last executing test programs:

1m55.537021289s ago: executing program 0 (id=184):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)

1m54.124236768s ago: executing program 0 (id=189):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$eJzs3U9oXNUaAPDvziR5SZv30j4ej9fyHi/QRQuPpklfserGti7somDBLkRcNDRJDZ3+oUnBxoIJuFBQEHEr0o3g2r10704EdedaqCIVBZWO3Jk77SSZSaZJZm6S+/vBzdxz7p0555s7Z+659+bMDaCwRtM/pYgDEQ8vJhEjTcuGo75wNFvvwU93LqVTEtXqSz8mkWR5jfWT7HFvlhiMiC/PRPy9vLrcudsLVyYr1bo3I47NX71xbO72wtHZq5OXpy9PX5s4/vSJk+PPTJyY2JI492aPZ8+9+O/33nrtqZmvKkeTOBUX+t+YihVxbJXRGI2HWYjN+X0RcTKdafG+7DS7IIRCK2efx/6I+GeMRLmWqhuJ2XdzrRzQVdVyRBUoqGQz7f/TBV8fsGM1+gGNY/vOjoMvdLlX0jv3T9cPgFbH31c/NxKDtWOjPQ+SpiOj+rmNfVtQflrGH3cOfpROsew8xK+Ptk7fFpTTzuJSRPyrVfxJrW77apGm8ZeW1SOJiPGIGMjq9/wm6pA0zXfjPMxaNhp/KSJOZY9p/pkNlj+6It3r+AEopnunsx35Ypp6vP9L+x6N/k+06P8Mt9h3bUTe+7/2/b/G/n6wdo68tKIflvZZzrd+yf6VGd+9c/aDduU39//SKS2/0RfshftLEQdXxP92GmzW/0njT1ps/3SVi6c6K+OFr384225Z3vFX70Ycbnn887hXms6tcX3y2MxsZXq8/rdlGZ9/8eon7crPO/50++9pE3/T9i+tfF76ntzosIzPzt+92m7Z8Lrxl74fSOrHmwNZzuuT8/M3JyIGknPZKk35x9euS2Odxmuk8R851Lr9L/v8Ly1/naHGV2YHbrx85UG7Zc3bP0nq9Vhv+zddTH5Y7bAO7aTxT62//Ve1/zTv/Q7L+OWVW/9pt2ytz//QZgIDAAAAAACAAirVrsEmpbFH86XS2Fh9vOw/Yk+pcn1u/n8z129dm4o4Uvt/yP5S40r3SD2dpOmJ7P9hG+njK9L/j4j9EfFheaiWHrt0vTKVd/AAAAAAAAAAAAAAAAAAAACwTezNxv837lP9c7k+/h8oiG7eYA7Y3rR/KK5a+191iyegCNrt/+d6XA+g9/T/obi0fygu7R+KS/uH4tL+obi0fygu7R8AAAAAdqX9/733bRIRi88O1abUQLbMiCDY3frzrgCQm3LeFQBy8+jSv84+FE5H/f/fsh8H7H51gBwkrTJrnYPq2o3/XstnAgAAAAAAAAAAAABdcPhA+/H/xgbD7vYEw/6WulkPoPc2Mf7fTwfADuen/6G4NnyMP7i19QDys94o/rbN3fh/AAAAAAAAAAAAAOiZ4dqUlMayscDDUSqNjUX8NSL2RX8yM1uZHo+Iv0XEN+X+v6TpibwrDQAAAAAAAAAAAAAAAAAAALvM3O2FK5OVyvTN5pnfV+Xs7pnGXVB7UNZz8YTPiqT3b8tQROS+Ubo209eUk0Qsplt+W1Ts5lxsj2rUZnL+YgIAAAAAAAAAAAAAAAAAgAJqGnvc2sGPe1wjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi9x/f/f9KZQx2vnHeMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDO9GcAAAD//4+rO+Q=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00'}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x800)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000740)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x6, 0x5, 0xfc, 0x10, 0x6}, 0x0, 0x0})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)

1m50.461670211s ago: executing program 0 (id=200):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000180)=r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)
recvfrom(r5, 0x0, 0x0, 0x2101, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='sys_enter\x00', r6}, 0x18)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe)

1m47.708037949s ago: executing program 0 (id=204):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r")
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

1m44.589497338s ago: executing program 0 (id=210):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

1m42.272609333s ago: executing program 0 (id=212):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
futex(0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x30}, 0x8)

1m27.484916026s ago: executing program 1 (id=243):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
listen(r3, 0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRES8=r1, @ANYRES8=r5, @ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)

1m25.815271537s ago: executing program 32 (id=212):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
futex(0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x30}, 0x8)

1m24.924190853s ago: executing program 1 (id=247):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20008090)
bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e20, 0x1004, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, 0x0, 0x0)

1m22.297583009s ago: executing program 1 (id=250):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458081, 0x0)
open$dir(&(0x7f0000000000)='./file1\x00', 0x412281, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r6 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r6, r6, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

1m20.139012353s ago: executing program 1 (id=253):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3e2}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x1a83}], 0x2, 0x100, 0x0)

1m19.755417116s ago: executing program 1 (id=256):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x3, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00'}, 0x18)
socket$netlink(0x10, 0x3, 0x13)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x7fffefff)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7)

1m18.086114806s ago: executing program 1 (id=259):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
writev(r0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000740)}, {&(0x7f0000000880)="6ab8a6811bd96ba127249f534de341bde83bd857f845", 0x16}, {&(0x7f0000000280)}], 0x5)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x21af6000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000009c0)=[@window={0x3, 0x5, 0x1ff}, @mss={0x2, 0x7f}], 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
sched_setaffinity(0x0, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, 0x0, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2, 0x9}}, 0x2e)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)

1m2.344582096s ago: executing program 33 (id=259):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
writev(r0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000740)}, {&(0x7f0000000880)="6ab8a6811bd96ba127249f534de341bde83bd857f845", 0x16}, {&(0x7f0000000280)}], 0x5)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x21af6000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000009c0)=[@window={0x3, 0x5, 0x1ff}, @mss={0x2, 0x7f}], 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
sched_setaffinity(0x0, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, 0x0, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2, 0x9}}, 0x2e)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)

10.411781354s ago: executing program 2 (id=396):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x2, 0x1)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c80), 0x7f9300, 0x0)
renameat2(r1, &(0x7f0000000c40)='./file0\x00', r2, &(0x7f0000000cc0)='./file0\x00', 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000200600010011"], 0x1c}}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc37}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7c}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x24004844)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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")
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x111}, 0x1008)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
writev(r6, &(0x7f0000001a40)=[{&(0x7f0000000080)="dfd2d837a8f524ee7b8e2a0f4c537c5d67060bcb6647b66d049eeb3fd679cad8cb49cb484de25cbbfbb68a4e71c8f5e9c1", 0x31}, {&(0x7f0000000740)="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", 0x102}, {&(0x7f0000000100)="fb4ce835c4", 0x5}, {&(0x7f0000000240)="81dbd8b9e984f257ebb468f1bd35d8fe5d05b31b149bcd74", 0x18}, {&(0x7f0000000a40)="2d7c05b661ed61dbb0ff95a0f7db1d70a1e8cbe5d67df0ffe7d7234e5c2579ff67a6588289a685d19db6d2e3b65b96e2bf4119a62a932b6770b873c79f6a9117acd583f0365093cd871d5c369eaff34d0513b222e38fcdce7b1f2b0d86e04b3eaea9966d878e96502cc03f40ae98e68f030c88e146e7747eeba91c67349f0dcbf6fd725760b2ec1a7b4c9fcbcea37f6c34a94105e43dac4871cde933f9fad5c9410ca97fe8726ed54b6ab6d913", 0xad}], 0x5)

9.562934849s ago: executing program 6 (id=397):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)

8.914753293s ago: executing program 2 (id=398):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096})
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

8.107799219s ago: executing program 6 (id=399):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
setsockopt$packet_int(r6, 0x107, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)

7.84801408s ago: executing program 2 (id=401):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20)

7.738737271s ago: executing program 4 (id=402):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)})
epoll_pwait2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a80)=ANY=[], &(0x7f00000001c0)=""/2, 0x68, 0x2, 0x1, 0x2}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(0x0, 0x800)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0xf0b, 0xf0bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xac}}, 0x0)

7.444760453s ago: executing program 4 (id=403):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket(0x1e, 0x4, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(r7, 0x0, 0x0)
getpriority(0x2, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x12}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
ppoll(&(0x7f00000005c0)=[{r2, 0x3245}, {r4, 0x2140}], 0x2, &(0x7f0000000600)={0x0, 0x3938700}, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)

6.656057148s ago: executing program 2 (id=406):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x0, 0x0)

6.043031002s ago: executing program 6 (id=407):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
unshare(0x24020400)

5.434213475s ago: executing program 4 (id=408):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x2, 0x1)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c80), 0x7f9300, 0x0)
renameat2(r1, &(0x7f0000000c40)='./file0\x00', r2, &(0x7f0000000cc0)='./file0\x00', 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000200600010011"], 0x1c}}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc37}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7c}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x24004844)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c002e39a45aa9edcfe08671a816cb673d99851079b41e699eacf742"], 0x1, 0x373, &(0x7f00000006c0)="$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")
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x111}, 0x1008)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
writev(r6, &(0x7f0000001a40)=[{&(0x7f0000000080)="dfd2d837a8f524ee7b8e2a0f4c537c5d67060bcb6647b66d049eeb3fd679cad8cb49cb484de25cbbfbb68a4e71c8f5e9c1", 0x31}, {&(0x7f0000000740)="76b0d8e7b4fbe83b9a3a82e0bbf91c1680d1f0b00633f12efc58b563dbdcfe39385fa5f25b4f44f77855053cd2c70c4b2f93a03ac5065ae95772c490638e6f2609cd625dcb26a8342315a054d59e843d7acd6cf3c414d1cee5b36208364ca1fd503e7f9f9e7c8b9ab7985616d5283e56db010e1021e45a2452e8ddd7966b3c4232e6015e47ed174b11e6c81d085fc43b5c85fb84ae756ad048a44c6c84414d1e045a67447a237ff927f9ef158987745861cf8b330f7c234aff1499be56651be1c7a1221477ae394445e5014caad4442312bca4e1a985351d4d02c64c53f617a08a415575046ffd74bf9f6af6653a442b4728c46a084d2e7cb4395afe46c77ed4ec74", 0x102}, {&(0x7f0000000100)="fb4ce835c4", 0x5}, {&(0x7f0000000240)="81dbd8b9e984f257ebb468f1bd35d8fe5d05b31b149bcd74", 0x18}, {&(0x7f0000000a40)="2d7c05b661ed61dbb0ff95a0f7db1d70a1e8cbe5d67df0ffe7d7234e5c2579ff67a6588289a685d19db6d2e3b65b96e2bf4119a62a932b6770b873c79f6a9117acd583f0365093cd871d5c369eaff34d0513b222e38fcdce7b1f2b0d86e04b3eaea9966d878e96502cc03f40ae98e68f030c88e146e7747eeba91c67349f0dcbf6fd725760b2ec1a7b4c9fcbcea37f6c34a94105e43dac4871cde933f9fad5c9410ca97fe8726ed54b6ab6d913", 0xad}], 0x5)

5.361396386s ago: executing program 5 (id=409):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)

5.180065017s ago: executing program 2 (id=410):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0)
fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1})

4.432489592s ago: executing program 4 (id=411):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000008c0)='sys_enter\x00', r0}, 0x10)
pipe2$9p(&(0x7f0000000240), 0x0)
unshare(0x20000400)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
ppoll(&(0x7f00000001c0)=[{r1, 0xc200}], 0x1, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x1a, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r6, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9f03}]}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0xd, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001040)=[0xffffffffffffffff], &(0x7f0000001080)=[{0x1, 0x5, 0xb, 0x3}, {0x1, 0x3, 0x8, 0x1}, {0x2, 0x4, 0x8, 0x9}, {0x0, 0x3, 0x3, 0x9}, {0x1, 0x4, 0x2, 0x4}, {0x2, 0x4, 0x9, 0x8}, {0x2, 0x4, 0xe, 0x6}, {0x1, 0x4, 0x10, 0x7}, {0x1, 0x5, 0x8, 0x9}], 0x10, 0xa4}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a001e00014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)

4.251291953s ago: executing program 5 (id=412):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c40002"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012ef", 0x58}, {&(0x7f0000000900)}, {0x0}], 0x3}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fallocate(0xffffffffffffffff, 0x1, 0x2, 0x7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pipe2(&(0x7f00000006c0)={<r4=>0xffffffffffffffff}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
close_range(r4, 0xffffffffffffffff, 0x0)

3.325527829s ago: executing program 3 (id=413):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)})
epoll_pwait2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a80)=ANY=[], &(0x7f00000001c0)=""/2, 0x68, 0x2, 0x1, 0x2}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(0x0, 0x800)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0xf0b, 0xf0bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xac}}, 0x0)

3.324505119s ago: executing program 5 (id=414):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)

3.324287029s ago: executing program 5 (id=415):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27a99fdd470f5961}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)

3.324049089s ago: executing program 6 (id=416):
quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
close(0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5b, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300))
utime(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x2, 0x2})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)

2.368600845s ago: executing program 5 (id=417):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
splice(r1, 0x0, r1, 0x0, 0x800008ec0, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
readahead(r1, 0xe, 0x8000000000008)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xdd, 0xa}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

2.307992675s ago: executing program 3 (id=418):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = timerfd_create(0x0, 0x0)
timerfd_settime(r2, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)

1.991300647s ago: executing program 3 (id=419):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
unshare(0xa000200)
unshare(0x20060400)
r5 = socket$inet(0x2, 0x3, 0xd)
getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)

1.63605406s ago: executing program 4 (id=420):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0)

1.255861992s ago: executing program 6 (id=421):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x2, 0x1)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c80), 0x7f9300, 0x0)
renameat2(r1, &(0x7f0000000c40)='./file0\x00', r2, &(0x7f0000000cc0)='./file0\x00', 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000200600010011"], 0x1c}}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc37}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7c}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x24004844)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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")
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x111}, 0x1008)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
writev(r6, &(0x7f0000001a40)=[{&(0x7f0000000080)="dfd2d837a8f524ee7b8e2a0f4c537c5d67060bcb6647b66d049eeb3fd679cad8cb49cb484de25cbbfbb68a4e71c8f5e9c1", 0x31}, {&(0x7f0000000740)="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", 0x102}, {&(0x7f0000000100)="fb4ce835c4", 0x5}, {&(0x7f0000000240)="81dbd8b9e984f257ebb468f1bd35d8fe5d05b31b149bcd74", 0x18}, {&(0x7f0000000a40)="2d7c05b661ed61dbb0ff95a0f7db1d70a1e8cbe5d67df0ffe7d7234e5c2579ff67a6588289a685d19db6d2e3b65b96e2bf4119a62a932b6770b873c79f6a9117acd583f0365093cd871d5c369eaff34d0513b222e38fcdce7b1f2b0d86e04b3eaea9966d878e96502cc03f40ae98e68f030c88e146e7747eeba91c67349f0dcbf6fd725760b2ec1a7b4c9fcbcea37f6c34a94105e43dac4871cde933f9fad5c9410ca97fe8726ed54b6ab6d913", 0xad}], 0x5)

976.412834ms ago: executing program 2 (id=422):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)

900.950364ms ago: executing program 3 (id=423):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r1}, 0x18)
sigaltstack(0x0, 0x0)

392.103508ms ago: executing program 4 (id=424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
statx(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x1000, 0x2, 0x0)

109.077769ms ago: executing program 3 (id=425):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = timerfd_create(0x0, 0x0)
timerfd_settime(r2, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)

90.787649ms ago: executing program 5 (id=426):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)

77.935429ms ago: executing program 6 (id=427):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r4 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0xa, &(0x7f0000000000)=[{0x0, 0x3, 0x0, 0xfffffb51}, {0x3, 0x1, 0x3, 0x9}, {0x0, 0x3, 0x3, 0x100}, {0x0, 0x7, 0xf, 0x7}, {0x5f9, 0x2, 0x4, 0x100}, {0x7fff, 0x91, 0xcd, 0x4}, {0xf, 0x2, 0x59, 0x2}, {0x5, 0xf, 0x3, 0x7}, {0x0, 0x9, 0xc, 0xfffffff8}, {0x401, 0x6, 0x3, 0x8}]})
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x26c40, 0x12)
write$binfmt_register(r4, &(0x7f0000000740)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a\xdd\x05\xdc\xb8\xc7\xb4v\x1f\xe3\xb6)\x1dM\x1e\xf9\x97\xffLW\x82\t\xf7\xb4\xe2fP\b\n\xdd\x03\x9d&\xd2\xce<f\xfb\xed\xdaP\xf0e\xb6\f\x9a\xa7\xe7c\xf3C\x9br\xf0L\xe5\xb3\xfbD\x1b\x88\xb7\b\x1b\xba}\xc9\va_\x9dYC\xffQ\x84 %(;\xac\x95\x90_\xe9\"\"\xf3\xe3#N\x0f\xdf\x7f\x90\x0f\x90S\x8cF\xff\xdb\x80\x9d\xf8A\xa9\x8f7F\x03\xc3T\xd8\xa4\xb9@\xa8\xa7\x94\xd0\x89)C\xfb\x1eV9\xceE', 0x3a, '', 0x3a, './file0'}, 0x1b0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

0s ago: executing program 3 (id=428):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)})
epoll_pwait2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a80)=ANY=[], &(0x7f00000001c0)=""/2, 0x68, 0x2, 0x1, 0x2}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(0x0, 0x800)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0xf0b, 0xf0bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xac}}, 0x0)

kernel console output (not intermixed with test programs):

TDEV_CHANGE): hsr0: link becomes ready
[   77.366827][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.377845][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   77.389011][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.404745][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   77.416432][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   77.429207][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   77.457245][ T4267] 8021q: adding VLAN 0 to HW filter on device team0
[   77.471233][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   77.485812][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   77.497580][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   77.510069][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   77.518857][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   77.528298][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.539630][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   77.595522][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   77.611560][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.626123][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.633339][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.647773][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.657751][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.672995][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.680211][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.694375][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.704674][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.715333][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   77.725804][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.738197][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.778699][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   77.787569][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.798425][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.812923][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.821958][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   77.831954][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   77.844765][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   77.854229][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   77.864202][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   77.874777][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   77.888614][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.898661][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   77.921669][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.949032][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.973042][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.995930][ T4277] device veth0_vlan entered promiscuous mode
[   78.016208][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.028568][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.053763][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   78.081291][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   78.106733][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   78.126431][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   78.151658][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   78.169139][ T4277] device veth1_vlan entered promiscuous mode
[   78.202348][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.284763][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   78.306551][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   78.326620][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.350964][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.371647][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   78.400803][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.423476][ T4277] device veth0_macvtap entered promiscuous mode
[   78.455043][ T4277] device veth1_macvtap entered promiscuous mode
[   78.513343][ T4266] device veth0_vlan entered promiscuous mode
[   78.538150][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.549990][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.558188][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.568797][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   78.579632][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.589152][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.598254][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.607521][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.616739][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.634073][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.659283][ T4266] device veth1_vlan entered promiscuous mode
[   78.681633][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.691595][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.748192][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.757937][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.794031][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.821043][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.836831][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   78.846851][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   78.886089][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.931583][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   78.941609][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.968342][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.997682][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   79.005964][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   79.015173][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   79.024912][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   79.068015][ T4266] device veth0_macvtap entered promiscuous mode
[   79.086118][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.097126][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.106274][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   79.110380][ T4281] Bluetooth: hci0: command 0x040f tx timeout
[   79.116136][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   79.129613][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   79.139469][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.155348][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   79.164391][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.173398][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.180885][   T48] Bluetooth: hci4: command 0x040f tx timeout
[   79.180924][   T48] Bluetooth: hci3: command 0x040f tx timeout
[   79.180953][   T48] Bluetooth: hci2: command 0x040f tx timeout
[   79.206015][ T4265] device veth0_vlan entered promiscuous mode
[   79.218679][ T4266] device veth1_macvtap entered promiscuous mode
[   79.237590][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   79.247009][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   79.256153][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.265504][ T4281] Bluetooth: hci1: command 0x040f tx timeout
[   79.272900][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.280935][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.290386][ T4276] device veth0_vlan entered promiscuous mode
[   79.320858][ T4265] device veth1_vlan entered promiscuous mode
[   79.328883][ T4267] device veth0_vlan entered promiscuous mode
[   79.336002][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   79.345087][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   79.355711][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.364589][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.373846][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.384387][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.395891][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.408715][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.412668][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.420505][ T4276] device veth1_vlan entered promiscuous mode
[   79.442924][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.451758][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   79.466697][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   79.474963][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   79.484157][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.492547][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   79.502790][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   79.514781][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.527287][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.538868][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.556460][ T4267] device veth1_vlan entered promiscuous mode
[   79.583451][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   79.591834][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.602731][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.615662][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.624891][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.633795][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.642759][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.676730][ T4276] device veth0_macvtap entered promiscuous mode
[   79.695001][ T4276] device veth1_macvtap entered promiscuous mode
[   79.707884][ T4265] device veth0_macvtap entered promiscuous mode
[   79.719006][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.719869][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.735053][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.744534][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.754612][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.763780][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.772629][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   79.781320][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.789281][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   79.798763][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   79.821801][ T4265] device veth1_macvtap entered promiscuous mode
[   79.876804][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.892993][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.904877][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.915668][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.929235][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.947947][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   79.964637][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.973853][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.984245][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   79.994314][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.012661][ T4267] device veth0_macvtap entered promiscuous mode
[   80.021557][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.033998][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.044222][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.054976][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.066347][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.077053][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.088858][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.111479][ T4267] device veth1_macvtap entered promiscuous mode
[   80.121916][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.137310][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.156239][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.169531][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.181623][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.189073][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   80.198935][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   80.207794][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.219091][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.234907][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   80.249124][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.274752][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.286932][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.298744][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.311342][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.321373][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.332193][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.343731][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.355529][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   80.364717][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.381602][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.390936][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.399907][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.408669][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.435643][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.445190][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.454985][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.465680][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.493153][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.506745][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.514802][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.528163][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.538270][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.551161][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.561411][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.572157][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.583655][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.594207][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.612187][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.640217][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.648694][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.658367][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.675115][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.686211][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.696375][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.707337][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.718514][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.729294][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.739235][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.750162][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.761684][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.787490][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   80.797641][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.812249][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.823132][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.832080][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.840863][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.884189][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.902870][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.924811][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.008271][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.036364][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.073988][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   81.106836][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.122268][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.130555][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.138632][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.154859][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   81.174854][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   81.175456][ T4381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   81.192825][ T4281] Bluetooth: hci0: command 0x0419 tx timeout
[   81.235876][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.260498][ T4281] Bluetooth: hci2: command 0x0419 tx timeout
[   81.266604][ T4281] Bluetooth: hci3: command 0x0419 tx timeout
[   81.274871][   T48] Bluetooth: hci4: command 0x0419 tx timeout
[   81.299769][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.322765][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.335898][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.344344][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.344428][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.361838][ T4281] Bluetooth: hci1: command 0x0419 tx timeout
[   81.410502][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.453538][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.506202][ T4385] loop2: detected capacity change from 0 to 1024
[   81.526888][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.537679][ T4385] =======================================================
[   81.537679][ T4385] WARNING: The mand mount option has been deprecated and
[   81.537679][ T4385]          and is ignored by this kernel. Remove the mand
[   81.537679][ T4385]          option from the mount to silence this warning.
[   81.537679][ T4385] =======================================================
[   81.690092][ T4385] EXT4-fs: Ignoring removed nobh option
[   81.725517][ T4385] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   81.753983][ T4392] loop3: detected capacity change from 0 to 2048
[   81.844416][ T4392] GPT:first_usable_lbas don't match.
[   81.845311][ T4385] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   81.850359][ T4392] GPT:34 != 290
[   81.876466][ T4392] GPT: Use GNU Parted to correct GPT errors.
[   81.891309][ T4392]  loop3: p1 p2 p3
[   83.330689][ T4403] loop4: detected capacity change from 0 to 764
[   83.443738][ T4404] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.6: Allocating blocks 497-513 which overlap fs metadata
[   83.465635][ T4257] udevd[4257]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   83.498857][ T4259] udevd[4259]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   83.524249][ T4411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'.
[   83.529495][ T4405] udevd[4405]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   83.545653][ T4411] device bridge_slave_1 left promiscuous mode
[   83.579376][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.604933][ T4404] EXT4-fs (loop2): pa ffff888074707b60: logic 256, phys. 385, len 8
[   83.614577][ T4404] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1
[   83.681772][ T4411] device bridge_slave_0 left promiscuous mode
[   83.716838][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.698282][ T4427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'.
[   84.757709][ T4427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'.
[   84.823186][ T4277] EXT4-fs (loop2): unmounting filesystem.
[   84.879990][ T4426] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.994160][ T4429] device bond1 entered promiscuous mode
[   85.004134][ T4429] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.213147][ T4429] bond1 (unregistering): Released all slaves
[   85.269884][ T4436] device wireguard0 entered promiscuous mode
[   85.398824][ T4426] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.553812][   T26] audit: type=1326 audit(1761881198.992:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4441 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[   85.595614][ T4426] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.596057][ T4442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
[   85.615150][   T26] audit: type=1326 audit(1761881198.992:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4441 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[   85.615197][   T26] audit: type=1326 audit(1761881198.992:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4441 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[   85.615234][   T26] audit: type=1326 audit(1761881199.002:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4441 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[   85.615269][   T26] audit: type=1326 audit(1761881199.002:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4441 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[   85.615305][   T26] audit: type=1326 audit(1761881199.002:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4441 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[   85.735911][ T4443] loop0: detected capacity change from 0 to 128
[   85.900887][ T4426] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.942600][   T26] audit: type=1326 audit(1761881199.002:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4441 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[   85.965086][   T26] audit: type=1326 audit(1761881199.002:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4441 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[   86.027933][ T4442] syz.0.18: attempt to access beyond end of device
[   86.027933][ T4442] loop0: rw=2049, sector=145, nr_sectors = 384 limit=128
[   86.066402][   T26] audit: type=1326 audit(1761881199.002:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4441 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[   86.066445][   T26] audit: type=1326 audit(1761881199.002:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4441 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[   86.097093][ T4442] syz.0.18: attempt to access beyond end of device
[   86.097093][ T4442] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128
[   86.109007][ T4426] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.151327][ T4442] syz.0.18: attempt to access beyond end of device
[   86.151327][ T4442] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[   86.191780][ T4426] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.229351][ T4442] syz.0.18: attempt to access beyond end of device
[   86.229351][ T4442] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[   86.229446][ T4442] syz.0.18: attempt to access beyond end of device
[   86.229446][ T4442] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[   86.229534][ T4442] syz.0.18: attempt to access beyond end of device
[   86.229534][ T4442] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[   86.229636][ T4442] syz.0.18: attempt to access beyond end of device
[   86.229636][ T4442] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[   86.239395][ T4442] syz.0.18: attempt to access beyond end of device
[   86.239395][ T4442] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[   86.239533][ T4442] syz.0.18: attempt to access beyond end of device
[   86.239533][ T4442] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[   86.239621][ T4442] syz.0.18: attempt to access beyond end of device
[   86.239621][ T4442] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[   86.261955][ T4426] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.355869][ T4426] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.029442][  T127] cfg80211: failed to load regulatory.db
[   88.253030][ T4483] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   88.253030][ T4483]    program syz.4.29 not setting count and/or reply_len properly
[   89.457006][ T4510] loop3: detected capacity change from 0 to 512
[   90.597321][ T4510] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   90.809705][    C0] sched: RT throttling activated
[   91.027777][ T4510] EXT4-fs (loop3): 1 orphan inode deleted
[   91.033786][ T4510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   91.064716][ T4510] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.144371][ T4510] syz.3.38 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   91.812398][ T4359] __quota_error: 38 callbacks suppressed
[   91.812415][ T4359] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   92.103278][ T4359] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:6: Failed to release dquot type 1
[   92.359920][ T4265] EXT4-fs (loop3): unmounting filesystem.
[   94.270871][ T4551] tipc: Started in network mode
[   94.275985][ T4551] tipc: Node identity f6b41c1faa92, cluster identity 4711
[   94.361762][ T4551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.382894][ T4552] device syzkaller0 entered promiscuous mode
[   94.484841][ T4556] loop4: detected capacity change from 0 to 16
[   94.533273][ T4556] erofs: (device loop4): mounted with root inode @ nid 36.
[   96.276207][ T4379] tipc: Node number set to 1546001439
[   96.279147][ T4549] tipc: Resetting bearer <eth:syzkaller0>
[   96.999933][ T4564] bio_check_eod: 534 callbacks suppressed
[   96.999971][ T4564] syz.4.53: attempt to access beyond end of device
[   96.999971][ T4564] loop4: rw=524288, sector=34359738360, nr_sectors = 32 limit=16
[   97.021878][ T4564] syz.4.53: attempt to access beyond end of device
[   97.021878][ T4564] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[   97.062616][ T4564] syz.4.53: attempt to access beyond end of device
[   97.062616][ T4564] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[   97.107032][   T26] audit: type=1800 audit(1761881210.472:50): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.53" name="file1" dev="loop4" ino=86 res=0 errno=0
[   98.574775][ T4549] tipc: Disabling bearer <eth:syzkaller0>
[   99.008300][ T4579] loop3: detected capacity change from 0 to 128
[   99.118884][ T4579] FAT-fs (loop3): Directory bread(block 32) failed
[   99.140482][ T4579] FAT-fs (loop3): Directory bread(block 33) failed
[   99.156907][ T4579] FAT-fs (loop3): Directory bread(block 34) failed
[   99.163980][ T4579] FAT-fs (loop3): Directory bread(block 35) failed
[   99.185434][ T4579] FAT-fs (loop3): Directory bread(block 36) failed
[   99.208763][ T4579] FAT-fs (loop3): Directory bread(block 37) failed
[   99.225850][ T4579] FAT-fs (loop3): Directory bread(block 38) failed
[   99.245013][ T4579] FAT-fs (loop3): Directory bread(block 39) failed
[   99.252302][ T4579] FAT-fs (loop3): Directory bread(block 40) failed
[   99.256195][ T4585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'.
[   99.259265][ T4579] FAT-fs (loop3): Directory bread(block 41) failed
[   99.532656][ T4579] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   99.609867][ T4579] FAT-fs (loop3): Filesystem has been set read-only
[   99.933562][ T4593] loop0: detected capacity change from 0 to 128
[  100.018442][   T26] audit: type=1800 audit(1761881213.452:51): pid=4593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.63" name="file2" dev="loop0" ino=1048597 res=0 errno=0
[  100.052326][ T4593] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  100.085519][ T4593] FAT-fs (loop0): Filesystem has been set read-only
[  100.338825][ T4593] syz.0.63: attempt to access beyond end of device
[  100.338825][ T4593] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  100.789855][ T4590] syz.0.63: attempt to access beyond end of device
[  100.789855][ T4590] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  100.817630][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'.
[  100.859388][ T4593] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  100.907403][ T4590] syz.0.63: attempt to access beyond end of device
[  100.907403][ T4590] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  100.934254][ T4602] loop2: detected capacity change from 0 to 128
[  100.983924][ T4593] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  101.030835][ T4590] syz.0.63: attempt to access beyond end of device
[  101.030835][ T4590] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  101.096254][   T26] audit: type=1800 audit(1761881214.532:52): pid=4602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.66" name="file2" dev="loop2" ino=1048598 res=0 errno=0
[  101.131593][ T4602] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  101.155119][ T4590] syz.0.63: attempt to access beyond end of device
[  101.155119][ T4590] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  101.188096][ T4602] FAT-fs (loop2): Filesystem has been set read-only
[  101.214180][ T4602] syz.2.66: attempt to access beyond end of device
[  101.214180][ T4602] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  101.247434][ T4593] syz.0.63: attempt to access beyond end of device
[  101.247434][ T4593] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  101.291321][ T4602] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  101.367544][ T4602] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  102.069482][ T4617] loop0: detected capacity change from 0 to 1024
[  102.102606][ T4598] syz.2.66 (4598) used greatest stack depth: 18176 bytes left
[  102.151050][ T4617] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  102.261873][ T4624] loop4: detected capacity change from 0 to 4096
[  102.326460][ T4624] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  102.344262][ T4624] EXT4-fs (loop4): unmounting filesystem.
[  102.367789][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  102.921252][ T4643] loop2: detected capacity change from 0 to 128
[  103.586047][   T26] audit: type=1800 audit(1761881217.022:53): pid=4643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.81" name="file2" dev="loop2" ino=1048599 res=0 errno=0
[  103.602057][ T4643] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  103.654907][ T4643] FAT-fs (loop2): Filesystem has been set read-only
[  103.666274][ T4643] bio_check_eod: 1250 callbacks suppressed
[  103.666290][ T4643] syz.2.81: attempt to access beyond end of device
[  103.666290][ T4643] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  103.808878][ T4643] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  103.846162][ T4642] syz.2.81: attempt to access beyond end of device
[  103.846162][ T4642] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  103.914738][ T4643] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  103.928638][   T26] audit: type=1326 audit(1761881217.362:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[  104.054005][   T26] audit: type=1326 audit(1761881217.392:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[  104.107947][ T4643] syz.2.81: attempt to access beyond end of device
[  104.107947][ T4643] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  104.131770][   T26] audit: type=1326 audit(1761881217.392:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[  104.157981][   T26] audit: type=1326 audit(1761881217.392:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[  104.195951][   T26] audit: type=1326 audit(1761881217.392:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[  104.215907][ T4649] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  104.226542][ T4649] syz.2.81: attempt to access beyond end of device
[  104.226542][ T4649] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  104.325827][ T4659] loop3: detected capacity change from 0 to 256
[  104.345799][ T4659] FAT-fs (loop3): Unrecognized mount option "check=relaxdd" or missing value
[  104.420173][ T4649] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  105.820743][ T4642] syz.2.81: attempt to access beyond end of device
[  105.820743][ T4642] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  105.836155][ T4643] syz.2.81: attempt to access beyond end of device
[  105.836155][ T4643] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  105.859846][ T4649] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  105.924660][   T26] audit: type=1326 audit(1761881217.392:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[  106.814727][   T26] audit: type=1326 audit(1761881217.392:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[  107.048296][   T26] audit: type=1326 audit(1761881217.392:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[  107.138116][   T26] audit: type=1326 audit(1761881217.392:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f4bb558efc9 code=0x7ffc0000
[  107.440583][ T4668] loop2: detected capacity change from 0 to 512
[  107.478314][ T4672] loop4: detected capacity change from 0 to 4096
[  107.489207][ T4668] EXT4-fs (loop2): orphan cleanup on readonly fs
[  107.616334][ T4672] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  107.627199][ T4672] EXT4-fs (loop4): unmounting filesystem.
[  107.686956][ T4668] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.88: corrupted inode contents
[  107.801131][ T4668] EXT4-fs error (device loop2): ext4_dirty_inode:6133: inode #16: comm syz.2.88: mark_inode_dirty error
[  107.934819][ T4668] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.88: corrupted inode contents
[  107.998872][ T4668] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.88: mark_inode_dirty error
[  108.041740][ T4668] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.88: corrupted inode contents
[  108.070099][ T4668] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[  108.326061][ T4668] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.88: corrupted inode contents
[  108.479426][ T4668] EXT4-fs error (device loop2): ext4_truncate:4318: inode #16: comm syz.2.88: mark_inode_dirty error
[  108.721811][ T4668] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[  108.733892][ T4668] EXT4-fs (loop2): 1 truncate cleaned up
[  108.768147][ T4519] __quota_error: 1 callbacks suppressed
[  108.768163][ T4519] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  108.814930][ T4519] EXT4-fs error (device loop2): ext4_release_dquot:6845: comm kworker/u4:14: Failed to release dquot type 1
[  108.894029][ T4696] loop4: detected capacity change from 0 to 128
[  108.901570][ T4668] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  108.969175][ T4696] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  108.977493][   T26] audit: type=1800 audit(1761881222.402:64): pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.98" name="file2" dev="loop4" ino=1048600 res=0 errno=0
[  109.043956][ T4696] FAT-fs (loop4): Filesystem has been set read-only
[  109.051138][ T4668] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.88: iget: bad i_size value: 1407374883557376
[  109.071178][ T4698] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.079716][ T4698] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.091449][ T4696] syz.4.98: attempt to access beyond end of device
[  109.091449][ T4696] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  109.129136][ T4698] device bridge_slave_1 left promiscuous mode
[  109.147319][ T4695] syz.4.98: attempt to access beyond end of device
[  109.147319][ T4695] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  109.162309][ T4698] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.204568][ T4696] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  109.221480][ T4698] device bridge_slave_0 left promiscuous mode
[  109.238612][ T4695] syz.4.98: attempt to access beyond end of device
[  109.238612][ T4695] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  109.274079][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  109.275319][ T4698] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.294252][ T4696] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  109.307062][ T4704] loop1: detected capacity change from 0 to 512
[  109.319217][ T4695] syz.4.98: attempt to access beyond end of device
[  109.319217][ T4695] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  109.370459][ T4695] syz.4.98: attempt to access beyond end of device
[  109.370459][ T4695] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  109.469531][ T4710] loop3: detected capacity change from 0 to 256
[  109.598543][ T4696] syz.4.98: attempt to access beyond end of device
[  109.598543][ T4696] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  110.805253][ T4710] FAT-fs (loop3): Directory bread(block 64) failed
[  110.807151][ T4700] syz.4.98: attempt to access beyond end of device
[  110.807151][ T4700] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  110.831442][ T4710] FAT-fs (loop3): Directory bread(block 65) failed
[  110.859088][ T4710] FAT-fs (loop3): Directory bread(block 66) failed
[  110.870069][ T4710] FAT-fs (loop3): Directory bread(block 67) failed
[  110.876799][ T4710] FAT-fs (loop3): Directory bread(block 68) failed
[  110.880795][ T4696] syz.4.98: attempt to access beyond end of device
[  110.880795][ T4696] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  110.898571][ T4700] syz.4.98: attempt to access beyond end of device
[  110.898571][ T4700] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  110.914366][ T4696] syz.4.98: attempt to access beyond end of device
[  110.914366][ T4696] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  110.935935][ T4704] EXT4-fs (loop1): too many log groups per flexible block group
[  110.938142][ T4710] FAT-fs (loop3): Directory bread(block 69) failed
[  110.944056][ T4704] EXT4-fs (loop1): failed to initialize mballoc (-12)
[  110.957833][ T4704] EXT4-fs (loop1): mount failed
[  111.001391][ T4710] FAT-fs (loop3): Directory bread(block 70) failed
[  111.040956][ T4710] FAT-fs (loop3): Directory bread(block 71) failed
[  111.053627][ T4710] FAT-fs (loop3): Directory bread(block 72) failed
[  111.081158][ T4710] FAT-fs (loop3): Directory bread(block 73) failed
[  111.166518][ T4704] process 'syz.1.100' launched './file0' with NULL argv: empty string added
[  112.317343][ T4732] loop4: detected capacity change from 0 to 4096
[  112.819476][ T4732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  113.231044][ T4732] EXT4-fs (loop4): unmounting filesystem.
[  114.327136][ T4761] loop3: detected capacity change from 0 to 256
[  114.506406][ T4761] FAT-fs (loop3): Directory bread(block 64) failed
[  114.576568][ T4761] FAT-fs (loop3): Directory bread(block 65) failed
[  114.604727][ T4768] loop1: detected capacity change from 0 to 128
[  114.625543][ T4761] FAT-fs (loop3): Directory bread(block 66) failed
[  114.646269][ T4761] FAT-fs (loop3): Directory bread(block 67) failed
[  114.688235][ T4761] FAT-fs (loop3): Directory bread(block 68) failed
[  114.698877][   T26] audit: type=1800 audit(1761881228.132:65): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.117" name="file2" dev="loop1" ino=1048601 res=0 errno=0
[  114.705284][ T4761] FAT-fs (loop3): Directory bread(block 69) failed
[  114.738286][ T4768] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  114.742674][ T4771] loop2: detected capacity change from 0 to 128
[  114.780240][ T4761] FAT-fs (loop3): Directory bread(block 70) failed
[  114.791241][ T4761] FAT-fs (loop3): Directory bread(block 71) failed
[  114.798012][ T4761] FAT-fs (loop3): Directory bread(block 72) failed
[  114.807397][ T4768] FAT-fs (loop1): Filesystem has been set read-only
[  114.837218][ T4768] bio_check_eod: 389 callbacks suppressed
[  114.837234][ T4768] syz.1.117: attempt to access beyond end of device
[  114.837234][ T4768] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  114.869242][ T4761] FAT-fs (loop3): Directory bread(block 73) failed
[  114.880976][ T4771] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  114.900023][ T4768] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  114.908121][ T4765] syz.1.117: attempt to access beyond end of device
[  114.908121][ T4765] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  114.922536][ T4768] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  114.930943][ T4765] syz.1.117: attempt to access beyond end of device
[  114.930943][ T4765] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  114.944771][ T4765] syz.1.117: attempt to access beyond end of device
[  114.944771][ T4765] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  114.958787][ T4765] syz.1.117: attempt to access beyond end of device
[  114.958787][ T4765] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  114.972532][ T4765] syz.1.117: attempt to access beyond end of device
[  114.972532][ T4765] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  114.992432][ T4771] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  114.996345][ T4765] syz.1.117: attempt to access beyond end of device
[  114.996345][ T4765] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  115.016351][ T4765] syz.1.117: attempt to access beyond end of device
[  115.016351][ T4765] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  115.030002][ T4765] syz.1.117: attempt to access beyond end of device
[  115.030002][ T4765] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  115.043582][ T4768] syz.1.117: attempt to access beyond end of device
[  115.043582][ T4768] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  115.866465][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  115.992952][ T4790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'.
[  116.123253][ T4793] loop4: detected capacity change from 0 to 128
[  116.129317][ T4796] loop3: detected capacity change from 0 to 512
[  116.145788][ T4796] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  116.816751][   T26] audit: type=1800 audit(1761881230.252:66): pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.125" name="file2" dev="loop4" ino=1048602 res=0 errno=0
[  116.895855][ T4790] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  116.958454][ T4790] FAT-fs (loop4): Filesystem has been set read-only
[  116.966154][ T4790] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  116.974619][ T4790] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  116.986093][   T26] audit: type=1800 audit(1761881230.422:67): pid=4796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.128" name="bus" dev="loop3" ino=1048603 res=0 errno=0
[  118.284303][ T4817] loop1: detected capacity change from 0 to 4096
[  118.415183][ T4813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'.
[  118.453216][ T4817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  118.457807][ T4813] device bridge_slave_1 left promiscuous mode
[  118.470754][ T4817] EXT4-fs (loop1): unmounting filesystem.
[  118.530127][ T4813] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.555969][ T4813] device bridge_slave_0 left promiscuous mode
[  118.576008][ T4813] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.833138][ T4834] loop3: detected capacity change from 0 to 128
[  119.897276][ T4834] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  119.942213][ T4834] FAT-fs (loop3): Filesystem has been set read-only
[  119.948900][ T4834] bio_check_eod: 2078 callbacks suppressed
[  119.948914][ T4834] syz.3.138: attempt to access beyond end of device
[  119.948914][ T4834] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  119.972893][   T26] audit: type=1800 audit(1761881233.312:68): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.138" name="file2" dev="loop3" ino=1048604 res=0 errno=0
[  120.085854][ T4834] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  120.094223][ T4834] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  120.116462][ T4833] syz.3.138: attempt to access beyond end of device
[  120.116462][ T4833] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  121.741379][ T4833] syz.3.138: attempt to access beyond end of device
[  121.741379][ T4833] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  121.754873][ T4833] syz.3.138: attempt to access beyond end of device
[  121.754873][ T4833] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  121.776553][ T4833] syz.3.138: attempt to access beyond end of device
[  121.776553][ T4833] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  121.790132][ T4834] syz.3.138: attempt to access beyond end of device
[  121.790132][ T4834] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  121.814974][ T4833] syz.3.138: attempt to access beyond end of device
[  121.814974][ T4833] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  121.828460][ T4834] syz.3.138: attempt to access beyond end of device
[  121.828460][ T4834] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  121.894446][ T4846] loop2: detected capacity change from 0 to 512
[  121.932852][ T4846] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  122.000390][ T4838] syz.3.138: attempt to access beyond end of device
[  122.000390][ T4838] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  122.055366][ T4833] syz.3.138: attempt to access beyond end of device
[  122.055366][ T4833] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  122.082259][   T26] audit: type=1800 audit(1761881235.522:69): pid=4846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.141" name="bus" dev="loop2" ino=1048605 res=0 errno=0
[  123.687800][ T4868] loop3: detected capacity change from 0 to 4096
[  123.818782][ T4868] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  123.877206][ T4868] EXT4-fs (loop3): unmounting filesystem.
[  127.509854][   T26] audit: type=1326 audit(1761881240.942:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  127.627009][   T26] audit: type=1326 audit(1761881240.942:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  127.699912][   T26] audit: type=1326 audit(1761881240.942:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  127.785316][   T26] audit: type=1326 audit(1761881240.942:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  127.869889][   T26] audit: type=1326 audit(1761881240.942:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  127.955709][   T26] audit: type=1326 audit(1761881240.942:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  128.135903][   T26] audit: type=1326 audit(1761881240.942:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  129.103363][   T26] audit: type=1326 audit(1761881240.942:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  129.181707][   T26] audit: type=1326 audit(1761881240.942:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  129.309753][ T4921] loop1: detected capacity change from 0 to 512
[  129.617093][ T4921] EXT4-fs (loop1): 1 orphan inode deleted
[  129.623012][ T4921] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  129.636370][ T4921] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.035834][   T26] audit: type=1326 audit(1761881240.942:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  130.830133][ T4604] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:18: Failed to release dquot type 1
[  131.175251][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  132.954745][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.961203][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  136.133407][ T4966] loop1: detected capacity change from 0 to 16
[  136.286733][ T4968] Zero length message leads to an empty skb
[  137.085319][ T4966] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300)
[  138.610196][ T4257] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  142.313972][ T5010] loop0: detected capacity change from 0 to 1024
[  142.374420][ T5012] loop3: detected capacity change from 0 to 512
[  142.437740][ T5012] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  142.656311][ T5010] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #3: block 1: comm syz.0.189: lblock 1 mapped to illegal pblock 1 (length 1)
[  143.149821][ T5010] __quota_error: 2 callbacks suppressed
[  143.149841][ T5010] Quota error (device loop0): write_blk: dquota write failed
[  143.168314][   T26] audit: type=1800 audit(1761881256.602:81): pid=5012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.190" name="bus" dev="loop3" ino=1048606 res=0 errno=0
[  143.193171][ T5010] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  143.239152][ T5010] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.189: Failed to acquire dquot type 0
[  143.284947][ T5010] EXT4-fs error (device loop0): ext4_free_blocks:6205: comm syz.0.189: Freeing blocks not in datazone - block = 0, count = 4096
[  143.369635][ T5010] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.189: Invalid inode bitmap blk 0 in block_group 0
[  143.395846][ T4422] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  143.460174][ T5010] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem
[  143.480239][ T5010] EXT4-fs (loop0): 1 orphan inode deleted
[  143.486101][ T5010] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  143.551737][ T4422] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  143.566430][ T4422] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:8: Failed to release dquot type 0
[  143.870717][ T5009] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  144.732071][ T5031] netlink: 72 bytes leftover after parsing attributes in process `syz.1.195'.
[  144.742176][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'.
[  145.767508][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  146.009539][ T5046] loop2: detected capacity change from 0 to 512
[  146.037617][ T5046] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  146.124120][   T26] audit: type=1800 audit(1761881259.532:82): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.201" name="bus" dev="loop2" ino=1048607 res=0 errno=0
[  148.735771][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'.
[  148.824452][ T5060] loop2: detected capacity change from 0 to 128
[  148.836650][   T26] audit: type=1326 audit(1761881262.272:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e27f8efc9 code=0x7ffc0000
[  148.906130][ T5060] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  148.940893][ T5060] FAT-fs (loop2): Filesystem has been set read-only
[  148.958324][ T5060] bio_check_eod: 1100 callbacks suppressed
[  148.958344][ T5060] syz.2.203: attempt to access beyond end of device
[  148.958344][ T5060] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  149.047807][   T26] audit: type=1326 audit(1761881262.302:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e27f8efc9 code=0x7ffc0000
[  149.629436][ T5065] loop1: detected capacity change from 0 to 4096
[  149.654382][ T5056] syz.2.203: attempt to access beyond end of device
[  149.654382][ T5056] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  149.783963][ T5065] EXT4-fs (loop1): Test dummy encryption mode enabled
[  149.857727][   T26] audit: type=1326 audit(1761881262.302:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e27f8efc9 code=0x7ffc0000
[  149.889909][ T5060] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  149.897805][ T5060] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  149.921868][   T26] audit: type=1326 audit(1761881262.302:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e27f8efc9 code=0x7ffc0000
[  149.951523][ T5065] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  150.006957][ T5056] syz.2.203: attempt to access beyond end of device
[  150.006957][ T5056] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  150.081914][ T5062] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  150.095585][   T26] audit: type=1326 audit(1761881262.302:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e27f8efc9 code=0x7ffc0000
[  150.209849][ T5062] syz.2.203: attempt to access beyond end of device
[  150.209849][ T5062] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  150.263702][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  150.300392][ T5062] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  150.308318][ T5062] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  150.339926][   T26] audit: type=1326 audit(1761881262.302:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2e27f8efc9 code=0x7ffc0000
[  150.359967][ T5060] syz.2.203: attempt to access beyond end of device
[  150.359967][ T5060] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  150.429430][   T26] audit: type=1326 audit(1761881262.302:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e27f8efc9 code=0x7ffc0000
[  150.565547][ T5056] syz.2.203: attempt to access beyond end of device
[  150.565547][ T5056] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  150.680555][ T5056] syz.2.203: attempt to access beyond end of device
[  150.680555][ T5056] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  150.696197][   T26] audit: type=1326 audit(1761881262.302:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e27f8efc9 code=0x7ffc0000
[  150.725374][ T5056] syz.2.203: attempt to access beyond end of device
[  150.725374][ T5056] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  150.818271][ T5060] syz.2.203: attempt to access beyond end of device
[  150.818271][ T5060] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  150.831976][   T26] audit: type=1326 audit(1761881262.302:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e27f8efc9 code=0x7ffc0000
[  150.918881][   T26] audit: type=1326 audit(1761881262.302:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e27f8efc9 code=0x7ffc0000
[  150.978647][ T5062] syz.2.203: attempt to access beyond end of device
[  150.978647][ T5062] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  154.186790][ T5090] loop2: detected capacity change from 0 to 512
[  154.224458][ T5090] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  154.500025][   T26] kauditd_printk_skb: 33 callbacks suppressed
[  154.500228][   T26] audit: type=1800 audit(1761881267.932:126): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.213" name="bus" dev="loop2" ino=1048609 res=0 errno=0
[  155.408246][ T5104] loop3: detected capacity change from 0 to 512
[  155.500169][ T5104] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  155.591915][ T5102] loop4: detected capacity change from 0 to 40427
[  155.677968][ T5102] F2FS-fs (loop4): Found nat_bits in checkpoint
[  155.742714][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  155.780396][ T5102] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  156.883218][ T5129] loop4: detected capacity change from 0 to 128
[  156.945125][   T26] audit: type=1800 audit(1761881270.382:127): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.220" name="file2" dev="loop4" ino=1048610 res=0 errno=0
[  156.951870][ T5129] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  157.036608][ T5129] FAT-fs (loop4): Filesystem has been set read-only
[  157.079200][ T5129] bio_check_eod: 1331 callbacks suppressed
[  157.079219][ T5129] syz.4.220: attempt to access beyond end of device
[  157.079219][ T5129] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  157.103446][ T5129] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  157.139825][ T5129] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  157.187539][ T5123] syz.4.220: attempt to access beyond end of device
[  157.187539][ T5123] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  157.246205][ T5130] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  157.295558][ T5130] syz.4.220: attempt to access beyond end of device
[  157.295558][ T5130] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  157.355293][ T5129] syz.4.220: attempt to access beyond end of device
[  157.355293][ T5129] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  157.389308][ T5130] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  157.410870][ T5123] syz.4.220: attempt to access beyond end of device
[  157.410870][ T5123] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  157.410896][ T5130] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  157.490688][ T5129] syz.4.220: attempt to access beyond end of device
[  157.490688][ T5129] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  157.569982][ T5123] syz.4.220: attempt to access beyond end of device
[  157.569982][ T5123] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  157.613115][ T5126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.223'.
[  157.614189][ T5129] syz.4.220: attempt to access beyond end of device
[  157.614189][ T5129] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  157.636468][ T5129] syz.4.220: attempt to access beyond end of device
[  157.636468][ T5129] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  157.660141][ T5129] syz.4.220: attempt to access beyond end of device
[  157.660141][ T5129] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  158.608453][ T5137] loop1: detected capacity change from 0 to 512
[  158.665156][ T5137] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  158.710331][ T5137] EXT4-fs (loop1): Test dummy encryption mode enabled
[  158.807955][ T5137] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.225: inode has both inline data and extents flags
[  158.870957][ T5137] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.225: couldn't read orphan inode 15 (err -117)
[  158.950240][ T5137] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  160.791727][ T5137] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  160.880937][ T5145] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  160.962799][ T5152] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  161.042049][ T5163] loop4: detected capacity change from 0 to 512
[  161.108963][ T5163] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  161.364803][   T26] audit: type=1800 audit(1761881274.802:128): pid=5163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.228" name="bus" dev="loop4" ino=1048611 res=0 errno=0
[  161.440051][ T5170] loop3: detected capacity change from 0 to 4096
[  161.567851][ T5170] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  161.652002][ T5170] EXT4-fs (loop3): unmounting filesystem.
[  161.699582][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  161.724289][ T5172] loop2: detected capacity change from 0 to 256
[  161.876580][ T5172] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  168.546792][ T5274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'.
[  168.571433][  T127] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  168.818884][  T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  168.861947][  T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.898242][  T127] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  168.920368][  T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.110771][ T5283] loop1: detected capacity change from 0 to 1024
[  169.121417][ T5283] EXT4-fs: Ignoring removed orlov option
[  169.475609][ T5283] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  169.633293][   T26] audit: type=1800 audit(1761881282.982:129): pid=5283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="file1" dev="loop1" ino=15 res=0 errno=0
[  170.121278][  T127] usb 4-1: config 0 descriptor??
[  170.285845][  T127] usb 4-1: can't set config #0, error -71
[  170.361021][  T127] usb 4-1: USB disconnect, device number 2
[  170.534706][ T5285] loop4: detected capacity change from 0 to 4096
[  170.723998][ T5285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  170.810711][ T5285] EXT4-fs (loop4): unmounting filesystem.
[  171.311973][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  172.879950][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  172.889396][   T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  172.897930][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  172.909097][   T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  172.919842][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  172.927296][   T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  173.570654][ T5304] loop4: detected capacity change from 0 to 1024
[  173.620086][ T5304] EXT4-fs: Ignoring removed nobh option
[  173.686682][ T5304] EXT4-fs: Ignoring removed bh option
[  173.777096][ T5304] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  173.987821][ T5304] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  175.019943][ T4280] Bluetooth: hci5: command 0x0409 tx timeout
[  175.230948][ T5304] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  175.278988][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'.
[  175.282610][ T5304] EXT4-fs (loop4): Remounting filesystem read-only
[  175.294791][ T5304] EXT4-fs error (device loop4): ext4_dirty_inode:6133: inode #15: comm syz.4.249: mark_inode_dirty error
[  175.316828][ T5304] EXT4-fs (loop4): Remounting filesystem read-only
[  175.343483][ T5298] chnl_net:caif_netlink_parms(): no params data found
[  175.802184][ T5304] EXT4-fs error (device loop4): ext4_get_max_inline_size:116: inode #15: comm syz.4.249: can't get inode location 15
[  176.159756][ T5304] EXT4-fs (loop4): Remounting filesystem read-only
[  176.213592][ T4856] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.483608][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  177.430386][ T4280] Bluetooth: hci5: command 0x041b tx timeout
[  178.138150][ T4856] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.286968][ T5360] netlink: 'syz.4.257': attribute type 3 has an invalid length.
[  178.304178][ T5360] netlink: 'syz.4.257': attribute type 3 has an invalid length.
[  179.188464][ T4856] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.445110][ T5298] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.500246][ T5298] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.510119][ T4280] Bluetooth: hci5: command 0x040f tx timeout
[  179.557521][ T5298] device bridge_slave_0 entered promiscuous mode
[  179.668440][ T5298] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.703829][ T5298] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.768412][ T5298] device bridge_slave_1 entered promiscuous mode
[  180.594726][ T4856] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.459208][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'.
[  181.627833][ T4281] Bluetooth: hci5: command 0x0419 tx timeout
[  181.642664][ T5298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.777192][ T5298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.893960][ T5298] team0: Port device team_slave_0 added
[  181.927326][ T5298] team0: Port device team_slave_1 added
[  182.053394][ T5298] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.070912][ T5298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.148597][ T5397] loop4: detected capacity change from 0 to 128
[  182.176359][ T5298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.455105][ T5400] loop3: detected capacity change from 0 to 512
[  182.467884][ T5400] ext3: Unknown parameter 'subj_type'
[  183.397954][ T5397] bio_check_eod: 1074 callbacks suppressed
[  183.397974][ T5397] syz.4.267: attempt to access beyond end of device
[  183.397974][ T5397] loop4: rw=2049, sector=145, nr_sectors = 89 limit=128
[  183.557928][ T5401] syz.4.267: attempt to access beyond end of device
[  183.557928][ T5401] loop4: rw=2049, sector=241, nr_sectors = 1 limit=128
[  183.579177][ T5298] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.606635][ T5298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.740032][ T5298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.926775][ T5230] kworker/u4:24: attempt to access beyond end of device
[  183.926775][ T5230] loop4: rw=1, sector=241, nr_sectors = 1 limit=128
[  184.039970][ T5230] Buffer I/O error on dev loop4, logical block 241, lost async page write
[  184.176596][ T5298] device hsr_slave_0 entered promiscuous mode
[  184.983283][ T5410] xt_socket: unknown flags 0x50
[  186.921561][ T5298] device hsr_slave_1 entered promiscuous mode
[  186.979924][ T5298] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.182957][ T5298] Cannot create hsr debugfs directory
[  189.150305][ T5429] loop4: detected capacity change from 0 to 512
[  189.191606][ T5429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  189.545165][ T5429] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  189.554710][ T5429] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.592033][ T5427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  189.973593][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  190.190859][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'.
[  191.935000][ T5298] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  192.009081][ T5298] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  192.085626][ T5298] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  192.380358][ T5298] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  192.703681][ T4856] device hsr_slave_0 left promiscuous mode
[  192.761796][ T4856] device hsr_slave_1 left promiscuous mode
[  192.795408][ T4856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.816615][ T4856] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.868553][ T4856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.884274][ T4856] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.906787][ T4856] device bridge_slave_1 left promiscuous mode
[  192.927809][ T4856] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.999048][ T4856] device bridge_slave_0 left promiscuous mode
[  193.015324][ T4856] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.604152][ T4856] device veth1_macvtap left promiscuous mode
[  193.755857][ T4856] device veth0_macvtap left promiscuous mode
[  193.762221][ T4856] device veth1_vlan left promiscuous mode
[  193.768381][ T4856] device veth0_vlan left promiscuous mode
[  194.385980][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.400164][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.546693][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.562630][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.590192][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.598427][   T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.606266][   T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  194.613720][   T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.711230][ T5486] loop4: detected capacity change from 0 to 40427
[  194.748694][ T5486] F2FS-fs (loop4): build fault injection attr: rate: 684, type: 0x3ffff
[  194.758407][ T5486] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7
[  194.802799][ T5486] F2FS-fs (loop4): invalid crc value
[  194.864361][ T5486] F2FS-fs (loop4): Found nat_bits in checkpoint
[  194.954992][ T5486] F2FS-fs (loop4): Start checkpoint disabled!
[  194.994413][ T5486] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  195.471519][ T5492] F2FS-fs (loop4) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0
[  195.988600][ T4856] team0 (unregistering): Port device team_slave_1 removed
[  196.042948][ T4856] team0 (unregistering): Port device team_slave_0 removed
[  196.136488][ T4856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.206496][ T4856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.250865][   T46] kworker/u4:3: attempt to access beyond end of device
[  196.250865][   T46] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  196.459897][ T4281] Bluetooth: hci4: command 0x0406 tx timeout
[  196.466012][ T4281] Bluetooth: hci1: command 0x0406 tx timeout
[  196.478112][   T48] Bluetooth: hci3: command 0x0406 tx timeout
[  196.699861][ T4280] Bluetooth: hci2: command 0x0409 tx timeout
[  197.653696][ T4856] bond0 (unregistering): Released all slaves
[  198.027629][ T5503] loop4: detected capacity change from 0 to 4096
[  198.144243][ T5503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  198.163864][ T5503] EXT4-fs (loop4): unmounting filesystem.
[  198.532572][ T5298] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.593555][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  198.616240][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  198.765998][ T5298] 8021q: adding VLAN 0 to HW filter on device team0
[  198.780115][ T4280] Bluetooth: hci2: command 0x041b tx timeout
[  198.832860][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  198.877637][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  198.955777][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.963028][ T5241] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.999062][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  199.050986][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  199.060619][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  199.069221][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.076416][ T5241] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.132393][ T5526] loop3: detected capacity change from 0 to 256
[  199.149881][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  199.159379][ T5487] chnl_net:caif_netlink_parms(): no params data found
[  199.214496][ T5526] FAT-fs (loop3): Directory bread(block 64) failed
[  199.283842][ T5298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  199.320142][ T5298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  199.331495][ T5526] FAT-fs (loop3): Directory bread(block 65) failed
[  199.346669][ T5526] FAT-fs (loop3): Directory bread(block 66) failed
[  199.361795][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  199.391142][ T5526] FAT-fs (loop3): Directory bread(block 67) failed
[  199.401308][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  199.442150][ T5526] FAT-fs (loop3): Directory bread(block 68) failed
[  199.448859][ T5526] FAT-fs (loop3): Directory bread(block 69) failed
[  199.461308][   T26] audit: type=1326 audit(1761881312.902:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c198efc9 code=0x7ffc0000
[  199.534828][ T5526] FAT-fs (loop3): Directory bread(block 70) failed
[  199.572426][ T5526] FAT-fs (loop3): Directory bread(block 71) failed
[  199.579119][ T5526] FAT-fs (loop3): Directory bread(block 72) failed
[  199.675943][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  199.685730][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  199.694858][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  199.705346][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  199.729806][ T5526] FAT-fs (loop3): Directory bread(block 73) failed
[  200.150095][ T4310] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  200.375700][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  200.426999][   T26] audit: type=1326 audit(1761881312.902:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c198efc9 code=0x7ffc0000
[  200.721571][ T4310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.944606][ T4281] Bluetooth: hci2: command 0x040f tx timeout
[  201.249715][   T26] audit: type=1326 audit(1761881312.922:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f61c198efc9 code=0x7ffc0000
[  201.283166][ T4310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  201.420824][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  201.540436][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  201.547338][ T4310] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  201.698710][   T26] audit: type=1326 audit(1761881312.922:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c198efc9 code=0x7ffc0000
[  201.711365][ T4310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  201.878013][   T26] audit: type=1326 audit(1761881312.922:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c198efc9 code=0x7ffc0000
[  201.893721][ T4310] usb 3-1: SerialNumber: syz
[  202.003747][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  202.021852][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  202.223605][   T26] audit: type=1326 audit(1761881312.922:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61c198efc9 code=0x7ffc0000
[  202.293220][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.352177][   T26] audit: type=1326 audit(1761881313.102:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c198efc9 code=0x7ffc0000
[  202.375622][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.399457][ T5487] device bridge_slave_0 entered promiscuous mode
[  202.427044][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.460149][   T26] audit: type=1326 audit(1761881313.102:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c198efc9 code=0x7ffc0000
[  202.467944][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.524951][ T5487] device bridge_slave_1 entered promiscuous mode
[  202.585446][   T26] audit: type=1326 audit(1761881313.152:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f61c198efc9 code=0x7ffc0000
[  202.678511][ T5487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.749465][ T5487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.822168][   T26] audit: type=1326 audit(1761881313.152:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c198efc9 code=0x7ffc0000
[  202.914637][ T4856] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.006302][ T5487] team0: Port device team_slave_0 added
[  203.019928][ T4280] Bluetooth: hci2: command 0x0419 tx timeout
[  203.091180][ T5487] team0: Port device team_slave_1 added
[  203.111793][ T4856] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.272721][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.285160][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.313534][ T5487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.359799][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.367880][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.483991][ T5487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.516449][ T4856] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.650679][ T4310] usb 3-1: 0:2 : does not exist
[  204.656569][ T4310] usb 3-1: unit 5 not found!
[  204.667903][ T5298] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.700488][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  204.700502][   T26] audit: type=1326 audit(1761881318.142:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x50000
[  204.748753][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  204.778130][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  204.850520][   T26] audit: type=1326 audit(1761881318.162:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x50000
[  204.907330][ T4856] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.908295][ T4310] usb 3-1: USB disconnect, device number 2
[  204.985391][   T26] audit: type=1326 audit(1761881318.162:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x50000
[  205.036107][   T26] audit: type=1326 audit(1761881318.162:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x50000
[  205.065553][   T26] audit: type=1326 audit(1761881318.172:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x50000
[  205.105413][   T26] audit: type=1326 audit(1761881318.172:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x50000
[  205.148096][   T26] audit: type=1326 audit(1761881318.172:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x50000
[  205.172349][   T26] audit: type=1326 audit(1761881318.172:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x50000
[  205.203739][ T5487] device hsr_slave_0 entered promiscuous mode
[  205.211570][   T26] audit: type=1326 audit(1761881318.172:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x50000
[  205.237530][ T5487] device hsr_slave_1 entered promiscuous mode
[  205.243716][ T5621] xt_hashlimit: size too large, truncated to 1048576
[  205.244877][   T26] audit: type=1326 audit(1761881318.172:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x50000
[  205.274162][ T5487] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  205.281916][ T5487] Cannot create hsr debugfs directory
[  205.936591][ T4856] tipc: Left network mode
[  206.485293][ T5487] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  206.649239][ T5487] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  206.695194][ T5487] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  206.747683][ T5487] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  207.191969][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  207.211993][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  207.244108][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  207.260759][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  207.375373][ T5298] device veth0_vlan entered promiscuous mode
[  207.394368][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  207.412781][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  207.576165][ T5298] device veth1_vlan entered promiscuous mode
[  208.945280][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  208.954355][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  208.970388][ T5487] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.421964][ T5487] 8021q: adding VLAN 0 to HW filter on device team0
[  209.459609][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  209.481371][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  209.489616][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  209.531113][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  210.259212][ T4514] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.266477][ T4514] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.308615][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  210.333540][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  210.524222][ T4514] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.531468][ T4514] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.540951][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  210.550186][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  210.559234][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  210.582007][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  210.599223][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  210.614262][   T26] kauditd_printk_skb: 59 callbacks suppressed
[  210.614277][   T26] audit: type=1326 audit(1761881324.052:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.3.313" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80af18efc9 code=0x0
[  210.614950][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  210.866785][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  210.890850][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  210.919277][ T5298] device veth0_macvtap entered promiscuous mode
[  211.037999][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  211.091107][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  211.109691][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  211.118562][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  211.160713][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  211.190323][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  211.198923][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  211.241627][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  211.258977][ T5298] device veth1_macvtap entered promiscuous mode
[  211.488012][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.534666][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.581410][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.650599][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.677901][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.698962][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.717966][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.836652][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.895134][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.183885][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.254773][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.321503][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.359408][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.369373][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.381721][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.391639][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.402134][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.413780][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.426555][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  212.436236][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  212.452273][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  212.462300][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  212.471320][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  212.882380][ T5298] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.900241][ T5298] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.909030][ T5298] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.621377][ T5298] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.802143][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'.
[  214.228364][   T26] audit: type=1326 audit(1761881327.662:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5731 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  214.298819][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  214.299069][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  214.343075][   T26] audit: type=1326 audit(1761881327.702:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5731 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  214.343120][   T26] audit: type=1326 audit(1761881327.702:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5731 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  214.343155][   T26] audit: type=1326 audit(1761881327.712:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5731 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  214.343191][   T26] audit: type=1326 audit(1761881327.712:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5731 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  214.343226][   T26] audit: type=1326 audit(1761881327.732:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5731 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  214.343262][   T26] audit: type=1326 audit(1761881327.732:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5731 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  214.343297][   T26] audit: type=1326 audit(1761881327.732:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5731 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  214.343333][   T26] audit: type=1326 audit(1761881327.752:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5731 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  214.356514][ T5487] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.453822][ T4856] device hsr_slave_0 left promiscuous mode
[  214.454610][ T4856] device hsr_slave_1 left promiscuous mode
[  214.455473][ T4856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.455518][ T4856] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.456234][ T4856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.456262][ T4856] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.537132][ T4856] device veth1_macvtap left promiscuous mode
[  214.537234][ T4856] device veth0_macvtap left promiscuous mode
[  214.541783][ T4856] device veth1_vlan left promiscuous mode
[  214.541901][ T4856] device veth0_vlan left promiscuous mode
[  214.665155][ T5742] loop3: detected capacity change from 0 to 1024
[  214.665999][ T5742] EXT4-fs: Ignoring removed bh option
[  214.666044][ T5742] EXT4-fs: inline encryption not supported
[  214.684185][ T5742] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  214.732722][ T5742] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.324: lblock 2 mapped to illegal pblock 2 (length 1)
[  214.733144][ T5742] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.324: lblock 0 mapped to illegal pblock 48 (length 1)
[  214.733353][ T5742] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.324: Failed to acquire dquot type 0
[  214.733587][ T5742] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  214.733798][ T5742] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.324: mark_inode_dirty error
[  214.733996][ T5742] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  214.734063][ T5742] EXT4-fs (loop3): 1 orphan inode deleted
[  214.734091][ T5742] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  214.795911][ T5235] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:26: lblock 1 mapped to illegal pblock 1 (length 1)
[  214.800177][ T5235] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:26: Failed to release dquot type 0
[  215.130550][ T5746] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 16: comm syz.3.324: lblock 0 mapped to illegal pblock 16 (length 1)
[  217.085225][ T4856] team0 (unregistering): Port device team_slave_1 removed
[  217.688296][ T4856] team0 (unregistering): Port device team_slave_0 removed
[  217.838135][ T4856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.039097][ T4856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.303768][ T4856] bond0 (unregistering): Released all slaves
[  219.679957][ T5250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.688953][ T5250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.715151][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  219.771373][ T5768] kthread_run failed with err -4
[  220.034263][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  220.067053][ T5776] loop4: detected capacity change from 0 to 512
[  220.073706][ T5774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  220.105106][ T5776] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  220.133040][ T5250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.186217][ T5250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.206623][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  220.259591][   T26] kauditd_printk_skb: 17 callbacks suppressed
[  220.259606][   T26] audit: type=1800 audit(2000000004.400:235): pid=5776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.331" name="bus" dev="loop4" ino=1048615 res=0 errno=0
[  220.725516][ T5785] loop4: detected capacity change from 0 to 4096
[  220.768985][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  220.780817][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  220.849601][ T5785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  220.856429][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  220.876738][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  220.892017][ T5487] device veth0_vlan entered promiscuous mode
[  220.905973][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  220.911701][ T5785] EXT4-fs (loop4): unmounting filesystem.
[  220.917622][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  220.978438][ T5487] device veth1_vlan entered promiscuous mode
[  221.105849][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  221.138527][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  221.187838][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  221.229373][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  221.260671][ T5487] device veth0_macvtap entered promiscuous mode
[  221.301400][ T5487] device veth1_macvtap entered promiscuous mode
[  221.453510][ T5800] loop4: detected capacity change from 0 to 256
[  221.755635][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  221.871178][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  222.286402][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.300288][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.311006][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.321715][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.332213][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.343292][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.353684][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.364219][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.401483][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.425048][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  222.440494][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  222.449398][ T4265] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0
[  222.480417][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  222.518571][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.532710][ T4265] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  222.750030][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.769934][ T4265] EXT4-fs error (device loop3): ext4_quota_off:7115: inode #3: comm syz-executor: mark_inode_dirty error
[  222.809877][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.055395][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.216251][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.603007][ T5812] loop3: detected capacity change from 0 to 512
[  223.633060][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.660628][ T5812] EXT4-fs: Ignoring removed mblk_io_submit option
[  223.667205][ T5812] EXT4-fs: Ignoring removed mblk_io_submit option
[  223.679700][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.722843][ T5812] EXT4-fs (loop3): Test dummy encryption mode enabled
[  223.726205][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.746626][ T5812] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  223.772920][ T5812] EXT4-fs (loop3): 1 truncate cleaned up
[  223.778267][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.786403][ T5812] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  223.852297][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  223.901022][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  223.974420][ T5487] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.989427][ T5487] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.998397][ T4337] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  224.020403][ T5487] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.029180][ T5487] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.201679][ T4337] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.249378][ T4337] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  224.315763][ T4337] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  224.348378][ T4337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.396502][ T4337] usb 5-1: Product: syz
[  224.409960][ T4337] usb 5-1: Manufacturer: syz
[  224.428464][ T4337] usb 5-1: SerialNumber: syz
[  224.717589][ T4514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.732885][ T4514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.744001][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  224.922762][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  224.946907][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.974964][ T5838] loop3: detected capacity change from 0 to 512
[  224.996803][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.048317][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  225.066550][ T5838] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  225.244763][   T26] audit: type=1800 audit(2000000009.390:236): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.342" name="bus" dev="loop3" ino=1048619 res=0 errno=0
[  225.721598][ T5814] netlink: 'syz.4.338': attribute type 30 has an invalid length.
[  226.427937][ T5850] loop3: detected capacity change from 0 to 1024
[  226.588631][ T5850] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #3: block 1: comm syz.3.344: lblock 1 mapped to illegal pblock 1 (length 1)
[  226.670762][ T5850] Quota error (device loop3): write_blk: dquota write failed
[  226.678247][ T5850] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  226.739877][ T5850] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.344: Failed to acquire dquot type 0
[  226.791130][ T5850] EXT4-fs error (device loop3): ext4_free_blocks:6205: comm syz.3.344: Freeing blocks not in datazone - block = 0, count = 4096
[  226.880172][ T5850] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.344: Invalid inode bitmap blk 0 in block_group 0
[  226.899942][   T11] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  227.024813][   T11] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  227.047345][ T5850] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem
[  227.227249][ T5850] EXT4-fs (loop3): 1 orphan inode deleted
[  227.262205][ T5850] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  227.377843][   T11] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:1: Failed to release dquot type 0
[  227.530788][ T4337] cdc_ncm 5-1:1.0: bind() failure
[  227.817447][ T4337] cdc_ncm: probe of 5-1:1.1 failed with error -71
[  228.029088][ T4337] cdc_mbim: probe of 5-1:1.1 failed with error -71
[  228.128237][ T4337] usbtest: probe of 5-1:1.1 failed with error -71
[  228.139544][ T4337] usb 5-1: USB disconnect, device number 2
[  230.328992][ T5894] loop6: detected capacity change from 0 to 512
[  230.358462][   T26] audit: type=1326 audit(2000000014.500:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.4.353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f3178efc9 code=0x0
[  230.445905][ T5894] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  230.632223][   T26] audit: type=1800 audit(2000000014.780:238): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.354" name="bus" dev="loop6" ino=1048623 res=0 errno=0
[  230.827847][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  231.862408][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'.
[  232.588345][ T5921] loop4: detected capacity change from 0 to 128
[  232.683029][   T26] audit: type=1326 audit(2000000016.830:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.3.358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x0
[  232.709043][ T5909] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  232.760186][ T5909] FAT-fs (loop4): Filesystem has been set read-only
[  232.772426][   T26] audit: type=1800 audit(2000000016.830:240): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.359" name="file2" dev="loop4" ino=1048624 res=0 errno=0
[  232.851852][ T5909] syz.4.359: attempt to access beyond end of device
[  232.851852][ T5909] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  232.922635][ T5905] syz.4.359: attempt to access beyond end of device
[  232.922635][ T5905] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  232.955100][ T5909] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  232.963351][ T5905] syz.4.359: attempt to access beyond end of device
[  232.963351][ T5905] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  232.977246][ T5909] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  232.985656][ T5905] syz.4.359: attempt to access beyond end of device
[  232.985656][ T5905] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  232.999479][ T5905] syz.4.359: attempt to access beyond end of device
[  232.999479][ T5905] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  233.013045][ T5905] syz.4.359: attempt to access beyond end of device
[  233.013045][ T5905] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  233.030160][ T5905] syz.4.359: attempt to access beyond end of device
[  233.030160][ T5905] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  233.046224][ T5909] syz.4.359: attempt to access beyond end of device
[  233.046224][ T5909] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  233.061670][ T5905] syz.4.359: attempt to access beyond end of device
[  233.061670][ T5905] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  233.075705][ T5909] syz.4.359: attempt to access beyond end of device
[  233.075705][ T5909] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  233.991983][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'.
[  234.004728][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'.
[  234.127073][ T5951] loop5: detected capacity change from 0 to 512
[  234.168815][ T5951] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  234.260706][   T26] audit: type=1800 audit(2000000018.410:241): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.367" name="bus" dev="loop5" ino=1048625 res=0 errno=0
[  234.774203][ T5960] loop3: detected capacity change from 0 to 1024
[  236.490411][ T5960] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  239.846191][ T5988] loop5: detected capacity change from 0 to 16
[  239.971026][ T5988] erofs: (device loop5): mounted with root inode @ nid 36.
[  240.218624][ T5985] loop4: detected capacity change from 0 to 128
[  240.466158][ T5996] bio_check_eod: 786 callbacks suppressed
[  240.466178][ T5996] syz.5.377: attempt to access beyond end of device
[  240.466178][ T5996] loop5: rw=524288, sector=34359738360, nr_sectors = 32 limit=16
[  240.486369][ T5996] syz.5.377: attempt to access beyond end of device
[  240.486369][ T5996] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  240.505454][ T5996] syz.5.377: attempt to access beyond end of device
[  240.505454][ T5996] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  240.536841][   T26] audit: type=1800 audit(2000000024.650:242): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.377" name="file1" dev="loop5" ino=86 res=0 errno=0
[  241.434689][ T6001] loop3: detected capacity change from 0 to 512
[  241.462937][ T5985] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  241.474773][ T5985] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  241.493556][ T6001] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  241.595256][   T26] audit: type=1800 audit(2000000025.740:243): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.380" name="bus" dev="loop3" ino=1048626 res=0 errno=0
[  241.750034][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  242.996514][ T6028] loop5: detected capacity change from 0 to 512
[  243.396115][ T6028] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  243.436893][ T6036] loop6: detected capacity change from 0 to 256
[  243.463795][ T6028] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.606646][ T6036] FAT-fs (loop6): Directory bread(block 64) failed
[  243.645843][   T26] audit: type=1800 audit(2000000027.790:244): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.386" name="file2" dev="loop5" ino=16 res=0 errno=0
[  243.682411][ T6036] FAT-fs (loop6): Directory bread(block 65) failed
[  243.689807][ T6036] FAT-fs (loop6): Directory bread(block 66) failed
[  243.696715][ T6036] FAT-fs (loop6): Directory bread(block 67) failed
[  243.703612][ T6036] FAT-fs (loop6): Directory bread(block 68) failed
[  243.710288][ T6036] FAT-fs (loop6): Directory bread(block 69) failed
[  243.716941][ T6036] FAT-fs (loop6): Directory bread(block 70) failed
[  243.723566][ T6036] FAT-fs (loop6): Directory bread(block 71) failed
[  243.730283][ T6036] FAT-fs (loop6): Directory bread(block 72) failed
[  243.736855][ T6036] FAT-fs (loop6): Directory bread(block 73) failed
[  245.790157][ T5298] EXT4-fs (loop5): unmounting filesystem.
[  246.166345][ T6061] binfmt_misc: register: failed to install interpreter file ./file0
[  248.457887][ T6075] loop6: detected capacity change from 0 to 4096
[  248.534243][ T6075] EXT4-fs (loop6): Test dummy encryption mode enabled
[  248.694491][ T6075] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  248.711225][ T6075] System zones: 0-5
[  248.793796][ T6075] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  249.631200][ T6094] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  250.206764][ T5487] EXT4-fs (loop6): unmounting filesystem.
[  250.715398][ T6106] loop3: detected capacity change from 0 to 4096
[  250.855731][ T6106] EXT4-fs (loop3): Test dummy encryption mode enabled
[  250.922962][ T6106] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  250.969949][ T6106] System zones: 0-5
[  250.975812][ T6106] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  251.006430][ T6114] loop4: detected capacity change from 0 to 512
[  251.184740][ T6114] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  251.443493][ T6122] xt_TPROXY: Can be used only with -p tcp or -p udp
[  251.507554][   T26] audit: type=1800 audit(2000000035.650:245): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.408" name="bus" dev="loop4" ino=1048628 res=0 errno=0
[  252.033065][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  252.317513][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'.
[  252.430716][ T6134] loop4: detected capacity change from 0 to 128
[  252.550306][   T26] audit: type=1800 audit(2000000036.700:246): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.411" name="file2" dev="loop4" ino=1048629 res=0 errno=0
[  252.574664][ T6133] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  252.626675][ T6133] FAT-fs (loop4): Filesystem has been set read-only
[  252.655610][ T6133] syz.4.411: attempt to access beyond end of device
[  252.655610][ T6133] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  252.705822][ T6128] syz.4.411: attempt to access beyond end of device
[  252.705822][ T6128] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  252.820108][ T6133] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  252.858765][ T6128] syz.4.411: attempt to access beyond end of device
[  252.858765][ T6128] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  252.885647][ T6133] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  253.026621][ T6128] syz.4.411: attempt to access beyond end of device
[  253.026621][ T6128] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  253.110099][ T6128] syz.4.411: attempt to access beyond end of device
[  253.110099][ T6128] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  253.141372][ T6133] syz.4.411: attempt to access beyond end of device
[  253.141372][ T6133] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  253.227483][ T6134] syz.4.411: attempt to access beyond end of device
[  253.227483][ T6134] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  253.529284][ T6128] syz.4.411: attempt to access beyond end of device
[  253.529284][ T6128] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  253.702847][ T6128] syz.4.411: attempt to access beyond end of device
[  253.702847][ T6128] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  253.716440][ T6134] syz.4.411: attempt to access beyond end of device
[  253.716440][ T6134] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  253.994788][   T26] audit: type=1326 audit(2000000038.140:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  254.058372][   T26] audit: type=1326 audit(2000000038.140:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  254.107668][   T26] audit: type=1326 audit(2000000038.140:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  254.197310][   T26] audit: type=1326 audit(2000000038.140:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  254.607398][   T26] audit: type=1326 audit(2000000038.140:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  254.940507][   T26] audit: type=1326 audit(2000000038.140:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  255.125157][   T26] audit: type=1326 audit(2000000038.140:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  255.147924][   T26] audit: type=1326 audit(2000000038.140:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80af18efc9 code=0x7ffc0000
[  255.225994][ T6169] loop6: detected capacity change from 0 to 512
[  255.417897][ T6169] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  256.104505][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  256.110931][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  256.252981][ T6185] ------------[ cut here ]------------
[  256.259044][ T6185] WARNING: CPU: 1 PID: 6185 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x139/0x160
[  256.269369][ T6185] Modules linked in:
[  256.273373][ T6185] CPU: 1 PID: 6185 Comm: syz.3.428 Not tainted syzkaller #0
[  256.280749][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  256.290907][ T6185] RIP: 0010:taprio_get_start_time+0x139/0x160
[  256.297031][ T6185] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1c c9 7c f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 87 99 2c f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c
[  256.316761][ T6185] RSP: 0018:ffffc900055ced88 EFLAGS: 00010283
[  256.322933][ T6185] RAX: ffffffff88543cd9 RBX: ffffc900055cee98 RCX: 0000000000080000
[  256.330998][ T6185] RDX: ffffc9000c91a000 RSI: 00000000000015e8 RDI: 00000000000015e9
[  256.339016][ T6185] RBP: 0000000000000003 R08: dffffc0000000000 R09: fffffbfff215c473
[  256.347132][ T6185] R10: fffffbfff215c473 R11: 1ffffffff215c472 R12: 0000003ba7759aea
[  256.355198][ T6185] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  256.363260][ T6185] FS:  00007f80ad3f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  256.372294][ T6185] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  256.378930][ T6185] CR2: 000000110c36e75b CR3: 0000000066443000 CR4: 00000000003506e0
[  256.386992][ T6185] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  256.395053][ T6185] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  256.403112][ T6185] Call Trace:
[  256.406437][ T6185]  <TASK>
[  256.409425][ T6185]  taprio_change+0x3daa/0x50f0
[  256.414296][ T6185]  ? taprio_destroy+0x4b0/0x4b0
[  256.419197][ T6185]  ? qdisc_create+0x7cb/0x1090
[  256.424052][ T6185]  ? ____sys_sendmsg+0x59b/0x970
[  256.429045][ T6185]  ? ___sys_sendmsg+0x21c/0x290
[  256.433988][ T6185]  ? __se_sys_sendmsg+0x19e/0x270
[  256.439069][ T6185]  ? do_syscall_64+0x4c/0xa0
[  256.443760][ T6185]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  256.449915][ T6185]  ? qdisc_alloc+0x95/0xa50
[  256.454484][ T6185]  ? fifo_init+0x3ab/0x650
[  256.458996][ T6185]  ? qdisc_peek_head+0x40/0x40
[  256.463859][ T6185]  ? qdisc_alloc+0x77a/0xa50
[  256.468552][ T6185]  ? mutex_is_locked+0xe/0x40
[  256.473341][ T6185]  ? taprio_peek+0x590/0x590
[  256.477990][ T6185]  qdisc_create+0x7cb/0x1090
[  256.482685][ T6185]  ? qdisc_notify+0x370/0x370
[  256.487435][ T6185]  tc_modify_qdisc+0xb2f/0x1cc0
[  256.492395][ T6185]  ? qdisc_offload_query_caps+0x140/0x140
[  256.498208][ T6185]  ? qdisc_offload_query_caps+0x140/0x140
[  256.504051][ T6185]  ? rtnetlink_rcv_msg+0x1d8/0xed0
[  256.509263][ T6185]  rtnetlink_rcv_msg+0x79b/0xed0
[  256.514309][ T6185]  ? rtnetlink_bind+0x80/0x80
[  256.519047][ T6185]  ? __local_bh_enable_ip+0x12a/0x1b0
[  256.524522][ T6185]  ? lockdep_hardirqs_on+0x94/0x140
[  256.529827][ T6185]  ? __local_bh_enable_ip+0x12a/0x1b0
[  256.535273][ T6185]  ? _local_bh_enable+0xa0/0xa0
[  256.540227][ T6185]  ? __dev_queue_xmit+0x26f/0x3760
[  256.545479][ T6185]  ? __dev_queue_xmit+0x26f/0x3760
[  256.550687][ T6185]  ? __dev_queue_xmit+0x15c9/0x3760
[  256.555939][ T6185]  ? __dev_queue_xmit+0x26f/0x3760
[  256.561191][ T6185]  ? netdev_core_pick_tx+0x340/0x340
[  256.566531][ T6185]  ? ref_tracker_free+0x630/0x7c0
[  256.571685][ T6185]  ? refcount_inc+0x70/0x70
[  256.576254][ T6185]  ? __copy_skb_header+0x417/0x5a0
[  256.581488][ T6185]  ? __skb_clone+0x480/0x790
[  256.586143][ T6185]  netlink_rcv_skb+0x1de/0x420
[  256.591012][ T6185]  ? rtnetlink_bind+0x80/0x80
[  256.595752][ T6185]  ? netlink_ack+0x1100/0x1100
[  256.600639][ T6185]  ? netlink_deliver_tap+0x2e/0x1b0
[  256.605918][ T6185]  netlink_unicast+0x74d/0x8d0
[  256.610801][ T6185]  netlink_sendmsg+0x89e/0xbc0
[  256.615635][ T6185]  ? netlink_getsockopt+0x540/0x540
[  256.620949][ T6185]  ? aa_sock_msg_perm+0x94/0x150
[  256.625955][ T6185]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  256.631344][ T6185]  ? security_socket_sendmsg+0x7c/0xa0
[  256.636876][ T6185]  ? netlink_getsockopt+0x540/0x540
[  256.642183][ T6185]  ____sys_sendmsg+0x59b/0x970
[  256.647017][ T6185]  ? __sys_sendmsg_sock+0x30/0x30
[  256.652161][ T6185]  ? __import_iovec+0x315/0x500
[  256.657088][ T6185]  ? import_iovec+0x6f/0xa0
[  256.661714][ T6185]  ___sys_sendmsg+0x21c/0x290
[  256.666457][ T6185]  ? __sys_sendmsg+0x270/0x270
[  256.671369][ T6185]  ? __fdget+0x17c/0x200
[  256.675694][ T6185]  __se_sys_sendmsg+0x19e/0x270
[  256.680656][ T6185]  ? __se_sys_futex+0x14a/0x440
[  256.685571][ T6185]  ? __x64_sys_sendmsg+0x80/0x80
[  256.690656][ T6185]  ? lockdep_hardirqs_on+0x94/0x140
[  256.695917][ T6185]  do_syscall_64+0x4c/0xa0
[  256.700447][ T6185]  ? clear_bhb_loop+0x60/0xb0
[  256.705176][ T6185]  ? clear_bhb_loop+0x60/0xb0
[  256.709960][ T6185]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  256.715906][ T6185] RIP: 0033:0x7f80af18efc9
[  256.720440][ T6185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.740144][ T6185] RSP: 002b:00007f80ad3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  256.748611][ T6185] RAX: ffffffffffffffda RBX: 00007f80af3e5fa0 RCX: 00007f80af18efc9
[  256.756694][ T6185] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000006
[  256.764756][ T6185] RBP: 00007f80af211f91 R08: 0000000000000000 R09: 0000000000000000
[  256.772834][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  256.780895][ T6185] R13: 00007f80af3e6038 R14: 00007f80af3e5fa0 R15: 00007ffcbcc73348
[  256.788933][ T6185]  </TASK>
[  256.792071][ T6185] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  256.799398][ T6185] CPU: 1 PID: 6185 Comm: syz.3.428 Not tainted syzkaller #0
[  256.806720][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  256.816813][ T6185] Call Trace:
[  256.820129][ T6185]  <TASK>
[  256.823091][ T6185]  dump_stack_lvl+0x168/0x22e
[  256.827815][ T6185]  ? memcpy+0x3c/0x60
[  256.831853][ T6185]  ? show_regs_print_info+0x12/0x12
[  256.837091][ T6185]  ? load_image+0x3b0/0x3b0
[  256.841688][ T6185]  panic+0x2c9/0x710
[  256.845658][ T6185]  ? bpf_jit_dump+0xd0/0xd0
[  256.850226][ T6185]  __warn+0x2f8/0x4f0
[  256.854256][ T6185]  ? taprio_get_start_time+0x139/0x160
[  256.859769][ T6185]  ? taprio_get_start_time+0x139/0x160
[  256.865274][ T6185]  report_bug+0x2ba/0x4f0
[  256.869659][ T6185]  ? taprio_get_start_time+0x139/0x160
[  256.875173][ T6185]  handle_bug+0x3a/0x70
[  256.879373][ T6185]  exc_invalid_op+0x16/0x40
[  256.883925][ T6185]  asm_exc_invalid_op+0x16/0x20
[  256.888820][ T6185] RIP: 0010:taprio_get_start_time+0x139/0x160
[  256.894939][ T6185] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1c c9 7c f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 87 99 2c f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c
[  256.914594][ T6185] RSP: 0018:ffffc900055ced88 EFLAGS: 00010283
[  256.920730][ T6185] RAX: ffffffff88543cd9 RBX: ffffc900055cee98 RCX: 0000000000080000
[  256.928747][ T6185] RDX: ffffc9000c91a000 RSI: 00000000000015e8 RDI: 00000000000015e9
[  256.936764][ T6185] RBP: 0000000000000003 R08: dffffc0000000000 R09: fffffbfff215c473
[  256.944775][ T6185] R10: fffffbfff215c473 R11: 1ffffffff215c472 R12: 0000003ba7759aea
[  256.952777][ T6185] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  256.960784][ T6185]  ? taprio_get_start_time+0x139/0x160
[  256.966276][ T6185]  ? taprio_get_start_time+0x139/0x160
[  256.971764][ T6185]  taprio_change+0x3daa/0x50f0
[  256.976571][ T6185]  ? taprio_destroy+0x4b0/0x4b0
[  256.981453][ T6185]  ? qdisc_create+0x7cb/0x1090
[  256.986264][ T6185]  ? ____sys_sendmsg+0x59b/0x970
[  256.991236][ T6185]  ? ___sys_sendmsg+0x21c/0x290
[  256.996113][ T6185]  ? __se_sys_sendmsg+0x19e/0x270
[  257.001157][ T6185]  ? do_syscall_64+0x4c/0xa0
[  257.005763][ T6185]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  257.011854][ T6185]  ? qdisc_alloc+0x95/0xa50
[  257.016382][ T6185]  ? fifo_init+0x3ab/0x650
[  257.020814][ T6185]  ? qdisc_peek_head+0x40/0x40
[  257.025588][ T6185]  ? qdisc_alloc+0x77a/0xa50
[  257.030217][ T6185]  ? mutex_is_locked+0xe/0x40
[  257.034936][ T6185]  ? taprio_peek+0x590/0x590
[  257.039550][ T6185]  qdisc_create+0x7cb/0x1090
[  257.044173][ T6185]  ? qdisc_notify+0x370/0x370
[  257.048875][ T6185]  tc_modify_qdisc+0xb2f/0x1cc0
[  257.053754][ T6185]  ? qdisc_offload_query_caps+0x140/0x140
[  257.059507][ T6185]  ? qdisc_offload_query_caps+0x140/0x140
[  257.065245][ T6185]  ? rtnetlink_rcv_msg+0x1d8/0xed0
[  257.070373][ T6185]  rtnetlink_rcv_msg+0x79b/0xed0
[  257.075344][ T6185]  ? rtnetlink_bind+0x80/0x80
[  257.080037][ T6185]  ? __local_bh_enable_ip+0x12a/0x1b0
[  257.085431][ T6185]  ? lockdep_hardirqs_on+0x94/0x140
[  257.090654][ T6185]  ? __local_bh_enable_ip+0x12a/0x1b0
[  257.096045][ T6185]  ? _local_bh_enable+0xa0/0xa0
[  257.100922][ T6185]  ? __dev_queue_xmit+0x26f/0x3760
[  257.106041][ T6185]  ? __dev_queue_xmit+0x26f/0x3760
[  257.111164][ T6185]  ? __dev_queue_xmit+0x15c9/0x3760
[  257.116389][ T6185]  ? __dev_queue_xmit+0x26f/0x3760
[  257.121515][ T6185]  ? netdev_core_pick_tx+0x340/0x340
[  257.126811][ T6185]  ? ref_tracker_free+0x630/0x7c0
[  257.131856][ T6185]  ? refcount_inc+0x70/0x70
[  257.136376][ T6185]  ? __copy_skb_header+0x417/0x5a0
[  257.141511][ T6185]  ? __skb_clone+0x480/0x790
[  257.146119][ T6185]  netlink_rcv_skb+0x1de/0x420
[  257.150899][ T6185]  ? rtnetlink_bind+0x80/0x80
[  257.155617][ T6185]  ? netlink_ack+0x1100/0x1100
[  257.160425][ T6185]  ? netlink_deliver_tap+0x2e/0x1b0
[  257.165655][ T6185]  netlink_unicast+0x74d/0x8d0
[  257.170457][ T6185]  netlink_sendmsg+0x89e/0xbc0
[  257.175241][ T6185]  ? netlink_getsockopt+0x540/0x540
[  257.180458][ T6185]  ? aa_sock_msg_perm+0x94/0x150
[  257.185416][ T6185]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  257.190727][ T6185]  ? security_socket_sendmsg+0x7c/0xa0
[  257.196221][ T6185]  ? netlink_getsockopt+0x540/0x540
[  257.201455][ T6185]  ____sys_sendmsg+0x59b/0x970
[  257.206252][ T6185]  ? __sys_sendmsg_sock+0x30/0x30
[  257.211298][ T6185]  ? __import_iovec+0x315/0x500
[  257.216173][ T6185]  ? import_iovec+0x6f/0xa0
[  257.220718][ T6185]  ___sys_sendmsg+0x21c/0x290
[  257.225417][ T6185]  ? __sys_sendmsg+0x270/0x270
[  257.230265][ T6185]  ? __fdget+0x17c/0x200
[  257.234529][ T6185]  __se_sys_sendmsg+0x19e/0x270
[  257.239395][ T6185]  ? __se_sys_futex+0x14a/0x440
[  257.244269][ T6185]  ? __x64_sys_sendmsg+0x80/0x80
[  257.249238][ T6185]  ? lockdep_hardirqs_on+0x94/0x140
[  257.254463][ T6185]  do_syscall_64+0x4c/0xa0
[  257.258891][ T6185]  ? clear_bhb_loop+0x60/0xb0
[  257.263578][ T6185]  ? clear_bhb_loop+0x60/0xb0
[  257.268268][ T6185]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  257.274174][ T6185] RIP: 0033:0x7f80af18efc9
[  257.278604][ T6185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  257.298249][ T6185] RSP: 002b:00007f80ad3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  257.306673][ T6185] RAX: ffffffffffffffda RBX: 00007f80af3e5fa0 RCX: 00007f80af18efc9
[  257.314655][ T6185] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000006
[  257.322634][ T6185] RBP: 00007f80af211f91 R08: 0000000000000000 R09: 0000000000000000
[  257.330612][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.338614][ T6185] R13: 00007f80af3e6038 R14: 00007f80af3e5fa0 R15: 00007ffcbcc73348
[  257.346607][ T6185]  </TASK>
[  257.349948][ T6185] Kernel Offset: disabled
[  257.354362][ T6185] Rebooting in 86400 seconds..