id=1683):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@errors_remount}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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")
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fe8000000000000000000000000000000200000000000000000800000008000000000000fc0200000000000000000000000000010000000032010000000000007f0000010000000000000000000000000335000003"], 0x23c}}, 0x0)

3.219373261s ago: executing program 1 (id=1684):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)=r5}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="79e100000000000700007e000000080003001f668bd348334c7318c096e3", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)

2.944051407s ago: executing program 7 (id=1685):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x510, &(0x7f0000000740)="$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")
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0)
chroot(&(0x7f0000000040)='./file1/file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x200000000000006}, 0x18)
r0 = getpgrp(0x0)
syz_pidfd_open(r0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x2c040090)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

2.496398944s ago: executing program 9 (id=1686):
unshare(0x22020400)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10)

2.047693952s ago: executing program 8 (id=1687):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mknod$loop(0x0, 0xfff, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0x100, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8c38)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r5, &(0x7f00000003c0)='@', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
mmap(&(0x7f0000882000/0x4000)=nil, 0x4000, 0x8, 0x110, r1, 0xf2f21000)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x9c)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r6, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYRESOCT=r6], 0x46c}, 0x1, 0x0, 0x0, 0x40084}, 0x20000800)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r7, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

1.959603311s ago: executing program 1 (id=1688):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0xa002a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffff000)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x99, &(0x7f0000001300)=""/153, 0x0, 0x44}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff})
sendto$unix(r1, &(0x7f0000000240), 0x0, 0x4040081, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x88, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000811}, 0x0)

1.926091838s ago: executing program 9 (id=1689):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd8d}], 0x1}, 0x0)

1.572061288s ago: executing program 5 (id=1690):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a5)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0)
r0 = inotify_init1(0x800)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x900)
mq_open(&(0x7f00000000c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96~\x17|\xc9xR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00', 0x40, 0x0, 0x0)

1.538368715s ago: executing program 1 (id=1691):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080000000fedbdf250f002d001800078008000200070000000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0)

1.120880413s ago: executing program 9 (id=1692):
open(&(0x7f0000000000)='./bus\x00', 0x10d8c1, 0x170)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)

807.940529ms ago: executing program 5 (id=1693):
unshare(0x20000400)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
vmsplice(r0, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000)

804.720947ms ago: executing program 1 (id=1694):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x200000, 0x27)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1)

276.239858ms ago: executing program 9 (id=1695):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000280)=ANY=[])

219.019039ms ago: executing program 1 (id=1696):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
getpid()
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee1, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1})
io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600007842cf5", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

172.097661ms ago: executing program 4 (id=1697):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0)

162.999161ms ago: executing program 7 (id=1698):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
ppoll(&(0x7f0000000540)=[{}], 0x5b, 0x0, 0x0, 0x0)

99.350887ms ago: executing program 5 (id=1699):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f1f11a85418018, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000003c0)=0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x401}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'})
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)

0s ago: executing program 9 (id=1700):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f80303"], 0x18}}, 0x2000)

kernel console output (not intermixed with test programs):

XT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.212234][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.240489][ T8991] netlink: 'syz.6.938': attribute type 4 has an invalid length.
[  272.287765][ T8995] netlink: 'syz.6.938': attribute type 4 has an invalid length.
[  272.906229][ T9012] loop4: detected capacity change from 0 to 164
[  272.949530][ T9012] Unable to read rock-ridge attributes
[  272.993349][ T9012] Unable to read rock-ridge attributes
[  273.146072][ T8979] lo speed is unknown, defaulting to 1000
[  273.252122][ T9020] loop5: detected capacity change from 0 to 512
[  273.259315][ T9020] ext2: Unknown parameter 'nouser_xattr'
[  273.364014][ T9022] loop4: detected capacity change from 0 to 512
[  273.503066][ T9025] loop9: detected capacity change from 0 to 7
[  273.589282][ T9025] Buffer I/O error on dev loop9, logical block 0, async page read
[  273.640477][ T9025] Buffer I/O error on dev loop9, logical block 0, async page read
[  273.749371][ T9025] Buffer I/O error on dev loop9, logical block 0, async page read
[  274.140186][ T9025] Buffer I/O error on dev loop9, logical block 0, async page read
[  274.178725][ T9025] Buffer I/O error on dev loop9, logical block 0, async page read
[  274.219031][ T9025] Buffer I/O error on dev loop9, logical block 0, async page read
[  274.250224][ T9025] Buffer I/O error on dev loop9, logical block 0, async page read
[  274.287162][ T9025] ldm_validate_partition_table(): Disk read failed.
[  274.300101][ T9025] Buffer I/O error on dev loop9, logical block 0, async page read
[  274.318453][ T9025] Buffer I/O error on dev loop9, logical block 0, async page read
[  274.338485][ T9025] Buffer I/O error on dev loop9, logical block 0, async page read
[  274.350240][ T9025] Dev loop9: unable to read RDB block 0
[  274.356055][ T9025]  loop9: unable to read partition table
[  274.385183][ T9025] loop9: partition table beyond EOD, truncated
[  274.393184][ T9025] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[  274.393184][ T9025] 
) failed (rc=-5)
[  275.004413][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'.
[  275.449382][ T9062] netlink: 28 bytes leftover after parsing attributes in process `syz.5.966'.
[  275.496579][   T30] kauditd_printk_skb: 57 callbacks suppressed
[  275.496598][   T30] audit: type=1326 audit(1756562865.622:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.5.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  275.649965][   T30] audit: type=1326 audit(1756562865.662:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.5.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  275.770085][   T30] audit: type=1326 audit(1756562865.662:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.5.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  275.902059][   T30] audit: type=1326 audit(1756562865.662:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.5.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  276.067092][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.973'.
[  276.080333][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.973'.
[  276.117821][ T9077] futex_wake_op: syz.6.973 tries to shift op by 32; fix this program
[  276.499187][ T9090] netlink: 104 bytes leftover after parsing attributes in process `syz.4.977'.
[  276.718393][   T30] audit: type=1326 audit(1756562866.842:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf09b8ebe9 code=0x7ffc0000
[  276.897671][ T9090] loop4: detected capacity change from 0 to 8192
[  276.975335][   T30] audit: type=1326 audit(1756562866.842:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf09b8ebe9 code=0x7ffc0000
[  276.999033][   T30] audit: type=1326 audit(1756562866.882:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fdf09b8ebe9 code=0x7ffc0000
[  277.023678][   T30] audit: type=1326 audit(1756562866.882:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf09b8ebe9 code=0x7ffc0000
[  277.043907][ T9090] bio_check_eod: 47 callbacks suppressed
[  277.043924][ T9090] syz.4.977: attempt to access beyond end of device
[  277.043924][ T9090] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  277.207296][ T9090] syz.4.977: attempt to access beyond end of device
[  277.207296][ T9090] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  277.448400][   T30] audit: type=1326 audit(1756562866.882:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf09b8ebe9 code=0x7ffc0000
[  277.788688][   T30] audit: type=1326 audit(1756562866.882:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fdf09b8ebe9 code=0x7ffc0000
[  277.886146][ T9109] random: crng reseeded on system resumption
[  278.767616][ T9113] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  279.027198][ T9119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.045386][ T9119] syzkaller0: entered promiscuous mode
[  279.117973][ T9119] syzkaller0: entered allmulticast mode
[  279.244289][ T9119] tipc: Resetting bearer <eth:syzkaller0>
[  279.343136][ T9118] tipc: Resetting bearer <eth:syzkaller0>
[  279.457215][ T9118] tipc: Disabling bearer <eth:syzkaller0>
[  279.631500][ T9129] syz2: rxe_newlink: already configured on bond_slave_0
[  279.652145][ T9128] futex_wake_op: syz.4.989 tries to shift op by 32; fix this program
[  279.665536][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'.
[  279.916262][ T9117] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  280.084637][ T9142] netlink: 'syz.0.995': attribute type 3 has an invalid length.
[  280.188076][ T9146] loop4: detected capacity change from 0 to 1024
[  280.308040][ T9150] siw: device registration error -23
[  280.344850][ T9146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.541102][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  280.541133][   T30] audit: type=1800 audit(1756562870.672:1376): pid=9146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.996" name="file1" dev="loop4" ino=15 res=0 errno=0
[  280.541595][ T9164] loop6: detected capacity change from 0 to 512
[  280.609033][   T30] audit: type=1800 audit(1756562870.702:1377): pid=9146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.996" name="file1" dev="loop4" ino=15 res=0 errno=0
[  280.641298][ T9164] ext4: Unknown parameter 'nouser_xattr'
[  280.667071][ T9166] loop0: detected capacity change from 0 to 512
[  280.725304][ T9166] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6).
[  280.727495][ T9146] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  280.754939][ T9166] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  280.801772][ T9166] EXT4-fs (loop0): mount failed
[  280.863631][   T30] audit: type=1326 audit(1756562870.992:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9177 comm="syz.5.1008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x0
[  280.978656][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.496261][ T9190] loop0: detected capacity change from 0 to 2048
[  282.403161][ T9190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.423400][ T9199] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  282.457446][ T9204] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  282.542589][   T30] audit: type=1800 audit(1756562872.672:1379): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1012" name="bus" dev="loop0" ino=18 res=0 errno=0
[  282.573132][ T9194] lo speed is unknown, defaulting to 1000
[  282.775129][ T9208] loop4: detected capacity change from 0 to 512
[  282.796703][ T9208] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  282.891483][ T5868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.906422][ T9208] EXT4-fs (loop4): 1 truncate cleaned up
[  282.978334][ T9208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.175866][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.365486][   T30] audit: type=1326 audit(1756562873.492:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b058ebe9 code=0x7ffc0000
[  283.470187][   T30] audit: type=1326 audit(1756562873.492:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b058ebe9 code=0x7ffc0000
[  283.537177][ T9224] loop0: detected capacity change from 0 to 2048
[  283.587880][   T30] audit: type=1326 audit(1756562873.492:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27b058ebe9 code=0x7ffc0000
[  283.638954][ T9232] loop6: detected capacity change from 0 to 512
[  283.708706][ T9224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback.
[  283.712793][   T30] audit: type=1326 audit(1756562873.502:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b058ebe9 code=0x7ffc0000
[  283.747549][ T9232] EXT4-fs: Ignoring removed bh option
[  283.814266][   T30] audit: type=1326 audit(1756562873.502:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27b058ebe9 code=0x7ffc0000
[  283.919364][ T9232] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  283.975779][ T9240] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.1020: inline data xattr refers to an external xattr inode
[  284.005093][ T9232] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  284.062561][ T9232] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  284.092018][ T9232] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  284.126777][ T9232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.236043][ T9244] tipc: Started in network mode
[  284.265133][ T9244] tipc: Node identity f2d633b06eb2, cluster identity 4711
[  284.323705][ T9244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.357499][ T5868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  284.378968][ T9248] syzkaller0: entered promiscuous mode
[  284.419109][ T9248] syzkaller0: entered allmulticast mode
[  284.426268][ T9256] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  284.467099][ T9244] tipc: Resetting bearer <eth:syzkaller0>
[  284.483884][ T9254] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  284.545772][ T9241] tipc: Resetting bearer <eth:syzkaller0>
[  284.550601][ T6403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.659611][ T9241] tipc: Disabling bearer <eth:syzkaller0>
[  284.804195][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1041'.
[  285.076654][ T9264] loop3: detected capacity change from 0 to 8192
[  285.218147][ T9279] loop2: detected capacity change from 0 to 1024
[  285.274868][ T9279] EXT4-fs: Ignoring removed bh option
[  285.295334][ T9279] EXT4-fs: inline encryption not supported
[  285.313515][ T9279] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  285.397086][ T9279] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  285.427754][ T9287] loop0: detected capacity change from 0 to 164
[  285.531243][ T9287] Unable to read rock-ridge attributes
[  285.551239][ T9292] loop4: detected capacity change from 0 to 512
[  285.551385][ T9279] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1046: lblock 2 mapped to illegal pblock 2 (length 1)
[  285.614823][ T9287] Unable to read rock-ridge attributes
[  285.629801][ T9295] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  285.646587][ T9279] __quota_error: 82 callbacks suppressed
[  285.646604][ T9279] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  285.675309][ T9292] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.1052: missing EA_INODE flag
[  285.689442][ T9279] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1046: lblock 0 mapped to illegal pblock 48 (length 1)
[  285.740189][ T9292] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1052: error while reading EA inode 11 err=-117
[  285.770333][ T9279] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  285.781502][ T9292] EXT4-fs (loop4): 1 orphan inode deleted
[  285.798524][ T9279] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1046: Failed to acquire dquot type 0
[  285.839106][ T9292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.882161][ T9279] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  285.929609][ T9292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.968168][ T9279] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1046: mark_inode_dirty error
[  286.033229][ T9279] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  286.086676][ T9279] EXT4-fs (loop2): 1 orphan inode deleted
[  286.130114][ T8631] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1)
[  286.164360][ T9279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.237164][ T8631] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  286.290089][ T8631] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:16: Failed to release dquot type 0
[  286.388000][ T9279] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1046: lblock 0 mapped to illegal pblock 48 (length 1)
[  286.398355][ T9310] loop3: detected capacity change from 0 to 1024
[  286.473703][ T9279] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117
[  286.537080][ T9310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.629336][ T9322] loop4: detected capacity change from 0 to 4096
[  286.637608][ T9310] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.649348][ T9322] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  286.671924][ T9310] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.1057: lblock 3 mapped to illegal pblock 3 (length 13)
[  286.674840][ T9320] tipc: Started in network mode
[  286.705200][ T9310] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  286.719739][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.729884][ T9320] tipc: Node identity ce18d0017205, cluster identity 4711
[  286.747867][ T9320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  286.784024][ T9322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.831887][ T9310] EXT4-fs (loop3): This should not happen!! Data will be lost
[  286.831887][ T9310] 
[  286.854735][ T9323] syzkaller0: entered promiscuous mode
[  286.900309][ T9328] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 4: comm syz.3.1057: lblock 4 mapped to illegal pblock 4 (length 1)
[  286.930080][ T9323] syzkaller0: entered allmulticast mode
[  286.996619][ T9324] tipc: Resetting bearer <eth:syzkaller0>
[  287.050397][ T9328] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1057: Freeing blocks not in datazone - block = 3, count = 1
[  287.099761][ T9311] tipc: Resetting bearer <eth:syzkaller0>
[  287.163092][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.296628][ T9311] tipc: Disabling bearer <eth:syzkaller0>
[  287.359067][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.514677][ T9341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1068'.
[  287.910486][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1072'.
[  288.321245][ T9364] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  288.487904][ T9368] loop5: detected capacity change from 0 to 1024
[  288.577812][ T9368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.636968][ T9368] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.716884][ T9368] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.1079: lblock 3 mapped to illegal pblock 3 (length 13)
[  288.749653][ T9368] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  288.772597][ T9368] EXT4-fs (loop5): This should not happen!! Data will be lost
[  288.772597][ T9368] 
[  288.792406][ T9376] IPv6: NLM_F_CREATE should be specified when creating new route
[  288.807093][ T9382] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 4: comm syz.5.1079: lblock 4 mapped to illegal pblock 4 (length 1)
[  288.834353][ T9382] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.1079: Freeing blocks not in datazone - block = 3, count = 1
[  289.053749][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.061990][ T9388] loop6: detected capacity change from 0 to 128
[  289.076399][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'.
[  289.088427][ T9387] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.116328][ T9387] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.246867][ T9387] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.310275][ T9387] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.854112][   T30] audit: type=1326 audit(1756562880.982:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  290.952476][   T30] audit: type=1326 audit(1756562881.012:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  290.979142][ T9412] loop4: detected capacity change from 0 to 2048
[  291.042580][   T30] audit: type=1326 audit(1756562881.012:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  291.044952][ T9412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback.
[  291.118846][   T30] audit: type=1326 audit(1756562881.012:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  291.242637][   T30] audit: type=1326 audit(1756562881.012:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  291.282540][ T9431] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.1099: inline data xattr refers to an external xattr inode
[  291.395798][   T30] audit: type=1326 audit(1756562881.012:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  291.499052][   T30] audit: type=1326 audit(1756562881.012:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  291.609510][   T30] audit: type=1326 audit(1756562881.012:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  291.684600][   T30] audit: type=1326 audit(1756562881.012:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  291.758982][   T30] audit: type=1326 audit(1756562881.012:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  291.967021][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  291.996918][ T9455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1115'.
[  292.043310][ T9455] bridge_slave_1: left allmulticast mode
[  292.086514][ T9455] bridge_slave_1: left promiscuous mode
[  292.145206][ T9455] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.277776][ T9455] bridge_slave_0: left allmulticast mode
[  292.299338][ T9455] bridge_slave_0: left promiscuous mode
[  292.327592][ T9455] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.420957][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1117'.
[  292.577041][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1120'.
[  293.042763][ T5942] hid_parser_main: 31 callbacks suppressed
[  293.042788][ T5942] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  293.109877][ T5942] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  293.133595][ T5942] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  293.152384][ T5942] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  293.205302][ T5942] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  293.233047][ T5942] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  293.274623][ T5942] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  293.312674][ T5942] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  293.351150][ T5942] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  293.375533][ T5942] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  293.400399][ T5942] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  293.482012][ T9507] loop3: detected capacity change from 0 to 164
[  293.515046][ T9507] Unable to read rock-ridge attributes
[  293.573238][ T9504] fido_id[9504]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  293.661602][ T9510] pimreg: entered allmulticast mode
[  293.714954][ T9503] pimreg: left allmulticast mode
[  293.862607][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'.
[  293.871538][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'.
[  293.881994][ T9518] futex_wake_op: syz.2.1138 tries to shift op by 32; fix this program
[  294.139391][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'.
[  294.512871][ T9539] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  294.593780][ T9512] loop4: detected capacity change from 0 to 164
[  294.638713][ T9512] syz.4.1135: attempt to access beyond end of device
[  294.638713][ T9512] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  294.710942][ T9512] syz.4.1135: attempt to access beyond end of device
[  294.710942][ T9512] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  294.786047][ T9550] loop6: detected capacity change from 0 to 164
[  294.834060][ T9550] Unable to read rock-ridge attributes
[  294.990282][ T9555] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  296.398253][ T9580] loop3: detected capacity change from 0 to 1024
[  296.526879][ T9580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.575976][ T9580] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.590827][ T9594] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  296.603337][ T5950] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  296.639415][ T9580] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.1161: lblock 3 mapped to illegal pblock 3 (length 13)
[  296.695339][ T9580] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  296.770122][ T9580] EXT4-fs (loop3): This should not happen!! Data will be lost
[  296.770122][ T9580] 
[  296.837610][ T9596] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 4: comm syz.3.1161: lblock 4 mapped to illegal pblock 4 (length 1)
[  296.862909][ T9596] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1161: Freeing blocks not in datazone - block = 3, count = 1
[  296.972198][ T9599] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 4: comm syz.3.1161: lblock 4 mapped to illegal pblock 4 (length 1)
[  296.994007][ T9595] fido_id[9595]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  297.045811][ T9599] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 5: comm syz.3.1161: lblock 5 mapped to illegal pblock 5 (length 1)
[  297.115122][ T9599] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 6: comm syz.3.1161: lblock 6 mapped to illegal pblock 6 (length 1)
[  297.140900][ T9599] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 7: comm syz.3.1161: lblock 7 mapped to illegal pblock 7 (length 1)
[  297.159222][   T30] kauditd_printk_skb: 171 callbacks suppressed
[  297.159239][   T30] audit: type=1800 audit(1756562887.292:1648): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1161" name="file1" dev="loop3" ino=15 res=0 errno=0
[  297.328184][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.776748][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1174'.
[  297.822514][ T9622] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1176'.
[  298.082597][ T9628] loop2: detected capacity change from 0 to 1024
[  298.162601][ T9628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.196403][ T9630] pim6reg1: entered allmulticast mode
[  298.205647][   T30] audit: type=1326 audit(1756562888.332:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3578ebe9 code=0x7ffc0000
[  298.232578][   T30] audit: type=1326 audit(1756562888.332:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3578ebe9 code=0x7ffc0000
[  298.256837][   T30] audit: type=1326 audit(1756562888.332:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e3578ebe9 code=0x7ffc0000
[  298.282696][   T30] audit: type=1326 audit(1756562888.332:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3578ebe9 code=0x7ffc0000
[  298.326737][   T30] audit: type=1326 audit(1756562888.332:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3578ebe9 code=0x7ffc0000
[  298.363992][   T30] audit: type=1326 audit(1756562888.332:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e3578ebe9 code=0x7ffc0000
[  298.495982][   T30] audit: type=1326 audit(1756562888.332:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3578ebe9 code=0x7ffc0000
[  298.525019][   T30] audit: type=1326 audit(1756562888.332:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3578ebe9 code=0x7ffc0000
[  298.549441][   T30] audit: type=1326 audit(1756562888.332:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e3578ebe9 code=0x7ffc0000
[  298.589410][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'.
[  298.899938][ T9646] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.924423][ T9646] syzkaller0: entered promiscuous mode
[  298.949531][ T9646] syzkaller0: entered allmulticast mode
[  299.043684][ T9644] tipc: Resetting bearer <eth:syzkaller0>
[  299.060751][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.104039][ T9644] tipc: Disabling bearer <eth:syzkaller0>
[  299.213744][ T9653] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  299.220405][ T9653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  299.258067][ T9653] vhci_hcd vhci_hcd.0: Device attached
[  299.422482][ T9656] vhci_hcd: connection closed
[  299.436538][ T6054] vhci_hcd: stop threads
[  299.466908][ T9665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1191'.
[  299.480366][   T43] usb 33-1: new high-speed USB device number 2 using vhci_hcd
[  299.504756][ T6054] vhci_hcd: release socket
[  299.540043][ T6054] vhci_hcd: disconnect device
[  299.555329][ T9665] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  300.067148][ T9675] netlink: 'syz.4.1195': attribute type 3 has an invalid length.
[  300.419297][ T9685] loop4: detected capacity change from 0 to 1024
[  300.449787][ T9685] EXT4-fs: Ignoring removed bh option
[  300.480539][ T9685] EXT4-fs: inline encryption not supported
[  300.537522][ T9687] loop3: detected capacity change from 0 to 4096
[  300.585667][ T9685] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  300.606713][ T9687] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  300.625051][ T9685] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  300.670792][ T9685] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1199: lblock 2 mapped to illegal pblock 2 (length 1)
[  300.695578][ T9687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.726031][ T9691] netlink: 'syz.0.1202': attribute type 10 has an invalid length.
[  300.814276][ T9691] syz_tun: entered promiscuous mode
[  300.830225][ T9685] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1199: lblock 0 mapped to illegal pblock 48 (length 1)
[  300.876177][ T9691] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  300.929306][ T9685] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1199: Failed to acquire dquot type 0
[  301.015546][ T9685] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  301.027627][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.047246][ T9696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  301.088096][ T9696] syzkaller0: entered promiscuous mode
[  301.129570][ T9696] syzkaller0: entered allmulticast mode
[  301.130037][ T9685] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1199: mark_inode_dirty error
[  301.377603][ T9685] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  301.614267][ T9685] EXT4-fs (loop4): 1 orphan inode deleted
[  301.693823][   T49] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  302.184890][ T9685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.199030][ T5950] tipc: Node number set to 2623812528
[  302.504712][ T9702] lo speed is unknown, defaulting to 1000
[  302.610847][   T49] __quota_error: 11 callbacks suppressed
[  302.610865][   T49] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  302.720425][ T9695] tipc: Resetting bearer <eth:syzkaller0>
[  302.750086][   T49] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0
[  302.809253][ T9709] loop3: detected capacity change from 0 to 512
[  302.844366][ T9685] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1199: lblock 0 mapped to illegal pblock 48 (length 1)
[  302.890882][ T9706] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1206'.
[  302.928581][ T9709] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  302.960784][ T9695] tipc: Disabling bearer <eth:syzkaller0>
[  302.971894][ T9685] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117
[  303.049757][ T9709] EXT4-fs (loop3): 1 truncate cleaned up
[  303.092089][ T9709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  303.292736][ T9709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.552703][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.835482][   T43] vhci_hcd: vhci_device speed not set
[  304.842006][   T30] audit: type=1326 audit(1756562894.692:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  304.864842][   T30] audit: type=1326 audit(1756562894.692:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  304.888300][   T30] audit: type=1326 audit(1756562894.692:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  304.946052][ T9735] loop5: detected capacity change from 0 to 4096
[  304.954996][ T9735] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  305.066907][ T9735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.182643][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.245651][ T9745] tipc: Started in network mode
[  305.290152][ T9745] tipc: Node identity 2ed0abde4f11, cluster identity 4711
[  305.317193][ T9745] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.357128][ T9749] syzkaller0: entered promiscuous mode
[  305.376415][ T9749] syzkaller0: entered allmulticast mode
[  305.496088][ T9744] tipc: Resetting bearer <eth:syzkaller0>
[  305.622459][ T9744] tipc: Disabling bearer <eth:syzkaller0>
[  306.249504][ T9768] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1230'.
[  307.248233][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'.
[  307.803594][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1245'.
[  309.718634][ T9838] ªªªªªª: renamed from vlan0 (while UP)
[  310.557158][   T30] audit: type=1326 audit(1756562900.682:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  310.586054][   T30] audit: type=1326 audit(1756562900.682:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  310.620750][ T9864] loop5: detected capacity change from 0 to 1024
[  310.692517][   T30] audit: type=1326 audit(1756562900.682:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  310.715603][   T30] audit: type=1326 audit(1756562900.682:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  310.715922][ T9864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.738608][   T30] audit: type=1326 audit(1756562900.682:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f488e38d457 code=0x7ffc0000
[  310.775400][   T30] audit: type=1326 audit(1756562900.682:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  310.798060][   T30] audit: type=1326 audit(1756562900.682:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  310.820697][   T30] audit: type=1326 audit(1756562900.682:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  310.843495][   T30] audit: type=1326 audit(1756562900.692:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  310.882304][   T30] audit: type=1326 audit(1756562900.692:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  310.928708][ T9864] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  310.992991][ T9863] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1265'.
[  311.129777][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.543932][ T9880] loop4: detected capacity change from 0 to 512
[  311.597079][ T9880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.829394][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.041700][ T9607] Set syz1 is full, maxelem 65536 reached
[  312.429675][ T9906] loop5: detected capacity change from 0 to 1024
[  312.535641][ T9906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.947727][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.238714][ T5178] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  313.251823][ T5178] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  313.260129][ T5178] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  313.320675][ T5178] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  313.374139][ T5178] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  313.882681][ T9931] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  313.919349][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'.
[  313.960144][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'.
[  313.994072][ T9936] futex_wake_op: syz.4.1290 tries to shift op by 32; fix this program
[  314.330796][ T9946] loop4: detected capacity change from 0 to 4096
[  314.394312][ T9946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.475465][ T9946] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.1294: corrupted inode contents
[  314.523512][ T9946] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.1294: mark_inode_dirty error
[  314.538609][ T9917] lo speed is unknown, defaulting to 1000
[  314.552902][ T9946] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.1294: corrupted inode contents
[  314.620118][ T9946] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.1294: mark_inode_dirty error
[  314.694701][ T9946] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.1294: corrupted inode contents
[  314.740213][ T9946] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.1294: mark_inode_dirty error
[  314.790955][ T9946] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.1294: corrupted inode contents
[  314.839490][ T9946] EXT4-fs error (device loop4): ext4_truncate:4666: inode #15: comm syz.4.1294: mark_inode_dirty error
[  314.883270][ T9946] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem
[  314.905746][ T9956] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1297'.
[  314.917587][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1299'.
[  314.927056][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1299'.
[  314.960378][ T9956] unsupported nlmsg_type 40
[  315.122128][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.460481][ T5178] Bluetooth: hci6: command tx timeout
[  315.481642][ T9976] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  315.497017][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1305'.
[  315.546520][ T9917] chnl_net:caif_netlink_parms(): no params data found
[  315.554405][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1305'.
[  315.555001][ T9977] futex_wake_op: syz.5.1305 tries to shift op by 32; fix this program
[  315.818509][ T9983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'.
[  316.054959][ T9917] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.070403][ T9917] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.097314][ T9917] bridge_slave_0: entered allmulticast mode
[  316.117927][ T9917] bridge_slave_0: entered promiscuous mode
[  316.145355][ T9917] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.164669][ T9917] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.186652][ T9917] bridge_slave_1: entered allmulticast mode
[  316.233008][ T9917] bridge_slave_1: entered promiscuous mode
[  316.426589][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  316.495457][   T30] kauditd_printk_skb: 135 callbacks suppressed
[  316.495478][   T30] audit: type=1326 audit(1756562906.622:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c618ebe9 code=0x7ffc0000
[  316.533366][ T9917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  316.620186][   T30] audit: type=1326 audit(1756562906.662:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9c618ebe9 code=0x7ffc0000
[  316.631264][ T9917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  316.699945][   T30] audit: type=1326 audit(1756562906.692:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c618ebe9 code=0x7ffc0000
[  316.806128][   T30] audit: type=1326 audit(1756562906.692:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c618ebe9 code=0x7ffc0000
[  316.912077][   T30] audit: type=1326 audit(1756562906.692:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9c618ebe9 code=0x7ffc0000
[  316.949904][   T30] audit: type=1326 audit(1756562906.692:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c618ebe9 code=0x7ffc0000
[  316.976415][ T9917] team0: Port device team_slave_0 added
[  317.025625][T10024] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  317.054561][ T9917] team0: Port device team_slave_1 added
[  317.070241][   T30] audit: type=1326 audit(1756562906.692:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9c618ebe9 code=0x7ffc0000
[  317.089792][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'.
[  317.111979][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'.
[  317.121289][   T30] audit: type=1326 audit(1756562906.692:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c618ebe9 code=0x7ffc0000
[  317.144723][T10027] futex_wake_op: syz.4.1320 tries to shift op by 32; fix this program
[  317.222626][   T30] audit: type=1326 audit(1756562906.692:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9c618ebe9 code=0x7ffc0000
[  317.255544][   T30] audit: type=1326 audit(1756562906.692:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c618ebe9 code=0x7ffc0000
[  317.493884][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.530039][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.540215][ T5178] Bluetooth: hci6: command tx timeout
[  317.638301][ T9917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.700175][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.715153][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.804586][ T9917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.030204][   T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  318.031636][T10052] loop4: detected capacity change from 0 to 512
[  318.044243][ T9917] hsr_slave_0: entered promiscuous mode
[  318.073187][ T9917] hsr_slave_1: entered promiscuous mode
[  318.099226][ T9917] debugfs: 'hsr0' already exists in 'hsr'
[  318.105832][T10052] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  318.116116][ T9917] Cannot create hsr debugfs directory
[  318.150069][T10052] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  318.170337][   T43] usb 3-1: device descriptor read/64, error -71
[  318.201714][T10052] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  318.220165][T10052] System zones: 0-2, 18-18, 34-35
[  318.262610][T10052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  318.430095][   T43] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  318.479812][T10049] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  318.494603][T10049] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  318.503326][T10049] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  318.514473][T10059] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  318.590549][   T43] usb 3-1: device descriptor read/64, error -71
[  318.662420][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.723761][   T43] usb usb3-port1: attempt power cycle
[  318.838010][ T9917] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  318.939937][ T9917] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  318.974027][ T9917] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  319.017508][ T9917] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  319.062546][T10070] loop4: detected capacity change from 0 to 2048
[  319.140394][   T43] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  319.172565][T10070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback.
[  319.196803][   T43] usb 3-1: device descriptor read/8, error -71
[  319.437601][T10084] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.1337: inline data xattr refers to an external xattr inode
[  319.475645][T10083] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1339'.
[  319.491018][   T43] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  319.528965][ T9917] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.543006][   T43] usb 3-1: device descriptor read/8, error -71
[  319.549543][T10083] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1339'.
[  319.620430][ T5178] Bluetooth: hci6: command tx timeout
[  319.635059][ T9917] 8021q: adding VLAN 0 to HW filter on device team0
[  319.656037][   T43] usb usb3-port1: unable to enumerate USB device
[  319.710365][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.717559][ T6057] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.744455][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.751663][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.880403][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  320.674262][T10108] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  320.941106][T10114] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1349'.
[  320.942940][ T9917] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.204142][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1350'.
[  321.533019][T10132] loop4: detected capacity change from 0 to 1024
[  321.637996][T10135] loop5: detected capacity change from 0 to 164
[  321.680868][T10132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.700413][ T5178] Bluetooth: hci6: command tx timeout
[  321.710800][T10132] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.801435][T10135] syz.5.1355: attempt to access beyond end of device
[  321.801435][T10135] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  321.850292][T10135] syz.5.1355: attempt to access beyond end of device
[  321.850292][T10135] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164
[  321.889268][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.049599][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  322.059519][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  322.067909][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  322.076996][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  322.085104][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  322.648753][ T9917] veth0_vlan: entered promiscuous mode
[  322.728740][ T9917] veth1_vlan: entered promiscuous mode
[  322.874062][ T9917] veth0_macvtap: entered promiscuous mode
[  322.907429][ T9917] veth1_macvtap: entered promiscuous mode
[  322.993964][ T9917] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.067693][ T9917] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.089165][   T30] kauditd_printk_skb: 255 callbacks suppressed
[  323.089183][   T30] audit: type=1326 audit(1756562913.212:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  323.154766][ T8632] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.211832][ T8632] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.269084][ T8632] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.291279][   T30] audit: type=1326 audit(1756562913.252:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  323.335406][ T6054] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.363836][   T30] audit: type=1326 audit(1756562913.272:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  323.446775][T10146] lo speed is unknown, defaulting to 1000
[  323.498373][T10170] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1357'.
[  323.545264][   T30] audit: type=1326 audit(1756562913.272:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  323.591082][T10170] unsupported nla_type 65024
[  323.663485][   T30] audit: type=1326 audit(1756562913.272:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  323.705473][ T6057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.736621][ T6057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.786147][   T30] audit: type=1326 audit(1756562913.272:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  323.882008][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.888250][   T30] audit: type=1326 audit(1756562913.272:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  323.919873][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.076514][   T30] audit: type=1326 audit(1756562913.272:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  324.180677][ T5178] Bluetooth: hci4: command tx timeout
[  324.235212][   T30] audit: type=1326 audit(1756562913.292:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  324.275006][   T30] audit: type=1326 audit(1756562913.292:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  324.356090][T10185] netlink: 204 bytes leftover after parsing attributes in process `syz.7.1279'.
[  324.374133][T10185] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1279'.
[  324.395410][T10185] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1279'.
[  324.605665][T10146] chnl_net:caif_netlink_parms(): no params data found
[  324.686430][T10190] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  325.089928][ T9748] Set syz1 is full, maxelem 65536 reached
[  325.733597][T10146] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.762028][T10146] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.769251][T10146] bridge_slave_0: entered allmulticast mode
[  325.831245][T10146] bridge_slave_0: entered promiscuous mode
[  325.868463][T10146] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.914083][T10146] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.947190][T10146] bridge_slave_1: entered allmulticast mode
[  325.986700][T10146] bridge_slave_1: entered promiscuous mode
[  326.260200][ T5178] Bluetooth: hci4: command tx timeout
[  326.518924][T10146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  326.618064][T10146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  326.637289][T10217] loop4: detected capacity change from 0 to 2048
[  326.875087][T10217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback.
[  326.979401][T10146] team0: Port device team_slave_0 added
[  327.001943][ T6057] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.012972][T10227] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.1381: inline data xattr refers to an external xattr inode
[  327.074881][T10146] team0: Port device team_slave_1 added
[  327.239381][T10227] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  327.349749][ T6057] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.381102][T10227] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 390 with error 28
[  327.414381][T10227] EXT4-fs (loop4): This should not happen!! Data will be lost
[  327.414381][T10227] 
[  327.429437][T10227] EXT4-fs (loop4): Total free blocks count 0
[  327.436444][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.452422][T10146] batman_adv: batadv0: Adding interface: batadv_slave_0
[  327.473518][T10146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.531288][T10227] EXT4-fs (loop4): Free/Dirty block details
[  327.537311][T10146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  327.554310][T10227] EXT4-fs (loop4): free_blocks=2415919104
[  327.562843][T10146] batman_adv: batadv0: Adding interface: batadv_slave_1
[  327.606783][T10146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.659169][T10227] EXT4-fs (loop4): dirty_blocks=400
[  327.675136][T10227] EXT4-fs (loop4): Block reservation details
[  327.688844][T10227] EXT4-fs (loop4): i_reserved_data_blocks=25
[  327.695358][T10146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.759612][ T6057] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.776180][T10248] loop7: detected capacity change from 0 to 1024
[  327.801137][T10248] EXT4-fs: Ignoring removed bh option
[  327.830350][T10248] EXT4-fs: inline encryption not supported
[  327.850543][T10248] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  327.899088][T10248] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  327.922841][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  327.943336][T10248] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.1393: lblock 2 mapped to illegal pblock 2 (length 1)
[  328.004799][ T6057] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.028667][T10248] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.1393: lblock 0 mapped to illegal pblock 48 (length 1)
[  328.060483][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  328.078211][T10248] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1393: Failed to acquire dquot type 0
[  328.092221][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  328.117795][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  328.149714][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  328.162722][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  328.170331][T10248] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  328.236096][T10248] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.1393: mark_inode_dirty error
[  328.310084][T10248] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  328.340113][ T5867] Bluetooth: hci4: command tx timeout
[  328.360254][T10248] EXT4-fs (loop7): 1 orphan inode deleted
[  328.368800][T10248] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.382179][ T8631] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1)
[  328.406825][ T8631] __quota_error: 80 callbacks suppressed
[  328.406843][ T8631] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  328.427910][ T8631] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:16: Failed to release dquot type 0
[  328.477321][T10146] hsr_slave_0: entered promiscuous mode
[  328.522479][T10146] hsr_slave_1: entered promiscuous mode
[  328.528893][T10146] debugfs: 'hsr0' already exists in 'hsr'
[  328.563109][T10146] Cannot create hsr debugfs directory
[  328.569270][T10248] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.1393: lblock 0 mapped to illegal pblock 48 (length 1)
[  328.615772][T10248] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=-117
[  328.802312][ T9917] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.840285][T10243] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1392'.
[  329.547752][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1401'.
[  329.621780][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1401'.
[  329.653385][T10277] futex_wake_op: syz.7.1401 tries to shift op by 32; fix this program
[  329.710866][T10251] lo speed is unknown, defaulting to 1000
[  330.127674][T10289] loop7: detected capacity change from 0 to 512
[  330.231801][T10289] ext2: Unknown parameter 'nouser_xattr'
[  330.342192][ T5867] Bluetooth: hci0: command tx timeout
[  330.425252][ T5867] Bluetooth: hci4: command tx timeout
[  330.628528][T10299] siw: device registration error -23
[  330.777530][T10300] loop7: detected capacity change from 0 to 128
[  332.429705][ T5867] Bluetooth: hci0: command tx timeout
[  332.965016][ T6057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  333.005035][ T6057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  333.035368][ T6057] bond0 (unregistering): Released all slaves
[  333.066838][ T6057] bond1 (unregistering): Released all slaves
[  333.135471][T10298] pim6reg: entered allmulticast mode
[  333.153449][T10301] pim6reg: left allmulticast mode
[  333.499333][ T6057] tipc: Left network mode
[  333.644727][T10332] loop5: detected capacity change from 0 to 4096
[  333.734172][T10332] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  333.832041][T10332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.939762][   T30] audit: type=1800 audit(1756562924.062:2168): pid=10332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1413" name="file1" dev="loop5" ino=15 res=0 errno=0
[  334.237638][T10351] loop7: detected capacity change from 0 to 4096
[  334.323421][T10351] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  334.359099][T10351] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.470868][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.500695][ T5867] Bluetooth: hci0: command tx timeout
[  334.779621][T10362] loop5: detected capacity change from 0 to 256
[  334.866657][ T9917] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.975904][T10362] FAT-fs (loop5): Directory bread(block 64) failed
[  335.030070][T10362] FAT-fs (loop5): Directory bread(block 65) failed
[  335.051249][T10362] FAT-fs (loop5): Directory bread(block 66) failed
[  335.057782][T10362] FAT-fs (loop5): Directory bread(block 67) failed
[  335.111067][T10362] FAT-fs (loop5): Directory bread(block 68) failed
[  335.117625][T10362] FAT-fs (loop5): Directory bread(block 69) failed
[  335.178609][T10362] FAT-fs (loop5): Directory bread(block 70) failed
[  335.206085][T10362] FAT-fs (loop5): Directory bread(block 71) failed
[  335.270506][T10362] FAT-fs (loop5): Directory bread(block 72) failed
[  335.277064][T10362] FAT-fs (loop5): Directory bread(block 73) failed
[  335.424880][T10146] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  335.513978][T10146] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  336.007646][T10146] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  336.199894][T10251] chnl_net:caif_netlink_parms(): no params data found
[  336.276038][T10146] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  336.584505][ T5867] Bluetooth: hci0: command tx timeout
[  337.342592][ T6057] hsr_slave_0: left promiscuous mode
[  337.367179][ T6057] hsr_slave_1: left promiscuous mode
[  337.484315][ T6057] veth1_macvtap: left promiscuous mode
[  337.488813][   T30] audit: type=1326 audit(1756562927.612:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.7.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  337.490087][ T6057] veth0_macvtap: left promiscuous mode
[  337.571529][ T6057] veth1_vlan: left promiscuous mode
[  337.585619][ T6057] veth0_vlan: left promiscuous mode
[  337.590756][   T30] audit: type=1326 audit(1756562927.642:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.7.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  337.657590][   T30] audit: type=1326 audit(1756562927.652:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.7.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  337.689917][T10428] futex_wake_op: syz.5.1438 tries to shift op by 32; fix this program
[  337.713795][   T30] audit: type=1326 audit(1756562927.652:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.7.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  337.737338][   T30] audit: type=1326 audit(1756562927.652:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.7.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  337.769564][   T30] audit: type=1326 audit(1756562927.652:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.7.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  337.813422][T10433] loop7: detected capacity change from 0 to 1024
[  337.864957][T10433] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.895827][   T30] audit: type=1326 audit(1756562927.652:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.7.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  337.920261][   T30] audit: type=1326 audit(1756562927.652:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.7.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  337.944074][   T30] audit: type=1326 audit(1756562927.842:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.7.1440" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b77d8ebe9 code=0x0
[  338.277167][T10433] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.1440: Allocating blocks 497-513 which overlap fs metadata
[  338.543607][ T6057] team0 (unregistering): Port device team_slave_1 removed
[  338.557770][T10429] EXT4-fs (loop7): pa ffff888079662000: logic 32, phys. 161, len 22
[  338.569276][T10429] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  338.609322][ T6057] team0 (unregistering): Port device team_slave_0 removed
[  338.667077][ T9917] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.117821][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  340.117842][   T30] audit: type=1107 audit(1756562930.242:2179): pid=10461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  340.582886][T10251] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.622410][T10251] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.646088][T10251] bridge_slave_0: entered allmulticast mode
[  340.693734][T10251] bridge_slave_0: entered promiscuous mode
[  340.776769][T10473] pim6reg1: entered allmulticast mode
[  340.784986][T10251] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.855659][T10251] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.883688][T10251] bridge_slave_1: entered allmulticast mode
[  340.924402][T10251] bridge_slave_1: entered promiscuous mode
[  341.277166][T10251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.452929][T10251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.463853][ T6057] IPVS: stop unused estimator thread 0...
[  341.570212][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'.
[  341.661170][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'.
[  341.703205][T10512] futex_wake_op: syz.0.1456 tries to shift op by 32; fix this program
[  341.734516][T10513] loop4: detected capacity change from 0 to 1024
[  341.766771][T10513] EXT4-fs: Ignoring removed nobh option
[  341.792427][T10513] EXT4-fs: Ignoring removed bh option
[  341.924615][T10513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.976093][T10251] team0: Port device team_slave_0 added
[  342.017932][T10251] team0: Port device team_slave_1 added
[  342.156325][T10513] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1458: Allocating blocks 257-513 which overlap fs metadata
[  342.459881][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.680036][T10251] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.687003][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.800479][   T30] audit: type=1326 audit(1756562932.912:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.4.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  342.876664][T10251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.970425][   T30] audit: type=1326 audit(1756562932.912:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.4.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  343.110936][   T30] audit: type=1326 audit(1756562932.982:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.4.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  343.112803][T10251] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.218041][T10545] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  343.250195][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.263865][   T30] audit: type=1326 audit(1756562932.982:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.4.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  343.346520][T10251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.429760][   T30] audit: type=1326 audit(1756562932.982:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.4.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  343.596277][T10146] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.645172][T10548] pim6reg1: entered allmulticast mode
[  343.760383][   T30] audit: type=1326 audit(1756562932.982:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.4.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  343.980588][   T30] audit: type=1326 audit(1756562932.982:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.4.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  344.105820][   T30] audit: type=1326 audit(1756562932.982:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.4.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  344.199000][   T30] audit: type=1326 audit(1756562932.992:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.4.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cf7b8ebe9 code=0x7ffc0000
[  344.211602][T10546] pim6reg1: left allmulticast mode
[  344.415001][T10251] hsr_slave_0: entered promiscuous mode
[  344.456981][T10251] hsr_slave_1: entered promiscuous mode
[  344.777182][T10578] loop4: detected capacity change from 0 to 1024
[  344.795981][T10578] EXT4-fs: Ignoring removed bh option
[  344.812062][T10578] EXT4-fs: inline encryption not supported
[  344.859129][T10578] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  344.909893][T10146] 8021q: adding VLAN 0 to HW filter on device team0
[  344.917806][T10578] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  344.927715][T10584] loop5: detected capacity change from 0 to 1024
[  344.949239][T10578] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1480: lblock 2 mapped to illegal pblock 2 (length 1)
[  345.021001][T10584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.047961][T10578] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1480: lblock 0 mapped to illegal pblock 48 (length 1)
[  345.048051][T10584] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  345.107411][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.114630][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.136113][T10578] __quota_error: 31 callbacks suppressed
[  345.136132][T10578] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  345.166737][T10578] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1480: Failed to acquire dquot type 0
[  345.179266][T10578] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  345.202397][T10578] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1480: mark_inode_dirty error
[  345.214788][T10578] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  345.230241][T10578] EXT4-fs (loop4): 1 orphan inode deleted
[  345.239483][T10578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.255516][ T8630] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1)
[  345.284183][ T8630] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  345.288040][ T6057] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.302967][ T8630] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:15: Failed to release dquot type 0
[  345.327408][T10578] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1480: lblock 0 mapped to illegal pblock 48 (length 1)
[  345.332238][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.369414][T10578] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117
[  345.513532][ T8632] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.520727][ T8632] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.554760][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.614594][ T6057] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.813055][ T6057] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.922132][ T6057] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.999201][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1492'.
[  346.250480][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'.
[  346.683155][ T6057] veth1_to_hsr: left allmulticast mode
[  346.698897][ T6057] veth1_to_hsr: left promiscuous mode
[  346.709009][ T6057] bridge0: port 3(veth1_to_hsr) entered disabled state
[  346.728345][ T6057] bridge_slave_1: left allmulticast mode
[  346.745802][ T6057] bridge_slave_1: left promiscuous mode
[  346.774544][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.786393][ T6057] bridge_slave_0: left allmulticast mode
[  346.792590][ T6057] bridge_slave_0: left promiscuous mode
[  346.801487][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.523229][ T6057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  347.541847][ T6057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  347.552877][ T6057] bond0 (unregistering): Released all slaves
[  347.640824][ T5868] bond0: (slave syz_tun): Releasing backup interface
[  347.687415][ T6057] tipc: Left network mode
[  347.689903][T10251] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  347.885131][T10650] loop4: detected capacity change from 0 to 512
[  347.935581][T10650] ext2: Unknown parameter 'nouser_xattr'
[  347.950703][T10251] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  348.240323][T10251] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  348.339682][T10652] siw: device registration error -23
[  348.965971][T10653] loop4: detected capacity change from 0 to 128
[  348.980598][T10251] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  349.022101][T10146] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.711263][T10671] ipvlan2: entered promiscuous mode
[  349.784387][T10671] bridge0: port 3(ipvlan2) entered blocking state
[  349.840336][T10671] bridge0: port 3(ipvlan2) entered disabled state
[  349.880981][T10671] ipvlan2: entered allmulticast mode
[  349.887086][T10671] bridge0: entered allmulticast mode
[  349.904262][T10671] ipvlan2: left allmulticast mode
[  349.911597][T10671] bridge0: left allmulticast mode
[  350.063665][T10251] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.193822][ T6057] hsr_slave_0: left promiscuous mode
[  350.250298][ T6057] hsr_slave_1: left promiscuous mode
[  350.256363][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.271802][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.330003][ T6057] veth1_macvtap: left promiscuous mode
[  350.338931][ T6057] veth0_macvtap: left promiscuous mode
[  350.346911][ T6057] veth1_vlan: left promiscuous mode
[  350.352866][ T6057] veth0_vlan: left promiscuous mode
[  350.470738][ T5178] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  350.481676][ T5178] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  350.496246][ T5178] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  350.510942][ T5178] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  350.519088][ T5178] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  350.666765][T10694] loop4: detected capacity change from 0 to 256
[  350.714524][T10694] FAT-fs (loop4): Directory bread(block 64) failed
[  350.748572][T10694] FAT-fs (loop4): Directory bread(block 65) failed
[  350.776368][T10694] FAT-fs (loop4): Directory bread(block 66) failed
[  350.787906][T10694] FAT-fs (loop4): Directory bread(block 67) failed
[  350.816844][T10694] FAT-fs (loop4): Directory bread(block 68) failed
[  350.823992][T10694] FAT-fs (loop4): Directory bread(block 69) failed
[  350.834094][T10694] FAT-fs (loop4): Directory bread(block 70) failed
[  350.841002][T10694] FAT-fs (loop4): Directory bread(block 71) failed
[  350.847770][T10694] FAT-fs (loop4): Directory bread(block 72) failed
[  350.854504][T10694] FAT-fs (loop4): Directory bread(block 73) failed
[  351.144877][ T6057] team0 (unregistering): Port device team_slave_1 removed
[  351.188081][ T6057] team0 (unregistering): Port device team_slave_0 removed
[  351.617874][T10251] 8021q: adding VLAN 0 to HW filter on device team0
[  351.686797][T10702] loop7: detected capacity change from 0 to 1024
[  351.695872][ T8632] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.703003][ T8632] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.756257][T10702] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.793683][ T8632] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.800832][ T8632] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.836234][   T30] audit: type=1800 audit(1756562941.952:2219): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1518" name="file1" dev="loop7" ino=15 res=0 errno=0
[  351.885735][T10702] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1518'.
[  351.977011][T10146] veth0_vlan: entered promiscuous mode
[  351.977277][   T30] audit: type=1326 audit(1756562942.102:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.7.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  352.066635][T10146] veth1_vlan: entered promiscuous mode
[  352.092253][   T30] audit: type=1326 audit(1756562942.132:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.7.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  352.187146][   T30] audit: type=1326 audit(1756562942.132:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.7.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  352.250037][   T30] audit: type=1326 audit(1756562942.142:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.7.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  352.276771][T10715] tipc: Started in network mode
[  352.298868][T10715] tipc: Node identity b68f211b654a, cluster identity 4711
[  352.359384][T10715] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.503327][T10714] tipc: Resetting bearer <eth:syzkaller0>
[  352.524447][   T30] audit: type=1326 audit(1756562942.142:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.7.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  352.548158][   T30] audit: type=1326 audit(1756562942.142:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.7.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  352.588310][ T5178] Bluetooth: hci1: command tx timeout
[  352.630003][   T30] audit: type=1326 audit(1756562942.142:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.7.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  353.187040][   T30] audit: type=1326 audit(1756562942.182:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.7.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  353.223460][T10146] veth0_macvtap: entered promiscuous mode
[  353.279713][   T30] audit: type=1326 audit(1756562942.182:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.7.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b77d8ebe9 code=0x7ffc0000
[  353.423680][T10713] tipc: Disabling bearer <eth:syzkaller0>
[  353.477008][T10684] lo speed is unknown, defaulting to 1000
[  353.483484][T10146] veth1_macvtap: entered promiscuous mode
[  353.637226][ T9917] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.982884][T10251] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.244931][T10146] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.379606][T10146] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.516618][   T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.550073][   T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.584190][   T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.618022][   T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.661088][ T5178] Bluetooth: hci1: command tx timeout
[  355.095009][T10684] chnl_net:caif_netlink_parms(): no params data found
[  355.171924][ T6785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.179748][ T6785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.418130][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1533'.
[  355.613954][ T3067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.639634][T10778] tipc: Started in network mode
[  355.644723][ T3067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.654786][T10778] tipc: Node identity c256bd567d2b, cluster identity 4711
[  355.663811][T10778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.715402][ T8630] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.858239][T10773] tipc: Resetting bearer <eth:syzkaller0>
[  355.914769][T10684] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.930250][T10684] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.950173][T10684] bridge_slave_0: entered allmulticast mode
[  355.963750][T10684] bridge_slave_0: entered promiscuous mode
[  356.041629][T10772] tipc: Disabling bearer <eth:syzkaller0>
[  356.106882][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1345'.
[  356.126828][ T8630] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.267099][ T8630] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.293882][T10684] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.301384][T10684] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.308721][T10684] bridge_slave_1: entered allmulticast mode
[  356.316430][T10796] rdma_rxe: rxe_newlink: failed to add vxcan1
[  356.327743][T10684] bridge_slave_1: entered promiscuous mode
[  356.436620][T10796] loop7: detected capacity change from 0 to 512
[  356.438321][ T8630] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.472007][T10796] EXT4-fs: Ignoring removed orlov option
[  356.490040][T10796] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  356.543006][T10251] veth0_vlan: entered promiscuous mode
[  356.600291][T10796] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  356.681928][T10796] EXT4-fs (loop7): 1 orphan inode deleted
[  356.689584][T10796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.742604][ T5178] Bluetooth: hci1: command tx timeout
[  356.856370][T10797] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1540'.
[  356.865024][T10684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.918753][T10684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  357.045574][T10251] veth1_vlan: entered promiscuous mode
[  357.145459][T10790] netlink: 'syz.5.1539': attribute type 3 has an invalid length.
[  357.147952][ T9917] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.166953][T10790] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1539'.
[  357.200869][T10684] team0: Port device team_slave_0 added
[  357.207886][T10822] tipc: New replicast peer: 255.255.255.83
[  357.214453][T10822] tipc: Enabled bearer <udp:£>, priority 10
[  357.286020][T10684] team0: Port device team_slave_1 added
[  357.539236][T10684] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.568954][T10684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.643297][T10684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.690350][T10834] 9pnet_fd: p9_fd_create_tcp (10834): problem connecting socket to 127.0.0.1
[  357.702197][T10684] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.709154][T10684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.743261][T10684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.875177][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1554'.
[  357.911193][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1554'.
[  357.932760][T10842] futex_wake_op: syz.5.1554 tries to shift op by 32; fix this program
[  357.976380][T10841] loop7: detected capacity change from 0 to 1024
[  357.987016][T10841] EXT4-fs: Ignoring removed bh option
[  358.010249][T10841] EXT4-fs: inline encryption not supported
[  358.046770][T10841] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  358.087463][T10684] hsr_slave_0: entered promiscuous mode
[  358.088367][T10841] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  358.102384][T10684] hsr_slave_1: entered promiscuous mode
[  358.108802][T10684] debugfs: 'hsr0' already exists in 'hsr'
[  358.118205][T10684] Cannot create hsr debugfs directory
[  358.145307][ T8630] bridge_slave_1: left allmulticast mode
[  358.151207][ T8630] bridge_slave_1: left promiscuous mode
[  358.158387][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.174884][ T8630] bridge_slave_0: left allmulticast mode
[  358.178333][T10841] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.1555: lblock 2 mapped to illegal pblock 2 (length 1)
[  358.182701][ T8630] bridge_slave_0: left promiscuous mode
[  358.203554][T10841] __quota_error: 15 callbacks suppressed
[  358.203571][T10841] Quota error (device loop7): qtree_write_dquot: dquota write failed
[  358.206371][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.212264][T10841] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.1555: lblock 0 mapped to illegal pblock 48 (length 1)
[  358.256808][T10841] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  358.278376][ T8630] tipc: Resetting bearer <eth:syzkaller0>
[  358.294526][T10841] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1555: Failed to acquire dquot type 0
[  358.327186][T10841] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  358.330192][ T5950] tipc: Node number set to 1640082398
[  358.346041][T10841] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.1555: mark_inode_dirty error
[  358.391461][T10841] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  358.427273][T10841] EXT4-fs (loop7): 1 orphan inode deleted
[  358.442075][ T6053] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  358.468788][T10841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.502620][ T6053] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  358.521559][ T6053] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0
[  358.602837][T10841] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.1555: lblock 0 mapped to illegal pblock 48 (length 1)
[  358.636243][T10841] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=-117
[  358.718497][ T9917] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.825297][ T5178] Bluetooth: hci1: command tx timeout
[  358.939002][ T8630] tipc: Disabling bearer <eth:syzkaller0>
[  358.955186][T10863] loop7: detected capacity change from 0 to 512
[  358.967018][T10863] EXT4-fs: Ignoring removed oldalloc option
[  358.993008][T10863] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.1560: Parent and EA inode have the same ino 15
[  359.006940][T10863] EXT4-fs (loop7): Remounting filesystem read-only
[  359.013822][T10863] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -30)
[  359.023100][T10863] EXT4-fs (loop7): 1 orphan inode deleted
[  359.034593][T10863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  359.057262][T10863] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1560'.
[  359.262831][ T8630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  359.273976][ T8630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  359.285802][ T8630] bond0 (unregistering): Released all slaves
[  359.336031][T10251] veth0_macvtap: entered promiscuous mode
[  359.496671][T10251] veth1_macvtap: entered promiscuous mode
[  359.517415][ T9917] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.525559][ T5942] hid_parser_main: 72 callbacks suppressed
[  359.525583][ T5942] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  359.534336][ T8630] tipc: Left network mode
[  359.546830][ T5942] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  359.608319][ T5942] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  359.617070][T10251] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.642862][ T5942] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  359.680327][ T5942] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  359.689924][T10251] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.728595][ T5942] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  359.756443][ T5942] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  359.793321][ T5942] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  359.825540][ T5942] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  359.838941][ T5942] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  359.854960][ T5942] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  360.025035][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.060856][   T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.069577][   T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.144092][   T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.356368][T10893] loop7: detected capacity change from 0 to 512
[  360.414240][T10893] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6).
[  360.427602][T10893] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  360.455075][T10893] EXT4-fs (loop7): mount failed
[  361.866639][T10913] loop7: detected capacity change from 0 to 512
[  361.880421][ T8630] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  361.887802][ T8630] batman_adv: batadv0: Removing interface: batadv_slave_0
[  361.901694][T10913] ext2: Unknown parameter 'nouser_xattr'
[  361.914913][ T8630] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  361.922641][ T8630] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.166082][ T8630] veth1_macvtap: left promiscuous mode
[  362.172864][ T8630] veth0_macvtap: left promiscuous mode
[  362.179119][ T8630] veth1_vlan: left promiscuous mode
[  362.184633][ T8630] veth0_vlan: left promiscuous mode
[  362.260147][T10923] siw: device registration error -23
[  362.338995][T10923] loop7: detected capacity change from 0 to 128
[  362.932719][T10927] loop4: detected capacity change from 0 to 1024
[  362.950120][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1584'.
[  362.958975][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1584'.
[  362.969632][T10927] EXT4-fs: Ignoring removed bh option
[  362.976063][T10927] EXT4-fs: inline encryption not supported
[  362.988570][T10927] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  363.008252][T10927] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  363.012297][T10926] futex_wake_op: syz.8.1584 tries to shift op by 32; fix this program
[  363.039040][T10927] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1585: lblock 2 mapped to illegal pblock 2 (length 1)
[  363.059091][T10927] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  363.067319][T10927] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1585: lblock 0 mapped to illegal pblock 48 (length 1)
[  363.099184][T10927] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  363.115633][T10927] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1585: Failed to acquire dquot type 0
[  363.144251][T10927] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  363.154466][T10927] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1585: mark_inode_dirty error
[  363.182766][T10927] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  363.195171][T10927] EXT4-fs (loop4): 1 orphan inode deleted
[  363.209178][T10927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.230441][ T6057] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1)
[  363.250631][ T6057] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  363.259507][ T6057] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:12: Failed to release dquot type 0
[  363.298080][T10927] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1585: lblock 0 mapped to illegal pblock 48 (length 1)
[  363.323665][T10927] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117
[  363.389069][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.563271][ T8630] team0 (unregistering): Port device team_slave_1 removed
[  363.637647][ T8630] team0 (unregistering): Port device team_slave_0 removed
[  364.014580][ T6053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.024201][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.117851][T10935] tipc: Started in network mode
[  364.125787][T10935] tipc: Node identity 267935eed015, cluster identity 4711
[  364.145871][T10935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.225156][T10944] tipc: Resetting bearer <eth:syzkaller0>
[  364.355053][T10933] tipc: Disabling bearer <eth:syzkaller0>
[  364.400029][ T6057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.414043][ T6057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.829773][T10684] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  364.837752][T10968] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  364.880585][T10684] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  364.933867][T10684] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  364.974346][T10684] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  365.303620][T10684] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.470976][T10989] tipc: Started in network mode
[  365.481202][T10989] tipc: Node identity c63214b9afe4, cluster identity 4711
[  365.505370][T10989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.572682][T10684] 8021q: adding VLAN 0 to HW filter on device team0
[  365.656319][T10989] tipc: Resetting bearer <eth:syzkaller0>
[  365.773741][T10986] tipc: Disabling bearer <eth:syzkaller0>
[  365.815429][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.822600][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.873356][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.880572][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.072451][   T30] audit: type=1326 audit(1756562956.202:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.9.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  366.135796][   T30] audit: type=1326 audit(1756562956.202:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.9.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  366.296227][   T30] audit: type=1326 audit(1756562956.202:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.9.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  366.320156][   T30] audit: type=1326 audit(1756562956.202:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.9.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  366.343730][   T30] audit: type=1326 audit(1756562956.202:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.9.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  366.367102][   T30] audit: type=1326 audit(1756562956.202:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.9.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  366.442850][T11016] sd 0:0:1:0: device reset
[  366.484493][   T30] audit: type=1326 audit(1756562956.202:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.9.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  366.510035][   T30] audit: type=1326 audit(1756562956.202:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.9.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  367.280672][T11018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1614'.
[  367.304947][T11022] loop4: detected capacity change from 0 to 1024
[  367.319489][T11022] EXT4-fs: Ignoring removed bh option
[  367.325382][T11022] EXT4-fs: inline encryption not supported
[  367.347709][T11022] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  367.377179][T11022] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  367.419032][T11022] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1615: lblock 2 mapped to illegal pblock 2 (length 1)
[  367.483376][T11022] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1615: lblock 0 mapped to illegal pblock 48 (length 1)
[  367.507869][T11022] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1615: Failed to acquire dquot type 0
[  367.529860][T11022] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  367.548251][T11022] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1615: mark_inode_dirty error
[  367.606045][T11022] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  367.642884][T11022] EXT4-fs (loop4): 1 orphan inode deleted
[  367.660731][   T13] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  367.682865][T11022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  367.698847][   T13] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0
[  367.778579][T11040] loop5: detected capacity change from 0 to 512
[  367.828919][T11022] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1615: lblock 0 mapped to illegal pblock 48 (length 1)
[  367.854792][T11040] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  367.903056][T10684] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.005918][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.048805][T10684] veth0_vlan: entered promiscuous mode
[  368.075037][T11046] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  368.106590][T10684] veth1_vlan: entered promiscuous mode
[  368.255272][T10684] veth0_macvtap: entered promiscuous mode
[  368.312689][T10684] veth1_macvtap: entered promiscuous mode
[  368.416198][T10684] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.497197][T10684] batman_adv: batadv0: Interface activated: batadv_slave_1
[  368.591406][ T6785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.614501][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  368.614545][   T30] audit: type=1326 audit(1756562958.732:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11064 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  368.652257][ T6785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.664814][ T6785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.677795][   T30] audit: type=1326 audit(1756562958.732:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11064 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  368.701442][   T30] audit: type=1326 audit(1756562958.732:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11064 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  368.715670][T11068] loop7: detected capacity change from 0 to 1024
[  368.725599][   T30] audit: type=1326 audit(1756562958.732:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11064 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  368.759377][ T6785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  368.760850][   T30] audit: type=1326 audit(1756562958.772:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11064 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  368.787764][T11068] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  368.794659][   T30] audit: type=1326 audit(1756562958.772:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11064 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  368.830218][T11068] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.832788][   T30] audit: type=1326 audit(1756562958.772:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11064 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  368.884985][   T30] audit: type=1326 audit(1756562958.772:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11064 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  368.909504][   T30] audit: type=1326 audit(1756562958.772:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11064 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  368.967620][T11068] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.1628: lblock 3 mapped to illegal pblock 3 (length 13)
[  368.975942][   T30] audit: type=1326 audit(1756562958.772:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11064 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e38ebe9 code=0x7ffc0000
[  368.998135][T11068] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  369.056154][ T6057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.074939][ T6057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.089055][T11068] EXT4-fs (loop7): This should not happen!! Data will be lost
[  369.089055][T11068] 
[  369.278647][ T6053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.318178][ T6053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.321535][ T9917] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.814604][T11095] loop1: detected capacity change from 0 to 1024
[  369.843565][T11095] EXT4-fs: Ignoring removed bh option
[  369.852824][T11095] EXT4-fs: inline encryption not supported
[  369.893470][T11095] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  369.945651][T11095] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  370.025494][T11095] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1636: lblock 2 mapped to illegal pblock 2 (length 1)
[  370.109590][T11106] netlink: 'syz.8.1639': attribute type 10 has an invalid length.
[  370.147832][T11095] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1636: lblock 0 mapped to illegal pblock 48 (length 1)
[  370.173065][T11105] futex_wake_op: syz.9.1641 tries to shift op by 32; fix this program
[  370.185426][T11100] bridge_slave_0: left allmulticast mode
[  370.196432][T11106] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1639'.
[  370.243166][T11095] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1636: Failed to acquire dquot type 0
[  370.280451][T11100] bridge_slave_0: left promiscuous mode
[  370.286237][T11100] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.363049][T11095] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  370.418691][T11100] bridge_slave_1: left allmulticast mode
[  370.429852][T11095] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1636: mark_inode_dirty error
[  370.461194][T11095] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  370.469894][T11100] bridge_slave_1: left promiscuous mode
[  370.485894][T11095] EXT4-fs (loop1): 1 orphan inode deleted
[  370.495179][T11100] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.497061][T11095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.526519][ T6054] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  370.582703][ T6054] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:10: Failed to release dquot type 0
[  370.612161][T11100] bond0: (slave bond_slave_0): Releasing backup interface
[  370.658008][T11095] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1636: lblock 0 mapped to illegal pblock 48 (length 1)
[  370.676843][T11100] bond0: (slave bond_slave_1): Releasing backup interface
[  370.733047][T11100] team0: Port device team_slave_0 removed
[  370.772131][T11100] team0: Port device team_slave_1 removed
[  370.809010][T11100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  370.828924][T11100] batman_adv: batadv0: Removing interface: batadv_slave_0
[  370.836826][T10684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.876269][T11100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  370.932829][T11100] batman_adv: batadv0: Removing interface: batadv_slave_1
[  370.936746][T11131] loop9: detected capacity change from 0 to 512
[  370.958959][T11131] EXT4-fs: Ignoring removed oldalloc option
[  370.982011][T11131] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  371.038578][T11106] batman_adv: batadv0: Adding interface: virt_wifi0
[  371.057216][T11131] EXT4-fs (loop9): 1 orphan inode deleted
[  371.065941][T11106] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.084300][T11131] EXT4-fs (loop9): 1 truncate cleaned up
[  371.099475][T11131] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  371.129733][T11106] batman_adv: batadv0: Interface activated: virt_wifi0
[  371.288375][T11139] team0: No ports can be present during mode change
[  371.288662][T10251] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.060504][T11163] tmpfs: Bad value for 'mpol'
[  372.094614][T11156] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.130318][T11164] loop5: detected capacity change from 0 to 128
[  372.138074][T11164] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  372.151010][T11164] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  372.429057][T11171] loop9: detected capacity change from 0 to 2048
[  372.434320][T11156] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.531867][T11156] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.718279][T11171] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  372.837495][T11178] loop1: detected capacity change from 0 to 4096
[  372.904179][T11178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  372.942025][T11156] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.970953][T10251] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.120546][ T6057] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.157109][T10684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.273840][ T6057] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.296970][ T6057] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.315186][ T6057] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.405022][ T6057] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  373.676508][T11172] lo speed is unknown, defaulting to 1000
[  373.683630][T11195] rdma_rxe: rxe_newlink: failed to add vxcan1
[  374.854558][T11226] loop8: detected capacity change from 0 to 512
[  375.021553][T11226] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.150406][T11226] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.795391][T11234] loop7: detected capacity change from 0 to 512
[  376.110747][T11234] EXT4-fs (loop7): orphan cleanup on readonly fs
[  376.187916][T11234] EXT4-fs error (device loop7): ext4_quota_enable:7128: comm syz.7.1685: inode #218103808: comm syz.7.1685: iget: illegal inode #
[  376.222014][T10146] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.291464][T11240] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  376.320599][T11234] EXT4-fs error (device loop7): ext4_quota_enable:7131: comm syz.7.1685: Bad quota inode: 218103808, type: 2
[  376.384630][   T30] kauditd_printk_skb: 45 callbacks suppressed
[  376.384648][   T30] audit: type=1326 audit(1756562966.492:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.9.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  376.471536][   T30] audit: type=1326 audit(1756562966.492:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.9.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  376.475760][T11234] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  376.495296][   T30] audit: type=1326 audit(1756562966.562:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.9.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  376.495350][   T30] audit: type=1326 audit(1756562966.562:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.9.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  376.495401][   T30] audit: type=1326 audit(1756562966.562:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.9.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  376.495451][   T30] audit: type=1326 audit(1756562966.562:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.9.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  376.495510][   T30] audit: type=1326 audit(1756562966.562:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.9.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  376.495783][   T30] audit: type=1326 audit(1756562966.632:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.9.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  376.497288][   T30] audit: type=1326 audit(1756562966.632:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.9.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  376.675443][   T30] audit: type=1326 audit(1756562966.632:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.9.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c98ebe9 code=0x7ffc0000
[  376.717821][T11234] EXT4-fs (loop7): Cannot turn on quotas: error -117
[  376.726425][T11234] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  376.790288][T11245] tipc: Started in network mode
[  376.797890][T11234] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  376.826211][T11245] tipc: Node identity 7, cluster identity 4711
[  376.850032][T11245] tipc: Node number set to 7
[  376.865830][T11250] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.1685: iget: bad i_size value: 360287970189639690
[  377.145394][T11250] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.1685: iget: bad i_size value: 360287970189639690
[  377.377328][T11251] kernel profiling enabled (shift: 17)
[  377.384144][T11251] netlink: 'syz.8.1687': attribute type 10 has an invalid length.
[  377.392006][T11251] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1687'.
[  377.402454][T11251] bridge0: port 1(dummy0) entered blocking state
[  377.408884][T11251] bridge0: port 1(dummy0) entered disabled state
[  377.418987][T11251] dummy0: entered allmulticast mode
[  377.426317][T11251] dummy0: entered promiscuous mode
[  377.432536][T11251] bridge0: port 1(dummy0) entered blocking state
[  377.439129][T11251] bridge0: port 1(dummy0) entered forwarding state
[  377.617743][T11234] EXT4-fs error (device loop7): ext4_quota_enable:7128: comm syz.7.1685: inode #218103808: comm syz.7.1685: iget: illegal inode #
[  377.635552][T11234] EXT4-fs error (device loop7): ext4_quota_enable:7131: comm syz.7.1685: Bad quota inode: 218103808, type: 2
[  377.658611][T11234] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  377.740517][T11258] rdma_rxe: rxe_newlink: failed to add vxcan1
[  377.864937][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  377.887362][ T6054] ------------[ cut here ]------------
[  377.893531][ T6054] RTNL: assertion failed at ./include/net/netdev_lock.h (72)
[  377.907160][ T9917] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.962003][ T6054] WARNING: CPU: 1 PID: 6054 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350
[  377.972428][ T6054] Modules linked in:
[  377.976466][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) 
[  377.986049][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  377.996137][ T6054] Workqueue: bond0 bond_mii_monitor
[  378.001379][ T6054] RIP: 0010:__linkwatch_sync_dev+0x303/0x350
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  378.007369][ T6054] Code: 7c fe ff ff e8 3e 1e 54 f8 c6 05 6f fb 21 06 01 90 48 c7 c7 a0 c3 94 8c 48 c7 c6 86 f7 9f 8d ba 48 00 00 00 e8 be bc 17 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff
[  378.027298][ T6054] RSP: 0018:ffffc90004f67670 EFLAGS: 00010246
[  378.034248][ T6054] RAX: 62248b46579ab200 RBX: ffff88807ea68000 RCX: ffff88807ea23c00
[  378.042789][ T6054] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  378.050805][ T6054] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  378.058783][ T6054] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: 1ffff1100fd4d05d
[  378.066837][ T6054] R13: dffffc0000000000 R14: ffffffff8c1cf908 R15: 0000000000000000
[  378.074856][ T6054] FS:  0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000
[  378.083848][ T6054] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  378.090618][ T6054] CR2: 00007f9cf8a65f98 CR3: 000000004046a000 CR4: 0000000000350ef0
[  378.098598][ T6054] Call Trace:
[  378.102244][ T6054]  <TASK>
[  378.105178][ T6054]  ? ethtool_op_get_link+0xd/0x70
[  378.110253][ T6054]  ethtool_op_get_link+0x15/0x70
[  378.115196][ T6054]  bond_check_dev_link+0x447/0x6c0
[  378.120356][ T6054]  ? __pfx_bond_check_dev_link+0x10/0x10
[  378.126005][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.132201][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.137844][ T6054]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  378.144816][ T6054]  bond_mii_monitor+0x428/0x2e00
[  378.149767][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.156614][ T6054]  ? __lock_acquire+0xab9/0xd20
[  378.161544][ T6054]  ? bond_mii_monitor+0x153/0x2e00
[  378.166676][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.172354][ T6054]  ? __pfx_bond_mii_monitor+0x10/0x10
[  378.177743][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.183431][ T6054]  ? register_lock_class+0x51/0x320
[  378.188650][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.194329][ T6054]  ? __lock_acquire+0xab9/0xd20
[  378.199204][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.205075][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.210853][ T6054]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.216062][ T6054]  ? process_scheduled_works+0x9ef/0x17b0
[  378.221823][ T6054]  ? process_scheduled_works+0x9ef/0x17b0
[  378.227549][ T6054]  process_scheduled_works+0xae1/0x17b0
[  378.233719][ T6054]  ? __pfx_process_scheduled_works+0x10/0x10
[  378.239714][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.245850][ T6054]  worker_thread+0x8a0/0xda0
[  378.250518][ T6054]  kthread+0x711/0x8a0
[  378.254599][ T6054]  ? __pfx_worker_thread+0x10/0x10
[  378.259708][ T6054]  ? __pfx_kthread+0x10/0x10
[  378.264334][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.270004][ T6054]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.275211][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.280885][ T6054]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.286103][ T6054]  ? __pfx_kthread+0x10/0x10
[  378.290773][ T6054]  ret_from_fork+0x3fc/0x770
[  378.295392][ T6054]  ? __pfx_ret_from_fork+0x10/0x10
[  378.300550][ T6054]  ? __switch_to_asm+0x39/0x70
[  378.305324][ T6054]  ? __switch_to_asm+0x33/0x70
[  378.310138][ T6054]  ? __pfx_kthread+0x10/0x10
[  378.314740][ T6054]  ret_from_fork_asm+0x1a/0x30
[  378.319531][ T6054]  </TASK>
[  378.322792][ T6054] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  378.330068][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) 
[  378.339609][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  378.349747][ T6054] Workqueue: bond0 bond_mii_monitor
[  378.354952][ T6054] Call Trace:
[  378.358214][ T6054]  <TASK>
[  378.361131][ T6054]  dump_stack_lvl+0x99/0x250
[  378.365720][ T6054]  ? __asan_memcpy+0x40/0x70
[  378.370309][ T6054]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.375500][ T6054]  ? __pfx__printk+0x10/0x10
[  378.380097][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.385727][ T6054]  vpanic+0x281/0x750
[  378.389704][ T6054]  ? __pfx__printk+0x10/0x10
[  378.394292][ T6054]  ? __pfx_vpanic+0x10/0x10
[  378.398795][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.404420][ T6054]  ? is_bpf_text_address+0x292/0x2b0
[  378.409718][ T6054]  panic+0xb9/0xc0
[  378.413431][ T6054]  ? __pfx_panic+0x10/0x10
[  378.417874][ T6054]  __warn+0x31b/0x4b0
[  378.421845][ T6054]  ? __linkwatch_sync_dev+0x303/0x350
[  378.427214][ T6054]  ? __linkwatch_sync_dev+0x303/0x350
[  378.432581][ T6054]  report_bug+0x2be/0x4f0
[  378.436910][ T6054]  ? __linkwatch_sync_dev+0x303/0x350
[  378.442281][ T6054]  ? __linkwatch_sync_dev+0x303/0x350
[  378.447647][ T6054]  ? __linkwatch_sync_dev+0x305/0x350
[  378.453009][ T6054]  handle_bug+0x84/0x160
[  378.457247][ T6054]  exc_invalid_op+0x1a/0x50
[  378.461743][ T6054]  asm_exc_invalid_op+0x1a/0x20
[  378.466584][ T6054] RIP: 0010:__linkwatch_sync_dev+0x303/0x350
[  378.472555][ T6054] Code: 7c fe ff ff e8 3e 1e 54 f8 c6 05 6f fb 21 06 01 90 48 c7 c7 a0 c3 94 8c 48 c7 c6 86 f7 9f 8d ba 48 00 00 00 e8 be bc 17 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff
[  378.492239][ T6054] RSP: 0018:ffffc90004f67670 EFLAGS: 00010246
[  378.498324][ T6054] RAX: 62248b46579ab200 RBX: ffff88807ea68000 RCX: ffff88807ea23c00
[  378.506283][ T6054] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  378.514240][ T6054] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  378.522202][ T6054] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: 1ffff1100fd4d05d
[  378.530165][ T6054] R13: dffffc0000000000 R14: ffffffff8c1cf908 R15: 0000000000000000
[  378.538143][ T6054]  ? ethtool_op_get_link+0xd/0x70
[  378.543162][ T6054]  ethtool_op_get_link+0x15/0x70
[  378.548095][ T6054]  bond_check_dev_link+0x447/0x6c0
[  378.553216][ T6054]  ? __pfx_bond_check_dev_link+0x10/0x10
[  378.558853][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.564485][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.570112][ T6054]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  378.576533][ T6054]  bond_mii_monitor+0x428/0x2e00
[  378.581468][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.587093][ T6054]  ? __lock_acquire+0xab9/0xd20
[  378.591944][ T6054]  ? bond_mii_monitor+0x153/0x2e00
[  378.597052][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.602687][ T6054]  ? __pfx_bond_mii_monitor+0x10/0x10
[  378.608055][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.613683][ T6054]  ? register_lock_class+0x51/0x320
[  378.618883][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.624594][ T6054]  ? __lock_acquire+0xab9/0xd20
[  378.629455][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.635083][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.640729][ T6054]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.645925][ T6054]  ? process_scheduled_works+0x9ef/0x17b0
[  378.651636][ T6054]  ? process_scheduled_works+0x9ef/0x17b0
[  378.657347][ T6054]  process_scheduled_works+0xae1/0x17b0
[  378.662909][ T6054]  ? __pfx_process_scheduled_works+0x10/0x10
[  378.668883][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.674518][ T6054]  worker_thread+0x8a0/0xda0
[  378.679124][ T6054]  kthread+0x711/0x8a0
[  378.683194][ T6054]  ? __pfx_worker_thread+0x10/0x10
[  378.688295][ T6054]  ? __pfx_kthread+0x10/0x10
[  378.692874][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.698499][ T6054]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.703690][ T6054]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.709315][ T6054]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.714511][ T6054]  ? __pfx_kthread+0x10/0x10
[  378.719096][ T6054]  ret_from_fork+0x3fc/0x770
[  378.723938][ T6054]  ? __pfx_ret_from_fork+0x10/0x10
[  378.729047][ T6054]  ? __switch_to_asm+0x39/0x70
[  378.733804][ T6054]  ? __switch_to_asm+0x33/0x70
[  378.738561][ T6054]  ? __pfx_kthread+0x10/0x10
[  378.743147][ T6054]  ret_from_fork_asm+0x1a/0x30
[  378.747924][ T6054]  </TASK>
[  378.751123][ T6054] Kernel Offset: disabled
[  378.755432][ T6054] Rebooting in 86400 seconds..