last executing test programs:

13.260348208s ago: executing program 2 (id=294):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x7ff4, 0x1000, 0x2, 0x20003a2})
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)

13.131529935s ago: executing program 0 (id=295):
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000480)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
times(0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x5e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0xa0}}, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x2000000000})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000200)={0x6, 0x6, 0x1})

12.819523356s ago: executing program 2 (id=297):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2a, 0x25dfcbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0xa, 0xffff}, {0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

10.529149778s ago: executing program 0 (id=301):
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x12, 0xffffffffffffffff, 0x0)
socket(0x2b, 0x80801, 0x1)
poll(0x0, 0x0, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r4, 0x0, 0x12000000000000}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014"], 0xe8}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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")

10.449773922s ago: executing program 2 (id=302):
socket$inet(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5], 0x1}, 0x58)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r8 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe)

10.317981416s ago: executing program 4 (id=303):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x160}, 0x1, 0x0, 0x0, 0xf9985f9c33a325d}, 0x40001)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd31875bd42a21f5b99be588e4e66bed86d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222180002bc55704cdb72b4b996ed831f3b802449db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb630e0024b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0460c25311963884e6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESOCT, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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")
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x8)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2a3}, 0x94)
chroot(0x0)
io_setup(0x7d, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}])
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x8}}, &(0x7f0000000580)='GPL\x00'}, 0x94)

8.894873322s ago: executing program 2 (id=304):
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x12, 0xffffffffffffffff, 0x0)
socket(0x2b, 0x80801, 0x1)
poll(0x0, 0x0, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r4, 0x0, 0x12000000000000}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014"], 0xe8}}, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)

8.736091401s ago: executing program 1 (id=305):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1)

8.347740958s ago: executing program 4 (id=307):
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x12, 0xffffffffffffffff, 0x0)
socket(0x2b, 0x80801, 0x1)
poll(0x0, 0x0, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r6, 0x0, 0x12000000000000}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014"], 0xe8}}, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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")

8.038162305s ago: executing program 1 (id=309):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x2000000, 0xb51b, 0xe}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000001200010a00000000020000008000"], 0x20}}, 0x0)

7.625374378s ago: executing program 1 (id=311):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)

7.297913742s ago: executing program 3 (id=314):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c020000020000000800", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="9a60b2b64f4d192473b06017bb0439e1c60771fe09401ab6de6b396dd3c7be04b7a556c183079c5267242240395f41a4b664280b333449fab499dae3c0cd011395b24aa144d877944d72c13045ffc5126a218d5450e4997f72f86be6ae44e744ccf7230f6dbd198fd1265b9ccf2d5b0d4c696260f5ea8ecbc959b450c32dff028558"], 0x4)

7.050686496s ago: executing program 4 (id=315):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2a, 0x25dfcbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0xa, 0xffff}, {0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6.922581534s ago: executing program 5 (id=316):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4d, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100100000000000000011"], 0x58}}, 0x0)

6.445953955s ago: executing program 3 (id=317):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f00000001c0)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000680)='kfree\x00', r1, 0x0, 0x3}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
r2 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
io_uring_enter(0xffffffffffffffff, 0x7da3, 0x316d, 0x1, 0x0, 0x0)

6.333636817s ago: executing program 4 (id=318):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18)
nanosleep(&(0x7f0000000080)={0x0, 0x3938700}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00')
close(r1)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r3, 0x400, 0x1)
r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
write$binfmt_misc(r5, &(0x7f0000000180)="e502", 0x2)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, 0x0, 0x0, 0x404c085)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

6.295422507s ago: executing program 5 (id=319):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x160}, 0x1, 0x0, 0x0, 0xf9985f9c33a325d}, 0x40001)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd31875bd42a21f5b99be588e4e66bed86d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222180002bc55704cdb72b4b996ed831f3b802449db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb630e0024b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0460c25311963884e6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESOCT, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnbX5MWrbJQRQF6YNe9DK01bMaZBfEgEt3I+4Kwux2oiFjUmZCJCK2N6/izX9AcNnjgocF9R/oxdt68eLJXgRBFxFH5leapJMfjSmb7n4/0OZJ3veZed/84nkDeXP83pcfN+ueWbc6smKoZEREHoqUZUUSmegiLykO5eX1Px48f+3Gzbcr1erlXdUrleuv7Kjqxub3n3xWjLvdL8hR+YNjMX49evro2eN/r3/U8LThaavdUUtvtX/pWLccW/caXtNUverYlmdro+XZbtTejtrrTnt/v6dWa+/S2r5re55arZ427Z522tpxe2p9aDVaapqmXlpLG+5jzJgjp3Znd9eqzHnC23PmYdH+9n1/QrPrVqxVEbN4qqV251zHBQAAltJI/f91UiOUZaVfUGbitUA+jIeXAUH9n8Rh/R8sFk7q/7sv/NhZf/feRlz/38+n1f+v/hzlD9X/wdkXXv9/O3L9dEV04R2cpfP/qv+xHDaHX5G/nazYY0H9H7wa+iv63Pt3t8KA+h8AAAAAAAAAAAAAAAAAAAAAgIvgoe+XfN8vJZfJ38lXCOLrybVJXzTGhTPu8S/EOwr0nw94LF27cVOM8It72Q0R54turVuLLuP2pOOWlOSf8PkQizacOAwbNVCWH5yDbi0XJ6yG/ysiKo7Ysi0lKQ/lh/GVt6qXtzUS5YfnP+jWMtm1IL8ujTB/R0ryVHr+Tmp+Xl56cSDflJL8dFva4she/D6W5H++rfrmO9WR/GLYL83r5/uQAAAAAACwcKaqES+fy8Pr32j9bpqqae3BWl4G1+enPx/or6+3Utfn2dJz2Uc7dwAAAAAAnhRe/tOm5Ti26/XGBkWZ1qcQH22kKStTjhwE2Rn6DAUPwiA3qc/qwAxnPXI+/gWNWYfhej2ZecxJ8GdBUu/MZAvXoSYj/V6dMUjmP0Nn46wPgeutnH3ututtBuPRuaYzECQfG43rI1fnPfK4INk5d1rnZ7765q/5TpGJd+0dbHrtnjFlpmGQGbnlcMqT9nffD17UE8eTS3+3+G6eH5kBAAAAsCSSor/oJbe8MSVj/fwHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE2ah26SNCR71HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl8V8AAAD//1f39NU=")
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x8)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2a3}, 0x94)
chroot(0x0)
io_setup(0x7d, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}])
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x8}}, &(0x7f0000000580)='GPL\x00'}, 0x94)

4.82322888s ago: executing program 3 (id=320):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

4.697674513s ago: executing program 4 (id=321):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
bind$qrtr(r0, &(0x7f00000002c0)={0x2a, 0x1, 0x2}, 0xc)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r1, &(0x7f0000000340)=[{0x0}], 0x1)
flock(0xffffffffffffffff, 0x6)

4.548136479s ago: executing program 5 (id=322):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040800)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2a, 0x25dfcbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0xa, 0xffff}, {0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.499315165s ago: executing program 0 (id=323):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)

4.466449138s ago: executing program 3 (id=324):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r4, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000440)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x9, 0x2, 0x0, @broadcast, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x98, 0x0, {0x5, 0x4, 0x2, 0x2a, 0x1, 0x68, 0xa, 0x64, 0x1, 0x3, @multicast1, @rand_addr=0x64010100}}}}}}, 0x0)

4.201053697s ago: executing program 0 (id=325):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5], 0x1}, 0x58)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r8 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe)

4.155928823s ago: executing program 3 (id=326):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x7ff4, 0x1000, 0x2, 0x20003a2})
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)

4.143253178s ago: executing program 1 (id=327):
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x12, 0xffffffffffffffff, 0x0)
socket(0x2b, 0x80801, 0x1)
poll(0x0, 0x0, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r6, 0x0, 0x12000000000000}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014"], 0xe8}}, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn")

4.085856641s ago: executing program 5 (id=328):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
close(0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

3.749774445s ago: executing program 2 (id=329):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB], 0x20)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x8080, 0x0)
r1 = io_uring_setup(0x1dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x140})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, 0x0, 0x0)
epoll_create(0x5)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0x3}, {0xfff1, 0x56e7de01af07971a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5)
close(r4)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r6, 0xffffffffffffffff, 0x0)

2.29278038s ago: executing program 1 (id=330):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5], 0x1}, 0x58)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r8 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe)

2.288491836s ago: executing program 0 (id=331):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2a, 0x25dfcbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0xa, 0xffff}, {0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.241804476s ago: executing program 3 (id=332):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18)
nanosleep(&(0x7f0000000080)={0x0, 0x3938700}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00')
close(r1)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r3, 0x400, 0x1)
r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
write$binfmt_misc(r5, &(0x7f0000000180)="e502", 0x2)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, 0x0, 0x0, 0x404c085)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

2.220644298s ago: executing program 5 (id=333):
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x10000008, 0x4000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
times(0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x5e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0xa0}}, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x2000000000})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000200)={0x6, 0x6, 0x1})

2.16690899s ago: executing program 4 (id=334):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0xfe9e, 0x12)
r1 = gettid()
syz_open_procfs(r1, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300)=0x4)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @multicast1}, @private2, @private2, 0x3, 0x198e, 0xa24, 0x100, 0x8, 0x1000000, r3})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private1, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)

9.13651ms ago: executing program 5 (id=335):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x160}, 0x1, 0x0, 0x0, 0xf9985f9c33a325d}, 0x40001)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd31875bd42a21f5b99be588e4e66bed86d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222180002bc55704cdb72b4b996ed831f3b802449db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb630e0024b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0460c25311963884e6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESOCT, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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")
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x8)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2a3}, 0x94)
chroot(0x0)
io_setup(0x7d, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}])
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x8}}, &(0x7f0000000580)='GPL\x00'}, 0x94)

3.302687ms ago: executing program 0 (id=336):
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x12, 0xffffffffffffffff, 0x0)
socket(0x2b, 0x80801, 0x1)
poll(0x0, 0x0, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r4, 0x0, 0x12000000000000}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014"], 0xe8}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn")

1.237957ms ago: executing program 1 (id=337):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078)
ioctl$PPPIOCDISCONN(r4, 0x7439)
socket$packet(0x11, 0x2, 0x300)
statx(r4, &(0x7f00000001c0)='./bus\x00', 0x1000, 0x200, &(0x7f0000000400))
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)

0s ago: executing program 2 (id=338):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts.
[  101.007358][ T5811] cgroup: Unknown subsys name 'net'
[  101.185636][ T5811] cgroup: Unknown subsys name 'cpuset'
[  101.195707][ T5811] cgroup: Unknown subsys name 'rlimit'
[  101.442804][   T30] cfg80211: failed to load regulatory.db
Setting up swapspace version 1, size = 127995904 bytes
[  102.914352][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  107.395318][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  107.415697][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  107.423747][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  107.431424][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  107.439704][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  107.440233][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  107.448060][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  107.454556][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  107.461580][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  107.468687][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  107.482647][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  107.484919][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  107.497187][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  107.501829][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  107.512180][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  107.513073][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  107.537335][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  107.537419][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  107.565124][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  107.575468][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  107.585275][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  107.598101][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  107.607315][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  107.614999][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  107.624339][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  107.631452][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  107.639011][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  107.639573][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  107.652609][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  107.661590][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  108.433866][ T5830] chnl_net:caif_netlink_parms(): no params data found
[  108.634448][ T5833] chnl_net:caif_netlink_parms(): no params data found
[  108.672805][ T5838] chnl_net:caif_netlink_parms(): no params data found
[  108.719375][ T5840] chnl_net:caif_netlink_parms(): no params data found
[  108.839625][ T5829] chnl_net:caif_netlink_parms(): no params data found
[  108.962392][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.969818][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.978361][ T5830] bridge_slave_0: entered allmulticast mode
[  108.986753][ T5830] bridge_slave_0: entered promiscuous mode
[  109.029515][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.037134][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.044614][ T5830] bridge_slave_1: entered allmulticast mode
[  109.052397][ T5830] bridge_slave_1: entered promiscuous mode
[  109.159179][ T5845] chnl_net:caif_netlink_parms(): no params data found
[  109.205947][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.213217][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.220570][ T5833] bridge_slave_0: entered allmulticast mode
[  109.228340][ T5833] bridge_slave_0: entered promiscuous mode
[  109.260155][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.269429][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.276673][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.284077][ T5838] bridge_slave_0: entered allmulticast mode
[  109.291926][ T5838] bridge_slave_0: entered promiscuous mode
[  109.308066][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.315432][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.323298][ T5833] bridge_slave_1: entered allmulticast mode
[  109.330976][ T5833] bridge_slave_1: entered promiscuous mode
[  109.366811][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.376130][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.383352][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.390581][ T5838] bridge_slave_1: entered allmulticast mode
[  109.398774][ T5838] bridge_slave_1: entered promiscuous mode
[  109.434980][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.442253][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.449421][ T5840] bridge_slave_0: entered allmulticast mode
[  109.457571][ T5840] bridge_slave_0: entered promiscuous mode
[  109.535422][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.542989][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.550244][ T5840] bridge_slave_1: entered allmulticast mode
[  109.558208][ T5840] bridge_slave_1: entered promiscuous mode
[  109.602301][ T5841] Bluetooth: hci2: command tx timeout
[  109.602484][ T5835] Bluetooth: hci1: command tx timeout
[  109.608066][ T5832] Bluetooth: hci3: command tx timeout
[  109.613612][ T5842] Bluetooth: hci0: command tx timeout
[  109.620161][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.632308][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.639577][ T5829] bridge_slave_0: entered allmulticast mode
[  109.647303][ T5829] bridge_slave_0: entered promiscuous mode
[  109.658727][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.685353][ T5835] Bluetooth: hci4: command tx timeout
[  109.706988][ T5830] team0: Port device team_slave_0 added
[  109.716276][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.725677][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.733213][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.740487][ T5829] bridge_slave_1: entered allmulticast mode
[  109.748363][ T5829] bridge_slave_1: entered promiscuous mode
[  109.758156][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.768166][ T5835] Bluetooth: hci5: command tx timeout
[  109.791631][ T5830] team0: Port device team_slave_1 added
[  109.800064][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.841275][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.925099][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.980681][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.992727][ T5833] team0: Port device team_slave_0 added
[  110.014122][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.021424][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.028583][ T5845] bridge_slave_0: entered allmulticast mode
[  110.036403][ T5845] bridge_slave_0: entered promiscuous mode
[  110.044856][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.052654][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.079094][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.093536][ T5838] team0: Port device team_slave_0 added
[  110.099783][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.106945][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.133284][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.147112][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.158732][ T5833] team0: Port device team_slave_1 added
[  110.178737][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.186021][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.193613][ T5845] bridge_slave_1: entered allmulticast mode
[  110.202269][ T5845] bridge_slave_1: entered promiscuous mode
[  110.211828][ T5838] team0: Port device team_slave_1 added
[  110.255038][ T5840] team0: Port device team_slave_0 added
[  110.335556][ T5840] team0: Port device team_slave_1 added
[  110.372434][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.379428][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.406107][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.419620][ T5829] team0: Port device team_slave_0 added
[  110.426253][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.433296][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.460559][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.488777][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.512992][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.519950][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.546371][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.560038][ T5829] team0: Port device team_slave_1 added
[  110.566572][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.573816][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.600735][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.628858][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.695602][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.702734][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.729233][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.763551][ T5830] hsr_slave_0: entered promiscuous mode
[  110.770199][ T5830] hsr_slave_1: entered promiscuous mode
[  110.781495][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.788447][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.814640][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.827020][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.834785][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.861163][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.903168][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.910132][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.936367][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.959069][ T5845] team0: Port device team_slave_0 added
[  111.059094][ T5845] team0: Port device team_slave_1 added
[  111.093609][ T5838] hsr_slave_0: entered promiscuous mode
[  111.100109][ T5838] hsr_slave_1: entered promiscuous mode
[  111.107412][ T5838] debugfs: 'hsr0' already exists in 'hsr'
[  111.113502][ T5838] Cannot create hsr debugfs directory
[  111.156349][ T5833] hsr_slave_0: entered promiscuous mode
[  111.162980][ T5833] hsr_slave_1: entered promiscuous mode
[  111.169192][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[  111.174976][ T5833] Cannot create hsr debugfs directory
[  111.281297][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.288289][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.315382][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.333624][ T5840] hsr_slave_0: entered promiscuous mode
[  111.340133][ T5840] hsr_slave_1: entered promiscuous mode
[  111.346562][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[  111.353259][ T5840] Cannot create hsr debugfs directory
[  111.394859][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.401901][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.428890][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.466359][ T5829] hsr_slave_0: entered promiscuous mode
[  111.473005][ T5829] hsr_slave_1: entered promiscuous mode
[  111.479188][ T5829] debugfs: 'hsr0' already exists in 'hsr'
[  111.484989][ T5829] Cannot create hsr debugfs directory
[  111.681377][ T5835] Bluetooth: hci3: command tx timeout
[  111.681520][ T5842] Bluetooth: hci2: command tx timeout
[  111.687173][ T5841] Bluetooth: hci0: command tx timeout
[  111.698443][ T5832] Bluetooth: hci1: command tx timeout
[  111.749169][ T5845] hsr_slave_0: entered promiscuous mode
[  111.755865][ T5845] hsr_slave_1: entered promiscuous mode
[  111.761566][ T5835] Bluetooth: hci4: command tx timeout
[  111.768391][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[  111.774519][ T5845] Cannot create hsr debugfs directory
[  111.841265][ T5835] Bluetooth: hci5: command tx timeout
[  112.229864][ T5830] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  112.258794][ T5830] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  112.276963][ T5830] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  112.298337][ T5830] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  112.374397][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  112.387978][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  112.399850][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  112.412462][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  112.522412][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  112.535032][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  112.554503][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  112.582089][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  112.687706][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  112.700459][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  112.726093][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  112.738080][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  112.826820][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.885221][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  112.896636][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  112.913848][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  112.946107][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  113.020403][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[  113.079507][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.097299][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  113.112400][ T3878] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.119668][ T3878] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.139665][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  113.162897][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  113.177547][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  113.204971][ T3878] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.212169][ T3878] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.273264][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[  113.286683][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.343834][ T3878] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.351120][ T3878] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.382005][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.389152][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.426042][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.439588][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[  113.497589][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[  113.515481][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.522640][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.597952][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.605153][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.617308][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.624509][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.681883][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.689356][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.737966][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.765752][ T5835] Bluetooth: hci2: command tx timeout
[  113.766011][ T5832] Bluetooth: hci0: command tx timeout
[  113.771357][ T5842] Bluetooth: hci1: command tx timeout
[  113.792536][ T5841] Bluetooth: hci3: command tx timeout
[  113.843138][ T5841] Bluetooth: hci4: command tx timeout
[  113.896372][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.923735][ T5841] Bluetooth: hci5: command tx timeout
[  114.010481][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[  114.064985][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[  114.100249][ T3878] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.107499][ T3878] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.146932][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.158277][ T3878] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.165499][ T3878] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.192568][ T3878] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.199810][ T3878] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.256630][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.263854][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.308520][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.426723][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  114.659327][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.995064][ T5838] veth0_vlan: entered promiscuous mode
[  115.044341][ T5838] veth1_vlan: entered promiscuous mode
[  115.078056][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.236238][ T5838] veth0_macvtap: entered promiscuous mode
[  115.266874][ T5838] veth1_macvtap: entered promiscuous mode
[  115.302876][ T5830] veth0_vlan: entered promiscuous mode
[  115.330493][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.380046][ T5833] veth0_vlan: entered promiscuous mode
[  115.389881][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.402972][ T5830] veth1_vlan: entered promiscuous mode
[  115.425944][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.447915][   T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.457976][   T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.470154][ T5833] veth1_vlan: entered promiscuous mode
[  115.483452][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.490550][   T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.500599][   T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.579623][ T5840] veth0_vlan: entered promiscuous mode
[  115.611660][ T5830] veth0_macvtap: entered promiscuous mode
[  115.660721][ T5840] veth1_vlan: entered promiscuous mode
[  115.674727][ T5830] veth1_macvtap: entered promiscuous mode
[  115.750161][ T5829] veth0_vlan: entered promiscuous mode
[  115.766113][ T5833] veth0_macvtap: entered promiscuous mode
[  115.773185][ T3878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.785979][ T3878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.793790][ T5829] veth1_vlan: entered promiscuous mode
[  115.818912][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.841533][ T5841] Bluetooth: hci3: command tx timeout
[  115.841815][ T5832] Bluetooth: hci2: command tx timeout
[  115.846988][ T5842] Bluetooth: hci0: command tx timeout
[  115.857861][ T5835] Bluetooth: hci1: command tx timeout
[  115.859802][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.874769][ T5833] veth1_macvtap: entered promiscuous mode
[  115.926780][ T5835] Bluetooth: hci4: command tx timeout
[  115.934435][ T4106] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.957927][ T4106] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.967480][ T4106] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.978138][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.986717][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.995239][ T4106] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.004916][ T5835] Bluetooth: hci5: command tx timeout
[  116.015317][ T5845] veth0_vlan: entered promiscuous mode
[  116.058208][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.097668][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  116.106682][ T5845] veth1_vlan: entered promiscuous mode
[  116.129418][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.138140][ T5829] veth0_macvtap: entered promiscuous mode
[  116.172775][ T5829] veth1_macvtap: entered promiscuous mode
[  116.192069][ T5840] veth0_macvtap: entered promiscuous mode
[  116.269456][ T5840] veth1_macvtap: entered promiscuous mode
[  116.278636][ T3455] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.288828][   T31] audit: type=1326 audit(1767158260.981:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  116.303008][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.327282][   T31] audit: type=1326 audit(1767158261.001:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  116.337821][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.350601][   T31] audit: type=1326 audit(1767158261.001:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  116.357999][ T3455] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.378989][   T31] audit: type=1326 audit(1767158261.001:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  116.411482][   T31] audit: type=1326 audit(1767158261.001:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  116.437802][   T31] audit: type=1326 audit(1767158261.031:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  116.462004][ T4106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.466291][ T3455] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.469836][ T4106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.481686][ T3455] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.497226][ T5972] syz_tun: entered allmulticast mode
[  116.512869][   T31] audit: type=1326 audit(1767158261.031:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  116.515583][ T5971] pimreg: entered allmulticast mode
[  116.535251][   T31] audit: type=1326 audit(1767158261.031:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  116.535348][   T31] audit: type=1326 audit(1767158261.151:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  116.535415][   T31] audit: type=1326 audit(1767158261.151:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  116.650906][ T3455] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.663026][ T3455] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.694814][ T3455] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.716267][ T5970] syz_tun: left allmulticast mode
[  116.727450][ T3455] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.751619][ T4106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.760217][ T4106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.782874][ T5845] veth0_macvtap: entered promiscuous mode
[  116.802824][ T5845] veth1_macvtap: entered promiscuous mode
[  116.839480][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.899143][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.643754][ T4106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.652714][ T4106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.663479][ T5980] loop5: detected capacity change from 0 to 512
[  117.672043][ T5978] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  117.682778][ T5978] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  117.693766][ T5978] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: inode #32: comm syz.0.7: iget: special inode unallocated
[  117.706997][ T5978] EXT4-fs (loop0): Remounting filesystem read-only
[  117.713925][ T5978] EXT4-fs (loop0): no journal found
[  117.715252][ T5980] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  117.719128][ T5978] EXT4-fs (loop0): can't get journal size
[  117.751050][ T5978] EXT4-fs (loop0): filesystem is read-only
[  117.761562][ T5978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  117.779430][ T5980] EXT4-fs (loop5): orphan cleanup on readonly fs
[  117.829410][ T5980] EXT4-fs warning (device loop5): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  117.856235][ T5980] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  117.865661][ T5980] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #13: comm syz.5.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  117.885896][ T4106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.898066][ T5980] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.6: couldn't read orphan inode 13 (err -117)
[  117.919067][ T5980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  117.927721][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.951557][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.026903][ T4106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.026979][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.063660][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.070888][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.084496][ T5980] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  118.099263][ T5980] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  118.126963][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.145995][ T5980] EXT4-fs warning (device loop5): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  118.154467][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.257294][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.297097][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.351262][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.354429][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.361467][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.399385][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'.
[  118.414439][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.461036][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.480654][ T5987] Zero length message leads to an empty skb
[  118.582528][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.612978][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.620911][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.624796][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.773550][ T5992] sd 0:0:1:0: device reset
[  118.785368][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.820920][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.866737][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.902311][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.025013][ T5996] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[  119.040075][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.066739][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.496867][ T6006] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14'.
[  119.555104][ T6009] loop0: detected capacity change from 0 to 128
[  119.574740][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[  119.626921][ T6009] EXT4-fs: Ignoring removed nobh option
[  119.636558][ T6008] netlink: 'syz.1.13': attribute type 30 has an invalid length.
[  119.741498][ T6009] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  119.757651][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  119.780507][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.813700][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  119.823550][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.862079][ T6009] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  119.862676][ T6018] sd 0:0:1:0: device reset
[  120.105864][ T6023] loop2: detected capacity change from 0 to 512
[  120.164707][ T6023] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  120.194267][ T6015] loop4: detected capacity change from 0 to 8192
[  120.243677][ T6023] EXT4-fs (loop2): orphan cleanup on readonly fs
[  120.266397][ T6015] =======================================================
[  120.266397][ T6015] WARNING: The mand mount option has been deprecated and
[  120.266397][ T6015]          and is ignored by this kernel. Remove the mand
[  120.266397][ T6015]          option from the mount to silence this warning.
[  120.266397][ T6015] =======================================================
[  120.338772][ T6023] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4214: comm syz.2.16: Allocating blocks 41-42 which overlap fs metadata
[  120.357474][ T5838] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.376184][ T6013] syz.3.4 (6013) used greatest stack depth: 19688 bytes left
[  120.494269][ T6023] EXT4-fs error (device loop2): ext4_acquire_dquot:6984: comm syz.2.16: Failed to acquire dquot type 1
[  120.564139][ T6023] EXT4-fs error (device loop2): mb_free_blocks:2034: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  120.656400][ T6023] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.16: corrupted inode contents
[  120.758386][ T6023] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.16: mark_inode_dirty error
[  120.886941][ T6023] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.16: corrupted inode contents
[  120.957462][ T6034] loop0: detected capacity change from 0 to 128
[  120.964978][ T6023] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.16: mark_inode_dirty error
[  121.055689][ T6034] EXT4-fs: Ignoring removed nobh option
[  121.062212][ T6023] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.16: corrupted inode contents
[  121.178493][ T6023] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  121.218825][ T6034] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.259017][ T6023] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.16: corrupted inode contents
[  121.272584][ T6034] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  121.476029][ T6047] random: crng reseeded on system resumption
[  121.792241][ T6023] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.16: mark_inode_dirty error
[  122.061048][ T6023] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  122.118477][ T6023] EXT4-fs (loop2): 1 truncate cleaned up
[  122.171291][ T6023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  122.432357][   T10] IPVS: starting estimator thread 0...
[  122.611167][ T6053] IPVS: using max 22 ests per chain, 52800 per kthread
[  123.118585][ T6059] set_capacity_and_notify: 1 callbacks suppressed
[  123.118633][ T6059] loop3: detected capacity change from 0 to 128
[  123.582077][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.606094][ T5838] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  124.028105][   T31] kauditd_printk_skb: 31 callbacks suppressed
[  124.028130][   T31] audit: type=1326 audit(1767158268.721:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.5.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  124.081972][ T6073] tipc: Started in network mode
[  124.091731][ T6073] tipc: Node identity 4, cluster identity 4711
[  124.181481][ T6073] tipc: Node number set to 4
[  124.282084][ T6074] process 'syz.5.27' launched '/dev/fd/5' with NULL argv: empty string added
[  124.413355][   T31] audit: type=1326 audit(1767158268.721:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.5.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  124.726957][ T6084] loop0: detected capacity change from 0 to 128
[  125.182925][   T31] audit: type=1326 audit(1767158268.781:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.5.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fedcc3865e7 code=0x7ffc0000
[  125.205614][   T31] audit: type=1326 audit(1767158268.781:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.5.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedcc32b829 code=0x7ffc0000
[  125.262995][   T31] audit: type=1326 audit(1767158268.781:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.5.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  125.294847][   T31] audit: type=1326 audit(1767158268.781:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.5.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  125.468303][   T31] audit: type=1326 audit(1767158268.781:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.5.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fedcc3865e7 code=0x7ffc0000
[  125.570390][   T31] audit: type=1326 audit(1767158268.781:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.5.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedcc32b829 code=0x7ffc0000
[  125.699918][   T31] audit: type=1326 audit(1767158268.791:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.5.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  125.736221][ T6093] netlink: 'syz.0.31': attribute type 1 has an invalid length.
[  125.797868][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'.
[  125.814656][   T31] audit: type=1326 audit(1767158268.791:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.5.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  125.834174][ T6092] 9pnet: p9_errstr2errno: server reported unknown error 
[  126.018658][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[  126.031765][ T6098] netlink: 'syz.2.33': attribute type 30 has an invalid length.
[  126.153506][ T4106] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.219236][ T4106] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.319359][ T4106] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.373610][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.848076][ T6113] loop2: detected capacity change from 0 to 512
[  126.874962][ T6113] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  127.189297][ T6118] loop5: detected capacity change from 0 to 128
[  127.777496][ T6113] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003]
[  127.821853][ T6113] System zones: 1-2, 4-12, 8-8
[  127.862471][ T6113] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.39: iget: bad i_size value: 38620345925642
[  127.972526][ T6113] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.39: couldn't read orphan inode 15 (err -117)
[  128.026553][ T6113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.506567][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.076962][ T6143] random: crng reseeded on system resumption
[  130.407298][ T6154] loop5: detected capacity change from 0 to 128
[  131.467002][ T6160] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  131.818617][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.50'.
[  131.880821][ T6165] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.973680][ T6177] random: crng reseeded on system resumption
[  132.603027][ T6165] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.903058][ T6181] 9pnet: p9_errstr2errno: server reported unknown error 
[  133.369055][ T6193] loop3: detected capacity change from 0 to 128
[  134.194239][ T6201] loop4: detected capacity change from 0 to 128
[  134.197170][ T6165] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.238811][ T6201] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  134.471598][ T6203] loop0: detected capacity change from 0 to 128
[  135.586463][ T6165] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.598116][ T6213] syz.1.62 uses obsolete (PF_INET,SOCK_PACKET)
[  135.727228][ T6206] loop2: detected capacity change from 0 to 8192
[  135.868988][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'.
[  135.924120][ T3481] kworker/u8:11: attempt to access beyond end of device
[  135.924120][ T3481] loop0: rw=1, sector=145, nr_sectors = 16 limit=128
[  135.930909][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'.
[  135.981882][ T3481] kworker/u8:11: attempt to access beyond end of device
[  135.981882][ T3481] loop0: rw=1, sector=169, nr_sectors = 8 limit=128
[  136.193779][   T60] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.287301][ T2953] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.336120][ T2953] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.388649][   T31] kauditd_printk_skb: 190 callbacks suppressed
[  136.388673][   T31] audit: type=1326 audit(1767158281.091:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57c98f749 code=0x7ffc0000
[  136.487951][ T6223] syz_tun: entered allmulticast mode
[  136.577951][   T60] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.862149][ T6228] random: crng reseeded on system resumption
[  137.819953][ T6230] overlayfs: failed to resolve './file1': -2
[  137.988502][ T6223] pimreg: entered allmulticast mode
[  138.570004][   T31] audit: type=1326 audit(1767158281.121:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57c98f749 code=0x7ffc0000
[  138.667183][ T6222] syz_tun: left allmulticast mode
[  138.731437][   T31] audit: type=1326 audit(1767158281.131:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc57c98f749 code=0x7ffc0000
[  138.856395][ T6239] random: crng reseeded on system resumption
[  138.964093][ T6238] loop5: detected capacity change from 0 to 512
[  139.066810][ T6238] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  139.127202][ T6238] EXT4-fs (loop5): orphan cleanup on readonly fs
[  139.181576][ T6238] EXT4-fs warning (device loop5): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  139.297167][   T31] audit: type=1326 audit(1767158281.151:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57c98f749 code=0x7ffc0000
[  139.320811][   T31] audit: type=1326 audit(1767158281.171:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc57c98f749 code=0x7ffc0000
[  139.384111][ T6238] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  139.398501][   T31] audit: type=1326 audit(1767158281.171:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57c98f749 code=0x7ffc0000
[  139.456479][ T6238] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #13: comm syz.5.70: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  139.511018][   T31] audit: type=1326 audit(1767158281.171:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57c98f749 code=0x7ffc0000
[  139.562853][ T6238] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.70: couldn't read orphan inode 13 (err -117)
[  139.647721][   T31] audit: type=1326 audit(1767158281.181:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc57c98f749 code=0x7ffc0000
[  139.693547][ T6238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  139.706656][ T6250] netlink: 'syz.3.74': attribute type 1 has an invalid length.
[  139.753058][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'.
[  139.769078][ T6238] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  139.780231][ T6238] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  139.798060][   T31] audit: type=1326 audit(1767158281.181:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57c98f749 code=0x7ffc0000
[  140.119044][ T6238] EXT4-fs warning (device loop5): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  140.199301][   T31] audit: type=1326 audit(1767158281.181:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57c98f749 code=0x7ffc0000
[  140.627295][ T6250] team0: Port device team_slave_1 removed
[  140.866548][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.277033][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.78'.
[  141.513031][ T6258] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.527490][ T6258] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.567601][ T6267] loop2: detected capacity change from 0 to 128
[  141.635645][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.75'.
[  141.651100][ T6264] netlink: 'syz.5.75': attribute type 30 has an invalid length.
[  141.882621][ T6258] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.944064][ T6258] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.212558][ T6273] random: crng reseeded on system resumption
[  142.789923][ T3901] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.880551][ T3901] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.891406][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  142.898161][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  142.975331][ T6266] loop0: detected capacity change from 0 to 128
[  143.002538][ T6275] netlink: 'syz.3.80': attribute type 1 has an invalid length.
[  143.067292][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'.
[  143.096144][ T6258] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.181205][ T6258] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.193664][ T6278] loop4: detected capacity change from 0 to 512
[  143.230088][ T6278] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  143.247314][ T3901] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  143.261220][ T6278] System zones: 0-2, 18-18, 34-34
[  143.295714][ T6278] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.81: bg 0: block 248: padding at end of block bitmap is not set
[  143.340691][ T3901] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  143.349921][ T6278] __quota_error: 40 callbacks suppressed
[  143.349943][ T6278] Quota error (device loop4): write_blk: dquota write failed
[  143.386842][ T6278] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  143.397522][ T6278] EXT4-fs error (device loop4): ext4_acquire_dquot:6984: comm syz.4.81: Failed to acquire dquot type 1
[  143.418604][ T6278] EXT4-fs (loop4): 1 truncate cleaned up
[  143.431498][ T6258] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.446372][ T6278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.481056][ T6278] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.490905][ T6258] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.915925][ T6285] wg2: entered promiscuous mode
[  143.921743][ T6285] wg2: entered allmulticast mode
[  143.970662][ T3455] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.039983][ T6290] loop5: detected capacity change from 0 to 512
[  144.098378][ T6290] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  144.115199][ T3455] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.220977][ T6290] EXT4-fs (loop5): orphan cleanup on readonly fs
[  144.305235][  T934] IPVS: starting estimator thread 0...
[  144.313011][ T6290] EXT4-fs warning (device loop5): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  144.693260][ T6296] loop3: detected capacity change from 0 to 128
[  144.855352][ T6294] IPVS: using max 22 ests per chain, 52800 per kthread
[  145.123253][ T6290] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  145.177741][ T6290] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #13: comm syz.5.84: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  145.267425][ T6290] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.84: couldn't read orphan inode 13 (err -117)
[  145.292522][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  145.312977][ T6290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  145.327981][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.426151][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  145.434789][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.460694][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.469121][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.706064][ T6290] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  145.718293][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.902118][ T6303] random: crng reseeded on system resumption
[  146.457063][ T6290] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  146.564425][ T6290] EXT4-fs warning (device loop5): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  146.683542][   T31] audit: type=1326 audit(1767158291.391:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.5.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  146.728577][ T6307] netlink: 'syz.1.87': attribute type 1 has an invalid length.
[  146.754171][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'.
[  146.784800][   T31] audit: type=1326 audit(1767158291.391:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.5.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  146.822797][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.857390][   T31] audit: type=1326 audit(1767158291.391:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.5.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  146.902990][ T6314] random: crng reseeded on system resumption
[  146.946633][ T6313] netlink: 3 bytes leftover after parsing attributes in process `syz.2.89'.
[  146.969430][   T31] audit: type=1326 audit(1767158291.391:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.5.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  147.092646][   T31] audit: type=1326 audit(1767158291.391:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.5.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  147.172745][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.209053][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.235740][   T31] audit: type=1326 audit(1767158291.391:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.5.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  147.425947][   T31] audit: type=1326 audit(1767158291.391:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.5.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  147.467533][ T6313] 0ªX¹¦À: renamed from caif0
[  147.474814][   T31] audit: type=1326 audit(1767158291.391:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.5.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fedcc3c2005 code=0x7ffc0000
[  147.547913][ T6313] 0ªX¹¦À: entered allmulticast mode
[  147.554778][ T6313] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  147.744767][ T6322] loop4: detected capacity change from 0 to 512
[  148.091938][ T6328] random: crng reseeded on system resumption
[  148.680351][ T6319] loop3: detected capacity change from 0 to 8192
[  148.701369][ T6322] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  148.709498][ T6322] System zones: 0-2, 18-18, 34-34
[  148.825066][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'.
[  148.855701][ T6322] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.92: bg 0: block 248: padding at end of block bitmap is not set
[  148.903746][ T6322] __quota_error: 28 callbacks suppressed
[  148.903771][ T6322] Quota error (device loop4): write_blk: dquota write failed
[  148.993480][ T6322] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  149.020408][ T6322] EXT4-fs error (device loop4): ext4_acquire_dquot:6984: comm syz.4.92: Failed to acquire dquot type 1
[  149.054993][ T6322] EXT4-fs (loop4): 1 truncate cleaned up
[  149.061664][ T6334] loop5: detected capacity change from 0 to 128
[  149.082720][ T6322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.133435][   T31] audit: type=1800 audit(1767158293.841:326): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.95" name="bus" dev="loop5" ino=1048612 res=0 errno=0
[  149.147666][ T6322] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.217788][ T6331] loop2: detected capacity change from 0 to 8192
[  149.435453][ T6342] loop0: detected capacity change from 0 to 128
[  149.520600][ T6342] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  150.868208][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.442367][ T6363] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.570824][ T6370] random: crng reseeded on system resumption
[  152.415132][ T6382] random: crng reseeded on system resumption
[  152.638421][ T6363] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.656023][ T6384] netlink: 3 bytes leftover after parsing attributes in process `syz.5.109'.
[  152.741881][ T6384] 0ªX¹¦À: renamed from caif0
[  152.769056][ T6384] 0ªX¹¦À: entered allmulticast mode
[  152.785872][ T6384] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  152.967925][ T6363] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.013180][ T6386] loop2: detected capacity change from 0 to 8192
[  153.071920][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'.
[  153.209859][ T6390] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  153.222430][ T6363] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.587847][ T6317] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.667215][ T1152] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.952890][ T6399] random: crng reseeded on system resumption
[  155.021201][ T1152] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.090672][ T6045] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.484648][ T6409] loop2: detected capacity change from 0 to 128
[  155.627559][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'.
[  155.753081][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'.
[  155.782612][   T31] audit: type=1800 audit(1767158300.491:327): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.116" name="bus" dev="loop2" ino=1048614 res=0 errno=0
[  155.899827][ T6415] team1: entered promiscuous mode
[  155.912208][ T6415] team1: entered allmulticast mode
[  155.926711][ T6415] 8021q: adding VLAN 0 to HW filter on device team1
[  156.059847][ T6414] team1: entered promiscuous mode
[  156.075660][ T6414] team1: entered allmulticast mode
[  156.086245][ T6414] 8021q: adding VLAN 0 to HW filter on device team1
[  157.381526][ T6432] loop0: detected capacity change from 0 to 128
[  157.666546][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'.
[  157.721139][ T6436] netlink: 'syz.2.122': attribute type 30 has an invalid length.
[  158.041313][ T6438] loop0: detected capacity change from 0 to 512
[  158.141956][ T6438] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  158.150590][ T6438] EXT4-fs (loop0): orphan cleanup on readonly fs
[  158.262494][ T6438] EXT4-fs warning (device loop0): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  158.345499][ T6438] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  158.404627][ T6438] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.125: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  158.501577][ T6438] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.125: couldn't read orphan inode 13 (err -117)
[  158.836482][ T6446] loop1: detected capacity change from 0 to 128
[  159.353110][ T6438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  159.412996][ T6447] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  159.562209][ T6438] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  159.625655][ T6438] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  159.717916][   T31] audit: type=1326 audit(1767158304.411:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  159.773995][ T6438] EXT4-fs warning (device loop0): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  159.814144][ T6452] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.831269][   T31] audit: type=1326 audit(1767158304.411:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  159.869177][ T6452] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.037510][ T6458] loop3: detected capacity change from 0 to 512
[  160.136881][ T6458] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.131: inode has both inline data and extents flags
[  160.188846][   T31] audit: type=1326 audit(1767158304.411:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  160.215873][ T6458] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.131: couldn't read orphan inode 15 (err -117)
[  160.257855][   T31] audit: type=1326 audit(1767158304.421:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  160.268295][ T6458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.286210][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.507595][ T6462] loop2: detected capacity change from 0 to 128
[  161.032634][ T6452] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.036163][   T31] audit: type=1326 audit(1767158304.421:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  161.065432][   T31] audit: type=1326 audit(1767158304.421:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  161.090928][   T31] audit: type=1326 audit(1767158304.421:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5bb8f749 code=0x7ffc0000
[  161.113857][   T31] audit: type=1326 audit(1767158304.451:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b5bbc2005 code=0x7ffc0000
[  161.256609][   T31] audit: type=1326 audit(1767158304.451:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b5bbc2005 code=0x7ffc0000
[  161.312818][ T6452] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.406157][ T6458] netlink: 'syz.3.131': attribute type 4 has an invalid length.
[  161.611400][   T31] audit: type=1326 audit(1767158304.471:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b5bbc2005 code=0x7ffc0000
[  162.757943][ T6470] loop2: detected capacity change from 0 to 128
[  162.766487][   T31] audit: type=1326 audit(1767158304.471:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b5bbc2005 code=0x7ffc0000
[  163.195843][ T6452] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.302165][ T6452] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.420753][ T5845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.489859][ T6477] loop2: detected capacity change from 0 to 128
[  163.547982][ T6452] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.641208][ T6452] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.698854][   T31] audit: type=1326 audit(1767158304.491:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b5bbc2005 code=0x7ffc0000
[  163.737693][   T31] audit: type=1326 audit(1767158304.491:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b5bbc2005 code=0x7ffc0000
[  163.821006][   T31] audit: type=1326 audit(1767158304.491:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b5bbc2005 code=0x7ffc0000
[  163.994171][ T6483] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.284170][ T3901] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  164.306047][ T3901] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.372746][ T6489] tmpfs: Bad value for 'mpol'
[  164.499818][ T6490] loop0: detected capacity change from 0 to 128
[  164.527542][ T6483] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.633164][ T3901] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  164.671295][ T3901] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.715018][ T6483] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.844620][ T3901] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  164.880418][ T3901] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.928752][ T3901] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  164.957529][ T3901] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.094592][ T6494] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  165.141091][ T6494] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.218628][ T6483] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.276032][ T6494] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  166.321187][ T6494] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.434778][ T6506] netlink: 3 bytes leftover after parsing attributes in process `syz.1.145'.
[  166.824527][ T6494] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  166.861221][ T6494] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.926298][ T6506] 0ªX¹¦À: renamed from caif0
[  166.949784][ T6506] 0ªX¹¦À: entered allmulticast mode
[  166.970992][ T6506] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  167.093766][ T6494] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.140997][ T6494] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.236670][ T3455] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.294468][   T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.294661][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'.
[  167.347025][ T6513] netlink: 'syz.1.147': attribute type 30 has an invalid length.
[  167.359114][ T6400] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.432744][ T6400] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.450200][ T6516] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  167.512454][ T6400] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  167.521746][ T6400] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.563917][ T6400] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  167.573683][ T6400] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.606033][ T6400] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  167.624533][ T6400] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.687887][ T6400] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  167.712501][ T6400] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.837668][ T6521] loop1: detected capacity change from 0 to 512
[  167.937521][ T6521] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.150: inode has both inline data and extents flags
[  168.002920][ T6521] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.150: couldn't read orphan inode 15 (err -117)
[  168.092828][ T6521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.313676][ T6521] netlink: 'syz.1.150': attribute type 4 has an invalid length.
[  169.359260][ T6535] random: crng reseeded on system resumption
[  170.721996][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.949087][ T6543] loop1: detected capacity change from 0 to 512
[  170.989782][ T6543] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  171.008646][ T6543] System zones: 0-2, 18-18, 34-34
[  171.049747][ T6543] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.154: bg 0: block 248: padding at end of block bitmap is not set
[  172.040496][ T6543] __quota_error: 15 callbacks suppressed
[  172.040614][ T6543] Quota error (device loop1): write_blk: dquota write failed
[  172.124195][ T6543] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  172.167027][ T6556] loop3: detected capacity change from 0 to 128
[  173.149832][ T6543] EXT4-fs error (device loop1): ext4_acquire_dquot:6984: comm syz.1.154: Failed to acquire dquot type 1
[  173.782684][ T6543] EXT4-fs (loop1): 1 truncate cleaned up
[  173.790354][ T6543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.964932][ T6543] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.140983][ T6560] loop0: detected capacity change from 0 to 128
[  174.215836][ T6559] loop4: detected capacity change from 0 to 128
[  174.239297][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.245787][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'.
[  174.262709][ T6559] EXT4-fs: Ignoring removed nobh option
[  174.300202][ T6567] loop5: detected capacity change from 0 to 512
[  174.328671][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'.
[  174.390726][ T6559] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  174.449479][ T6559] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  174.463019][ T6567] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  174.521122][ T6567] System zones: 0-2, 18-18, 34-34
[  174.546011][ T6567] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.163: bg 0: block 248: padding at end of block bitmap is not set
[  174.662120][ T6567] Quota error (device loop5): write_blk: dquota write failed
[  174.722625][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'.
[  174.731632][ T6567] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  174.788769][ T6567] EXT4-fs error (device loop5): ext4_acquire_dquot:6984: comm syz.5.163: Failed to acquire dquot type 1
[  174.815143][ T5840] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  174.833274][ T6567] EXT4-fs (loop5): 1 truncate cleaned up
[  174.838239][ T6582] loop2: detected capacity change from 0 to 512
[  174.858691][ T6567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.912417][ T6567] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.960789][ T6582] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.166: inode has both inline data and extents flags
[  174.993132][ T6577] team2: entered promiscuous mode
[  174.998176][ T6577] team2: entered allmulticast mode
[  175.076249][ T6582] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.166: couldn't read orphan inode 15 (err -117)
[  175.107544][ T6582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.143535][ T6577] 8021q: adding VLAN 0 to HW filter on device team2
[  175.295762][ T6582] netlink: 'syz.2.166': attribute type 4 has an invalid length.
[  175.671020][ T6591] wg2: entered promiscuous mode
[  175.675962][ T6591] wg2: entered allmulticast mode
[  175.723557][ T5940] IPVS: starting estimator thread 0...
[  175.806142][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.891315][ T6602] IPVS: using max 24 ests per chain, 57600 per kthread
[  176.323333][ T6610] 9pnet: p9_errstr2errno: server reported unknown error 
[  177.283702][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.525509][ T6626] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  180.802501][ T6640] loop2: detected capacity change from 0 to 128
[  182.300517][ T6647] loop4: detected capacity change from 0 to 128
[  182.451788][ T6647] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  182.542127][ T6647] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.615716][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.178'.
[  183.020487][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'.
[  183.088423][ T6664] netlink: 'syz.3.181': attribute type 1 has an invalid length.
[  183.158902][ T5840] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  183.271839][ T6670] random: crng reseeded on system resumption
[  184.235512][ T6667] loop0: detected capacity change from 0 to 8192
[  186.586513][ T6692] loop2: detected capacity change from 0 to 128
[  187.053109][ T6694] loop1: detected capacity change from 0 to 128
[  187.139299][   T31] audit: type=1800 audit(1767158331.821:357): pid=6694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.188" name="bus" dev="loop1" ino=1048617 res=0 errno=0
[  187.267135][ T6700] loop5: detected capacity change from 0 to 512
[  187.375233][ T6700] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.190: inode has both inline data and extents flags
[  187.410024][ T6700] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.190: couldn't read orphan inode 15 (err -117)
[  187.502162][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'.
[  187.511832][ T6707] netlink: 'syz.0.192': attribute type 30 has an invalid length.
[  187.517895][ T6700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.534858][ T6045] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  187.721521][ T6045] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  187.741235][ T6045] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  187.749992][ T6045] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  187.755915][ T6700] netlink: 'syz.5.190': attribute type 4 has an invalid length.
[  189.188900][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.722930][ T6722] loop5: detected capacity change from 0 to 128
[  189.754763][ T6722] EXT4-fs: Ignoring removed nobh option
[  189.819415][ T6722] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  189.856526][ T6722] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  190.141855][ T6731] loop3: detected capacity change from 0 to 128
[  190.631347][ T5830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  190.845221][ T6736] loop4: detected capacity change from 0 to 128
[  190.893176][ T6736] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  194.515758][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.204'.
[  194.527095][ T6754] IPVS: Error connecting to the multicast addr
[  195.759332][ T6762] loop5: detected capacity change from 0 to 512
[  196.281536][ T6771] random: crng reseeded on system resumption
[  197.033944][ T6762] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.207: inode has both inline data and extents flags
[  197.177556][ T6762] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.207: couldn't read orphan inode 15 (err -117)
[  197.266951][ T6762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.624086][ T6762] netlink: 'syz.5.207': attribute type 4 has an invalid length.
[  200.250599][ T6793] loop1: detected capacity change from 0 to 128
[  200.935561][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.143295][ T6801] netlink: 3 bytes leftover after parsing attributes in process `syz.4.216'.
[  201.228682][ T6801] 0ªX¹¦À: renamed from caif0
[  201.487197][ T6797] loop2: detected capacity change from 0 to 8192
[  201.537039][ T6801] 0ªX¹¦À: entered allmulticast mode
[  201.577999][ T6801] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  201.914033][ T6811] loop1: detected capacity change from 0 to 128
[  202.306484][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'.
[  203.275351][ T6837] random: crng reseeded on system resumption
[  203.854829][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  203.861698][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  203.881055][ T6838] 9pnet: p9_errstr2errno: server reported unknown error 
[  204.617520][ T6852] loop5: detected capacity change from 0 to 128
[  205.153768][ T6845] loop2: detected capacity change from 0 to 512
[  205.337321][ T6845] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  205.371167][ T6845] EXT4-fs (loop2): orphan cleanup on readonly fs
[  205.500282][ T6845] EXT4-fs warning (device loop2): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  205.634925][ T6845] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  205.719119][ T6845] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.227: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  206.175641][ T6861] loop5: detected capacity change from 0 to 128
[  206.310728][ T6845] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.227: couldn't read orphan inode 13 (err -117)
[  206.572489][ T6845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  206.602013][ T6865] loop3: detected capacity change from 0 to 128
[  206.751455][ T6865] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  207.728348][ T6845] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  207.762834][ T6845] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  207.816065][ T6876] loop5: detected capacity change from 0 to 128
[  207.841812][ T6845] EXT4-fs warning (device loop2): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  207.906231][   T31] audit: type=1326 audit(1767158352.611:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2838f749 code=0x7ffc0000
[  207.944735][ T6876] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  208.052783][   T31] audit: type=1326 audit(1767158352.611:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2838f749 code=0x7ffc0000
[  208.113110][ T6883] netlink: 3 bytes leftover after parsing attributes in process `syz.4.235'.
[  208.173941][ T6883] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  209.178149][   T31] audit: type=1326 audit(1767158352.641:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2838f749 code=0x7ffc0000
[  210.168736][ T6883] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  210.482842][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.521057][   T31] audit: type=1326 audit(1767158352.641:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f0f2838f749 code=0x7ffc0000
[  210.644018][   T31] audit: type=1326 audit(1767158352.641:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2838f749 code=0x7ffc0000
[  210.696550][   T31] audit: type=1326 audit(1767158352.641:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2838f749 code=0x7ffc0000
[  210.810951][   T31] audit: type=1326 audit(1767158352.641:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2838f749 code=0x7ffc0000
[  210.896749][   T31] audit: type=1326 audit(1767158352.651:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f283c2005 code=0x7ffc0000
[  210.942024][ T6895] syz_tun: entered allmulticast mode
[  210.964291][   T31] audit: type=1326 audit(1767158352.651:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f283c2005 code=0x7ffc0000
[  211.029046][ T6893] loop1: detected capacity change from 0 to 128
[  211.035117][ T6895] pimreg: entered allmulticast mode
[  211.062030][ T6893] EXT4-fs: Ignoring removed nobh option
[  211.258219][ T6894] syz_tun: left allmulticast mode
[  211.288888][ T6891] loop4: detected capacity change from 0 to 8192
[  211.307746][   T31] audit: type=1326 audit(1767158352.661:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f283c2005 code=0x7ffc0000
[  211.309099][ T6893] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  211.446321][ T6903] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  211.496067][ T6893] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  212.529791][ T6908] netlink: 'syz.5.240': attribute type 1 has an invalid length.
[  212.659899][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.240'.
[  212.718794][ T6908] 8021q: adding VLAN 0 to HW filter on device bond1
[  212.740338][ T6915] loop2: detected capacity change from 0 to 128
[  212.794371][ T6917] loop4: detected capacity change from 0 to 128
[  212.818960][ T6915] EXT4-fs: Ignoring removed nobh option
[  212.858532][ T6917] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  212.912409][ T6915] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  212.944041][ T6915] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  213.099626][ T6920] loop0: detected capacity change from 0 to 128
[  213.116030][ T5829] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  213.193718][ T6920] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  215.512232][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'.
[  215.661140][ T6909] bond1 (unregistering): Released all slaves
[  216.181347][ T6940] netlink: 'syz.4.249': attribute type 1 has an invalid length.
[  216.241340][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  216.271913][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'.
[  216.295052][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.250'.
[  216.408595][ T6940] 8021q: adding VLAN 0 to HW filter on device bond1
[  218.053805][ T6957] random: crng reseeded on system resumption
[  218.215985][ T6958] loop3: detected capacity change from 0 to 128
[  219.334168][ T6962] loop1: detected capacity change from 0 to 512
[  219.612487][ T6970] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  220.534430][ T6962] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  220.874076][ T6962] EXT4-fs (loop1): orphan cleanup on readonly fs
[  220.898688][ T6962] EXT4-fs warning (device loop1): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  220.948311][ T6962] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  220.972262][ T6962] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #13: comm syz.1.253: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  221.126106][ T6962] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.253: couldn't read orphan inode 13 (err -117)
[  221.221695][ T6962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  221.448326][ T6985] loop5: detected capacity change from 0 to 128
[  221.455123][ T6962] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  221.502259][ T6985] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  221.524267][   T31] kauditd_printk_skb: 43 callbacks suppressed
[  221.524295][   T31] audit: type=1326 audit(1767158366.221:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91aad8f749 code=0x7ffc0000
[  221.543000][ T6962] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  221.605069][ T6962] EXT4-fs warning (device loop1): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  221.890878][   T31] audit: type=1326 audit(1767158366.221:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91aad8f749 code=0x7ffc0000
[  222.730878][   T31] audit: type=1326 audit(1767158366.221:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91aad8f749 code=0x7ffc0000
[  222.759609][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.780934][   T31] audit: type=1326 audit(1767158366.231:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f91aad8f749 code=0x7ffc0000
[  222.871602][   T31] audit: type=1326 audit(1767158366.231:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91aad8f749 code=0x7ffc0000
[  222.965794][   T31] audit: type=1326 audit(1767158366.231:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91aad8f749 code=0x7ffc0000
[  222.995852][ T6945] bond1 (unregistering): Released all slaves
[  223.077556][ T7001] loop1: detected capacity change from 0 to 128
[  223.095897][ T7001] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  223.281032][   T31] audit: type=1326 audit(1767158366.231:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91aadc2005 code=0x7ffc0000
[  223.534807][ T7004] overlayfs: missing 'lowerdir'
[  224.472359][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'.
[  224.712450][ T6973] netlink: 'syz.2.257': attribute type 30 has an invalid length.
[  224.990599][   T31] audit: type=1326 audit(1767158366.301:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91aadc2005 code=0x7ffc0000
[  225.013258][   T31] audit: type=1326 audit(1767158366.301:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91aadc2005 code=0x7ffc0000
[  225.060442][   T31] audit: type=1326 audit(1767158366.301:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91aadc2005 code=0x7ffc0000
[  225.385664][ T7022] loop4: detected capacity change from 0 to 128
[  225.408158][ T7021] loop3: detected capacity change from 0 to 512
[  225.501234][ T7022] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  225.656989][ T7021] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  225.789643][ T7021] System zones: 0-2, 18-18, 34-34
[  225.818931][ T7021] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.268: bg 0: block 248: padding at end of block bitmap is not set
[  225.859888][ T7021] EXT4-fs error (device loop3): ext4_acquire_dquot:6984: comm syz.3.268: Failed to acquire dquot type 1
[  225.900409][ T7021] EXT4-fs (loop3): 1 truncate cleaned up
[  225.918829][ T7021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.961035][ T7021] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.977967][ T7019] loop1: detected capacity change from 0 to 128
[  227.518133][ T7021] wg2: entered promiscuous mode
[  227.584255][ T7021] wg2: entered allmulticast mode
[  227.614425][ T7044] loop1: detected capacity change from 0 to 128
[  228.577461][ T7048] loop2: detected capacity change from 0 to 512
[  228.584428][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.271'.
[  228.827081][ T7044] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  228.843623][ T7048] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  228.871020][ T7048] System zones: 0-2, 18-18, 34-34
[  228.951607][ T7048] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.272: bg 0: block 248: padding at end of block bitmap is not set
[  229.291511][ T7048] __quota_error: 4 callbacks suppressed
[  229.291536][ T7048] Quota error (device loop2): write_blk: dquota write failed
[  230.030927][ T7048] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  230.102314][ T7048] EXT4-fs error (device loop2): ext4_acquire_dquot:6984: comm syz.2.272: Failed to acquire dquot type 1
[  230.185784][ T7048] EXT4-fs (loop2): 1 truncate cleaned up
[  230.254339][ T7048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.321550][ T7048] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.369779][ T7072] loop4: detected capacity change from 0 to 128
[  230.470943][ T7072] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  230.681423][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'.
[  230.699871][ T5845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.729500][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.986570][ T7079] loop5: detected capacity change from 0 to 128
[  231.693184][ T7079] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  231.785014][ T7086] overlayfs: missing 'lowerdir'
[  231.795067][ T5836] Bluetooth: hci0: command 0x0406 tx timeout
[  231.814076][ T5836] Bluetooth: hci3: command 0x0406 tx timeout
[  231.820288][ T5836] Bluetooth: hci1: command 0x0406 tx timeout
[  231.829524][ T5836] Bluetooth: hci5: command 0x0406 tx timeout
[  231.898389][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  231.905378][ T5836] Bluetooth: hci4: command 0x0406 tx timeout
[  232.023710][ T7079] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.368251][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'.
[  232.560777][ T7090] netlink: 'syz.3.277': attribute type 30 has an invalid length.
[  232.780371][ T6317] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  233.096470][ T7103] loop2: detected capacity change from 0 to 128
[  233.208627][ T4106] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  233.595838][ T4106] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  233.605133][ T4106] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  233.658427][ T7101] loop0: detected capacity change from 0 to 128
[  233.730762][   T31] audit: type=1800 audit(1767158378.431:423): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.282" name="bus" dev="loop0" ino=1048618 res=0 errno=0
[  233.842389][ T5830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  234.104380][ T7109] syz.0.282: attempt to access beyond end of device
[  234.104380][ T7109] loop0: rw=2049, sector=537, nr_sectors = 504 limit=128
[  234.136841][ T7114] loop5: detected capacity change from 0 to 128
[  234.176229][ T7114] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  236.649897][ T7126] netlink: 36 bytes leftover after parsing attributes in process `syz.5.288'.
[  237.069922][ T7136] loop5: detected capacity change from 0 to 128
[  237.141204][ T7136] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  237.361284][ T7140] loop0: detected capacity change from 0 to 128
[  238.371830][ T7140] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  238.545576][ T7146] loop5: detected capacity change from 0 to 512
[  238.633908][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'.
[  238.679397][ T7146] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  238.738311][ T7146] System zones: 0-2, 18-18, 34-34
[  238.743645][ T7155] netlink: 'syz.2.297': attribute type 30 has an invalid length.
[  238.760175][ T7146] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.300: bg 0: block 248: padding at end of block bitmap is not set
[  239.518145][ T7146] Quota error (device loop5): write_blk: dquota write failed
[  239.594684][ T7146] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  239.673647][ T7146] EXT4-fs error (device loop5): ext4_acquire_dquot:6984: comm syz.5.300: Failed to acquire dquot type 1
[  239.773001][ T7146] EXT4-fs (loop5): 1 truncate cleaned up
[  239.780689][ T7146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.908345][ T7146] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.025516][ T7170] loop4: detected capacity change from 0 to 128
[  241.299769][   T31] audit: type=1800 audit(1767158386.001:424): pid=7170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.303" name="bus" dev="loop4" ino=1048619 res=0 errno=0
[  241.435326][ T7178] syz.4.303: attempt to access beyond end of device
[  241.435326][ T7178] loop4: rw=2049, sector=377, nr_sectors = 664 limit=128
[  241.540319][ T7175] loop0: detected capacity change from 0 to 128
[  241.843679][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.897443][ T7185] hub 1-0:1.0: USB hub found
[  241.931551][ T7185] hub 1-0:1.0: 1 port detected
[  242.141877][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz.5.306'.
[  242.550644][ T7196] loop4: detected capacity change from 0 to 128
[  242.879337][   T31] audit: type=1326 audit(1767158387.581:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7204 comm="syz.5.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  242.915961][   T31] audit: type=1326 audit(1767158387.581:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7204 comm="syz.5.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  242.940355][   T31] audit: type=1326 audit(1767158387.581:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7204 comm="syz.5.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  243.041436][   T31] audit: type=1326 audit(1767158387.621:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7204 comm="syz.5.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  243.469940][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'.
[  243.548243][ T7218] netlink: 'syz.4.315': attribute type 30 has an invalid length.
[  243.549750][ T7221] netlink: 68 bytes leftover after parsing attributes in process `syz.5.316'.
[  243.571165][   T31] audit: type=1326 audit(1767158387.621:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7204 comm="syz.5.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  243.593876][   T31] audit: type=1326 audit(1767158387.621:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7204 comm="syz.5.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  243.618812][   T31] audit: type=1326 audit(1767158387.631:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7204 comm="syz.5.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fedcc38f749 code=0x7ffc0000
[  243.682761][ T6298] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  243.724528][ T6298] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  243.761461][   T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  243.801668][   T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  244.053256][ T7228] loop5: detected capacity change from 0 to 128
[  247.335351][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.328'.
[  247.439438][ T7256] loop1: detected capacity change from 0 to 128
[  248.311779][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'.
[  248.324148][ T7272] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  248.339687][ T7270] netlink: 'syz.0.331': attribute type 30 has an invalid length.
[  355.240757][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  355.247787][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5838/1:b..l
[  355.256120][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=19241, q=256 ncpus=2)
[  355.263879][    C1] task:syz-executor    state:R  running task     stack:23208 pid:5838  tgid:5838  ppid:5823   task_flags:0x400140 flags:0x00080000
[  355.278158][    C1] Call Trace:
[  355.281528][    C1]  <TASK>
[  355.284554][    C1]  ? __schedule+0x10b9/0x6150
[  355.289280][    C1]  __schedule+0x1139/0x6150
[  355.293837][    C1]  ? __pfx___schedule+0x10/0x10
[  355.298878][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.304531][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.310176][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  355.315552][    C1]  preempt_schedule_common+0x44/0xc0
[  355.320858][    C1]  preempt_schedule_thunk+0x16/0x30
[  355.326067][    C1]  _raw_spin_unlock+0x3e/0x50
[  355.330760][    C1]  copy_page_range+0x22d0/0x6780
[  355.335760][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  355.341058][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.346713][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.352371][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.358020][    C1]  ? __pfx___might_resched+0x10/0x10
[  355.363349][    C1]  ? __pfx_mas_store+0x10/0x10
[  355.368129][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.373784][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.379433][    C1]  ? down_write+0x14d/0x200
[  355.383950][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.389595][    C1]  ? up_write+0x282/0x4e0
[  355.393936][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.399583][    C1]  dup_mmap+0xbea/0x20e0
[  355.403854][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  355.408540][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.414201][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.419853][    C1]  copy_process+0x3b9f/0x7430
[  355.424555][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.430633][    C1]  ? do_wp_page+0x1c04/0x5010
[  355.435337][    C1]  ? __pfx_copy_process+0x10/0x10
[  355.440392][    C1]  ? do_raw_spin_lock+0x12c/0x2b0
[  355.445443][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.451107][    C1]  kernel_clone+0xfc/0x910
[  355.455549][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.461192][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  355.466263][    C1]  __do_sys_clone+0xce/0x120
[  355.470875][    C1]  ? __pfx___do_sys_clone+0x10/0x10
[  355.476137][    C1]  ? count_memcg_events+0x122/0x290
[  355.481361][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.487010][    C1]  ? do_user_addr_fault+0x843/0x1370
[  355.492313][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.497974][    C1]  do_syscall_64+0xcd/0xf80
[  355.502511][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.508408][    C1] RIP: 0033:0x7f2b5bb85e93
[  355.512817][    C1] RSP: 002b:00007ffe5be29118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  355.521318][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b5bb85e93
[  355.529285][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  355.537252][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  355.545392][    C1] R10: 000055557cd6d7d0 R11: 0000000000000246 R12: 0000000000000000
[  355.553357][    C1] R13: 00000000000927c0 R14: 000000000003cc8b R15: 00007ffe5be292b0
[  355.561364][    C1]  </TASK>
[  355.564466][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g19241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  355.576792][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=8752
[  355.584591][    C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g19241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  355.595960][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  355.605920][    C1] rcu: RCU grace-period kthread stack dump:
[  355.611967][    C1] task:rcu_preempt     state:I stack:28264 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  355.623967][    C1] Call Trace:
[  355.627254][    C1]  <TASK>
[  355.630188][    C1]  ? __schedule+0x10b9/0x6150
[  355.634887][    C1]  __schedule+0x1139/0x6150
[  355.639428][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.645066][    C1]  ? __lock_acquire+0x436/0x2890
[  355.650018][    C1]  ? __mod_timer+0x8f2/0xd30
[  355.654634][    C1]  ? __pfx___schedule+0x10/0x10
[  355.659505][    C1]  ? find_held_lock+0x2b/0x80
[  355.664197][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.669849][    C1]  schedule+0xe7/0x3a0
[  355.673936][    C1]  schedule_timeout+0x123/0x290
[  355.678803][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  355.684192][    C1]  ? __pfx_process_timeout+0x10/0x10
[  355.689494][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.695223][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  355.701047][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.706728][    C1]  ? prepare_to_swait_event+0xf5/0x480
[  355.712211][    C1]  rcu_gp_fqs_loop+0x1ea/0xaf0
[  355.716994][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.722638][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  355.727962][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  355.733212][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  355.738184][    C1]  ? rcu_gp_cleanup+0x7c1/0xe90
[  355.743077][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  355.748912][    C1]  rcu_gp_kthread+0x26d/0x380
[  355.753612][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  355.758837][    C1]  ? rcu_is_watching+0x12/0xc0
[  355.763611][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  355.768838][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.774499][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.780324][    C1]  ? __kthread_parkme+0x19e/0x250
[  355.785371][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  355.790588][    C1]  kthread+0x3c5/0x780
[  355.794685][    C1]  ? __pfx_kthread+0x10/0x10
[  355.799384][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.805034][    C1]  ? rcu_is_watching+0x12/0xc0
[  355.809843][    C1]  ? __pfx_kthread+0x10/0x10
[  355.814537][    C1]  ret_from_fork+0x983/0xb10
[  355.819140][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  355.824269][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.830001][    C1]  ? __switch_to+0x7af/0x10d0
[  355.834696][    C1]  ? __pfx_kthread+0x10/0x10
[  355.839301][    C1]  ret_from_fork_asm+0x1a/0x30
[  355.844116][    C1]  </TASK>
[  355.847128][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  355.853528][    C1] Sending NMI from CPU 1 to CPUs 0:
[  355.858755][    C0] NMI backtrace for cpu 0
[  355.858776][    C0] CPU: 0 UID: 0 PID: 7278 Comm: syz.3.332 Not tainted syzkaller #0 PREEMPT(full) 
[  355.858812][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  355.858831][    C0] RIP: 0010:sched_mm_cid_fork+0x4f9/0xcc0
[  355.858884][    C0] Code: 00 00 fc ff df 49 c1 ef 03 4c 01 f8 48 89 04 24 eb 5d 49 c7 c4 74 96 d7 8d 41 83 e4 07 41 83 c4 03 f3 90 48 8b 04 24 0f b6 00 <41> 38 c4 7c 08 84 c0 0f 85 60 06 00 00 8b 35 b8 2f 4b 0c 48 89 df
[  355.858914][    C0] RSP: 0018:ffffc90003637d50 EFLAGS: 00000046
[  355.858939][    C0] RAX: 0000000000000000 RBX: ffff888076523050 RCX: 1ffff1100eca44b9
[  355.858960][    C0] RDX: 0000000000000002 RSI: 0000000000000002 RDI: ffff888076523050
[  355.858979][    C0] RBP: ffff8880286f1e80 R08: 0000000000000000 R09: fffff520006c6f9c
[  355.858999][    C0] R10: 0000000000000003 R11: ffff8880286f29b0 R12: 0000000000000007
[  355.859024][    C0] R13: ffff888076522640 R14: 0000000000000002 R15: 0000000000000002
[  355.859046][    C0] FS:  00007f510f5ce6c0(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000
[  355.859076][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  355.859097][    C0] CR2: 0000555571728588 CR3: 000000006b8bd000 CR4: 0000000000350ef0
[  355.859117][    C0] Call Trace:
[  355.859128][    C0]  <TASK>
[  355.859145][    C0]  bprm_execve+0x4ff/0x1620
[  355.859183][    C0]  ? __pfx_bprm_execve+0x10/0x10
[  355.859214][    C0]  ? copy_string_kernel+0x460/0x520
[  355.859253][    C0]  do_execveat_common.isra.0+0x4a5/0x610
[  355.859294][    C0]  __x64_sys_execveat+0xda/0x120
[  355.859331][    C0]  do_syscall_64+0xcd/0xf80
[  355.859384][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.859416][    C0] RIP: 0033:0x7f510e78f749
[  355.859440][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.859471][    C0] RSP: 002b:00007f510f5ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  355.859546][    C0] RAX: ffffffffffffffda RBX: 00007f510e9e6090 RCX: 00007f510e78f749
[  355.859567][    C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  355.859586][    C0] RBP: 00007f510e813f91 R08: 0000000000001000 R09: 0000000000000000
[  355.859605][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.859630][    C0] R13: 00007f510e9e6128 R14: 00007f510e9e6090 R15: 00007ffe0cd9c548
[  355.859665][    C0]  </TASK>
[  507.806891][    C1] watchdog: BUG: soft lockup - CPU#1 stuck for 245s! [syz-executor:5833]
[  507.806924][    C1] Modules linked in:
[  507.806940][    C1] irq event stamp: 2361440
[  507.806950][    C1] hardirqs last  enabled at (2361439): [<ffffffff8b76abfd>] irqentry_exit+0x1dd/0x8c0
[  507.807013][    C1] hardirqs last disabled at (2361440): [<ffffffff8b76984e>] sysvec_apic_timer_interrupt+0xe/0xc0
[  507.807068][    C1] softirqs last  enabled at (2361438): [<ffffffff817de9d9>] __irq_exit_rcu+0x109/0x170
[  507.807124][    C1] softirqs last disabled at (2361253): [<ffffffff817de9d9>] __irq_exit_rcu+0x109/0x170
[  507.807185][    C1] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  507.807222][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  507.807241][    C1] RIP: 0010:smp_call_function_many_cond+0xe02/0x15e0
[  507.807284][    C1] Code: 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 e5 5d 0c 00 f3 90 41 0f b6 45 00 <40> 38 c5 7c 08 84 c0 0f 85 b6 05 00 00 8b 43 08 31 ff 83 e0 01 41
[  507.807315][    C1] RSP: 0018:ffffc90003fef720 EFLAGS: 00000293
[  507.807339][    C1] RAX: 0000000000000000 RBX: ffff8880b8443020 RCX: ffffffff81b28aa1
[  507.807360][    C1] RDX: ffff888034d00000 RSI: ffffffff81b28a7b RDI: 0000000000000005
[  507.807380][    C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
[  507.807399][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[  507.807419][    C1] R13: ffffed1017088605 R14: 0000000000000001 R15: 0000000000000000
[  507.807442][    C1] FS:  000055558e43e500(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000
[  507.807474][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  507.807496][    C1] CR2: 000055d4e7568008 CR3: 000000005bad1000 CR4: 0000000000350ef0
[  507.807516][    C1] Call Trace:
[  507.807525][    C1]  <TASK>
[  507.807542][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  507.807589][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  507.807630][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.807675][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.807716][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  507.807752][    C1]  on_each_cpu_cond_mask+0x40/0x90
[  507.807792][    C1]  flush_tlb_mm_range+0x2f0/0x12c0
[  507.807826][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.807863][    C1]  ? find_held_lock+0x2b/0x80
[  507.807913][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.807955][    C1]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[  507.807992][    C1]  ? up_write+0x282/0x4e0
[  507.808038][    C1]  dup_mmap+0xd04/0x20e0
[  507.808101][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  507.808135][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.808190][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.808237][    C1]  copy_process+0x3b9f/0x7430
[  507.808288][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.808347][    C1]  ? do_wp_page+0x1c04/0x5010
[  507.808396][    C1]  ? __pfx_copy_process+0x10/0x10
[  507.808450][    C1]  ? do_raw_spin_lock+0x12c/0x2b0
[  507.808498][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.808547][    C1]  kernel_clone+0xfc/0x910
[  507.808597][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.808636][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  507.808710][    C1]  __do_sys_clone+0xce/0x120
[  507.808761][    C1]  ? __pfx___do_sys_clone+0x10/0x10
[  507.808810][    C1]  ? count_memcg_events+0x122/0x290
[  507.808862][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.808898][    C1]  ? do_user_addr_fault+0x843/0x1370
[  507.808939][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.808986][    C1]  do_syscall_64+0xcd/0xf80
[  507.809038][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.809068][    C1] RIP: 0033:0x7f0f28385e93
[  507.809094][    C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  507.809124][    C1] RSP: 002b:00007ffc510d9a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  507.809152][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f28385e93
[  507.809172][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  507.809191][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  507.809210][    C1] R10: 000055558e43e7d0 R11: 0000000000000246 R12: 0000000000000000
[  507.809229][    C1] R13: 00000000000927c0 R14: 000000000003c891 R15: 00007ffc510d9bb0
[  507.809271][    C1]  </TASK>
[  507.809283][    C1] Sending NMI from CPU 1 to CPUs 0:
[  508.238535][    C0] NMI backtrace for cpu 0
[  508.238558][    C0] CPU: 0 UID: 0 PID: 7278 Comm: syz.3.332 Not tainted syzkaller #0 PREEMPT(full) 
[  508.238595][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  508.238615][    C0] RIP: 0010:sched_mm_cid_fork+0x4f6/0xcc0
[  508.238669][    C0] Code: 00 00 00 00 00 fc ff df 49 c1 ef 03 4c 01 f8 48 89 04 24 eb 5d 49 c7 c4 74 96 d7 8d 41 83 e4 07 41 83 c4 03 f3 90 48 8b 04 24 <0f> b6 00 41 38 c4 7c 08 84 c0 0f 85 60 06 00 00 8b 35 b8 2f 4b 0c
[  508.238700][    C0] RSP: 0018:ffffc90003637d50 EFLAGS: 00000046
[  508.238726][    C0] RAX: fffffbfff1baf2ce RBX: ffff888076523050 RCX: 1ffff1100eca44b9
[  508.238748][    C0] RDX: 0000000000000002 RSI: 0000000000000002 RDI: ffff888076523050
[  508.238768][    C0] RBP: ffff8880286f1e80 R08: 0000000000000000 R09: fffff520006c6f9c
[  508.238788][    C0] R10: 0000000000000003 R11: ffff8880286f29b0 R12: 0000000000000007
[  508.238808][    C0] R13: ffff888076522640 R14: 0000000000000002 R15: 0000000000000002
[  508.238831][    C0] FS:  00007f510f5ce6c0(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000
[  508.238859][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  508.238880][    C0] CR2: 0000555571728588 CR3: 000000006b8bd000 CR4: 0000000000350ef0
[  508.238901][    C0] Call Trace:
[  508.238912][    C0]  <TASK>
[  508.238930][    C0]  bprm_execve+0x4ff/0x1620
[  508.238969][    C0]  ? __pfx_bprm_execve+0x10/0x10
[  508.239000][    C0]  ? copy_string_kernel+0x460/0x520
[  508.239039][    C0]  do_execveat_common.isra.0+0x4a5/0x610
[  508.239079][    C0]  __x64_sys_execveat+0xda/0x120
[  508.239117][    C0]  do_syscall_64+0xcd/0xf80
[  508.239170][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.239203][    C0] RIP: 0033:0x7f510e78f749
[  508.239227][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  508.239257][    C0] RSP: 002b:00007f510f5ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  508.239286][    C0] RAX: ffffffffffffffda RBX: 00007f510e9e6090 RCX: 00007f510e78f749
[  508.239307][    C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  508.239327][    C0] RBP: 00007f510e813f91 R08: 0000000000001000 R09: 0000000000000000
[  508.239347][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.239366][    C0] R13: 00007f510e9e6128 R14: 00007f510e9e6090 R15: 00007ffe0cd9c548
[  508.239401][    C0]  </TASK>
[  508.474600][    C1] Kernel panic - not syncing: softlockup: hung tasks
[  508.481273][    C1] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  508.492393][    C1] Tainted: [L]=SOFTLOCKUP
[  508.496710][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  508.506869][    C1] Call Trace:
[  508.510155][    C1]  <IRQ>
[  508.512994][    C1]  dump_stack_lvl+0x3d/0x1f0
[  508.517638][    C1]  vpanic+0x640/0x6f0
[  508.521654][    C1]  panic+0xca/0xd0
[  508.525392][    C1]  ? __pfx_panic+0x10/0x10
[  508.529816][    C1]  ? printk_trigger_flush+0xd3/0x1a0
[  508.535112][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.540757][    C1]  ? nmi_backtrace_stall_snap+0x1e3/0x2b0
[  508.546493][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.552138][    C1]  ? wq_watchdog_touch+0xe2/0x190
[  508.557176][    C1]  ? watchdog_timer_fn+0x609/0x7d0
[  508.562298][    C1]  ? watchdog_timer_fn+0x5fc/0x7d0
[  508.567422][    C1]  watchdog_timer_fn+0x61a/0x7d0
[  508.572388][    C1]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  508.577860][    C1]  __hrtimer_run_queues+0x64e/0xc40
[  508.583105][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  508.588846][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.594506][    C1]  hrtimer_interrupt+0x397/0x8e0
[  508.599464][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x3c0
[  508.605470][    C1]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  508.611131][    C1]  </IRQ>
[  508.614052][    C1]  <TASK>
[  508.616977][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  508.622964][    C1] RIP: 0010:smp_call_function_many_cond+0xe02/0x15e0
[  508.629652][    C1] Code: 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 e5 5d 0c 00 f3 90 41 0f b6 45 00 <40> 38 c5 7c 08 84 c0 0f 85 b6 05 00 00 8b 43 08 31 ff 83 e0 01 41
[  508.649266][    C1] RSP: 0018:ffffc90003fef720 EFLAGS: 00000293
[  508.655337][    C1] RAX: 0000000000000000 RBX: ffff8880b8443020 RCX: ffffffff81b28aa1
[  508.663307][    C1] RDX: ffff888034d00000 RSI: ffffffff81b28a7b RDI: 0000000000000005
[  508.671275][    C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
[  508.679244][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[  508.687301][    C1] R13: ffffed1017088605 R14: 0000000000000001 R15: 0000000000000000
[  508.695291][    C1]  ? smp_call_function_many_cond+0xe21/0x15e0
[  508.701382][    C1]  ? smp_call_function_many_cond+0xdfb/0x15e0
[  508.707485][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  508.712707][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  508.719051][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.724699][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.730352][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  508.735562][    C1]  on_each_cpu_cond_mask+0x40/0x90
[  508.740689][    C1]  flush_tlb_mm_range+0x2f0/0x12c0
[  508.745808][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.751451][    C1]  ? find_held_lock+0x2b/0x80
[  508.756156][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.761805][    C1]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[  508.767359][    C1]  ? up_write+0x282/0x4e0
[  508.771706][    C1]  dup_mmap+0xd04/0x20e0
[  508.775979][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  508.780669][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.786338][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.791997][    C1]  copy_process+0x3b9f/0x7430
[  508.796703][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.802435][    C1]  ? do_wp_page+0x1c04/0x5010
[  508.807146][    C1]  ? __pfx_copy_process+0x10/0x10
[  508.812201][    C1]  ? do_raw_spin_lock+0x12c/0x2b0
[  508.817247][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.822899][    C1]  kernel_clone+0xfc/0x910
[  508.827340][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.832983][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  508.838062][    C1]  __do_sys_clone+0xce/0x120
[  508.842685][    C1]  ? __pfx___do_sys_clone+0x10/0x10
[  508.847912][    C1]  ? count_memcg_events+0x122/0x290
[  508.853137][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.858787][    C1]  ? do_user_addr_fault+0x843/0x1370
[  508.864087][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.869742][    C1]  do_syscall_64+0xcd/0xf80
[  508.874280][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.880193][    C1] RIP: 0033:0x7f0f28385e93
[  508.884647][    C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  508.904391][    C1] RSP: 002b:00007ffc510d9a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  508.912913][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f28385e93
[  508.920892][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  508.928864][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  508.936845][    C1] R10: 000055558e43e7d0 R11: 0000000000000246 R12: 0000000000000000
[  508.944824][    C1] R13: 00000000000927c0 R14: 000000000003c891 R15: 00007ffc510d9bb0
[  508.952820][    C1]  </TASK>
[  510.092381][    C1] Shutting down cpus with NMI
[  510.097420][    C1] Kernel Offset: disabled
[  510.101752][    C1] Rebooting in 86400 seconds..