last executing test programs:

1m56.154786738s ago: executing program 32 (id=1721):
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db1"], 0x138)
write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4)

1m55.454900824s ago: executing program 33 (id=1727):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000680)='@|', &(0x7f0000000400)=@tcp6=r4, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m55.306570677s ago: executing program 3 (id=1732):
r0 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8008001}, 0x4000)

1m55.275966209s ago: executing program 3 (id=1733):
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340))
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033000000"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30)
syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0)

1m55.115198652s ago: executing program 3 (id=1734):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m54.744553572s ago: executing program 3 (id=1735):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4008040)
sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000340)}, 0x8000)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3029127, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@dax_never}, {@debug}, {@block_validity}, {@grpjquota}]}, 0x5, 0x468, &(0x7f0000001540)="$eJzs281rHOUfAPDvTJK26csv+dX60hc1WsXgS9KkVXvwoih4UBC81GNM0lKbNtJEsCVoFalHKQgexaPgX+BJL6KeBK96l0KRXKxeHJndmWSz3WzSdpNps58PTPZ5Zp7Zeb7zzLP7zDzZALrWUP4nidgdEb9FxEA9u7LAUP3l+uLC5N+LC5NJZNmbfya1cn8tLkyWRcv9dhWZ4TQi/SSJgy2OO3fh4pmJmZnp80V+dP7su6NzFy4+c/rsxKnpU9Pnxo8fP3Z07Pnnxp/tSJz/z+t64IPZQ/tffevK65Mnrrz90zdJGX9THB0y1G7j41nW4cNVa09DOuldxw49G1gZ1i1vhry5+mr9fyB6YrnxBuKVjyutHLChssIqmy9ljeLfDNhKkqi6BkA1yi/6/P63XDZv9FG9ay/Wb4DyuK8XS31Lb6RFmb6m+9tOGoqIE5f++TJfYmOeQwAArPBdPv55utX4L437Gsr9L7bX5oYGi7mUvRFxT0Tsi4h7I2pl74+IB1odpM2EQPMkyY3jn/TqrUe3tnz890Ixt7Vy/FeO/mKwp8jtqcXfl5w8PTN9pHZOIoajb3ueH2tzjO9f/vWz1bY1jv/yJT9+ORYs6nG1d/vKfaYm5iduJ+ZG1z6KONDbKv5kaSYgiYj9EXHgFo9x+smvD622be3421jPPNMasq8inoiI/sWFS9EUfylpPz85uiNmpo+MllfFjX7+5fIbqx3/tuLvgLz9d7a8/pfiH0wa52vnbubd67378u+frnpPM3JL1//yim3F6/sT8/PnxyK2Ja/VK924fnx53zJfls/jHz7cEH9/LPX/vbF8Jg5GRH4RPxgRD0XEw0V0j0TEoxFxuM1Z+PGlx95pd4aqbv+ppvYfXFmkqf2XE9uieU3rRM+ZH75d+Y7LyfV9/h2rpYaLNbXPvy/ax7Weet3s1QwAAAB3qzQidkeSjiyl03RkpP4//PtiZzozOzf/1MnZ985N1X8jMBh9afmka6DheehYLb1jKT9e3OaX+aPFc+PPe/pr+ZHJ2ZmpqoOHLrdrlf6f+8NvNGDr68A8GnCX0v+he+n/0L30f+heLfp/fxX1ADZfq+//DyuoB7D5mvq/aT/oIu7/oXvp/9C9Gvt/UmE9gE011x9r/0h+KySyLMvugGpsnUSkd0Q1OpNINrgX7K46wJtPVP3JBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA//8mc+gQ")
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0)

1m54.310340618s ago: executing program 3 (id=1738):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x900, 0x1a4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6)

1m53.084024728s ago: executing program 3 (id=1740):
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340))
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30)
syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0)

1m52.828076358s ago: executing program 34 (id=1740):
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340))
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30)
syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0)

1m48.356910002s ago: executing program 1 (id=1747):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
clock_gettime(0x0, &(0x7f0000000400))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0x40505331, &(0x7f0000000180))
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20)
socket$igmp(0x2, 0x3, 0x2)

1m45.199088099s ago: executing program 1 (id=1748):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8090)
r3 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000240)={0xb, 0x0, '\x00', 0x1, 0x0})
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)
write$nci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r5], 0x4)

1m45.103767256s ago: executing program 1 (id=1749):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48)
pipe(&(0x7f0000000340))
socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$pptp(0x18, 0x1, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0)

1m44.052542611s ago: executing program 1 (id=1750):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4008040)
sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000340)}, 0x8000)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3029127, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@dax_never}, {@debug}, {@block_validity}, {@grpjquota}]}, 0x5, 0x468, &(0x7f0000001540)="$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")
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0)

1m43.406507044s ago: executing program 1 (id=1751):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x42, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
chmod(0x0, 0x40)

1m41.98586446s ago: executing program 1 (id=1755):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48)
pipe(&(0x7f0000000340))
socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$pptp(0x18, 0x1, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0)

1m41.663287175s ago: executing program 35 (id=1755):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48)
pipe(&(0x7f0000000340))
socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$pptp(0x18, 0x1, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0)

1m32.486845352s ago: executing program 5 (id=1816):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc, 0x8, 0x7, 0x4, 0x4, 0x0, 0x200, 0x6, 0x1}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0xb9b8, 0xe81, 0x0, 0x8, 0x28ec, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c085}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m32.216111624s ago: executing program 5 (id=1819):
unshare(0x22020400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10)

1m31.960448124s ago: executing program 5 (id=1820):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

1m31.726078334s ago: executing program 7 (id=1756):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4008040)
sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000340)}, 0x8000)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3029127, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@dax_never}, {@debug}, {@block_validity}, {@grpjquota}]}, 0x5, 0x468, &(0x7f0000001540)="$eJzs281rHOUfAPDvTJK26csv+dX60hc1WsXgS9KkVXvwoih4UBC81GNM0lKbNtJEsCVoFalHKQgexaPgX+BJL6KeBK96l0KRXKxeHJndmWSz3WzSdpNps58PTPZ5Zp7Zeb7zzLP7zDzZALrWUP4nidgdEb9FxEA9u7LAUP3l+uLC5N+LC5NJZNmbfya1cn8tLkyWRcv9dhWZ4TQi/SSJgy2OO3fh4pmJmZnp80V+dP7su6NzFy4+c/rsxKnpU9Pnxo8fP3Z07Pnnxp/tSJz/z+t64IPZQ/tffevK65Mnrrz90zdJGX9THB0y1G7j41nW4cNVa09DOuldxw49G1gZ1i1vhry5+mr9fyB6YrnxBuKVjyutHLChssIqmy9ljeLfDNhKkqi6BkA1yi/6/P63XDZv9FG9ay/Wb4DyuK8XS31Lb6RFmb6m+9tOGoqIE5f++TJfYmOeQwAArPBdPv55utX4L437Gsr9L7bX5oYGi7mUvRFxT0Tsi4h7I2pl74+IB1odpM2EQPMkyY3jn/TqrUe3tnz890Ixt7Vy/FeO/mKwp8jtqcXfl5w8PTN9pHZOIoajb3ueH2tzjO9f/vWz1bY1jv/yJT9+ORYs6nG1d/vKfaYm5iduJ+ZG1z6KONDbKv5kaSYgiYj9EXHgFo9x+smvD622be3421jPPNMasq8inoiI/sWFS9EUfylpPz85uiNmpo+MllfFjX7+5fIbqx3/tuLvgLz9d7a8/pfiH0wa52vnbubd67378u+frnpPM3JL1//yim3F6/sT8/PnxyK2Ja/VK924fnx53zJfls/jHz7cEH9/LPX/vbF8Jg5GRH4RPxgRD0XEw0V0j0TEoxFxuM1Z+PGlx95pd4aqbv+ppvYfXFmkqf2XE9uieU3rRM+ZH75d+Y7LyfV9/h2rpYaLNbXPvy/ax7Weet3s1QwAAAB3qzQidkeSjiyl03RkpP4//PtiZzozOzf/1MnZ985N1X8jMBh9afmka6DheehYLb1jKT9e3OaX+aPFc+PPe/pr+ZHJ2ZmpqoOHLrdrlf6f+8NvNGDr68A8GnCX0v+he+n/0L30f+heLfp/fxX1ADZfq+//DyuoB7D5mvq/aT/oIu7/oXvp/9C9Gvt/UmE9gE011x9r/0h+KySyLMvugGpsnUSkd0Q1OpNINrgX7K46wJtPVP3JBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA//8mc+gQ")
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0)

1m31.440790067s ago: executing program 7 (id=1823):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0x7, 0x9)
write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18)

1m31.439239147s ago: executing program 5 (id=1831):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4008040)
sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000340)}, 0x8000)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3029127, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@dax_never}, {@debug}, {@block_validity}, {@grpjquota}]}, 0x5, 0x468, &(0x7f0000001540)="$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")
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0)

1m30.966910285s ago: executing program 5 (id=1829):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x54a5, 0x1)

1m29.804830449s ago: executing program 5 (id=1837):
unshare(0x22020400)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10)

1m29.338823657s ago: executing program 36 (id=1837):
unshare(0x22020400)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10)

1m28.741940636s ago: executing program 7 (id=1840):
socket$packet(0x11, 0x0, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0x5}, 0x18)
rmdir(0x0)
clock_getres(0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
socket$packet(0x11, 0x3, 0x300)
creat(&(0x7f00000000c0)='./file0\x00', 0x43)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r1, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
close_range(r1, r1, 0x100000000000000)

1m28.397962204s ago: executing program 37 (id=1840):
socket$packet(0x11, 0x0, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0x5}, 0x18)
rmdir(0x0)
clock_getres(0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
socket$packet(0x11, 0x3, 0x300)
creat(&(0x7f00000000c0)='./file0\x00', 0x43)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r1, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
close_range(r1, r1, 0x100000000000000)

1m19.135267877s ago: executing program 8 (id=1838):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4008040)
sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000340)}, 0x8000)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3029127, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@dax_never}, {@debug}, {@block_validity}, {@grpjquota}]}, 0x5, 0x468, &(0x7f0000001540)="$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")
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0)

1m18.799968544s ago: executing program 8 (id=1867):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf5b})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
fcntl$lock(r1, 0x7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7})
io_setup(0x2004, &(0x7f0000000680))
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)

1m18.085133253s ago: executing program 9 (id=1873):
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x2, 0x3, 0x24, @dev={0xfe, 0x80, '\x00', 0x16}, @remote, 0x20, 0x80, 0x4, 0xff}})
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x3a, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14)

1m17.794632046s ago: executing program 9 (id=1875):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r2})
keyctl$link(0x8, r2, r3)

1m17.679180165s ago: executing program 9 (id=1876):
r0 = socket(0x1e, 0x805, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{}, 0x1}}, 0x10)
close(r0)

1m17.580774033s ago: executing program 9 (id=1877):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4008040)
sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000340)}, 0x8000)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3029127, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@dax_never}, {@debug}, {@block_validity}, {@grpjquota}]}, 0x5, 0x468, &(0x7f0000001540)="$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")
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0)

1m17.171520167s ago: executing program 8 (id=1878):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
pipe2$9p(&(0x7f0000000080), 0x800)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp, 0x1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c)

1m17.170580607s ago: executing program 9 (id=1879):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setgroups(0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000d14040029bd7000fcdbdf2508000100010000000800030000000000080001000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
modify_ldt$write(0x1, &(0x7f0000000040), 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"})
r6 = syz_open_pts(r5, 0x0)
dup3(r5, r3, 0x0)
ppoll(&(0x7f0000000140)=[{r5}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3)
socket$can_raw(0x1d, 0x3, 0x1)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701", @ANYRES32=r7, @ANYBLOB="000000b355a407ec99cf0800ece44400007d0000006900000095000000000000000000"], &(0x7f0000000600)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x200809c, &(0x7f0000000040)={[{@nodots}, {@fat=@tz_utc}, {@fat=@quiet}, {@fat=@dos1xfloppy}, {@nodots}]}, 0x2, 0x1e4, &(0x7f0000000680)="$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")

1m16.669021458s ago: executing program 38 (id=1878):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
pipe2$9p(&(0x7f0000000080), 0x800)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp, 0x1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c)

1m14.062701819s ago: executing program 9 (id=1884):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
acct(0x0)

1m13.743243235s ago: executing program 39 (id=1884):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
acct(0x0)

3.134587055s ago: executing program 2 (id=2568):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$qrtr(0x2a, 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$rds(0x15, 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x35cd, 0x10100, 0x3, 0x8f, 0x0, r1}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844})
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

3.016268954s ago: executing program 2 (id=2570):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0xfe2a, 0x0, &(0x7f0000000d40)="fae56ac553d73f32", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.740363987s ago: executing program 2 (id=2573):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24413}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

2.501751806s ago: executing program 2 (id=2576):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc, 0x8, 0x7, 0x4, 0x4, 0x0, 0x200, 0x6, 0x1}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0xb9b8, 0xe81, 0x0, 0x8, 0x28ec, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c085}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.262711626s ago: executing program 4 (id=2580):
r0 = socket(0x840000000002, 0x3, 0xff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r2}, 0x18)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b35", 0x14}], 0x1}}], 0x1, 0x4004040)

2.247360917s ago: executing program 2 (id=2581):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xae, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2.054452692s ago: executing program 4 (id=2584):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYRES16], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000050000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000681ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000}, 0x50)
unshare(0x6020400)
r4 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000200)=[@in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f00000007c0)=0x10)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xc3, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf250200000010001bf41e006647a9426fec4047fd0000080017004e204e20"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000180)={r6, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x27, 0xe, 0x0, &(0x7f00000002c0)="f8ad00c5fce2b5cbaaadc5829fda", 0x0, 0x9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, 0x0, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)

2.054170752s ago: executing program 2 (id=2585):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
r3 = pidfd_getfd(r2, r2, 0x0)
setns(r3, 0x66020000)
syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0)

1.646144256s ago: executing program 0 (id=2590):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc, 0x8, 0x7, 0x4, 0x4, 0x0, 0x200, 0x6, 0x1}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0xb9b8, 0xe81, 0x0, 0x8, 0x28ec, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c085}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.390605497s ago: executing program 6 (id=2591):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$qrtr(0x2a, 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$rds(0x15, 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x35cd, 0x10100, 0x3, 0x8f, 0x0, r1}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844})
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1.307051574s ago: executing program 0 (id=2592):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)

1.241102209s ago: executing program 6 (id=2593):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x23500d8, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

1.137550267s ago: executing program 0 (id=2594):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000400000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xfffffffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.034672856s ago: executing program 6 (id=2595):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r1, 0x20, &(0x7f0000000840)={&(0x7f00000007c0)=""/71, 0x47, 0x0, &(0x7f0000000bc0)=""/132, 0x84}}, 0x10)

1.034338346s ago: executing program 4 (id=2596):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4)

939.305894ms ago: executing program 6 (id=2597):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'geneve1\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)

732.06546ms ago: executing program 4 (id=2598):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000080), &(0x7f0000000840)}, 0x4b)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'geneve0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e)

586.762042ms ago: executing program 4 (id=2599):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0)

430.740775ms ago: executing program 4 (id=2600):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = gettid()
r3 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300))
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000700)}, 0x20)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

419.033676ms ago: executing program 6 (id=2601):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc, 0x8, 0x7, 0x4, 0x4, 0x0, 0x200, 0x6, 0x1}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0xb9b8, 0xe81, 0x0, 0x8, 0x28ec, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c085}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

281.778227ms ago: executing program 0 (id=2602):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$qrtr(0x2a, 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$rds(0x15, 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x35cd, 0x10100, 0x3, 0x8f, 0x0, r1}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844})
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

191.924324ms ago: executing program 0 (id=2603):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)

16.490909ms ago: executing program 6 (id=2604):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000014000e0a49bf925471e7fc50983f097013799b641ea79c734b6ef4a909f6c2743f53f288e526b45fe0769b612cae30d347d692db24c0a7fc637fa1cb855773a97058bb1e89ea2629a03a000f0f527000fbdb2d1b65fa9d7a12f86e4727da8c12d73cadf3961abdb1e575e65427efb303c637f2785cdb1d128d656102d655936b6ead69539ab7933768022578e97e1df45e204b804dce7f1b89c9e85251bbe2f57c3b4be994e3dfaefab23911bf72bf62214f8d1154befd11e305e47343dc4bc0e603181bc0bcd0a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@deltfilter={0x5c, 0x2d, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0xf, 0x7b}}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x14000000)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x13, 0x1a, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x66}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_query, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @map_fd, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000500)='syzkaller\x00', 0x533, 0x47, &(0x7f00000007c0)=""/71, 0x0, 0x4, '\x00', r4, @fallback=0x2c, r1, 0x8, &(0x7f0000000840)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x5, 0x2, 0x7, 0x4}, {0x5, 0x1, 0x8, 0x51390033210c3dd4}, {0x4, 0x5, 0x1, 0xa}, {0x5, 0x4, 0x6, 0x5}, {0x5, 0x2, 0xd, 0x1}, {0x3, 0x3, 0x9, 0xa}, {0x5, 0x1, 0x7, 0xa}, {0x5, 0x1, 0x4, 0x2}], 0x10, 0x2}, 0x94)
timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f0000000080)=0x1ff)
write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

0s ago: executing program 0 (id=2605):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)

kernel console output (not intermixed with test programs):

 this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.073977][T10456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.105939][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  317.105952][   T28] audit: type=1326 audit(1756582661.995:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82ed8ebe9 code=0x7ffc0000
[  317.183051][T10426] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  317.190301][ T5789] Bluetooth: hci1: command tx timeout
[  317.205958][   T28] audit: type=1326 audit(1756582662.025:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa82ed8ebe9 code=0x7ffc0000
[  317.259358][   T28] audit: type=1326 audit(1756582662.035:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82ed8ebe9 code=0x7ffc0000
[  317.312036][   T11] tipc: Left network mode
[  317.326136][T10426] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  317.362703][T10456] hsr_slave_0: entered promiscuous mode
[  317.364233][   T28] audit: type=1326 audit(1756582662.035:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82ed8ebe9 code=0x7ffc0000
[  317.391739][   T28] audit: type=1326 audit(1756582662.035:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa82ed8ebe9 code=0x7ffc0000
[  317.414920][T10456] hsr_slave_1: entered promiscuous mode
[  317.416059][   T28] audit: type=1326 audit(1756582662.035:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82ed8ebe9 code=0x7ffc0000
[  317.448112][T10456] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  317.449911][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  317.459326][   T28] audit: type=1326 audit(1756582662.035:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82ed8ebe9 code=0x7ffc0000
[  317.466374][T10456] Cannot create hsr debugfs directory
[  317.485616][   T28] audit: type=1326 audit(1756582662.035:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa82ed8ebe9 code=0x7ffc0000
[  317.492037][T10426] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  317.710911][   T28] audit: type=1326 audit(1756582662.035:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82ed8ebe9 code=0x7ffc0000
[  317.752041][T10426] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  317.936013][   T28] audit: type=1326 audit(1756582662.035:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fa82ed8ebe9 code=0x7ffc0000
[  318.166382][ T5789] Bluetooth: hci0: command tx timeout
[  318.653355][T10456] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  318.708398][T10456] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  318.723725][T10456] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  318.740505][T10456] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  318.792207][T10426] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.813001][T10411] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.900880][T10426] 8021q: adding VLAN 0 to HW filter on device team0
[  318.945476][ T5789] Bluetooth: hci3: command tx timeout
[  318.955074][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.962398][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.990803][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.998070][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.275360][ T5789] Bluetooth: hci1: command tx timeout
[  319.301204][T10456] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.417385][T10456] 8021q: adding VLAN 0 to HW filter on device team0
[  319.458371][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.465635][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.524591][T10411] veth0_vlan: entered promiscuous mode
[  319.552451][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.559720][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.662336][   T11] hsr_slave_0: left promiscuous mode
[  319.670503][   T11] hsr_slave_1: left promiscuous mode
[  319.677255][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  319.685037][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  319.693795][   T11] bridge_slave_1: left allmulticast mode
[  319.700054][   T11] bridge_slave_1: left promiscuous mode
[  319.706760][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.717283][   T11] bridge_slave_0: left allmulticast mode
[  319.723020][   T11] bridge_slave_0: left promiscuous mode
[  319.729376][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.249511][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'.
[  320.460706][   T11] team0 (unregistering): Port device team_slave_1 removed
[  320.518144][   T11] team0 (unregistering): Port device team_slave_0 removed
[  320.566765][   T11] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.576011][   T11] bond_slave_1 (unregistering): left promiscuous mode
[  320.624599][   T11] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.634040][   T11] bond_slave_0 (unregistering): left promiscuous mode
[  321.134372][   T11] $Hÿ (unregistering): Released all slaves
[  321.284500][T10456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  321.334403][T10411] veth1_vlan: entered promiscuous mode
[  321.345316][ T5789] Bluetooth: hci1: command tx timeout
[  321.404164][T10532] loop1: detected capacity change from 0 to 512
[  321.457392][T10426] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.507014][T10532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  321.537482][T10411] veth0_macvtap: entered promiscuous mode
[  321.553029][T10411] veth1_macvtap: entered promiscuous mode
[  321.576681][T10411] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.583160][T10532] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.589599][T10411] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.633282][T10411] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.653051][T10411] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.662199][T10411] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.675427][T10411] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.802166][   T11] IPVS: stop unused estimator thread 0...
[  321.956060][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.963940][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.963944][ T5793] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  322.007460][ T5793] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  322.056538][ T5793] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  322.068233][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.098642][T10456] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.110851][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.117223][ T5793] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  322.182303][ T5793] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  322.218217][ T5793] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  322.249569][ T5793] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  322.281040][ T5793] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  322.333422][ T5793] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  322.349470][ T5793] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  322.403783][T10426] veth0_vlan: entered promiscuous mode
[  322.432179][T10426] veth1_vlan: entered promiscuous mode
[  322.513954][T10426] veth0_macvtap: entered promiscuous mode
[  322.548596][T10426] veth1_macvtap: entered promiscuous mode
[  322.609255][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.653030][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.668345][T10426] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.697294][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.726633][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.746879][T10426] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.790436][T10426] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.808413][T10426] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.820774][T10426] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.829739][T10426] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.898576][ T8086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.961065][T10456] veth0_vlan: entered promiscuous mode
[  323.074049][T10456] veth1_vlan: entered promiscuous mode
[  323.197596][T10456] veth0_macvtap: entered promiscuous mode
[  323.208945][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.222259][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.257808][T10456] veth1_macvtap: entered promiscuous mode
[  323.297542][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.318981][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.328158][T10456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.343343][T10456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.364206][T10456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.378865][T10456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.391758][T10456] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.405334][T10565] tipc: Started in network mode
[  323.410254][T10565] tipc: Node identity da3ac3c0348b, cluster identity 4711
[  323.423576][T10565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.454674][T10456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.473068][T10456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.484108][T10456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.500518][T10456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.519968][T10456] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.538801][T10565] tipc: Resetting bearer <eth:syzkaller0>
[  323.552394][T10564] tipc: Disabling bearer <eth:syzkaller0>
[  323.580885][T10456] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.607854][T10456] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.628896][T10456] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.639249][T10456] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.837110][T10570] loop4: detected capacity change from 0 to 1024
[  323.853267][T10571] loop5: detected capacity change from 0 to 164
[  323.863036][T10570] EXT4-fs: Ignoring removed orlov option
[  323.886592][T10570] EXT4-fs: Ignoring removed nomblk_io_submit option
[  323.890029][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.906481][T10571] ISOFS: unable to read i-node block
[  323.912366][T10571] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  323.928873][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.972737][T10570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.062807][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.120795][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.206288][T10411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.270580][ T3497] tipc: Left network mode
[  324.325499][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  324.340348][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  324.352776][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  324.383782][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  324.406274][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  324.413696][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  325.032753][T10597] loop5: detected capacity change from 0 to 164
[  325.057309][T10597] ISOFS: unable to read i-node block
[  325.067276][T10597] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  325.127988][T10595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  325.214786][T10595] tipc: Resetting bearer <eth:syzkaller0>
[  325.238272][T10594] tipc: Disabling bearer <eth:syzkaller0>
[  325.303242][T10599] loop5: detected capacity change from 0 to 1024
[  325.310796][T10599] EXT4-fs: Ignoring removed orlov option
[  325.317378][T10599] EXT4-fs: Ignoring removed nomblk_io_submit option
[  325.386982][T10599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.584837][T10426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.815715][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'.
[  326.095507][T10576] chnl_net:caif_netlink_parms(): no params data found
[  326.266089][T10618] loop6: detected capacity change from 0 to 1024
[  326.288937][T10622] loop5: detected capacity change from 0 to 164
[  326.306550][T10618] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  326.328431][T10622] ISOFS: unable to read i-node block
[  326.333947][T10622] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  326.344056][T10618] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  326.361512][T10618] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  326.404576][T10618] EXT4-fs error (device loop6): ext4_get_journal_inode:5807: inode #5: comm syz.6.1772: unexpected bad inode w/o EXT4_IGET_BAD
[  326.424523][T10618] EXT4-fs (loop6): no journal found
[  326.429992][T10618] EXT4-fs (loop6): can't get journal size
[  326.516350][T10618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  326.632553][ T5797] Bluetooth: hci2: command tx timeout
[  326.710923][T10633] loop4: detected capacity change from 0 to 1024
[  326.719507][T10633] EXT4-fs: Ignoring removed orlov option
[  326.725316][T10633] EXT4-fs: Ignoring removed nomblk_io_submit option
[  326.754977][T10633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.773449][T10456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.837118][ T3497] hsr_slave_0: left promiscuous mode
[  326.852761][ T3497] hsr_slave_1: left promiscuous mode
[  326.863662][T10411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.874473][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.883474][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.896843][ T3497] bridge_slave_1: left allmulticast mode
[  326.918037][ T3497] bridge_slave_1: left promiscuous mode
[  326.932261][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.965004][ T3497] bridge_slave_0: left allmulticast mode
[  326.994799][ T3497] bridge_slave_0: left promiscuous mode
[  327.004241][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.201157][ T3497] bond1 (unregistering): Released all slaves
[  327.346619][T10652] loop6: detected capacity change from 0 to 512
[  327.358287][T10652] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1783: casefold flag without casefold feature
[  327.371497][T10652] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1783: couldn't read orphan inode 15 (err -117)
[  327.385734][T10652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.402155][T10652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.906734][   T11] smc: removing ib device syz!
[  327.969937][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.134234][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.705724][ T5797] Bluetooth: hci2: command tx timeout
[  329.022548][ T3497] bond0 (unregistering): Released all slaves
[  329.156599][T10626] tipc: Started in network mode
[  329.161567][T10626] tipc: Node identity 6add1154dba9, cluster identity 4711
[  329.174062][T10626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.185827][T10576] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.193020][T10576] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.212542][T10576] bridge_slave_0: entered allmulticast mode
[  329.227262][T10576] bridge_slave_0: entered promiscuous mode
[  329.243438][T10576] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.262003][T10576] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.270472][T10576] bridge_slave_1: entered allmulticast mode
[  329.278131][T10576] bridge_slave_1: entered promiscuous mode
[  329.304097][T10642] tipc: Resetting bearer <eth:syzkaller0>
[  329.306633][T10664] loop6: detected capacity change from 0 to 128
[  329.311749][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1779'.
[  329.326665][T10625] tipc: Disabling bearer <eth:syzkaller0>
[  329.333640][T10664] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  329.353590][T10664] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  329.431071][T10576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.454914][T10576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.528886][T10576] team0: Port device team_slave_0 added
[  329.553817][T10576] team0: Port device team_slave_1 added
[  329.559764][T10668] loop4: detected capacity change from 0 to 1024
[  329.598487][T10668] EXT4-fs: Ignoring removed orlov option
[  329.623168][T10668] EXT4-fs: Ignoring removed nomblk_io_submit option
[  329.653974][T10576] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.676570][T10668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.679688][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.843111][T10576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.884320][T10411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.886937][T10576] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.910723][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.991211][T10576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.123473][T10576] hsr_slave_0: entered promiscuous mode
[  330.158800][T10576] hsr_slave_1: entered promiscuous mode
[  330.177100][T10576] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  330.184844][T10576] Cannot create hsr debugfs directory
[  330.194210][T10679] loop5: detected capacity change from 0 to 512
[  330.202634][T10456] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  330.301141][T10679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.325385][T10679] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.407043][T10689] loop6: detected capacity change from 0 to 512
[  330.455460][T10689] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  330.478286][T10689] EXT4-fs (loop6): orphan cleanup on readonly fs
[  330.508297][T10426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.534957][T10689] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #16: comm syz.6.1791: corrupted inode contents
[  330.551701][T10576] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  330.556613][T10689] EXT4-fs (loop6): Remounting filesystem read-only
[  330.573089][T10689] EXT4-fs (loop6): 1 truncate cleaned up
[  330.578630][T10576] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  330.590584][   T76] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  330.605163][   T76] __quota_error: 16 callbacks suppressed
[  330.605175][   T76] Quota error (device loop6): write_blk: dquota write failed
[  330.626638][   T76] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries
[  330.642251][   T76] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  330.651214][T10576] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  330.653571][   T76] Quota error (device loop6): write_blk: dquota write failed
[  330.668473][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'.
[  330.678555][   T76] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list
[  330.689704][   T76] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  330.698545][T10576] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  330.700237][   T76] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  330.716302][   T76] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  330.728400][T10689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  330.785415][ T5797] Bluetooth: hci2: command tx timeout
[  330.839221][T10456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.893170][T10706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  330.931473][T10576] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.956908][T10706] tipc: Resetting bearer <eth:syzkaller0>
[  330.970189][T10705] tipc: Disabling bearer <eth:syzkaller0>
[  330.999742][T10576] 8021q: adding VLAN 0 to HW filter on device team0
[  331.031385][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.038836][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.073379][T10710] loop6: detected capacity change from 0 to 1024
[  331.088379][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.093662][T10710] EXT4-fs: Ignoring removed orlov option
[  331.095573][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.101294][T10710] EXT4-fs: Ignoring removed nomblk_io_submit option
[  331.137962][T10710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.277557][T10456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.643918][T10576] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.651603][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1802'.
[  331.981865][T10748] loop4: detected capacity change from 0 to 1024
[  331.996741][T10748] EXT4-fs: Ignoring removed orlov option
[  332.003902][T10748] EXT4-fs: Ignoring removed nomblk_io_submit option
[  332.056789][T10748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.214083][T10411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.289786][T10576] veth0_vlan: entered promiscuous mode
[  332.292138][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1811'.
[  332.322639][T10576] veth1_vlan: entered promiscuous mode
[  332.332224][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1811'.
[  332.373861][T10576] veth0_macvtap: entered promiscuous mode
[  332.388848][T10576] veth1_macvtap: entered promiscuous mode
[  332.428115][T10576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.439018][T10576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.449888][T10576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.460444][T10576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.470573][T10576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.481339][T10576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.499074][T10576] batman_adv: batadv0: Interface activated: batadv_slave_0
[  332.526021][T10576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.544848][T10576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.556938][T10576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.568653][T10576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.586843][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1813'.
[  332.596131][T10576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.636446][T10576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.667300][T10774] loop4: detected capacity change from 0 to 512
[  332.678274][T10576] batman_adv: batadv0: Interface activated: batadv_slave_1
[  332.688282][T10774] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  332.732442][T10576] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.752013][T10774] EXT4-fs (loop4): 1 truncate cleaned up
[  332.761869][T10576] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.771270][T10774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.797250][T10576] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.837452][T10576] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.865455][ T5797] Bluetooth: hci2: command tx timeout
[  332.883116][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1815'.
[  332.997244][   T28] audit: type=1804 audit(1756582677.875:5306): pid=10778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1814" name="/newroot/24/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  333.034170][T10774] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1814'.
[  333.180870][T10411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.307747][T10785] loop6: detected capacity change from 0 to 1024
[  333.326158][T10785] EXT4-fs: Ignoring removed orlov option
[  333.332719][T10785] EXT4-fs: Ignoring removed nomblk_io_submit option
[  333.337074][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  333.361023][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.399353][T10787] loop4: detected capacity change from 0 to 164
[  333.419258][T10785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  333.443828][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  333.452846][T10787] ISOFS: unable to read i-node block
[  333.464763][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.487800][T10787] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  333.577331][T10791] loop5: detected capacity change from 0 to 512
[  333.617847][T10791] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  333.662954][T10456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.688501][T10791] EXT4-fs (loop5): 1 truncate cleaned up
[  333.709579][T10791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.722447][T10794] loop7: detected capacity change from 0 to 512
[  333.780897][T10794] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.793646][T10794] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.910312][T10426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.000944][T10576] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.032697][T10810] loop5: detected capacity change from 0 to 512
[  334.043432][T10576] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.091477][T10576] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.108146][T10576] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.124770][T10576] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.152922][T10576] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.182880][T10810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.186047][T10576] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.212804][T10810] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.239447][T10576] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.242669][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1826'.
[  334.296869][T10576] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.330501][T10576] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.491003][T10426] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.551926][T10426] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.608762][T10426] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.644408][T10426] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.719438][T10426] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.782912][T10426] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.812000][T10426] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.842404][T10426] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.860179][T10426] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  334.891571][T10426] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  335.021534][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  335.348163][   T28] audit: type=1326 audit(1756582680.225:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10837 comm="syz.4.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  335.399637][   T28] audit: type=1326 audit(1756582680.225:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10837 comm="syz.4.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  335.471962][   T28] audit: type=1326 audit(1756582680.255:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10837 comm="syz.4.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  335.532668][T10426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.574428][T10840] loop4: detected capacity change from 0 to 736
[  335.634874][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  335.636192][   T48] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.798566][   T48] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.921435][   T48] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.051221][   T48] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.062056][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  336.297889][T10843] loop4: detected capacity change from 0 to 512
[  336.353815][T10843] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1839: casefold flag without casefold feature
[  336.372762][T10843] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1839: couldn't read orphan inode 15 (err -117)
[  336.391457][T10843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  336.404529][   T48] tipc: Left network mode
[  336.423880][T10843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.564637][T10576] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.837795][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  336.849850][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  336.858176][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  336.867635][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  336.926246][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  336.941580][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  337.392448][T10860] loop6: detected capacity change from 0 to 128
[  337.492972][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  337.508515][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  337.516761][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  337.538722][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  337.555790][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  337.570619][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  338.396410][T10849] chnl_net:caif_netlink_parms(): no params data found
[  338.554535][   T48] hsr_slave_0: left promiscuous mode
[  338.572328][   T48] hsr_slave_1: left promiscuous mode
[  338.592388][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  338.600686][T10894] loop4: detected capacity change from 0 to 128
[  338.609848][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.619184][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.627348][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.635501][   T48] bridge_slave_1: left allmulticast mode
[  338.641322][   T48] bridge_slave_1: left promiscuous mode
[  338.647283][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.659880][   T48] bridge_slave_0: left allmulticast mode
[  338.666221][   T48] bridge_slave_0: left promiscuous mode
[  338.672007][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.708930][   T48] veth1_macvtap: left promiscuous mode
[  338.714939][   T48] veth0_macvtap: left promiscuous mode
[  338.720731][   T48] veth1_vlan: left promiscuous mode
[  338.726449][   T48] veth0_vlan: left promiscuous mode
[  339.025593][ T5789] Bluetooth: hci2: command tx timeout
[  339.423699][   T48] team0 (unregistering): Port device team_slave_1 removed
[  339.482270][   T48] team0 (unregistering): Port device team_slave_0 removed
[  339.534799][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  339.593375][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  339.675814][ T5789] Bluetooth: hci3: command tx timeout
[  340.161275][   T48] bond0 (unregistering): Released all slaves
[  340.444401][T10849] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.485368][T10849] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.493940][T10849] bridge_slave_0: entered allmulticast mode
[  340.513322][T10849] bridge_slave_0: entered promiscuous mode
[  340.537876][T10849] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.546338][T10849] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.553594][T10849] bridge_slave_1: entered allmulticast mode
[  340.577072][T10849] bridge_slave_1: entered promiscuous mode
[  340.595177][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  340.595192][   T28] audit: type=1326 audit(1756582685.465:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.6.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  340.643495][   T28] audit: type=1326 audit(1756582685.465:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.6.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  340.690583][   T28] audit: type=1326 audit(1756582685.465:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.6.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  340.725989][T10914] loop6: detected capacity change from 0 to 128
[  340.732517][   T28] audit: type=1326 audit(1756582685.465:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.6.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  340.876104][T10849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.899795][T10849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.002488][T10861] chnl_net:caif_netlink_parms(): no params data found
[  341.039664][T10849] team0: Port device team_slave_0 added
[  341.067002][T10849] team0: Port device team_slave_1 added
[  341.113778][ T5789] Bluetooth: hci2: command tx timeout
[  341.166626][T10849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.173612][T10849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.200315][T10849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.239552][T10849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.246628][T10849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.272870][T10849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.292262][T10861] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.299645][T10861] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.307181][T10861] bridge_slave_0: entered allmulticast mode
[  341.314486][T10861] bridge_slave_0: entered promiscuous mode
[  341.323954][T10861] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.331229][T10861] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.338512][T10861] bridge_slave_1: entered allmulticast mode
[  341.346003][T10861] bridge_slave_1: entered promiscuous mode
[  341.421559][T10849] hsr_slave_0: entered promiscuous mode
[  341.429237][T10849] hsr_slave_1: entered promiscuous mode
[  341.435548][T10849] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  341.443128][T10849] Cannot create hsr debugfs directory
[  341.466007][T10861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.478556][T10861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.544313][T10861] team0: Port device team_slave_0 added
[  341.554543][T10861] team0: Port device team_slave_1 added
[  341.608955][T10861] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.617491][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.646141][T10861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.680520][   T48] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.704562][T10861] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.711775][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.739347][T10861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.756600][ T5789] Bluetooth: hci3: command tx timeout
[  341.817486][   T48] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.853031][T10861] hsr_slave_0: entered promiscuous mode
[  341.860072][T10861] hsr_slave_1: entered promiscuous mode
[  341.869171][T10861] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  341.877015][T10861] Cannot create hsr debugfs directory
[  341.917770][   T48] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.012440][   T48] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.074185][T10849] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  342.088402][T10849] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  342.128116][T10849] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  342.152012][T10849] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  342.283996][T10861] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  342.294184][T10861] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  342.323589][T10861] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  342.348135][T10861] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  342.522338][T10849] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.551988][T10849] 8021q: adding VLAN 0 to HW filter on device team0
[  342.591050][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.598317][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.619574][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.626777][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.706624][T10861] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.771483][T10861] 8021q: adding VLAN 0 to HW filter on device team0
[  342.810835][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.818057][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.842425][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.849773][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  343.193786][ T5789] Bluetooth: hci2: command tx timeout
[  343.237415][T10849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.364057][T10861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.469329][   T48] hsr_slave_0: left promiscuous mode
[  343.482785][   T48] hsr_slave_1: left promiscuous mode
[  343.490952][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  343.499064][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  343.509123][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  343.517157][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  343.530428][   T48] bridge_slave_1: left allmulticast mode
[  343.536786][   T48] bridge_slave_1: left promiscuous mode
[  343.542602][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.553387][   T48] bridge_slave_0: left allmulticast mode
[  343.561206][   T48] bridge_slave_0: left promiscuous mode
[  343.568616][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.601916][   T48] veth1_macvtap: left promiscuous mode
[  343.607841][   T48] veth0_macvtap: left promiscuous mode
[  343.613490][   T48] veth1_vlan: left promiscuous mode
[  343.618991][   T48] veth0_vlan: left promiscuous mode
[  343.836111][ T5789] Bluetooth: hci3: command tx timeout
[  344.247617][   T48] team0 (unregistering): Port device team_slave_1 removed
[  344.299640][   T48] team0 (unregistering): Port device team_slave_0 removed
[  344.352959][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  344.407856][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  344.934379][   T48] bond0 (unregistering): Released all slaves
[  345.285906][ T5789] Bluetooth: hci2: command tx timeout
[  345.414001][T10861] veth0_vlan: entered promiscuous mode
[  345.431910][T10849] veth0_vlan: entered promiscuous mode
[  345.453619][T10861] veth1_vlan: entered promiscuous mode
[  345.462335][T10849] veth1_vlan: entered promiscuous mode
[  345.518001][T10861] veth0_macvtap: entered promiscuous mode
[  345.526748][T10849] veth0_macvtap: entered promiscuous mode
[  345.538430][T10849] veth1_macvtap: entered promiscuous mode
[  345.547741][T10861] veth1_macvtap: entered promiscuous mode
[  345.572779][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.583890][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.597863][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.609964][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.621484][T10861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.632682][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.643597][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.654658][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.665846][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.677178][T10861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.684871][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.695887][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.705888][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.717606][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.727707][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.738204][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.750759][T10849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.770423][T10861] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.779509][T10861] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.790988][T10861] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.800031][T10861] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.815668][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.826519][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.836658][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.847243][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.858262][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.869014][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.881573][T10849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.900147][T10849] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.909463][ T5789] Bluetooth: hci3: command tx timeout
[  345.909508][T10849] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.929176][T10849] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.938021][T10849] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.076773][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.084626][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.103644][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.116003][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.158059][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.158850][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.166582][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.177241][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.323076][T10961] loop8: detected capacity change from 0 to 512
[  346.381918][T10961] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.410796][T10961] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.430724][T10964] bio_check_eod: 6202 callbacks suppressed
[  346.430741][T10964] syz.9.1841: attempt to access beyond end of device
[  346.430741][T10964] loop19: rw=0, sector=0, nr_sectors = 1 limit=0
[  346.452026][T10964] FAT-fs (loop19): unable to read boot sector
[  346.609354][T10849] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  346.632992][T10849] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  346.655066][T10849] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  346.679958][T10849] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  346.704027][T10849] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  346.725428][T10849] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  346.743890][T10849] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  346.763981][T10849] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  346.781147][T10849] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  346.809041][T10849] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  346.918386][   T28] audit: type=1326 audit(1756582691.805:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  346.959517][   T28] audit: type=1326 audit(1756582691.805:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  346.984672][   T28] audit: type=1326 audit(1756582691.835:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  347.045871][   T28] audit: type=1326 audit(1756582691.835:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  347.091547][   T28] audit: type=1326 audit(1756582691.835:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  347.157727][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1869'.
[  347.172717][   T28] audit: type=1326 audit(1756582691.845:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  347.244563][   T28] audit: type=1326 audit(1756582691.845:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  347.283576][   T28] audit: type=1326 audit(1756582691.845:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  347.311716][   T28] audit: type=1326 audit(1756582691.845:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  347.369068][   T28] audit: type=1326 audit(1756582691.845:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  347.534434][T10990] tipc: Started in network mode
[  347.539672][T10990] tipc: Node identity , cluster identity 4711
[  347.546012][T10990] tipc: Failed to obtain node identity
[  347.565365][T10990] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  347.581436][T10990] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  347.603278][T10990] syzkaller0: entered promiscuous mode
[  347.609052][T10990] syzkaller0: entered allmulticast mode
[  347.640584][T10974] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1871'.
[  347.888025][T10997] loop9: detected capacity change from 0 to 512
[  347.958450][T10997] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.982600][T10997] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  348.083674][T10849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.305656][T10861] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  348.353794][T10861] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  348.396550][T10861] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  348.431093][T10861] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  348.475706][T10861] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  348.516222][T10861] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  348.548207][T10861] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  348.576731][T10861] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  348.606172][T10861] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  348.650385][T10861] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  349.244520][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  349.254020][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  349.263332][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  349.287738][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  349.303684][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  349.322058][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  350.853137][ T3548] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.029724][ T3548] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.054139][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1881'.
[  351.163861][T10861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.383512][ T3548] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.425336][ T5797] Bluetooth: hci2: command tx timeout
[  351.548210][ T3548] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.090504][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'.
[  352.233909][T11002] chnl_net:caif_netlink_parms(): no params data found
[  352.333285][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  352.372820][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  352.383413][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  352.405376][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  352.423601][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  352.431099][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  352.490457][T11038] loop4: detected capacity change from 0 to 512
[  352.520519][T11038] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  352.533845][T11038] EXT4-fs (loop4): Can't support bigalloc feature without extents feature
[  352.533845][T11038] 
[  352.545553][T11038] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  352.566246][T11038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  352.714521][   T28] kauditd_printk_skb: 44 callbacks suppressed
[  352.714536][   T28] audit: type=1326 audit(1756582697.595:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.6.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  352.753215][   T28] audit: type=1326 audit(1756582697.595:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.6.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  352.756374][T10411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.792489][T11002] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.800929][T11002] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.813469][T11002] bridge_slave_0: entered allmulticast mode
[  352.823317][   T28] audit: type=1326 audit(1756582697.595:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.6.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  352.853576][T11002] bridge_slave_0: entered promiscuous mode
[  352.875292][   T28] audit: type=1326 audit(1756582697.595:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.6.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  352.941225][T11002] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.955191][   T28] audit: type=1326 audit(1756582697.595:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.6.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  352.979117][T11002] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.996101][T11002] bridge_slave_1: entered allmulticast mode
[  353.014533][T11002] bridge_slave_1: entered promiscuous mode
[  353.015246][   T28] audit: type=1326 audit(1756582697.595:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.6.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  353.075233][   T28] audit: type=1326 audit(1756582697.595:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.6.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  353.139488][   T28] audit: type=1326 audit(1756582697.595:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.6.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  353.195206][   T28] audit: type=1326 audit(1756582697.595:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.6.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  353.218393][   T28] audit: type=1326 audit(1756582697.595:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.6.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  353.263292][T11002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  353.318570][T11002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.441361][T11002] team0: Port device team_slave_0 added
[  353.461991][T11002] team0: Port device team_slave_1 added
[  353.506946][ T5797] Bluetooth: hci2: command tx timeout
[  353.538307][T11036] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1891'.
[  353.567374][T11002] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.574419][T11002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.602764][T11002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.713335][T11002] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.731211][T11002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.791344][T11002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.074939][T11002] hsr_slave_0: entered promiscuous mode
[  354.097466][T11002] hsr_slave_1: entered promiscuous mode
[  354.106288][T11002] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  354.113999][T11002] Cannot create hsr debugfs directory
[  354.151951][T11056] loop4: detected capacity change from 0 to 1024
[  354.170743][ T3548] hsr_slave_0: left promiscuous mode
[  354.178064][T11056] EXT4-fs: Ignoring removed bh option
[  354.183707][T11056] EXT4-fs: inline encryption not supported
[  354.190182][ T3548] hsr_slave_1: left promiscuous mode
[  354.198421][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  354.205993][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0
[  354.210961][T11056] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  354.229469][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  354.243482][T11056] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  354.253943][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1
[  354.285481][T11056] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 2: comm syz.4.1897: lblock 2 mapped to illegal pblock 2 (length 1)
[  354.301159][ T3548] bridge_slave_1: left allmulticast mode
[  354.320336][ T3548] bridge_slave_1: left promiscuous mode
[  354.329048][T11056] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 48: comm syz.4.1897: lblock 0 mapped to illegal pblock 48 (length 1)
[  354.329196][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.357327][ T3548] bridge_slave_0: left allmulticast mode
[  354.363024][ T3548] bridge_slave_0: left promiscuous mode
[  354.368871][T11056] EXT4-fs error (device loop4): ext4_acquire_dquot:6940: comm syz.4.1897: Failed to acquire dquot type 0
[  354.374831][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.382831][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1898'.
[  354.403755][T11056] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  354.435475][T11056] EXT4-fs error (device loop4): ext4_evict_inode:252: inode #11: comm syz.4.1897: mark_inode_dirty error
[  354.450906][ T3548] veth1_macvtap: left promiscuous mode
[  354.456829][ T3548] veth0_macvtap: left promiscuous mode
[  354.462514][ T3548] veth1_vlan: left promiscuous mode
[  354.464346][T11056] EXT4-fs warning (device loop4): ext4_evict_inode:255: couldn't mark inode dirty (err -117)
[  354.473336][ T5797] Bluetooth: hci3: command tx timeout
[  354.496232][ T3548] veth0_vlan: left promiscuous mode
[  354.502956][T11056] EXT4-fs (loop4): 1 orphan inode deleted
[  354.525332][   T42] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  354.542477][T11056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.610854][   T42] EXT4-fs error (device loop4): ext4_release_dquot:6976: comm kworker/u4:2: Failed to release dquot type 0
[  354.696296][T10411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.712677][T10411] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 1 in block_group 0
[  354.749838][T10411] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  354.769141][T10411] EXT4-fs error (device loop4): ext4_quota_off:7224: inode #3: comm syz-executor: mark_inode_dirty error
[  354.872310][T11066] loop6: detected capacity change from 0 to 512
[  354.880372][T11068] loop4: detected capacity change from 0 to 1024
[  354.893461][T11068] EXT4-fs: Ignoring removed orlov option
[  354.899867][T11068] EXT4-fs: Ignoring removed nomblk_io_submit option
[  354.948748][T11068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.993203][T11066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.065465][T11066] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.118022][T10411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.539813][T11066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  355.585262][ T5797] Bluetooth: hci2: command tx timeout
[  355.752290][T10456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.013707][ T3548] team0 (unregistering): Port device team_slave_1 removed
[  356.103606][ T3548] team0 (unregistering): Port device team_slave_0 removed
[  356.181656][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  356.254161][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  356.547332][ T5797] Bluetooth: hci3: command tx timeout
[  356.749907][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1906'.
[  357.179806][ T3548] bond0 (unregistering): Released all slaves
[  357.412277][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1902'.
[  357.453043][T11102] tipc: Started in network mode
[  357.465408][T11102] tipc: Node identity a21a59e1e08c, cluster identity 4711
[  357.495348][T11102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.543672][T11109] loop4: detected capacity change from 0 to 128
[  357.575051][T11109] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  357.577589][T11101] tipc: Resetting bearer <eth:syzkaller0>
[  357.642116][T11109] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  357.675824][ T5797] Bluetooth: hci2: command tx timeout
[  357.766257][T11100] tipc: Disabling bearer <eth:syzkaller0>
[  357.818229][T11034] chnl_net:caif_netlink_parms(): no params data found
[  357.828405][T10411] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  357.943971][T11115] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  358.276998][T11126] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1913'.
[  358.336224][T11034] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.343493][T11034] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.364704][T11034] bridge_slave_0: entered allmulticast mode
[  358.376825][T11034] bridge_slave_0: entered promiscuous mode
[  358.396875][T11034] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.404346][T11034] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.438380][T11034] bridge_slave_1: entered allmulticast mode
[  358.446249][T11034] bridge_slave_1: entered promiscuous mode
[  358.463240][T11130] loop4: detected capacity change from 0 to 128
[  358.494351][T11130] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  358.512442][T11130] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  358.625432][ T5797] Bluetooth: hci3: command tx timeout
[  358.695383][T10411] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  358.720476][ T3548] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.748986][T11034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.776103][T11139] loop4: detected capacity change from 0 to 512
[  358.784179][T11139] EXT4-fs: Ignoring removed nobh option
[  358.808249][T11139] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1916: iget: bad i_size value: 38620345925642
[  358.821413][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1914'.
[  358.821619][T11139] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1916: couldn't read orphan inode 15 (err -117)
[  358.844088][T11139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.864899][T11034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.942470][T10411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.944761][ T3548] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.013376][T11034] team0: Port device team_slave_0 added
[  359.037598][T11143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.099713][ T3548] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.123069][T11034] team0: Port device team_slave_1 added
[  359.173285][ T3548] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.213309][T11142] tipc: Resetting bearer <eth:syzkaller0>
[  359.232630][T11141] tipc: Disabling bearer <eth:syzkaller0>
[  359.288111][T11034] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.298673][T11034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.325649][T11034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.365903][T11034] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.374635][T11034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.408245][T11034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.493096][T11002] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  359.506404][T11002] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  359.506510][T11155] loop4: detected capacity change from 0 to 128
[  359.536531][T11002] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  359.558947][T11155] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  359.582041][T11155] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  359.657375][T11002] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  359.674953][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1923'.
[  359.751351][T10411] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  359.928671][T11034] hsr_slave_0: entered promiscuous mode
[  359.944072][T11034] hsr_slave_1: entered promiscuous mode
[  359.960158][T11034] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  359.982222][T11034] Cannot create hsr debugfs directory
[  360.193630][T11179] loop6: detected capacity change from 0 to 512
[  360.211446][T11170] (null): rxe_set_mtu: Set mtu to 1024
[  360.247272][T11179] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.266228][T11179] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.543328][T11179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  360.604781][T11170] infiniband syz!: set active
[  360.613320][T11170] infiniband syz!: added team_slave_0
[  360.667825][T10456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.705337][ T5797] Bluetooth: hci3: command tx timeout
[  360.707691][T11170] RDS/IB: syz!: added
[  360.714851][T11170] smc: adding ib device syz! with port count 1
[  360.721093][T11170] smc:    ib device syz! port 1 has pnetid 
[  360.794771][T11189] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  360.856716][T11002] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.111481][T11002] 8021q: adding VLAN 0 to HW filter on device team0
[  361.188613][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.195905][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.208430][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.215698][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.441873][T11034] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  361.471245][T11034] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  361.516761][T11034] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  361.539707][T11034] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  361.784566][T11034] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.828827][T11034] 8021q: adding VLAN 0 to HW filter on device team0
[  361.853356][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.860645][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.917878][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.925220][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.080992][T11002] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.234780][T11002] veth0_vlan: entered promiscuous mode
[  362.278762][T11002] veth1_vlan: entered promiscuous mode
[  362.298750][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1933'.
[  362.420707][T11002] veth0_macvtap: entered promiscuous mode
[  362.451399][T11002] veth1_macvtap: entered promiscuous mode
[  362.499270][T11002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.525734][T11002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.546480][T11002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.565204][T11002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.585624][T11002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.597959][T11002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.605006][T11227] loop6: detected capacity change from 0 to 512
[  362.611113][T11002] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.659956][T11002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.671542][T11002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.691394][T11227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.707805][T11002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.724323][T11227] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  362.737317][T11002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.757555][T11002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.789285][T11002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.807189][T11002] batman_adv: batadv0: Interface activated: batadv_slave_1
[  362.844797][T11034] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.868476][T11002] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  362.878325][T11002] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  362.889852][T11002] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  362.899119][T11002] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.037906][T11227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  363.138192][T11034] veth0_vlan: entered promiscuous mode
[  363.152048][T10456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.169992][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.183444][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.270121][T11034] veth1_vlan: entered promiscuous mode
[  363.305920][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.313797][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.329308][T11235] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  363.431577][T11034] veth0_macvtap: entered promiscuous mode
[  363.517363][T11034] veth1_macvtap: entered promiscuous mode
[  363.603974][T11034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  363.675684][T11034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.705567][T11034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  363.735171][T11034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.762566][T11034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  363.806190][T11034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.832599][T11034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  363.856213][T11034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.885923][T11034] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.017243][T11034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.055350][T11034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.073477][T11034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.084337][T11034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.099930][T11034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.116582][T11034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.127353][T11034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.138587][T11034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.164871][T11034] batman_adv: batadv0: Interface activated: batadv_slave_1
[  364.237681][ T3548] hsr_slave_0: left promiscuous mode
[  364.249753][ T3548] hsr_slave_1: left promiscuous mode
[  364.263250][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  364.285603][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0
[  364.300907][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.308905][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1
[  364.317441][ T3548] bridge_slave_1: left allmulticast mode
[  364.323235][ T3548] bridge_slave_1: left promiscuous mode
[  364.331080][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.342806][ T3548] bridge_slave_0: left allmulticast mode
[  364.350106][ T3548] bridge_slave_0: left promiscuous mode
[  364.357104][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.420329][ T3548] veth1_macvtap: left promiscuous mode
[  364.431397][ T3548] veth0_macvtap: left promiscuous mode
[  364.439348][ T3548] veth1_vlan: left promiscuous mode
[  364.444836][ T3548] veth0_vlan: left promiscuous mode
[  365.198058][ T3548] team0 (unregistering): Port device team_slave_1 removed
[  365.250931][ T3548] team0 (unregistering): Port device team_slave_0 removed
[  365.309111][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  365.366751][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  365.955016][ T3548] bond0 (unregistering): Released all slaves
[  366.048513][T11034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.059520][T11034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.071206][T11034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.080202][T11034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.110749][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1941'.
[  366.192542][T11269] loop6: detected capacity change from 0 to 512
[  366.256330][T11269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.277950][T11269] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  366.370079][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.415956][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.525796][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.551758][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.948160][   T28] kauditd_printk_skb: 56 callbacks suppressed
[  366.948175][   T28] audit: type=1326 audit(1756582711.835:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  366.981742][   T28] audit: type=1326 audit(1756582711.865:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  367.013866][   T28] audit: type=1326 audit(1756582711.865:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  367.081814][   T28] audit: type=1326 audit(1756582711.865:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  367.086925][T11292] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  367.132141][   T28] audit: type=1326 audit(1756582711.865:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  367.167702][T10456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.218459][   T28] audit: type=1326 audit(1756582711.865:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  367.295457][   T28] audit: type=1326 audit(1756582711.865:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  367.381895][   T28] audit: type=1326 audit(1756582711.865:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  367.472206][   T28] audit: type=1326 audit(1756582711.865:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  367.523499][   T28] audit: type=1326 audit(1756582711.865:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  367.666747][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1952'.
[  367.844397][T11290] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1943'.
[  367.994799][T11320] pim6reg1: entered allmulticast mode
[  369.007829][T11363] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1970'.
[  369.292680][T11374] program syz.4.1976 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  369.470636][T11379] loop4: detected capacity change from 0 to 512
[  369.479508][T11382] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  369.524755][T11379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.527591][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1980'.
[  369.537523][T11379] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  369.949086][T11379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  369.995434][T11405] loop6: detected capacity change from 0 to 164
[  370.029701][T10411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.045019][T11405] rock: directory entry would overflow storage
[  370.051627][T11405] rock: sig=0x66, size=4, remaining=3
[  370.214862][T11409] loop4: detected capacity change from 0 to 1024
[  370.242969][T11409] EXT4-fs: Ignoring removed orlov option
[  370.254393][T11409] EXT4-fs: Ignoring removed nomblk_io_submit option
[  370.302722][T11409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  370.441908][T10411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.533620][T11422] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  370.648728][T11423] block device autoloading is deprecated and will be removed.
[  371.192047][T11453] loop4: detected capacity change from 0 to 1024
[  371.206257][T11453] EXT4-fs: Ignoring removed orlov option
[  371.220405][T11453] EXT4-fs: Ignoring removed nomblk_io_submit option
[  371.251535][T11453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  371.373216][T10411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.566343][T11467] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  372.398315][T11502] loop6: detected capacity change from 0 to 128
[  372.413801][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'.
[  372.729214][T11502] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  372.944646][T11502] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  373.328262][T11515] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  373.407456][T10456] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  373.853486][T11539] loop6: detected capacity change from 0 to 128
[  373.871313][T11539] FAT-fs (loop6): Unrecognized mount option "dot–" or missing value
[  373.902508][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2026'.
[  373.927726][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2028'.
[  374.274528][T11560] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2035'.
[  374.372229][T11563] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  374.861511][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2040'.
[  375.251140][T11600] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  375.593031][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2053'.
[  375.866636][T11625] cgroup2: Unknown parameter 'defcontext'
[  376.149235][T11637] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  376.869013][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'.
[  377.115841][T11672] syz.4.2076[11672] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  377.115985][T11672] syz.4.2076[11672] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  377.151391][T11673] pim6reg1: entered allmulticast mode
[  377.382318][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2081'.
[  377.572280][T11688] loop6: detected capacity change from 0 to 1024
[  377.588788][T11688] EXT4-fs: Ignoring removed orlov option
[  377.599938][T11688] EXT4-fs: Ignoring removed nomblk_io_submit option
[  377.656895][T11688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.822736][T10456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.224907][T11693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  378.290255][T11709] pim6reg1: entered allmulticast mode
[  378.545982][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4
[  378.555058][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2
[  378.563909][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  378.588107][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  378.601112][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  378.613099][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  378.624751][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  378.657244][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  378.665994][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  378.673773][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  378.682809][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2095'.
[  378.695557][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  378.714107][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  378.722636][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  378.735527][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  378.743395][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  378.761347][ T5778] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  378.775579][ T5778] hid-generic 0000:3000000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  378.879010][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  379.024991][T11735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2098'.
[  379.528891][T11741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  379.724962][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'.
[  380.504496][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2118'.
[  380.671078][T11799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.687599][T11799] tipc: Resetting bearer <eth:syzkaller0>
[  380.714695][T11797] tipc: Disabling bearer <eth:syzkaller0>
[  380.783147][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2122'.
[  381.065034][T11811] pim6reg1: entered allmulticast mode
[  381.893504][T11837] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.061246][T11837] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.169988][T11849] syz.4.2138[11849] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  382.170128][T11849] syz.4.2138[11849] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  382.216900][T11837] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.359373][T11837] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.611249][T11837] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.733143][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2146'.
[  382.753696][T11837] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.784822][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2144'.
[  382.873798][T11837] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.922873][T11837] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  383.436240][T11900] pim6reg1: entered allmulticast mode
[  383.525647][T11902] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2154'.
[  383.611476][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2156'.
[  383.981763][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'.
[  384.070777][T11932] pim6reg1: entered allmulticast mode
[  384.349169][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2169'.
[  384.578190][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'.
[  384.747536][   T28] kauditd_printk_skb: 31 callbacks suppressed
[  384.747551][   T28] audit: type=1326 audit(1756582729.635:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  384.821772][   T28] audit: type=1326 audit(1756582729.665:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  384.851988][T11971] syz.4.2177[11971] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  384.852122][T11971] syz.4.2177[11971] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  384.890799][   T28] audit: type=1326 audit(1756582729.675:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  384.960948][   T28] audit: type=1326 audit(1756582729.675:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0d9d98ec23 code=0x7ffc0000
[  385.035377][   T28] audit: type=1326 audit(1756582729.675:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0d9d98d69f code=0x7ffc0000
[  385.095645][   T28] audit: type=1326 audit(1756582729.685:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0d9d98ec77 code=0x7ffc0000
[  385.143818][   T28] audit: type=1326 audit(1756582729.685:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d9d98d550 code=0x7ffc0000
[  385.193059][   T28] audit: type=1326 audit(1756582729.685:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0d9d98d84a code=0x7ffc0000
[  385.216381][   T28] audit: type=1326 audit(1756582729.685:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  385.253796][   T28] audit: type=1326 audit(1756582729.705:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  385.278222][T11978] pim6reg1: entered allmulticast mode
[  385.297927][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2182'.
[  386.140170][T12005] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2190'.
[  386.891141][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2198'.
[  386.928437][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2200'.
[  387.176400][T12038] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2202'.
[  387.986472][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'.
[  388.155885][T12073] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2213'.
[  388.484112][T12077] netlink: 'syz.4.2215': attribute type 14 has an invalid length.
[  388.706401][T12090] syz.4.2220[12090] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  388.706542][T12090] syz.4.2220[12090] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  388.994890][T12099] __nla_validate_parse: 2 callbacks suppressed
[  388.994909][T12099] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2222'.
[  389.301851][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2224'.
[  389.495296][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2228'.
[  389.504871][T12117] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  389.589713][T12117] team1: entered promiscuous mode
[  389.605304][T12117] team1: entered allmulticast mode
[  389.802971][T12127] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2232'.
[  390.250668][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2236'.
[  390.632543][   T28] kauditd_printk_skb: 45 callbacks suppressed
[  390.632558][   T28] audit: type=1326 audit(1756582735.515:5543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  390.691077][T12158] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2242'.
[  390.707867][   T28] audit: type=1326 audit(1756582735.515:5544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  390.762718][   T28] audit: type=1326 audit(1756582735.515:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  390.832031][   T28] audit: type=1326 audit(1756582735.515:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  390.889670][   T28] audit: type=1326 audit(1756582735.515:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  390.940190][   T28] audit: type=1326 audit(1756582735.515:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  390.972355][   T28] audit: type=1326 audit(1756582735.515:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  391.034706][   T28] audit: type=1326 audit(1756582735.525:5550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  391.085766][   T28] audit: type=1326 audit(1756582735.545:5551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0d9d98ebe9 code=0x7ffc0000
[  391.148484][   T28] audit: type=1326 audit(1756582735.545:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0d9d98ec23 code=0x7ffc0000
[  391.524702][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2249'.
[  392.048764][T12195] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2255'.
[  392.479301][T12210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2260'.
[  392.590672][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2261'.
[  392.746561][T11994] Set syz1 is full, maxelem 65536 reached
[  394.198798][T12298] __nla_validate_parse: 3 callbacks suppressed
[  394.198816][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'.
[  394.511211][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2286'.
[  395.442671][T12345] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2299'.
[  395.794839][T12363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2305'.
[  395.809596][T12363] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2305'.
[  396.043626][T12381] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2311'.
[  396.069497][T12380] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2310'.
[  396.556697][T12398] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  396.593985][T12398] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  396.983281][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2320'.
[  397.074695][T12417] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2321'.
[  397.643636][   T28] kauditd_printk_skb: 78 callbacks suppressed
[  397.643652][   T28] audit: type=1326 audit(1756582742.525:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  397.715246][   T28] audit: type=1326 audit(1756582742.575:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  397.791906][   T28] audit: type=1326 audit(1756582742.575:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  397.885452][   T28] audit: type=1326 audit(1756582742.575:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  397.967127][   T28] audit: type=1326 audit(1756582742.575:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  398.029716][   T28] audit: type=1326 audit(1756582742.575:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  398.095477][   T28] audit: type=1326 audit(1756582742.575:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  398.129966][T12447] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2331'.
[  398.155513][   T28] audit: type=1326 audit(1756582742.575:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  398.215866][   T28] audit: type=1326 audit(1756582742.575:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  398.294667][   T28] audit: type=1326 audit(1756582742.575:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  399.361996][T12496] __nla_validate_parse: 2 callbacks suppressed
[  399.362013][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'.
[  399.528981][T12501] netlink: 'syz.6.2348': attribute type 2 has an invalid length.
[  399.798290][T12508] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2352'.
[  399.857544][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2351'.
[  400.884995][T12554] pim6reg1: entered allmulticast mode
[  400.987886][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'.
[  401.504241][T12580] serio: Serial port ttyS3
[  401.517927][T12581] pim6reg1: entered allmulticast mode
[  401.714584][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'.
[  402.254630][T12607] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  402.254630][T12607]    program syz.2.2386 not setting count and/or reply_len properly
[  402.618647][T12616] pim6reg1: entered allmulticast mode
[  402.792258][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2391'.
[  402.954213][T12630] block device autoloading is deprecated and will be removed.
[  403.235789][T12637] syzkaller0: entered promiscuous mode
[  403.241507][T12637] syzkaller0: entered allmulticast mode
[  407.323541][T12627] Set syz1 is full, maxelem 65536 reached
[  407.500614][T12664] pim6reg1: entered allmulticast mode
[  407.558261][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2404'.
[  407.706783][T12676] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  407.706783][T12676]    program syz.4.2407 not setting count and/or reply_len properly
[  408.169415][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  408.169432][   T28] audit: type=1326 audit(1756582753.055:5654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.2.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  408.245289][   T28] audit: type=1326 audit(1756582753.055:5655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.2.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  408.324380][   T28] audit: type=1326 audit(1756582753.085:5656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.2.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  408.391062][   T28] audit: type=1326 audit(1756582753.085:5657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.2.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  408.472091][   T28] audit: type=1326 audit(1756582753.085:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.2.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  408.505004][T12695] pim6reg1: entered allmulticast mode
[  408.520080][   T28] audit: type=1326 audit(1756582753.085:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.2.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  408.526729][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2417'.
[  408.549276][   T28] audit: type=1326 audit(1756582753.105:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.2.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  408.585870][   T28] audit: type=1326 audit(1756582753.105:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.2.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  408.695196][   T28] audit: type=1326 audit(1756582753.105:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.2.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  408.786762][   T28] audit: type=1326 audit(1756582753.105:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.2.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58678ebe9 code=0x7ffc0000
[  409.104495][T12712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2420'.
[  409.640184][T12721] pim6reg1: entered allmulticast mode
[  409.906338][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2428'.
[  410.228656][T12740] rdma_op ffff88802a4231f0 conn xmit_rdma 0000000000000000
[  410.766082][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2441'.
[  411.626033][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2452'.
[  412.849170][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2463'.
[  413.216874][T12820] binfmt_misc: register: failed to install interpreter file ./file2
[  414.035437][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'.
[  414.195710][T12846] tipc: Started in network mode
[  414.200674][T12846] tipc: Node identity d65d1a618812, cluster identity 4711
[  414.208731][T12846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.216730][T12846] syzkaller0: entered promiscuous mode
[  414.229515][T12846] syzkaller0: entered allmulticast mode
[  414.276109][T12846] tipc: Resetting bearer <eth:syzkaller0>
[  414.284145][T12845] tipc: Resetting bearer <eth:syzkaller0>
[  414.331260][T12845] tipc: Disabling bearer <eth:syzkaller0>
[  414.671134][T12682] Set syz1 is full, maxelem 65536 reached
[  414.812140][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2484'.
[  415.157597][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.332785][T12888] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  415.386500][T12886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2492'.
[  415.552668][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2496'.
[  417.043604][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'.
[  417.180073][T12928] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  418.121024][T12945] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2513'.
[  418.494546][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2518'.
[  418.541706][T12963] 9pnet: Unknown protocol version 9
[  418.560460][T12961] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  419.025323][   T28] kauditd_printk_skb: 132 callbacks suppressed
[  419.025339][   T28] audit: type=1326 audit(1756582763.905:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  419.067585][   T28] audit: type=1326 audit(1756582763.905:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  419.091684][   T28] audit: type=1326 audit(1756582763.915:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  419.152429][   T28] audit: type=1326 audit(1756582763.915:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  419.183305][   T28] audit: type=1326 audit(1756582763.915:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  419.239866][   T28] audit: type=1326 audit(1756582763.915:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  419.279995][   T28] audit: type=1326 audit(1756582763.915:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  419.313419][T12991] IPv6: Can't replace route, no match found
[  419.339197][   T28] audit: type=1326 audit(1756582763.915:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  419.385881][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'.
[  419.392477][   T28] audit: type=1326 audit(1756582763.945:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  419.417759][   T28] audit: type=1326 audit(1756582764.015:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f4c5118ebe9 code=0x7ffc0000
[  419.441740][T12999] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  419.550232][T13003] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2537'.
[  419.612069][T13005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2536'.
[  419.717359][T13009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2540'.
[  419.735610][T13009] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  420.292929][T13025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2541'.
[  420.336478][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2541'.
[  420.378003][T13025] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  420.422527][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2546'.
[  420.557156][T13025] batman_adv: batadv0: Removing interface: batadv_slave_1
[  420.669263][T13041] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  421.317094][T13061] netlink: 'syz.6.2559': attribute type 3 has an invalid length.
[  421.427726][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2560'.
[  421.876281][T13078] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  422.650054][T13100] serio: Serial port ptm0
[  422.928128][T13106] usb usb1: usbfs: process 13106 (syz.0.2574) did not claim interface 0 before use
[  422.986638][T13111] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  423.307216][T13123] __nla_validate_parse: 1 callbacks suppressed
[  423.307233][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2583'.
[  423.871979][T13142] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  423.994918][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2584'.
[  424.532534][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2596'.
[  425.007942][   T28] kauditd_printk_skb: 84 callbacks suppressed
[  425.007957][   T28] audit: type=1326 audit(1756582769.895:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13168 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  425.071555][   T28] audit: type=1326 audit(1756582769.895:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13168 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  425.104653][T13171] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  425.119509][   T28] audit: type=1326 audit(1756582769.895:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13168 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  425.144721][   T28] audit: type=1326 audit(1756582769.895:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13168 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  425.168216][   T28] audit: type=1326 audit(1756582769.895:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13168 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  425.201429][   T28] audit: type=1326 audit(1756582769.895:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13168 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  425.233583][   T28] audit: type=1326 audit(1756582769.895:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13168 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  425.261731][   T28] audit: type=1326 audit(1756582769.895:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13168 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  425.284598][   T28] audit: type=1326 audit(1756582769.895:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13168 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  425.310566][   T28] audit: type=1326 audit(1756582769.895:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13168 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b19b8ebe9 code=0x7ffc0000
[  425.442876][T13178] vlan2: entered allmulticast mode
[  425.452570][T13178] dummy0: entered allmulticast mode
[  425.462736][    C0] ==================================================================
[  425.470327][T13180] block device autoloading is deprecated and will be removed.
[  425.470825][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x47c/0x800
[  425.486385][    C0] Write of size 8 at addr ffff88802dbad430 by task syz.4.2600/13168
[  425.494396][    C0] 
[  425.496743][    C0] CPU: 0 PID: 13168 Comm: syz.4.2600 Not tainted syzkaller #0
[  425.504222][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  425.514302][    C0] Call Trace:
[  425.517615][    C0]  <IRQ>
[  425.520481][    C0]  dump_stack_lvl+0x16c/0x230
[  425.525219][    C0]  ? __lock_acquire+0x7c80/0x7c80
[  425.530277][    C0]  ? show_regs_print_info+0x20/0x20
[  425.535516][    C0]  ? load_image+0x3b0/0x3b0
[  425.540055][    C0]  ? _raw_spin_lock_irqsave+0xb4/0xf0
[  425.545479][    C0]  ? __virt_addr_valid+0x18c/0x540
[  425.550626][    C0]  ? __virt_addr_valid+0x469/0x540
[  425.555774][    C0]  print_report+0xac/0x220
[  425.560227][    C0]  ? __xfrm_state_delete+0x47c/0x800
[  425.565553][    C0]  kasan_report+0x117/0x150
[  425.570091][    C0]  ? __xfrm_state_delete+0x47c/0x800
[  425.575418][    C0]  __xfrm_state_delete+0x47c/0x800
[  425.580571][    C0]  xfrm_timer_handler+0x1c3/0x9e0
[  425.585636][    C0]  ? xfrm_state_alloc+0x2a0/0x2a0
[  425.590702][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  425.596651][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  425.601927][    C0]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  425.607898][    C0]  ? _raw_spin_unlock+0x40/0x40
[  425.612787][    C0]  ? debug_object_deactivate+0x67/0x350
[  425.618376][    C0]  __hrtimer_run_queues+0x51e/0xc40
[  425.623614][    C0]  ? xfrm_state_alloc+0x2a0/0x2a0
[  425.628678][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  425.633816][    C0]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  425.639924][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  425.645074][    C0]  handle_softirqs+0x280/0x820
[  425.649877][    C0]  ? __irq_exit_rcu+0xc7/0x190
[  425.654679][    C0]  ? do_softirq+0x180/0x180
[  425.659212][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  425.664455][    C0]  __irq_exit_rcu+0xc7/0x190
[  425.669079][    C0]  ? irq_exit_rcu+0x20/0x20
[  425.673713][    C0]  irq_exit_rcu+0x9/0x20
[  425.677984][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  425.683653][    C0]  </IRQ>
[  425.686607][    C0]  <TASK>
[  425.689562][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  425.695575][    C0] RIP: 0010:finish_task_switch+0x26a/0x920
[  425.701414][    C0] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 20 54 1b 09 e8 ab a6 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  425.721067][    C0] RSP: 0018:ffffc900032e79b8 EFLAGS: 00000286
[  425.727201][    C0] RAX: b697c08e189acb00 RBX: 0000000000000000 RCX: b697c08e189acb00
[  425.735216][    C0] RDX: dffffc0000000000 RSI: ffffffff8aaaba20 RDI: ffffffff8afc7040
[  425.743228][    C0] RBP: ffffc900032e7a10 R08: ffffffff8e4a8f2f R09: 1ffffffff1c951e5
[  425.751238][    C0] R10: dffffc0000000000 R11: fffffbfff1c951e6 R12: ffff88802ec10000
[  425.759247][    C0] R13: dffffc0000000000 R14: ffff888045808000 R15: ffff8880b8e3cf08
[  425.767239][    C0]  ? finish_task_switch+0x265/0x920
[  425.772455][    C0]  __schedule+0x14da/0x44d0
[  425.776978][    C0]  ? asan.module_dtor+0x20/0x20
[  425.781836][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  425.787774][    C0]  ? _raw_spin_unlock+0x40/0x40
[  425.792640][    C0]  schedule+0xbd/0x170
[  425.796718][    C0]  do_nanosleep+0x1ad/0x5f0
[  425.801240][    C0]  ? do_nanosleep+0x80/0x5f0
[  425.805850][    C0]  ? usleep_range_state+0x1a0/0x1a0
[  425.811066][    C0]  ? __asan_memset+0x22/0x40
[  425.815698][    C0]  ? __hrtimer_init+0x186/0x270
[  425.820560][    C0]  hrtimer_nanosleep+0x15f/0x350
[  425.825508][    C0]  ? __might_fault+0xc6/0x120
[  425.830190][    C0]  ? nanosleep_copyout+0x120/0x120
[  425.835310][    C0]  ? __remove_hrtimer+0x470/0x470
[  425.840342][    C0]  ? timespec64_add_safe+0x1e0/0x1e0
[  425.845639][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  425.850856][    C0]  __se_sys_clock_nanosleep+0x2ea/0x370
[  425.856513][    C0]  ? __x64_sys_clock_nanosleep+0xb0/0xb0
[  425.862172][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  425.867417][    C0]  do_syscall_64+0x55/0xb0
[  425.871839][    C0]  ? clear_bhb_loop+0x40/0x90
[  425.876529][    C0]  ? clear_bhb_loop+0x40/0x90
[  425.881212][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  425.887127][    C0] RIP: 0033:0x7f0b19bc14a5
[  425.891551][    C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[  425.911260][    C0] RSP: 002b:00007ffe68ba71a0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  425.919704][    C0] RAX: ffffffffffffffda RBX: 00007f0b19dc5fa0 RCX: 00007f0b19bc14a5
[  425.927699][    C0] RDX: 00007ffe68ba71e0 RSI: 0000000000000000 RDI: 0000000000000000
[  425.935694][    C0] RBP: 00007f0b19dc7da0 R08: 0000000000000000 R09: 0000000000745d1e
[  425.943677][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000067f35
[  425.951681][    C0] R13: 00007f0b19dc6090 R14: ffffffffffffffff R15: 00007ffe68ba7320
[  425.959687][    C0]  </TASK>
[  425.962740][    C0] 
[  425.965071][    C0] Allocated by task 12158:
[  425.969604][    C0]  kasan_set_track+0x4e/0x70
[  425.974219][    C0]  __kasan_slab_alloc+0x6c/0x80
[  425.979099][    C0]  slab_post_alloc_hook+0x6e/0x4d0
[  425.984250][    C0]  kmem_cache_alloc+0x11e/0x2e0
[  425.989120][    C0]  xfrm_state_alloc+0x22/0x2a0
[  425.993889][    C0]  __find_acq_core+0x7d8/0x19d0
[  425.998740][    C0]  xfrm_find_acq+0x6a/0x90
[  426.003170][    C0]  xfrm_alloc_userspi+0x57a/0xa90
[  426.008209][    C0]  xfrm_user_rcv_msg+0x596/0x870
[  426.013153][    C0]  netlink_rcv_skb+0x216/0x480
[  426.017936][    C0]  xfrm_netlink_rcv+0x79/0x90
[  426.022625][    C0]  netlink_unicast+0x751/0x8d0
[  426.027392][    C0]  netlink_sendmsg+0x8c1/0xbe0
[  426.032160][    C0]  ____sys_sendmsg+0x5bf/0x950
[  426.036931][    C0]  ___sys_sendmsg+0x220/0x290
[  426.041615][    C0]  __se_sys_sendmsg+0x1a5/0x270
[  426.046477][    C0]  do_syscall_64+0x55/0xb0
[  426.050900][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  426.056806][    C0] 
[  426.059130][    C0] Freed by task 5860:
[  426.063106][    C0]  kasan_set_track+0x4e/0x70
[  426.067703][    C0]  kasan_save_free_info+0x2e/0x50
[  426.072732][    C0]  ____kasan_slab_free+0x126/0x1e0
[  426.077852][    C0]  slab_free_freelist_hook+0x130/0x1b0
[  426.083321][    C0]  kmem_cache_free+0xf8/0x280
[  426.088005][    C0]  xfrm_state_gc_task+0x10a/0x160
[  426.093035][    C0]  process_scheduled_works+0xa45/0x15b0
[  426.098585][    C0]  worker_thread+0xa55/0xfc0
[  426.103177][    C0]  kthread+0x2fa/0x390
[  426.107250][    C0]  ret_from_fork+0x48/0x80
[  426.111679][    C0]  ret_from_fork_asm+0x11/0x20
[  426.116463][    C0] 
[  426.118794][    C0] The buggy address belongs to the object at ffff88802dbad400
[  426.118794][    C0]  which belongs to the cache xfrm_state of size 848
[  426.132768][    C0] The buggy address is located 48 bytes inside of
[  426.132768][    C0]  freed 848-byte region [ffff88802dbad400, ffff88802dbad750)
[  426.146485][    C0] 
[  426.148811][    C0] The buggy address belongs to the physical page:
[  426.155264][    C0] page:ffffea0000b6eb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802dbac800 pfn:0x2dbac
[  426.166744][    C0] head:ffffea0000b6eb00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  426.175678][    C0] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  426.183738][    C0] page_type: 0xffffffff()
[  426.188081][    C0] raw: 00fff00000000840 ffff888144e54500 dead000000000122 0000000000000000
[  426.196673][    C0] raw: ffff88802dbac800 000000008010000d 00000001ffffffff 0000000000000000
[  426.205255][    C0] page dumped because: kasan: bad access detected
[  426.211678][    C0] page_owner tracks the page as allocated
[  426.217413][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6158, tgid 6157 (syz.1.106), ts 103888291455, free_ts 103822388180
[  426.238005][    C0]  post_alloc_hook+0x1cd/0x210
[  426.242787][    C0]  get_page_from_freelist+0x195c/0x19f0
[  426.248354][    C0]  __alloc_pages+0x1e3/0x460
[  426.252951][    C0]  alloc_slab_page+0x5d/0x170
[  426.257640][    C0]  new_slab+0x87/0x2e0
[  426.261718][    C0]  ___slab_alloc+0xc6d/0x12f0
[  426.266416][    C0]  kmem_cache_alloc+0x1b7/0x2e0
[  426.271276][    C0]  xfrm_state_alloc+0x22/0x2a0
[  426.276086][    C0]  pfkey_add+0x6e1/0x2da0
[  426.280420][    C0]  pfkey_sendmsg+0xbed/0x1050
[  426.285195][    C0]  ____sys_sendmsg+0x5bf/0x950
[  426.289971][    C0]  ___sys_sendmsg+0x220/0x290
[  426.294680][    C0]  __se_sys_sendmsg+0x1a5/0x270
[  426.299574][    C0]  do_syscall_64+0x55/0xb0
[  426.304016][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  426.309937][    C0] page last free stack trace:
[  426.314614][    C0]  free_unref_page_prepare+0x7ce/0x8e0
[  426.320090][    C0]  free_unref_page+0x32/0x2e0
[  426.324776][    C0]  free_large_kmalloc+0x101/0x1a0
[  426.329824][    C0]  bpf_check+0x62c6/0xe970
[  426.334268][    C0]  bpf_prog_load+0x11cb/0x16d0
[  426.339045][    C0]  __sys_bpf+0x55a/0x800
[  426.343306][    C0]  __x64_sys_bpf+0x7c/0x90
[  426.347729][    C0]  do_syscall_64+0x55/0xb0
[  426.352162][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  426.358075][    C0] 
[  426.360504][    C0] Memory state around the buggy address:
[  426.366150][    C0]  ffff88802dbad300: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[  426.374214][    C0]  ffff88802dbad380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  426.382276][    C0] >ffff88802dbad400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  426.390337][    C0]                                      ^
[  426.395965][    C0]  ffff88802dbad480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  426.404036][    C0]  ffff88802dbad500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  426.412117][    C0] ==================================================================
[  426.420418][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  426.427648][    C0] CPU: 0 PID: 13168 Comm: syz.4.2600 Not tainted syzkaller #0
[  426.435136][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  426.445231][    C0] Call Trace:
[  426.448550][    C0]  <IRQ>
[  426.451421][    C0]  dump_stack_lvl+0x16c/0x230
[  426.456138][    C0]  ? show_regs_print_info+0x20/0x20
[  426.461376][    C0]  ? load_image+0x3b0/0x3b0
[  426.465964][    C0]  panic+0x2c0/0x710
[  426.469926][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  426.474476][    C0]  ? _raw_spin_unlock_irqrestore+0xa9/0x110
[  426.480417][    C0]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  426.486377][    C0]  ? _raw_spin_unlock+0x40/0x40
[  426.491274][    C0]  ? print_memory_metadata+0x314/0x400
[  426.496778][    C0]  ? __xfrm_state_delete+0x47c/0x800
[  426.502111][    C0]  check_panic_on_warn+0x84/0xa0
[  426.507094][    C0]  ? __xfrm_state_delete+0x47c/0x800
[  426.512425][    C0]  end_report+0x6f/0x140
[  426.516712][    C0]  kasan_report+0x128/0x150
[  426.521255][    C0]  ? __xfrm_state_delete+0x47c/0x800
[  426.526584][    C0]  __xfrm_state_delete+0x47c/0x800
[  426.531755][    C0]  xfrm_timer_handler+0x1c3/0x9e0
[  426.536825][    C0]  ? xfrm_state_alloc+0x2a0/0x2a0
[  426.541907][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  426.547943][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  426.553195][    C0]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  426.559572][    C0]  ? _raw_spin_unlock+0x40/0x40
[  426.564470][    C0]  ? debug_object_deactivate+0x67/0x350
[  426.570081][    C0]  __hrtimer_run_queues+0x51e/0xc40
[  426.575327][    C0]  ? xfrm_state_alloc+0x2a0/0x2a0
[  426.580400][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  426.585552][    C0]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  426.591665][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  426.596831][    C0]  handle_softirqs+0x280/0x820
[  426.601628][    C0]  ? __irq_exit_rcu+0xc7/0x190
[  426.606431][    C0]  ? do_softirq+0x180/0x180
[  426.610973][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  426.616212][    C0]  __irq_exit_rcu+0xc7/0x190
[  426.620835][    C0]  ? irq_exit_rcu+0x20/0x20
[  426.625369][    C0]  irq_exit_rcu+0x9/0x20
[  426.629620][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  426.635269][    C0]  </IRQ>
[  426.638202][    C0]  <TASK>
[  426.641138][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  426.647124][    C0] RIP: 0010:finish_task_switch+0x26a/0x920
[  426.652932][    C0] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 20 54 1b 09 e8 ab a6 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  426.672565][    C0] RSP: 0018:ffffc900032e79b8 EFLAGS: 00000286
[  426.678638][    C0] RAX: b697c08e189acb00 RBX: 0000000000000000 RCX: b697c08e189acb00
[  426.686648][    C0] RDX: dffffc0000000000 RSI: ffffffff8aaaba20 RDI: ffffffff8afc7040
[  426.694630][    C0] RBP: ffffc900032e7a10 R08: ffffffff8e4a8f2f R09: 1ffffffff1c951e5
[  426.702609][    C0] R10: dffffc0000000000 R11: fffffbfff1c951e6 R12: ffff88802ec10000
[  426.710588][    C0] R13: dffffc0000000000 R14: ffff888045808000 R15: ffff8880b8e3cf08
[  426.718689][    C0]  ? finish_task_switch+0x265/0x920
[  426.723912][    C0]  __schedule+0x14da/0x44d0
[  426.728466][    C0]  ? asan.module_dtor+0x20/0x20
[  426.733341][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  426.739256][    C0]  ? _raw_spin_unlock+0x40/0x40
[  426.744138][    C0]  schedule+0xbd/0x170
[  426.748234][    C0]  do_nanosleep+0x1ad/0x5f0
[  426.752779][    C0]  ? do_nanosleep+0x80/0x5f0
[  426.757433][    C0]  ? usleep_range_state+0x1a0/0x1a0
[  426.762657][    C0]  ? __asan_memset+0x22/0x40
[  426.767263][    C0]  ? __hrtimer_init+0x186/0x270
[  426.772133][    C0]  hrtimer_nanosleep+0x15f/0x350
[  426.777083][    C0]  ? __might_fault+0xc6/0x120
[  426.781785][    C0]  ? nanosleep_copyout+0x120/0x120
[  426.786909][    C0]  ? __remove_hrtimer+0x470/0x470
[  426.791940][    C0]  ? timespec64_add_safe+0x1e0/0x1e0
[  426.797236][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  426.802449][    C0]  __se_sys_clock_nanosleep+0x2ea/0x370
[  426.808052][    C0]  ? __x64_sys_clock_nanosleep+0xb0/0xb0
[  426.813700][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  426.818906][    C0]  do_syscall_64+0x55/0xb0
[  426.823335][    C0]  ? clear_bhb_loop+0x40/0x90
[  426.828029][    C0]  ? clear_bhb_loop+0x40/0x90
[  426.832751][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  426.838665][    C0] RIP: 0033:0x7f0b19bc14a5
[  426.843091][    C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[  426.862749][    C0] RSP: 002b:00007ffe68ba71a0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  426.871198][    C0] RAX: ffffffffffffffda RBX: 00007f0b19dc5fa0 RCX: 00007f0b19bc14a5
[  426.879230][    C0] RDX: 00007ffe68ba71e0 RSI: 0000000000000000 RDI: 0000000000000000
[  426.887221][    C0] RBP: 00007f0b19dc7da0 R08: 0000000000000000 R09: 0000000000745d1e
[  426.895202][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000067f35
[  426.903200][    C0] R13: 00007f0b19dc6090 R14: ffffffffffffffff R15: 00007ffe68ba7320
[  426.911281][    C0]  </TASK>
[  426.914739][    C0] Kernel Offset: disabled
[  426.919089][    C0] Rebooting in 86400 seconds..