last executing test programs:

2m52.578957803s ago: executing program 0 (id=158):
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x13, 0xffffffffffffffff, 0x3a8bc000)
mknod$loop(0x0, 0x6000, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800)

2m52.130826907s ago: executing program 2 (id=163):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032bbd7000000000000100"], 0x28}}, 0x44)

2m52.071358441s ago: executing program 0 (id=164):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0)

2m51.771239517s ago: executing program 0 (id=167):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2, 0x3, '\x00', 0x0, r1, 0x3, 0x80}, 0x50)

2m51.759480701s ago: executing program 2 (id=168):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20)

2m51.503172977s ago: executing program 0 (id=170):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}})
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="db3b328ba529f8f4516c32", 0x1}], 0x100000000000009e)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x262c}, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x2900, 0x1cf)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc2}})

2m51.394229657s ago: executing program 2 (id=171):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cubic\x00', 0x6)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9)
shutdown(r0, 0x1)
r1 = socket$inet6(0xa, 0x3, 0x3c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000000)={@multicast1, @rand_addr, @loopback}, &(0x7f0000000040)=0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f0000000100)="5be08105437c98a91b9455046f57b5090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c84", 0x51}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0)

2m51.006934806s ago: executing program 2 (id=176):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
readv(r1, &(0x7f0000001340)=[{&(0x7f0000000100)=""/142, 0x8e}, {0x0}], 0x2)

2m49.739266095s ago: executing program 0 (id=179):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0)

2m49.562311179s ago: executing program 2 (id=182):
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r0 = socket$unix(0x1, 0x2, 0x0)
listen(r0, 0xfffe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe2(&(0x7f0000000000), 0x4000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x0, 0xee00}}, './file0\x00'})
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
gettid()
openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="160000000000000004ae4e00000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xfffffffffffffce2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0xc0, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1, 0xffffffff}, 0xfffffffffffffe85, r5}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x1, '\x00', r4, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, 0x10, 0x7, 0x4, 0x4}})
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "62eb"}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40010)

2m49.202990357s ago: executing program 0 (id=184):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0xffffe000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

2m48.160316524s ago: executing program 2 (id=188):
r0 = socket(0x10, 0x4, 0x0)
r1 = io_uring_setup(0x31fa, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=<r4=>0xffffffffffffffff, @ANYRES16=<r5=>r1, @ANYRESHEX=r0, @ANYRES16=r2, @ANYRES16=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r6, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e1a, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r6, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e4000000000000170000000000380000000000000000"], 0x50)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x200000000000022e, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000ff090000000000005509010000000000950000000000e7ffbf91000000000000b702000001000000850000008500717486e5b56f7583520000b70000000000000099000000000000009aa599ee26ad6139", @ANYRESHEX=r5], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x94)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r9)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYRES16=r4], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x4000880)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006861736800000000140002800800074000000001080002400000000e0900010073797a3000000000090002000000000000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4)
bind$inet(r11, &(0x7f0000000080)={0x2, 0x400, @loopback}, 0x10)
connect$inet(r11, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10)
sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0)

2m33.820562422s ago: executing program 32 (id=184):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0xffffe000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

2m32.934074022s ago: executing program 33 (id=188):
r0 = socket(0x10, 0x4, 0x0)
r1 = io_uring_setup(0x31fa, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=<r4=>0xffffffffffffffff, @ANYRES16=<r5=>r1, @ANYRESHEX=r0, @ANYRES16=r2, @ANYRES16=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r6, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e1a, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r6, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e4000000000000170000000000380000000000000000"], 0x50)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x200000000000022e, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000ff090000000000005509010000000000950000000000e7ffbf91000000000000b702000001000000850000008500717486e5b56f7583520000b70000000000000099000000000000009aa599ee26ad6139", @ANYRESHEX=r5], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x94)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r9)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYRES16=r4], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x4000880)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006861736800000000140002800800074000000001080002400000000e0900010073797a3000000000090002000000000000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4)
bind$inet(r11, &(0x7f0000000080)={0x2, 0x400, @loopback}, 0x10)
connect$inet(r11, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10)
sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0)

14.994804952s ago: executing program 3 (id=1042):
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

12.496164706s ago: executing program 7 (id=1058):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r1}, 0x38)

11.16954849s ago: executing program 1 (id=1062):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

11.169152573s ago: executing program 7 (id=1063):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x341}]}, 0x24}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040)

9.946081864s ago: executing program 1 (id=1067):
socket(0xa, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
setitimer(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

9.770709115s ago: executing program 5 (id=1070):
openat(0xffffffffffffff9c, 0x0, 0x80042, 0x1ff)
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0)
getpeername$llc(0xffffffffffffffff, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000300)=0x10)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18c67eff030000000000000000000000ffffffff20207025000000000020207c7b1af8ff000000009932274a7bb8f60e8df50ebfa100000000000007010000f8ffffffb702000008000000b70300000000f9ff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e20, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x20000023896)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xfdfdffff, 0x1, 0x100, 0x0, 0x15, "7a58beca3900000000000000000000000200"})

9.142473691s ago: executing program 3 (id=1074):
setgroups(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000480)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x82)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)

9.081091058s ago: executing program 4 (id=1075):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d53300", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0)

8.859276364s ago: executing program 4 (id=1076):
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x6000040}, 0x804)

7.919217126s ago: executing program 5 (id=1077):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x1235, &(0x7f0000003540)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1ad2438, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES8=r2, @ANYBLOB="1a54c5132914659a92a0db9c5b64e7a98eb09aa494f97d7c516b6636ff5e14a6ca670d042d", @ANYRES32=r2, @ANYRES8=r2, @ANYRESOCT], 0xb, 0x0, &(0x7f0000000000))

7.883844325s ago: executing program 3 (id=1078):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500"], 0x0)

7.603085385s ago: executing program 3 (id=1080):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
syz_io_uring_setup(0x1459, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100), &(0x7f00000000c0))
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00')
preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0)

7.601121099s ago: executing program 7 (id=1081):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)

7.304589085s ago: executing program 6 (id=1083):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x4000000)

6.949145559s ago: executing program 5 (id=1084):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000000), 0x4)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000080))
r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x7, 0x0)
read$msr(r2, 0x0, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=<r4=>0x0, 0x0)
sendmsg$xdp(r3, &(0x7f0000000640)={&(0x7f0000000240)={0x2c, 0x9, r4, 0x2}, 0x10, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)}], 0x4, 0x0, 0x0, 0x40000}, 0x20)
setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}, 0x0, {[0x40, 0x1, 0x40, 0x4, 0x1, 0x5639, 0x9, 0x4]}}, 0x5c)
r5 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TCSBRKP(r5, 0x5425, 0x9)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40051}, 0x8000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, <r8=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@struct={0x3, 0x2, 0x0, 0x4, 0x1, 0x0, [{0xf, 0x5, 0x7}, {0x2, 0x1, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x1}}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000d40)=""/202, 0x58, 0xca, 0x0, 0x34a4, 0x10000}, 0x28)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x1, 0x11, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001040)='syzkaller\x00', 0x81, 0x1000, &(0x7f0000001080)=""/4096, 0x40f00, 0x79, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002080)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000020c0)={0x5, 0x0, 0x7, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000002100)=[0x1, 0xffffffffffffffff, r6, 0xffffffffffffffff, r1], &(0x7f0000002140)=[{0x4, 0x3, 0x0, 0x8}, {0x1, 0x1, 0x8, 0xa}, {0x1, 0x3, 0xe, 0x6}, {0x1, 0x4, 0x3, 0xc}, {0x0, 0x2, 0xc, 0x5}, {0x5, 0x1, 0xc, 0xb}], 0x10, 0x3}, 0x94)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@base={0x7, 0xe, 0x800, 0x5, 0x24040, 0xffffffffffffffff, 0x7f, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002380)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000002300), &(0x7f0000002340)}, 0x20)
pipe(&(0x7f00000023c0)={<r14=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0xd, 0x31, &(0x7f00000009c0)=@raw=[@ldst={0x2, 0x3, 0x0, 0x1b, 0x2, 0xfffffffffffffffc, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @exit, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @ldst={0x0, 0x3, 0x4, 0x1, 0x8, 0xffffffffffffffff, 0x8}], &(0x7f0000000b80)='GPL\x00', 0xd, 0xcd, &(0x7f0000000bc0)=""/205, 0x41100, 0x37, '\x00', r4, @fallback=0x1b, r10, 0x8, &(0x7f0000000e80)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000ec0)={0x5, 0x7, 0x2, 0x462}, 0x10, 0x0, r11, 0x1, &(0x7f0000002440)=[0x1, r0, r12, r13, 0xffffffffffffffff], &(0x7f0000002480)=[{0x1, 0x2, 0x10, 0xa}], 0x10, 0x1}, 0x94)
r15 = semget(0x0, 0x3, 0x184)
semop(r15, &(0x7f0000002580)=[{0x4, 0x800}, {0x1, 0x636a}], 0x2)
bind$xdp(r14, &(0x7f00000025c0)={0x2c, 0x1, 0x0, 0x4, r14}, 0x10)

6.936195057s ago: executing program 7 (id=1085):
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
recvmmsg(r1, &(0x7f0000005580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/222, 0xde}, 0x10000}], 0x1, 0x40002062, 0x0)

5.820374435s ago: executing program 7 (id=1086):
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

5.743393556s ago: executing program 1 (id=1087):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/kexec_crash_size', 0x80100, 0x108)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0xfffffffc, 0x0, 0x12, 0x11, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe1085905000100000000000000b420a9c81f40f05f819e01177d3d458dac00000000000000800000003b00f1ffffffffffff01000040000000000002", "90be8b1c5512406c7f00", [0x8, 0x3fffffffffffff]}})

5.606855942s ago: executing program 1 (id=1088):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(r2)

4.753068802s ago: executing program 1 (id=1089):
r0 = epoll_create1(0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd')
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000001740), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100037040400000000000000000000006bebbdc4e44ab6929eb63e0a3ac4f280644884987675622b39beb079738f9e4c0f2b8cc3599e0e669fcc9442bdb15c1bef4d1ec0061dc61275ab3c158c52f5a084aa270c1acd0e0967a544935fdf6a2a9f8ec824f2f8cf5a1de2a5e2882b30a9bb5e524088e425029e245c9f7dc671ba2ca5d9b37ca664e3aadb5e1a1ad7b7f5cceba50dd07cb1a7407c2aa0f1e6fceb4a0a1e9b6594803cbd9bc73a3ee54e4ac43ec05b35", @ANYRES32=0x0, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe8800000000000000000000000001010500090004000000"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)

4.642648766s ago: executing program 4 (id=1090):
openat(0xffffffffffffff9c, 0x0, 0x80042, 0x1ff)
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0)
getpeername$llc(0xffffffffffffffff, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000300)=0x10)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18c67eff030000000000000000000000ffffffff20207025000000000020207c7b1af8ff000000009932274a7bb8f60e8df50ebfa100000000000007010000f8ffffffb702000008000000b70300000000f9ff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e20, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x20000023896)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xfdfdffff, 0x1, 0x100, 0x0, 0x15, "7a58beca3900000000000000000000000200"})

4.386146211s ago: executing program 6 (id=1091):
setgroups(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000480)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x82)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)

2.614023162s ago: executing program 6 (id=1092):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500"], 0x0)

2.613170364s ago: executing program 1 (id=1093):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x341}]}, 0x24}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040)

2.355002001s ago: executing program 4 (id=1094):
syz_read_part_table(0x618, &(0x7f0000002200)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x8c)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x2200, 0x0, 0x0)

2.171855899s ago: executing program 6 (id=1095):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a34097772"], 0xa)
write$cgroup_devices(r1, &(0x7f0000000100)={'a', ' *:* ', 'm\x00'}, 0x8)

1.871850526s ago: executing program 6 (id=1096):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

1.70439397s ago: executing program 4 (id=1097):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x1235, &(0x7f0000003540)="$eJzs3cFrHFUcB/Bf2qSJqclGrdUWpA+96GVscvDkJUgK0gWlbQqtIEzNRpfd7IbMEtgiNjev/h3i0Zsg4j0XL54Fb7l4kh7EEWe3TbOs0ITW1fL5HHYf++Y7M499u/Ae7+0evPvVVmuzyDbzXpyamorp7Yh0P0WKU3E6BvbirZs///La9Vu3r67W62vXUrqyemP5nZTS4qXvP/r8m9d/6J29+e3id7Oxv/TxwW8rv+6f379w8OeNz5pFahap0+2lPN3pdnv5nXYjbTSLVpbSh+1GXjRSs1M0do7Ub7a729v9lHc2Fua3dxpFkfJOP7Ua/dTrpt5OP+Wf5s1OyrIsLcwHJ3cm1r++X5ZlRFnOxJkoy7J8LubjbDwfC7EYtViKF+LFeCnOxctxPl6JV+NCddSk7xwAAAAAAAAAAAAAAAAAAACeLfb/AwAAAAAAAAAAAAAAAAAAwOTZ/w8AAAAAAAAAAAAAAAAAAACTZ/8/AAAAAAAAAAAAAAAAAAAATN71W7evrtbra9dSmovY+nJ3fXd98DyoX92MZrSjEZejFn9Etft/apj9u3zl/fra5VRZire37g3z93bXTx/NL1c/J1BlBg7zy4N8OpqfjflH8ytRi3Pj8ytj83Px5huP5LOoxU+fRDfasVHd+2H+i+WU3vugPpK/WB0HAAAAz4IsPTR2/J5laWo43h+pH7w4bn6gnK0eayPzAyPj6+m4OD3BhlMp+ndbebvd2HkihbnhWZ/YCf+p8GAK6m4rv/TYqQfd7SQXnYmIp9ec/0Lhx4d94vFTMyfqP8PL7E28yf+Xwt7Yqpmn+0H7V7+GmJDDN33SdwIAAAAAAAAAAMBxHGNh4PRgve3xlxOOvfDv/kQeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqkoAAAD//7Z41dw=")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1ad2438, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES8=r2, @ANYBLOB="1a54c5132914659a92a0db9c5b64e7a98eb09aa494f97d7c516b6636ff5e14a6ca670d042d", @ANYRES32=r2, @ANYRES8=r2, @ANYRESOCT], 0xb, 0x0, &(0x7f0000000000))

1.634758438s ago: executing program 5 (id=1098):
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
recvmmsg(r1, &(0x7f0000005580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/222, 0xde}, 0x10000}], 0x1, 0x40002062, 0x0)

1.561175875s ago: executing program 6 (id=1099):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x2, 0x4, 0x7f, 0x7f, <r1=>0x0}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000380)={0xb, 0x8004, 0x1, 0x3, r1}, &(0x7f00000003c0)=0x10)
syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e0000000400000008000000080000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)
r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
fallocate(r5, 0x0, 0x0, 0x8800000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db)
preadv(r6, &(0x7f0000000400)=[{&(0x7f0000002600)=""/4106, 0x100a}], 0x1, 0x76, 0x3fe0)

1.390137247s ago: executing program 5 (id=1100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
setfsgid(0xee00)

1.289969369s ago: executing program 3 (id=1101):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

1.111093039s ago: executing program 3 (id=1102):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x9, 0x0, &(0x7f0000000100)="4588a84a3f88ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="c0758eee19af52e9902e3f2e1c92f9479d1d160a54834465316d7a033438105b701809bc5ea20e922c42d4919858b91454719a56f2560d204c81dd58279596125a566604d2207d72cd945540e856355121bbe9ab081d5d72f9809052ed66fab4bba6c80708bf37478d9be12d64029a030f9aea4b6aa14bdd37737174f5e18da0aa7cbeb173bcd3acd20c2eb94015d0025695544a22a8faf533c43aca6dff1b4d1545f01c910e05f74c59b8e620ab3b92674f5e8514eb972f07e5316701e7e0922e6acf18d8fe22ca0cdfa027827503b4de84f96f34a02ba83bcffac4cd2e132062b4976e463e687bf8e65c279f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000140)={0x80, 0x18, 0x303, 0xfffd, 0x0, 0x0, 0x0})
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
mkdir(0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x102, 0x46)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)

1.094896575s ago: executing program 5 (id=1103):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/U7/jVv8jjfvy59/yv7uKOZTBiLg7InZHxD0RsSci7o3I294fEQ+sMp7b+z/plVV+5LKy/t9zxdzW4v5f2fuLwZ6itjPPvy85Pl2vHSz+J8PRtyWrjy2zjm9e/PmTdsua+3/ZI1t/2Rcs4rjS2zJANzUxN5F3Sjvg6sWIfb1L5Z/cnAlIImJvROxb2UfvKgvTT3y5v12jO+e/jA7MMy18kaU3n+U/Hy35l5Lm+cnp2+YnR7dGvXZwtNwrbvfjT5dea7f+VeXfAVdrjeem7d/aZDBpnq+dXfk6Lv36Udt7mv+4/6f9yRv5PHN/8dp7E3NzZ8Yi+pOjeX3R6+O33lvWy/bZ/j98YOnjf3fxniz/ByMi24kfioiHI+KRIvZHI+KxiDiwTP7fv9B+WZl/pBVt/4sRU0ue/27u/y3bf+WFnpPffd1u/f9u+x/OS8PFK/n57w6WCic7XbQGuJr/HQAAAPxfpPl34JN05GY5TUdGGt/h3xN3pfWZ2bknj8+8c3qq8V35wehLy5GugWI8tD5dr40l88UnNsZHx4ux4nK89FAxbvxpz7a8PjI5U5+qOHfodtvbHP+Z33uqjg5YY9uWfHW8f90DASrQOo+eLq5eeDWcDGCz8ntt6F53OP7T9YoDWH+u/9C9ljr+L7TUzQXA5uT6D93L8Q9dKv226giACrn+Q1daze/617CwdWOEUU1ho26UvBBRFtINEY/CGhWqPjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xj8BAAD//02e6R0=")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

116.802032ms ago: executing program 7 (id=1104):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f", 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x804, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 4 (id=1105):
setgroups(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000480)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x82)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)

kernel console output (not intermixed with test programs):

he MTU to 1560 would solve the problem.
[  190.204480][ T6727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.221699][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.228766][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.270746][ T6727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.532202][   T49] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  190.559963][   T49] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  190.568588][   T49] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  190.588653][   T49] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  190.654189][ T7009] loop5: detected capacity change from 0 to 2048
[  190.678606][ T7009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  190.733813][   T49] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  190.750855][   T49] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  190.789280][   T49] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  190.799422][ T7015] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  190.849716][   T49] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  190.897439][ T6727] hsr_slave_0: entered promiscuous mode
[  190.924240][ T6727] hsr_slave_1: entered promiscuous mode
[  190.952712][ T6727] debugfs: 'hsr0' already exists in 'hsr'
[  190.972696][ T6727] Cannot create hsr debugfs directory
[  191.078956][ T2997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.091168][ T2997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  191.167185][ T7016] syzkaller0: entered promiscuous mode
[  191.173387][ T7016] syzkaller0: entered allmulticast mode
[  191.365819][ T6680] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  191.402342][ T2997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.413174][ T2997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  191.695367][ T6680] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  191.719483][ T7034] rdma_rxe: rxe_newlink: failed to add batadv_slave_0
[  191.880956][ T7029] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  191.985344][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  192.506179][ T6680] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  192.568396][ T6680] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  192.679561][ T2997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.710537][ T2997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  192.723939][ T7042] loop3: detected capacity change from 0 to 8192
[  193.110960][ T5870] Bluetooth: hci2: command 0x0401 tx timeout
[  193.242525][ T2997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.270475][ T2997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  193.969907][ T7061] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.085825][ T7061] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.161244][ T7061] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.301582][ T7061] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.530092][ T6727] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  194.576769][ T2997] bridge_slave_1: left allmulticast mode
[  194.591050][ T2997] bridge_slave_1: left promiscuous mode
[  194.608131][ T2997] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.629148][ T2997] bridge_slave_0: left allmulticast mode
[  194.646734][ T2997] bridge_slave_0: left promiscuous mode
[  194.653192][ T2997] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.355607][ T2997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.378344][ T2997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.404614][ T2997] bond0 (unregistering): Released all slaves
[  195.523839][ T7090] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  195.586426][   T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.597511][ T6727] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  195.649405][ T6727] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  195.689828][ T6727] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  195.726197][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.362'.
[  195.812732][ T6292] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.849169][ T6292] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.877958][ T7101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.372'.
[  196.077737][ T6292] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.169969][ T7107] loop5: detected capacity change from 0 to 4096
[  196.208624][ T6680] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.240743][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'.
[  196.267375][ T7107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.355494][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'.
[  196.439219][   T30] kauditd_printk_skb: 36 callbacks suppressed
[  196.439245][   T30] audit: type=1326 audit(1757809689.381:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x50000
[  196.486052][   T30] audit: type=1326 audit(1757809689.381:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x50000
[  196.568260][ T6680] 8021q: adding VLAN 0 to HW filter on device team0
[  196.620285][ T7112] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.627505][ T7112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.647057][   T30] audit: type=1326 audit(1757809689.381:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x50000
[  196.753140][   T30] audit: type=1326 audit(1757809689.381:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x50000
[  196.776397][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.783611][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.851784][   T30] audit: type=1326 audit(1757809689.381:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x50000
[  196.910007][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.912149][   T30] audit: type=1326 audit(1757809689.381:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x50000
[  197.048473][   T30] audit: type=1326 audit(1757809689.381:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x50000
[  197.104375][ T6680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  197.126029][   T30] audit: type=1326 audit(1757809689.381:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x50000
[  197.168484][ T6727] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.187061][   T30] audit: type=1326 audit(1757809689.391:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x50000
[  197.222091][   T30] audit: type=1326 audit(1757809689.391:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x50000
[  197.265908][ T2997] hsr_slave_0: left promiscuous mode
[  197.273020][ T2997] hsr_slave_1: left promiscuous mode
[  197.279383][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.287047][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.297608][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.307968][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.456582][ T2997] veth1_macvtap: left promiscuous mode
[  198.470202][ T7144] loop5: detected capacity change from 0 to 512
[  198.480121][ T2997] veth0_macvtap: left promiscuous mode
[  198.485785][ T7144] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  198.511018][ T2997] veth1_vlan: left promiscuous mode
[  198.525107][ T2997] veth0_vlan: left promiscuous mode
[  198.570137][ T7144] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  198.587658][ T7144] System zones: 1-12
[  198.630700][ T7144] EXT4-fs error (device loop5): ext4_iget_extra_inode:5103: inode #15: comm syz.5.386: corrupted in-inode xattr: e_value size too large
[  198.651532][ T7144] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.386: couldn't read orphan inode 15 (err -117)
[  198.666021][ T7144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.785230][ T7154] syz.1.388 uses obsolete (PF_INET,SOCK_PACKET)
[  198.799190][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.006959][ T7162] atomic_op ffff88804b90f998 conn xmit_atomic 0000000000000000
[  199.267012][ T7173] netlink: 360 bytes leftover after parsing attributes in process `syz.4.396'.
[  200.534472][ T7182] smc: removing ib device syz2
[  200.579026][ T2997] team0 (unregistering): Port device team_slave_1 removed
[  200.629839][ T2997] team0 (unregistering): Port device team_slave_0 removed
[  200.879605][ T7185] loop4: detected capacity change from 0 to 512
[  200.888458][ T7185] EXT4-fs: Ignoring removed oldalloc option
[  200.912151][ T7185] EXT4-fs (loop4): 1 truncate cleaned up
[  200.920988][ T7185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.077176][   T24] syz2: Port: 1 Link DOWN
[  201.622319][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.664731][ T6727] 8021q: adding VLAN 0 to HW filter on device team0
[  201.737257][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.744481][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.871608][   T30] kauditd_printk_skb: 58 callbacks suppressed
[  201.871634][   T30] audit: type=1326 audit(1757809694.811:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.5.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  201.913978][  T996] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.921175][  T996] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.970444][   T30] audit: type=1326 audit(1757809694.811:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.5.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  202.040332][   T30] audit: type=1326 audit(1757809694.861:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.5.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  202.073580][ T7201] netlink: 'syz.4.401': attribute type 10 has an invalid length.
[  202.094271][ T7201] veth1_vlan: entered allmulticast mode
[  202.145321][ T7201] team0: Device veth1_vlan failed to register rx_handler
[  202.183323][   T30] audit: type=1326 audit(1757809694.871:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.5.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  202.321824][   T30] audit: type=1326 audit(1757809694.871:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.5.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  202.366894][ T6727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  202.426732][ T6727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  202.440584][   T30] audit: type=1326 audit(1757809694.871:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.5.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  202.521137][ T7209] loop5: detected capacity change from 0 to 512
[  202.545916][   T30] audit: type=1326 audit(1757809694.871:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.5.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  202.580891][ T7209] journal_path: Non-blockdev passed as './bus'
[  202.588143][ T7209] EXT4-fs: error: could not find journal device path
[  202.597034][ T7211] atomic_op ffff8880280f2198 conn xmit_atomic 0000000000000000
[  202.631181][   T30] audit: type=1326 audit(1757809694.871:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.5.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  202.640838][ T6680] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.794667][   T30] audit: type=1326 audit(1757809694.871:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.5.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  202.931211][   T30] audit: type=1326 audit(1757809694.881:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.5.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  203.836607][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  204.023477][ T7226] loop3: detected capacity change from 0 to 128
[  204.219694][ T7229] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.438656][ T7229] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.675277][ T7229] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.914675][ T7229] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.960953][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.416'.
[  205.078941][ T6727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.220187][ T7252] loop3: detected capacity change from 0 to 512
[  205.326059][ T7252] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  205.353480][ T7252] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  205.427240][ T7252] EXT4-fs (loop3): 1 truncate cleaned up
[  205.455572][ T7252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.615675][ T7252] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  205.640558][ T7263] atomic_op ffff8880528ec998 conn xmit_atomic 0000000000000000
[  205.715780][ T7112] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.740874][ T7112] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.769486][ T7112] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.878187][  T996] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.047557][ T6680] veth0_vlan: entered promiscuous mode
[  206.062908][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.168887][ T6680] veth1_vlan: entered promiscuous mode
[  206.358056][ T6680] veth0_macvtap: entered promiscuous mode
[  206.368915][ T7280] random: crng reseeded on system resumption
[  206.463608][ T6680] veth1_macvtap: entered promiscuous mode
[  206.637895][ T6680] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.713869][ T6680] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.831187][ T7286] loop1: detected capacity change from 0 to 1024
[  206.844209][ T7286] EXT4-fs: Ignoring removed nobh option
[  206.850664][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.894040][ T7286] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  206.894794][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.933798][ T7286] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.425: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  206.984529][ T7286] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.425: couldn't read orphan inode 11 (err -117)
[  206.993762][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.046506][ T7286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.087023][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.329468][ T5864] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.442782][ T7112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.465839][ T6727] veth0_vlan: entered promiscuous mode
[  207.480532][ T7112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.615194][ T6727] veth1_vlan: entered promiscuous mode
[  207.666881][ T7303] atomic_op ffff88803134b198 conn xmit_atomic 0000000000000000
[  207.683904][ T7182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.712193][   T30] kauditd_printk_skb: 44 callbacks suppressed
[  207.712216][   T30] audit: type=1326 audit(1757809700.661:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  207.730432][ T7182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.776174][   T30] audit: type=1326 audit(1757809700.661:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  207.843064][ T6727] veth0_macvtap: entered promiscuous mode
[  207.857130][   T30] audit: type=1326 audit(1757809700.711:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  207.904399][ T6727] veth1_macvtap: entered promiscuous mode
[  207.960438][   T30] audit: type=1326 audit(1757809700.711:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  207.996275][ T7311] loop5: detected capacity change from 0 to 1024
[  208.016562][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.042202][ T7311] EXT4-fs: Ignoring removed nobh option
[  208.056523][ T7312] loop3: detected capacity change from 0 to 512
[  208.056730][ T7311] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  208.081534][   T30] audit: type=1326 audit(1757809700.711:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  208.103962][ T7309] loop1: detected capacity change from 0 to 4096
[  208.134854][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.135917][ T7312] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  208.161590][   T30] audit: type=1326 audit(1757809700.711:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  208.172687][ T7309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.193569][   T30] audit: type=1326 audit(1757809700.711:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  208.228559][   T30] audit: type=1326 audit(1757809700.711:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  208.254908][ T7311] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.435: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  208.259534][   T30] audit: type=1326 audit(1757809700.721:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  208.279790][ T7319] loop6: detected capacity change from 0 to 512
[  208.296251][ T7312] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  208.312885][ T7182] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.334035][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.344473][ T7312] EXT4-fs (loop3): 1 truncate cleaned up
[  208.353792][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.357333][ T7311] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.435: couldn't read orphan inode 11 (err -117)
[  208.374807][ T1008] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.386177][ T7312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.436861][ T7311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.461686][ T7319] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  208.486152][ T7312] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  208.506979][ T5864] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.509378][ T7319] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #16: comm syz.6.239: invalid indirect mapped block 4294967295 (level 0)
[  208.605577][ T7319] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #16: comm syz.6.239: invalid indirect mapped block 4294967295 (level 1)
[  208.609629][ T7311] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:482: comm syz.5.435: Invalid block bitmap block 0 in block_group 0
[  208.641682][   T30] audit: type=1326 audit(1757809701.591:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  208.647349][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.686460][ T7311] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.435: Failed to acquire dquot type 0
[  208.689505][ T7319] EXT4-fs (loop6): 1 orphan inode deleted
[  208.703096][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.716191][ T7319] EXT4-fs (loop6): 1 truncate cleaned up
[  208.754708][ T7319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.786744][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.801150][ T7112] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 0
[  208.820181][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.853559][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.888858][ T6680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.016403][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.163324][ T7332] netlink: 48 bytes leftover after parsing attributes in process `syz.7.241'.
[  210.517362][ T7354] loop3: detected capacity change from 0 to 512
[  210.559188][ T7354] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  210.633113][ T7358] loop6: detected capacity change from 0 to 4096
[  210.633358][ T7354] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #16: comm syz.3.451: invalid indirect mapped block 4294967295 (level 0)
[  210.655503][ T7354] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #16: comm syz.3.451: invalid indirect mapped block 4294967295 (level 1)
[  210.754491][ T7354] EXT4-fs (loop3): 1 orphan inode deleted
[  210.767547][ T7365] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.781281][ T7358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.801575][ T7354] EXT4-fs (loop3): 1 truncate cleaned up
[  210.835033][ T7354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.849531][ T7367] loop5: detected capacity change from 0 to 512
[  210.895544][ T7367] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  210.921182][ T7367] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  210.947894][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.968120][ T7367] EXT4-fs (loop5): 1 truncate cleaned up
[  211.024586][ T6680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.031143][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'.
[  211.062767][ T7367] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.070718][ T7365] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.147813][ T7367] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  211.317505][ T7365] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.360295][ T7377] netlink: 48 bytes leftover after parsing attributes in process `syz.7.456'.
[  211.564090][ T7365] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.674655][ T7380] loop6: detected capacity change from 0 to 512
[  211.686558][ T7380] journal_path: Non-blockdev passed as './bus'
[  211.694978][ T7380] EXT4-fs: error: could not find journal device path
[  211.745945][ T7370] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  211.819326][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.459726][ T7112] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.692322][ T7112] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.750819][ T7112] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.881407][ T7112] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.956123][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  212.956155][   T30] audit: type=1326 audit(1757809705.901:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.7.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  213.016304][   T30] audit: type=1326 audit(1757809705.901:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.7.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  213.042178][ T5870] Bluetooth: hci2: command 0x0401 tx timeout
[  213.094298][   T30] audit: type=1326 audit(1757809705.951:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.7.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  213.174343][   T30] audit: type=1326 audit(1757809705.951:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.7.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  213.223881][ T7397] loop3: detected capacity change from 0 to 1024
[  213.255861][   T30] audit: type=1326 audit(1757809705.951:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.7.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  213.300347][ T7397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.318122][   T30] audit: type=1326 audit(1757809705.961:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.7.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  213.342069][ T7400] atomic_op ffff88807afad998 conn xmit_atomic 0000000000000000
[  213.351865][   T30] audit: type=1326 audit(1757809706.031:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.7.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  213.374608][   T30] audit: type=1326 audit(1757809706.031:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.7.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  213.399456][   T30] audit: type=1326 audit(1757809706.041:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.7.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  213.422497][   T30] audit: type=1326 audit(1757809706.041:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.7.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  213.563990][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.630659][ T7405] loop7: detected capacity change from 0 to 4096
[  213.685067][ T7405] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.943726][ T6727] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.156786][ T7421] netlink: 512 bytes leftover after parsing attributes in process `syz.6.473'.
[  214.195120][ T7420] loop5: detected capacity change from 0 to 512
[  214.229782][ T7420] journal_path: Non-blockdev passed as './bus'
[  214.253427][ T7420] EXT4-fs: error: could not find journal device path
[  215.724128][ T7452] loop4: detected capacity change from 0 to 4096
[  215.780999][ T7452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.937115][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.316363][ T7466] netlink: 48 bytes leftover after parsing attributes in process `syz.1.488'.
[  216.821418][ T7474] loop1: detected capacity change from 0 to 1024
[  216.828984][ T7474] EXT4-fs: Ignoring removed nobh option
[  216.877308][ T7474] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  216.920100][ T7482] loop6: detected capacity change from 0 to 512
[  216.964637][ T7482] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  216.988216][ T7474] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.492: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  217.038341][ T7482] EXT4-fs (loop6): 1 truncate cleaned up
[  217.055498][ T7474] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.492: couldn't read orphan inode 11 (err -117)
[  217.071745][ T7482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.101261][ T7474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.179269][ T7474] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:482: comm syz.1.492: Invalid block bitmap block 0 in block_group 0
[  217.211764][ T7474] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.492: Failed to acquire dquot type 0
[  217.395845][ T5864] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.410491][  T996] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0
[  217.558636][ T6680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.890975][ T7478] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.086910][   T30] kauditd_printk_skb: 52 callbacks suppressed
[  218.086935][   T30] audit: type=1326 audit(1757809711.031:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x7ffc0000
[  218.130660][ T7483] Can't find ip_set type bitmap:ip,mac
[  218.232684][   T30] audit: type=1326 audit(1757809711.071:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x7ffc0000
[  218.344202][   T30] audit: type=1326 audit(1757809711.121:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2f898eba9 code=0x7ffc0000
[  218.403220][ T7478] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.460346][   T30] audit: type=1326 audit(1757809711.121:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x7ffc0000
[  218.559098][   T30] audit: type=1326 audit(1757809711.121:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x7ffc0000
[  218.663011][   T30] audit: type=1326 audit(1757809711.121:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2f898eba9 code=0x7ffc0000
[  218.746163][   T30] audit: type=1326 audit(1757809711.121:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x7ffc0000
[  218.814467][ T7478] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.855688][   T30] audit: type=1326 audit(1757809711.121:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x7ffc0000
[  218.931947][ T7504] loop4: detected capacity change from 0 to 8192
[  218.971890][   T30] audit: type=1326 audit(1757809711.121:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2f898eba9 code=0x7ffc0000
[  219.034279][   T30] audit: type=1326 audit(1757809711.121:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f898eba9 code=0x7ffc0000
[  219.178612][ T7478] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.315824][ T7521] loop3: detected capacity change from 0 to 512
[  219.343568][ T7521] journal_path: Non-blockdev passed as './bus'
[  219.349781][ T7521] EXT4-fs: error: could not find journal device path
[  219.536171][   T13] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.564341][   T13] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.624452][   T13] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.689974][   T13] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.466990][ T7532] netlink: 132 bytes leftover after parsing attributes in process `syz.1.512'.
[  220.793939][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'.
[  221.331858][ T7549] process 'syz.1.519' launched './file0' with NULL argv: empty string added
[  221.361427][ T7518] warn_alloc: 3 callbacks suppressed
[  221.361450][ T7518] syz.4.502: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  221.440549][ T7518] CPU: 0 UID: 0 PID: 7518 Comm: syz.4.502 Not tainted syzkaller #0 PREEMPT(full) 
[  221.440599][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  221.440621][ T7518] Call Trace:
[  221.440632][ T7518]  <TASK>
[  221.440646][ T7518]  dump_stack_lvl+0x16c/0x1f0
[  221.440709][ T7518]  warn_alloc+0x248/0x3a0
[  221.440768][ T7518]  ? __pfx_warn_alloc+0x10/0x10
[  221.440851][ T7518]  ? hash_ipport4_resize+0x1b4/0x1b10
[  221.440886][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.440930][ T7518]  ? __vmalloc_node_noprof+0xad/0xf0
[  221.440986][ T7518]  __vmalloc_node_range_noprof+0x101b/0x14b0
[  221.441034][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.441093][ T7518]  ? hash_ipport4_resize+0x1b4/0x1b10
[  221.441142][ T7518]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  221.441198][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.441241][ T7518]  ? ___kmalloc_large_node+0xed/0x160
[  221.441285][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.441336][ T7518]  __kvmalloc_node_noprof+0x30a/0x620
[  221.441389][ T7518]  ? hash_ipport4_resize+0x1b4/0x1b10
[  221.441427][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.441475][ T7518]  ? hash_ipport4_resize+0x1b4/0x1b10
[  221.441509][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.441561][ T7518]  ? hash_ipport4_resize+0x1b4/0x1b10
[  221.441597][ T7518]  hash_ipport4_resize+0x1b4/0x1b10
[  221.441638][ T7518]  ? __pfx_hash_ipport4_add+0x10/0x10
[  221.441675][ T7518]  ? __pfx_hash_ipport4_uadt+0x10/0x10
[  221.441735][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.441796][ T7518]  ? __pfx_hash_ipport4_resize+0x10/0x10
[  221.441836][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.441886][ T7518]  call_ad.constprop.0+0x36d/0x940
[  221.441931][ T7518]  ? __pfx_hash_ipport4_resize+0x10/0x10
[  221.441974][ T7518]  ? __pfx_call_ad.constprop.0+0x10/0x10
[  221.442018][ T7518]  ? __pfx___nla_validate_parse+0x10/0x10
[  221.442065][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.442110][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.442165][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.442208][ T7518]  ? __nla_parse+0x40/0x60
[  221.442254][ T7518]  ip_set_ad.constprop.0.isra.0+0x3ce/0x870
[  221.442313][ T7518]  ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10
[  221.442365][ T7518]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  221.442416][ T7518]  ? __entry_text_end+0xfdfb5/0x1020b9
[  221.442457][ T7518]  ? lockdep_hardirqs_on+0x7c/0x110
[  221.442550][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.442593][ T7518]  ? find_held_lock+0x2b/0x80
[  221.442641][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.442693][ T7518]  nfnetlink_rcv_msg+0x9fc/0x1200
[  221.442755][ T7518]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  221.442816][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.442858][ T7518]  ? consume_skb+0xcc/0x100
[  221.442938][ T7518]  ? __pfx___dev_queue_xmit+0x10/0x10
[  221.442996][ T7518]  netlink_rcv_skb+0x158/0x420
[  221.443056][ T7518]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  221.443104][ T7518]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  221.443162][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.443228][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.443271][ T7518]  ? ns_capable+0xd7/0x110
[  221.443320][ T7518]  nfnetlink_rcv+0x1b3/0x430
[  221.443364][ T7518]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  221.443407][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.443450][ T7518]  ? netlink_deliver_tap+0x1ae/0xd30
[  221.443516][ T7518]  netlink_unicast+0x5aa/0x870
[  221.443582][ T7518]  ? __pfx_netlink_unicast+0x10/0x10
[  221.443642][ T7518]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  221.443699][ T7518]  ? __lock_acquire+0xb97/0x1ce0
[  221.443770][ T7518]  netlink_sendmsg+0x8d1/0xdd0
[  221.443843][ T7518]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.443900][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.443950][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.443993][ T7518]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  221.444040][ T7518]  ____sys_sendmsg+0xa98/0xc70
[  221.444082][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.444126][ T7518]  ? copy_msghdr_from_user+0x10a/0x160
[  221.444182][ T7518]  ? __pfx_____sys_sendmsg+0x10/0x10
[  221.444235][ T7518]  ? __pfx_futex_wake_mark+0x10/0x10
[  221.444285][ T7518]  ___sys_sendmsg+0x134/0x1d0
[  221.444343][ T7518]  ? __pfx____sys_sendmsg+0x10/0x10
[  221.444425][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.444504][ T7518]  __sys_sendmsg+0x16d/0x220
[  221.444562][ T7518]  ? __pfx___sys_sendmsg+0x10/0x10
[  221.444616][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.444659][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.444723][ T7518]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.444784][ T7518]  do_syscall_64+0xcd/0x4e0
[  221.444847][ T7518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.444883][ T7518] RIP: 0033:0x7f7bd158eba9
[  221.444912][ T7518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.444948][ T7518] RSP: 002b:00007f7bd23c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.444982][ T7518] RAX: ffffffffffffffda RBX: 00007f7bd17d6090 RCX: 00007f7bd158eba9
[  221.445007][ T7518] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000006
[  221.445030][ T7518] RBP: 00007f7bd1611e19 R08: 0000000000000000 R09: 0000000000000000
[  221.445052][ T7518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.445075][ T7518] R13: 00007f7bd17d6128 R14: 00007f7bd17d6090 R15: 00007ffd5473f268
[  221.445124][ T7518]  </TASK>
[  221.448598][ T7518] Mem-Info:
[  221.499073][ T7551] loop6: detected capacity change from 0 to 4096
[  221.515958][ T7518] active_anon:8487 inactive_anon:0 isolated_anon:0
[  221.515958][ T7518]  active_file:3977 inactive_file:39922 isolated_file:0
[  221.515958][ T7518]  unevictable:776 dirty:408 writeback:0
[  221.515958][ T7518]  slab_reclaimable:11850 slab_unreclaimable:129355
[  221.515958][ T7518]  mapped:34692 shmem:4950 pagetables:1131
[  221.515958][ T7518]  sec_pagetables:0 bounce:0
[  221.515958][ T7518]  kernel_misc_reclaimable:0
[  221.515958][ T7518]  free:1274027 free_pcp:18506 free_cma:0
[  221.705875][ T7551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.817308][ T7518] Node 0 active_anon:25748kB inactive_anon:0kB active_file:15908kB inactive_file:159480kB unevictable:1568kB isolated(anon):0kB isolated(file):0kB mapped:138768kB dirty:1628kB writeback:0kB shmem:10064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12224kB pagetables:4492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  221.817409][ T7518] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  222.198984][ T7518] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  222.234348][ T6680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.256199][ T7518] lowmem_reserve[]: 0 2479 2481 2481 2481
[  222.270305][ T7569] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  222.275139][ T7571] loop3: detected capacity change from 0 to 512
[  222.289094][ T7571] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  222.299003][ T7518] Node 0 DMA32 free:1192584kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28156kB inactive_anon:0kB active_file:15908kB inactive_file:158212kB unevictable:1536kB writepending:1616kB present:3129332kB managed:2539448kB mlocked:0kB bounce:0kB free_pcp:56848kB local_pcp:29504kB free_cma:0kB
[  222.299131][ T7518] lowmem_reserve[]: 0 0 1 1 1
[  222.299204][ T7518] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  222.299311][ T7518] lowmem_reserve[]: 0 0 0 0 0
[  222.375520][ T7518] Node 1 Normal free:3901352kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16192kB local_pcp:10976kB free_cma:0kB
[  222.377376][ T7571] EXT4-fs (loop3): 1 truncate cleaned up
[  222.407344][ T7518] lowmem_reserve[]: 0 0 0 0 0
[  222.407424][ T7518] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  222.407660][ T7518] Node 0 DMA32: 3118*4kB (UME) 1822*8kB (UM) 858*16kB (UME) 276*32kB (UME) 269*64kB (UM) 162*128kB (UM) 96*256kB (UM) 46*512kB (UME) 24*1024kB (UM) 2*2048kB (UM) 251*4096kB (UM) = 1192456kB
[  222.408077][ T7518] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  222.408307][ T7518] Node 1 Normal: 182*4kB (UME) 46*8kB (UME) 40*16kB (UME) 117*32kB (UME) 51*64kB (UME) 9*128kB (UE) 5*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 948*4096kB (M) = 3901352kB
[  222.408641][ T7518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  222.408671][ T7518] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  222.408701][ T7518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  222.408732][ T7518] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  222.408763][ T7518] 46844 total pagecache pages
[  222.408777][ T7518] 0 pages in swap cache
[  222.408790][ T7518] Free swap  = 124996kB
[  222.408804][ T7518] Total swap = 124996kB
[  222.408820][ T7518] 2097051 pages RAM
[  222.408833][ T7518] 0 pages HighMem/MovableOnly
[  222.408847][ T7518] 430227 pages reserved
[  222.408860][ T7518] 0 pages cma reserved
[  222.565077][ T7571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.801166][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.529'.
[  223.074347][ T7586] loop6: detected capacity change from 0 to 512
[  223.143439][ T7586] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  223.218604][ T7586] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  223.247312][ T7586] System zones: 1-12
[  223.257927][ T7586] EXT4-fs error (device loop6): ext4_iget_extra_inode:5103: inode #15: comm syz.6.531: corrupted in-inode xattr: e_value size too large
[  223.334479][ T7586] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.531: couldn't read orphan inode 15 (err -117)
[  223.358146][ T7586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.515831][ T6680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.823246][ T7591] syzkaller0: entered promiscuous mode
[  223.849083][ T7591] syzkaller0: entered allmulticast mode
[  223.944227][ T7613] loop5: detected capacity change from 0 to 8192
[  224.528234][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.546'.
[  225.528836][ T7640] loop5: detected capacity change from 0 to 512
[  225.538856][ T7640] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  225.553239][ T7640] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  225.565118][ T7640] System zones: 1-12
[  225.576590][ T7640] EXT4-fs error (device loop5): ext4_iget_extra_inode:5103: inode #15: comm syz.5.551: corrupted in-inode xattr: e_value size too large
[  225.602952][ T7640] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.551: couldn't read orphan inode 15 (err -117)
[  225.628258][ T7640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.734694][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.814422][ T7648] loop5: detected capacity change from 0 to 512
[  225.867485][ T7648] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: comm syz.5.554: error while reading EA inode 32 err=-116
[  225.881914][ T7648] EXT4-fs (loop5): Remounting filesystem read-only
[  225.888504][ T7648] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  225.901574][ T7648] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30)
[  225.913179][ T7648] EXT4-fs (loop5): 1 orphan inode deleted
[  225.923586][ T7648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.007230][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.139649][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  226.139673][   T30] audit: type=1326 audit(1757809719.081:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  226.204538][   T30] audit: type=1326 audit(1757809719.121:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  226.274514][   T30] audit: type=1326 audit(1757809719.121:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  226.316986][   T30] audit: type=1326 audit(1757809719.121:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  226.349652][   T30] audit: type=1326 audit(1757809719.121:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  226.373071][   T30] audit: type=1326 audit(1757809719.121:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  226.396626][   T30] audit: type=1326 audit(1757809719.121:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  226.419034][   T30] audit: type=1326 audit(1757809719.121:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  226.444010][   T30] audit: type=1326 audit(1757809719.121:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  226.482670][   T30] audit: type=1326 audit(1757809719.121:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  226.609825][ T7661] loop5: detected capacity change from 0 to 8192
[  226.808387][ T7626] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.941028][ T7626] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.025809][ T7626] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.181541][ T7626] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.345878][ T2997] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.402653][   T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.462502][ T2997] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.474546][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.662465][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.165192][ T7693] loop1: detected capacity change from 0 to 8192
[  228.400614][ T7699] syzkaller0: entered promiscuous mode
[  228.410476][ T7699] syzkaller0: entered allmulticast mode
[  228.767701][ T7710] infiniband syz2: set active
[  228.772567][ T7710] infiniband syz2: added batadv_slave_0
[  228.823315][ T7710] RDS/IB: syz2: added
[  228.827374][ T7710] smc: adding ib device syz2 with port count 1
[  228.833719][ T7710] smc:    ib device syz2 port 1 has pnetid 
[  229.097526][ T7722] loop5: detected capacity change from 0 to 512
[  229.133198][ T7722] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  229.164444][ T7722] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  229.174059][ T7722] System zones: 1-12
[  229.178705][ T7722] EXT4-fs error (device loop5): ext4_iget_extra_inode:5103: inode #15: comm syz.5.583: corrupted in-inode xattr: e_value size too large
[  229.198274][ T7722] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.583: couldn't read orphan inode 15 (err -117)
[  229.215038][ T7722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.272651][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.954226][ T7734] vcan0: tx drop: invalid sa for name 0x0000000000000004
[  230.514987][ T7743] loop6: detected capacity change from 0 to 4096
[  230.706794][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.5.594'.
[  230.736437][ T7743] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.588236][ T5872] Bluetooth: hci1: command 0x0406 tx timeout
[  231.589856][ T5884] Bluetooth: hci2: command 0x0401 tx timeout
[  231.595101][ T5872] Bluetooth: hci0: command 0x0406 tx timeout
[  231.601363][ T5178] Bluetooth: hci4: command 0x0406 tx timeout
[  231.870648][ T6680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.137251][ T7766] loop6: detected capacity change from 0 to 8192
[  232.288824][ T7770] loop3: detected capacity change from 0 to 128
[  232.708073][ T7782] loop1: detected capacity change from 0 to 512
[  232.942531][ T7785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.607'.
[  232.964203][ T7786] loop5: detected capacity change from 0 to 128
[  233.187874][ T7770] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  233.216319][ T7770] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.276946][ T7782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.324903][ T7782] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.550094][ T5867] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  233.926513][ T5864] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.968359][ T7803] 9pnet_fd: Insufficient options for proto=fd
[  233.993643][ T7805] netlink: 272 bytes leftover after parsing attributes in process `syz.7.615'.
[  234.227793][ T7812] loop5: detected capacity change from 0 to 764
[  234.262071][ T7812] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  234.357585][ T7812] Symlink component flag not implemented
[  234.367685][ T7812] Symlink component flag not implemented (7)
[  234.659050][ T7826] hub 9-0:1.0: USB hub found
[  234.677731][ T7826] hub 9-0:1.0: 1 port detected
[  234.782265][ T7828] loop3: detected capacity change from 0 to 512
[  234.813405][ T7828] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  234.822085][ T7766] warn_alloc: 5 callbacks suppressed
[  234.822106][ T7766] syz.6.598: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  234.856741][ T7766] CPU: 1 UID: 0 PID: 7766 Comm: syz.6.598 Not tainted syzkaller #0 PREEMPT(full) 
[  234.856794][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  234.856816][ T7766] Call Trace:
[  234.856827][ T7766]  <TASK>
[  234.856840][ T7766]  dump_stack_lvl+0x16c/0x1f0
[  234.856900][ T7766]  warn_alloc+0x248/0x3a0
[  234.856956][ T7766]  ? __pfx_warn_alloc+0x10/0x10
[  234.857031][ T7766]  ? hash_ipport4_resize+0x1b4/0x1b10
[  234.857065][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.857114][ T7766]  ? __vmalloc_node_noprof+0xad/0xf0
[  234.857171][ T7766]  __vmalloc_node_range_noprof+0x101b/0x14b0
[  234.857217][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.857279][ T7766]  ? hash_ipport4_resize+0x1b4/0x1b10
[  234.857328][ T7766]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  234.857388][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.857432][ T7766]  ? ___kmalloc_large_node+0xed/0x160
[  234.857475][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.857527][ T7766]  __kvmalloc_node_noprof+0x30a/0x620
[  234.857583][ T7766]  ? hash_ipport4_resize+0x1b4/0x1b10
[  234.857620][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.857664][ T7766]  ? hash_ipport4_resize+0x1b4/0x1b10
[  234.857699][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.857752][ T7766]  ? hash_ipport4_resize+0x1b4/0x1b10
[  234.857794][ T7766]  hash_ipport4_resize+0x1b4/0x1b10
[  234.857837][ T7766]  ? __pfx_hash_ipport4_add+0x10/0x10
[  234.857874][ T7766]  ? __pfx_hash_ipport4_uadt+0x10/0x10
[  234.857936][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.857992][ T7766]  ? __pfx_hash_ipport4_resize+0x10/0x10
[  234.858032][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.858082][ T7766]  call_ad.constprop.0+0x36d/0x940
[  234.858129][ T7766]  ? __pfx_hash_ipport4_resize+0x10/0x10
[  234.858172][ T7766]  ? __pfx_call_ad.constprop.0+0x10/0x10
[  234.858216][ T7766]  ? __pfx___nla_validate_parse+0x10/0x10
[  234.858264][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.858309][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.858365][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.858408][ T7766]  ? __nla_parse+0x40/0x60
[  234.858455][ T7766]  ip_set_ad.constprop.0.isra.0+0x3ce/0x870
[  234.858515][ T7766]  ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10
[  234.858593][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.858637][ T7766]  ? call_rcu_tasks_generic+0x400/0x920
[  234.858736][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.858780][ T7766]  ? find_held_lock+0x2b/0x80
[  234.858833][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.858886][ T7766]  nfnetlink_rcv_msg+0x9fc/0x1200
[  234.858950][ T7766]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  234.859004][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.859046][ T7766]  ? consume_skb+0xcc/0x100
[  234.859127][ T7766]  ? __pfx___dev_queue_xmit+0x10/0x10
[  234.859186][ T7766]  netlink_rcv_skb+0x158/0x420
[  234.859245][ T7766]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  234.859294][ T7766]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  234.859353][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.859421][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.859463][ T7766]  ? ns_capable+0xd7/0x110
[  234.859514][ T7766]  nfnetlink_rcv+0x1b3/0x430
[  234.859559][ T7766]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  234.859602][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.859646][ T7766]  ? netlink_deliver_tap+0x1ae/0xd30
[  234.859713][ T7766]  netlink_unicast+0x5aa/0x870
[  234.859781][ T7766]  ? __pfx_netlink_unicast+0x10/0x10
[  234.859848][ T7766]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  234.859905][ T7766]  ? __lock_acquire+0xb97/0x1ce0
[  234.859977][ T7766]  netlink_sendmsg+0x8d1/0xdd0
[  234.860045][ T7766]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.860101][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.860152][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.860195][ T7766]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  234.860243][ T7766]  ____sys_sendmsg+0xa98/0xc70
[  234.860285][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.860328][ T7766]  ? copy_msghdr_from_user+0x10a/0x160
[  234.860388][ T7766]  ? __pfx_____sys_sendmsg+0x10/0x10
[  234.860442][ T7766]  ? __pfx_futex_wake_mark+0x10/0x10
[  234.860491][ T7766]  ___sys_sendmsg+0x134/0x1d0
[  234.860550][ T7766]  ? __pfx____sys_sendmsg+0x10/0x10
[  234.860632][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.860712][ T7766]  __sys_sendmsg+0x16d/0x220
[  234.860770][ T7766]  ? __pfx___sys_sendmsg+0x10/0x10
[  234.860829][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.860872][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.860936][ T7766]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.860992][ T7766]  do_syscall_64+0xcd/0x4e0
[  234.861056][ T7766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.861092][ T7766] RIP: 0033:0x7f849ff8eba9
[  234.861120][ T7766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.861156][ T7766] RSP: 002b:00007f84a0ed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  234.861190][ T7766] RAX: ffffffffffffffda RBX: 00007f84a01d5fa0 RCX: 00007f849ff8eba9
[  234.861214][ T7766] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000006
[  234.861238][ T7766] RBP: 00007f84a0011e19 R08: 0000000000000000 R09: 0000000000000000
[  234.861261][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.861283][ T7766] R13: 00007f84a01d6038 R14: 00007f84a01d5fa0 R15: 00007fff74c73418
[  234.861334][ T7766]  </TASK>
[  235.410224][ T7766] Mem-Info:
[  235.420268][ T7766] active_anon:5998 inactive_anon:0 isolated_anon:0
[  235.420268][ T7766]  active_file:3977 inactive_file:39928 isolated_file:0
[  235.420268][ T7766]  unevictable:768 dirty:288 writeback:0
[  235.420268][ T7766]  slab_reclaimable:11905 slab_unreclaimable:122379
[  235.420268][ T7766]  mapped:34679 shmem:2445 pagetables:1160
[  235.420268][ T7766]  sec_pagetables:0 bounce:0
[  235.420268][ T7766]  kernel_misc_reclaimable:0
[  235.420268][ T7766]  free:1288906 free_pcp:13381 free_cma:0
[  235.503149][ T7766] Node 0 active_anon:24092kB inactive_anon:0kB active_file:15908kB inactive_file:159504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138716kB dirty:1148kB writeback:0kB shmem:8244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12296kB pagetables:4608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  235.504629][ T7828] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #16: comm syz.3.625: invalid indirect mapped block 4294967295 (level 0)
[  235.537652][ T7766] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  235.581715][ T7766] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  235.614643][ T7766] lowmem_reserve[]: 0 2479 2481 2481 2481
[  235.620529][ T7766] Node 0 DMA32 free:1238180kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24048kB inactive_anon:0kB active_file:15908kB inactive_file:158188kB unevictable:1536kB writepending:1148kB present:3129332kB managed:2539448kB mlocked:0kB bounce:0kB free_pcp:37304kB local_pcp:21156kB free_cma:0kB
[  235.653541][ T7766] lowmem_reserve[]: 0 0 1 1 1
[  235.819064][ T7828] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #16: comm syz.3.625: invalid indirect mapped block 4294967295 (level 1)
[  235.905309][ T7828] EXT4-fs (loop3): 1 orphan inode deleted
[  235.918624][ T7766] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  235.950596][ T7766] lowmem_reserve[]: 0 0 0 0 0
[  235.955439][ T7766] Node 1 Normal free:3901864kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15680kB local_pcp:4960kB free_cma:0kB
[  235.978624][ T7828] EXT4-fs (loop3): 1 truncate cleaned up
[  236.017983][ T7847] rdma_rxe: rxe_newlink: failed to add batadv_slave_0
[  236.106542][ T7766] lowmem_reserve[]: 0 0 0 0 0
[  236.111396][ T7766] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  236.124803][ T7766] Node 0 DMA32: 31*4kB (UME) 1358*8kB (UM) 705*16kB (UM) 528*32kB (UME) 331*64kB (UME) 188*128kB (UM) 100*256kB (UME) 54*512kB (UME) 26*1024kB (UME) 4*2048kB (UME) 260*4096kB (UM) = 1237436kB
[  236.144236][ T7766] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  236.146660][ T7828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.180425][ T7766] Node 1 Normal: 182*4kB (UME) 46*8kB (UME) 40*16kB (UME) 125*32kB (UME) 53*64kB (UME) 10*128kB (UE) 5*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 948*4096kB (M) = 3901864kB
[  236.250626][ T7766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  236.260224][ T7766] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  236.288606][ T7766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  236.308302][ T7766] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  236.328114][ T7766] 47172 total pagecache pages
[  236.349592][ T7766] 0 pages in swap cache
[  236.368548][ T7766] Free swap  = 124984kB
[  236.385493][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  236.385516][   T30] audit: type=1326 audit(1757809729.321:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.7.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  236.420611][ T7766] Total swap = 124996kB
[  236.434766][ T7766] 2097051 pages RAM
[  236.436418][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.439055][ T7766] 0 pages HighMem/MovableOnly
[  236.510419][ T7766] 430227 pages reserved
[  236.514617][ T7766] 0 pages cma reserved
[  236.547371][   T30] audit: type=1326 audit(1757809729.321:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.7.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  236.612351][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.638'.
[  236.625476][   T30] audit: type=1326 audit(1757809729.321:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.7.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  236.680452][   T30] audit: type=1326 audit(1757809729.321:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.7.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  236.760478][   T30] audit: type=1326 audit(1757809729.321:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.7.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0718eba9 code=0x7ffc0000
[  237.174148][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.6.646'.
[  237.209807][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.6.646'.
[  237.242329][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.6.646'.
[  237.371498][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.6.646'.
[  237.385943][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.6.646'.
[  237.407605][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.6.646'.
[  237.740808][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.6.646'.
[  237.778614][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.6.646'.
[  237.840169][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.6.646'.
[  237.884734][ T7902] loop7: detected capacity change from 0 to 128
[  237.917640][ T7902] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  237.945466][ T7902] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  238.233707][   T12] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  238.302549][ T7905] loop5: detected capacity change from 0 to 8192
[  240.080047][ T7962] loop1: detected capacity change from 0 to 2048
[  240.156333][ T7962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.290050][ T7972] EXT4-fs (loop1): shut down requested (0)
[  240.516813][ T7967] loop5: detected capacity change from 0 to 8192
[  241.044261][ T5864] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.723975][ T7989] syzkaller0: entered promiscuous mode
[  241.778625][ T7989] syzkaller0: entered allmulticast mode
[  241.901514][ T8000] tipc: Started in network mode
[  241.939706][ T8000] tipc: Node identity 26085837cc25, cluster identity 4711
[  241.986833][ T8000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.090055][ T7993] tipc: Resetting bearer <eth:syzkaller0>
[  242.248295][ T7997] loop5: detected capacity change from 0 to 1024
[  242.322072][ T7997] EXT4-fs: Ignoring removed bh option
[  242.349379][ T7997] ext4: Unknown parameter 'nouser_xattr'
[  242.848854][   T30] audit: type=1326 audit(1757809735.791:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  242.904913][   T30] audit: type=1326 audit(1757809735.821:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  242.936911][   T30] audit: type=1326 audit(1757809735.821:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  242.961118][   T30] audit: type=1326 audit(1757809735.821:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  242.984073][   T30] audit: type=1326 audit(1757809735.821:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  243.006597][   T30] audit: type=1326 audit(1757809735.831:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  243.029383][   T30] audit: type=1326 audit(1757809735.831:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  243.066796][   T30] audit: type=1326 audit(1757809735.831:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  243.101634][ T5875] tipc: Node number set to 3928840247
[  243.145814][ T8033] loop4: detected capacity change from 0 to 512
[  243.186055][   T30] audit: type=1326 audit(1757809735.831:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  243.248584][   T30] audit: type=1326 audit(1757809735.831:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  243.249381][ T8033] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  243.403215][ T8033] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  243.464645][ T8033] EXT4-fs (loop4): 1 truncate cleaned up
[  243.493760][ T8033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.718534][ T8031] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  244.057317][ T8039] loop6: detected capacity change from 0 to 8192
[  244.381036][ T8042] __nla_validate_parse: 3 callbacks suppressed
[  244.381067][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.6.701'.
[  244.487063][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.6.701'.
[  244.641180][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.6.701'.
[  244.940698][ T8051] capability: warning: `syz.6.704' uses 32-bit capabilities (legacy support in use)
[  245.436348][ T8004] syzkaller0: entered promiscuous mode
[  245.442014][ T8004] syzkaller0: entered allmulticast mode
[  245.449376][ T7990] tipc: Resetting bearer <eth:syzkaller0>
[  245.491737][ T7990] tipc: Disabling bearer <eth:syzkaller0>
[  245.905363][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.483120][ T8078] netlink: 16 bytes leftover after parsing attributes in process `syz.5.714'.
[  246.645521][ T8073] loop3: detected capacity change from 0 to 8192
[  246.911839][ T8086] syzkaller0: entered promiscuous mode
[  246.968322][ T8086] syzkaller0: entered allmulticast mode
[  248.176291][ T8096] loop7: detected capacity change from 0 to 512
[  248.548009][ T8096] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.610213][ T8096] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.974101][   T30] kauditd_printk_skb: 52 callbacks suppressed
[  248.974125][   T30] audit: type=1326 audit(1757809741.921:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  249.045106][   T30] audit: type=1326 audit(1757809741.921:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  249.068047][   T30] audit: type=1326 audit(1757809741.921:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  249.094180][   T30] audit: type=1326 audit(1757809741.921:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  249.116639][   T30] audit: type=1326 audit(1757809741.921:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  249.151199][   T30] audit: type=1326 audit(1757809741.921:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  249.199431][ T6727] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.350701][   T30] audit: type=1326 audit(1757809742.301:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8112 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  249.405873][   T30] audit: type=1326 audit(1757809742.321:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8112 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  249.436622][   T30] audit: type=1326 audit(1757809742.331:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8112 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  249.477007][   T30] audit: type=1326 audit(1757809742.331:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8112 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  249.491759][ T8116] loop3: detected capacity change from 0 to 512
[  249.545405][ T8116] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  249.575320][ T8116] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  249.616830][ T8116] EXT4-fs (loop3): 1 truncate cleaned up
[  249.628155][ T8120] random: crng reseeded on system resumption
[  249.648116][ T8116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.725945][ T8116] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  250.538742][ T8126] loop7: detected capacity change from 0 to 256
[  251.678442][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.440748][ T8139] loop5: detected capacity change from 0 to 8192
[  253.459712][ T8158] loop4: detected capacity change from 0 to 512
[  253.500854][ T8158] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  253.550081][ T8158] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  253.598736][ T8165] syzkaller0: entered promiscuous mode
[  253.604447][ T8165] syzkaller0: entered allmulticast mode
[  253.612325][ T8158] EXT4-fs (loop4): 1 truncate cleaned up
[  253.659671][ T8158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.741921][ T8158] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  253.947161][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.769763][ T8194] netlink: 'syz.7.751': attribute type 4 has an invalid length.
[  255.808635][ T8187] loop4: detected capacity change from 0 to 8192
[  256.802660][ T8207] rdma_rxe: rxe_newlink: failed to add batadv_slave_0
[  256.830510][   T30] kauditd_printk_skb: 93 callbacks suppressed
[  256.830534][   T30] audit: type=1326 audit(1757809749.771:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  256.865982][   T30] audit: type=1326 audit(1757809749.811:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  256.893935][   T30] audit: type=1326 audit(1757809749.841:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  256.922889][   T30] audit: type=1326 audit(1757809749.841:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  256.995392][   T30] audit: type=1326 audit(1757809749.841:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  257.018507][   T30] audit: type=1326 audit(1757809749.871:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  257.042350][   T30] audit: type=1326 audit(1757809749.871:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  257.066262][   T30] audit: type=1326 audit(1757809749.871:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  257.097331][   T30] audit: type=1326 audit(1757809749.901:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  257.124587][   T30] audit: type=1326 audit(1757809749.901:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  257.250551][ T8213] netlink: 'syz.3.762': attribute type 13 has an invalid length.
[  257.974110][ T8218] netlink: 'syz.1.764': attribute type 13 has an invalid length.
[  257.983467][ T8218] netlink: 36 bytes leftover after parsing attributes in process `syz.1.764'.
[  258.276761][ T8198] netlink: 36 bytes leftover after parsing attributes in process `syz.5.757'.
[  258.730044][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.6.770'.
[  259.141561][ T8247] loop5: detected capacity change from 0 to 1024
[  259.213398][ T8247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.340090][ T8258] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  259.359855][ T8258] syzkaller0: entered promiscuous mode
[  259.368935][ T8258] syzkaller0: entered allmulticast mode
[  259.524729][ T8247] EXT4-fs error (device loop5): mb_free_blocks:2014: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  259.768988][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.006565][ T8251] infiniband syz!: set active
[  260.016688][ T8251] infiniband syz!: added team_slave_0
[  260.149563][ T8251] RDS/IB: syz!: added
[  260.164857][ T8251] smc: adding ib device syz! with port count 1
[  260.180548][ T8251] smc:    ib device syz! port 1 has pnetid 
[  260.521822][ T8281] loop4: detected capacity change from 0 to 512
[  260.592465][ T8281] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  260.650509][ T8281] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  260.722364][ T8281] EXT4-fs (loop4): 1 truncate cleaned up
[  260.767734][ T8281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.843482][ T8281] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  261.031503][ T8294] loop5: detected capacity change from 0 to 1024
[  261.228815][ T8294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.354545][ T8302] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  261.388989][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.519158][ T8294] EXT4-fs error (device loop5): mb_free_blocks:2014: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  261.738143][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.256774][ T8324] bridge_slave_0: left allmulticast mode
[  262.283531][ T8324] bridge_slave_0: left promiscuous mode
[  262.302001][ T8324] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.333155][ T8324] bridge_slave_1: left allmulticast mode
[  262.343868][ T8324] bridge_slave_1: left promiscuous mode
[  262.355264][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.392632][ T8324] bond0: (slave bond_slave_0): Releasing backup interface
[  262.424004][ T8324] bond0: (slave bond_slave_1): Releasing backup interface
[  262.458663][ T8324] team0: Failed to send options change via netlink (err -105)
[  262.475862][ T8324] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  262.494501][ T8324] team0: Port device team_slave_0 removed
[  262.553541][ T8324] team0: Failed to send options change via netlink (err -105)
[  262.579208][ T8324] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  262.593558][ T8324] team0: Port device team_slave_1 removed
[  262.600682][ T8324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.608300][ T8324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.653620][ T8324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.668030][ T8324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.729512][ T8325] team0: Failed to send options change via netlink (err -105)
[  262.744328][ T8325] team0: Mode changed to "activebackup"
[  262.882362][   T30] kauditd_printk_skb: 68 callbacks suppressed
[  262.882388][   T30] audit: type=1326 audit(1757809755.831:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849ff8eba9 code=0x7ffc0000
[  262.997403][   T30] audit: type=1326 audit(1757809755.831:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849ff8eba9 code=0x7ffc0000
[  263.070653][   T30] audit: type=1326 audit(1757809755.861:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f849ff8eba9 code=0x7ffc0000
[  263.126627][   T30] audit: type=1326 audit(1757809755.861:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849ff8eba9 code=0x7ffc0000
[  263.157471][ T8340] loop4: detected capacity change from 0 to 512
[  263.167870][   T30] audit: type=1326 audit(1757809755.861:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849ff8eba9 code=0x7ffc0000
[  263.199238][ T8342] loop6: detected capacity change from 0 to 512
[  263.227780][ T8340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.258767][ T8342] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  263.268122][   T30] audit: type=1326 audit(1757809755.871:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f849ff8eba9 code=0x7ffc0000
[  263.296510][ T8342] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  263.310732][ T8340] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.329246][   T30] audit: type=1326 audit(1757809755.871:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849ff8eba9 code=0x7ffc0000
[  263.352900][   T30] audit: type=1326 audit(1757809755.871:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849ff8eba9 code=0x7ffc0000
[  263.355683][ T8342] EXT4-fs (loop6): 1 truncate cleaned up
[  263.375143][   T30] audit: type=1326 audit(1757809755.871:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f849ff8eba9 code=0x7ffc0000
[  263.504928][ T8342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.587611][ T8342] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  263.682456][   T30] audit: type=1326 audit(1757809756.621:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849ff8eba9 code=0x7ffc0000
[  263.777934][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.969353][ T6680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.993919][ T8352] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.012070][ T8352] syzkaller0: entered promiscuous mode
[  264.020552][ T8352] syzkaller0: entered allmulticast mode
[  264.071275][ T8352] tipc: Resetting bearer <eth:syzkaller0>
[  264.136862][ T8352] loop4: detected capacity change from 0 to 1024
[  264.164455][ T8352] EXT4-fs: Ignoring removed bh option
[  264.207125][ T8352] ext4: Unknown parameter 'nouser_xattr'
[  264.229513][ T8351] tipc: Resetting bearer <eth:syzkaller0>
[  264.316595][ T8351] tipc: Disabling bearer <eth:syzkaller0>
[  265.042849][ T8371] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  265.079286][ T8371] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  265.265128][ T8297] rdma_rxe: rxe_newlink: failed to add batadv_slave_0
[  265.288812][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  265.342982][ T8371] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  265.376745][ T8371] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  265.605959][ T8371] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  265.658784][ T8371] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  265.808183][ T8371] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  265.876096][ T8371] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  266.114226][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.826'.
[  266.199254][ T8385] loop4: detected capacity change from 0 to 512
[  266.328305][ T8385] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  266.366071][ T8385] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  266.401051][   T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  266.478922][   T13] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  266.478979][ T8385] EXT4-fs (loop4): 1 truncate cleaned up
[  266.517959][ T8385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.679615][ T8385] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  266.757631][   T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  266.765997][   T13] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  266.843151][ T1336] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  266.870513][ T1336] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  266.966307][ T6292] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  266.974995][ T6292] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  267.067390][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.982922][ T8398] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  268.019135][ T8398] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  268.076451][ T8398] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  268.187249][ T8417] loop3: detected capacity change from 0 to 512
[  268.230516][ T8417] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  268.300510][ T8417] EXT4-fs (loop3): 1 truncate cleaned up
[  268.308257][ T8417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.546802][ T8423] loop4: detected capacity change from 0 to 512
[  268.597559][ T8423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.633395][ T8423] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.816117][ T8430] loop5: detected capacity change from 0 to 1024
[  269.897539][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.923223][ T8430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.253532][ T8430] EXT4-fs error (device loop5): mb_free_blocks:2014: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  270.356828][ T8441] netlink: 16 bytes leftover after parsing attributes in process `syz.6.842'.
[  270.565578][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.658028][   T30] kauditd_printk_skb: 83 callbacks suppressed
[  270.658052][   T30] audit: type=1326 audit(1757809763.601:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  270.760571][   T30] audit: type=1326 audit(1757809763.601:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  270.844835][ T8445] loop4: detected capacity change from 0 to 512
[  270.874586][   T30] audit: type=1326 audit(1757809763.661:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  270.908780][   T30] audit: type=1326 audit(1757809763.661:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  270.937388][   T30] audit: type=1326 audit(1757809763.661:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  271.126522][ T8445] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  271.173300][ T8445] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  271.184395][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.213536][ T8445] EXT4-fs (loop4): 1 truncate cleaned up
[  271.229472][   T30] audit: type=1326 audit(1757809763.661:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  271.253313][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.844'.
[  271.254388][ T8445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.340707][   T30] audit: type=1326 audit(1757809763.661:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  271.385275][   T30] audit: type=1326 audit(1757809763.661:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  271.435467][   T30] audit: type=1326 audit(1757809763.671:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  271.458337][ T8445] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  271.515147][   T30] audit: type=1326 audit(1757809763.671:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  271.720168][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.941655][ T8454] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  272.707410][ T8476] loop6: detected capacity change from 0 to 128
[  272.752111][ T8476] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  272.821978][ T8476] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.055970][ T6680] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  273.079181][ T8486] netlink: 3 bytes leftover after parsing attributes in process `syz.1.858'.
[  273.137344][ T8487] netlink: 3 bytes leftover after parsing attributes in process `syz.1.858'.
[  273.148561][ T8486] batadv1: entered promiscuous mode
[  273.176725][ T8486] batadv1: entered allmulticast mode
[  273.196575][ T5882] Bluetooth: hci2: command 0x0401 tx timeout
[  273.292952][ T8487] batadv1: entered promiscuous mode
[  273.325071][ T8487] batadv1: entered allmulticast mode
[  274.128044][ T8510] netlink: 28 bytes leftover after parsing attributes in process `syz.6.866'.
[  274.172562][ T8510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.866'.
[  274.174989][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.865'.
[  274.207208][ T8510] netlink: 28 bytes leftover after parsing attributes in process `syz.6.866'.
[  274.218335][ T8510] netlink: 28 bytes leftover after parsing attributes in process `syz.6.866'.
[  274.453744][ T8316] Set syz1 is full, maxelem 65536 reached
[  275.067447][ T8530] netlink: 'syz.5.872': attribute type 4 has an invalid length.
[  275.089991][ T8530] netlink: 17 bytes leftover after parsing attributes in process `syz.5.872'.
[  275.178043][ T8531] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  275.372417][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.6.876'.
[  275.623026][ T8547] loop5: detected capacity change from 0 to 512
[  275.675244][ T8547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.690054][ T8547] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.768845][ T8556] loop7: detected capacity change from 0 to 1024
[  275.824845][ T8556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.100203][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.317896][ T8569] loop3: detected capacity change from 0 to 128
[  276.389318][ T8569] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  276.488446][ T8569] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  276.575678][ T8579] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  276.690004][ T5867] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  276.747425][ T8582] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  277.120246][   T30] kauditd_printk_skb: 70 callbacks suppressed
[  277.120272][   T30] audit: type=1326 audit(1757809770.061:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  277.204449][   T30] audit: type=1326 audit(1757809770.061:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  277.260885][   T30] audit: type=1326 audit(1757809770.101:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  277.373911][   T30] audit: type=1326 audit(1757809770.101:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  277.469756][ T8603] loop4: detected capacity change from 0 to 512
[  277.476367][   T30] audit: type=1326 audit(1757809770.101:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  277.537429][   T30] audit: type=1326 audit(1757809770.101:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  277.567403][ T8606] __nla_validate_parse: 3 callbacks suppressed
[  277.567428][ T8606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'.
[  277.654033][   T30] audit: type=1326 audit(1757809770.101:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  277.833412][   T30] audit: type=1326 audit(1757809770.101:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  277.855799][    C0] vkms_vblank_simulate: vblank timer overrun
[  278.546022][   T30] audit: type=1326 audit(1757809770.101:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  278.581266][   T30] audit: type=1326 audit(1757809770.111:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  278.756224][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.902'.
[  278.838102][ T8616] netlink: 40 bytes leftover after parsing attributes in process `syz.6.902'.
[  279.028945][ T8620] loop4: detected capacity change from 0 to 128
[  279.089619][ T8620] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  279.143278][ T8620] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.164474][ T6727] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.240940][ T8626] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  279.360319][ T5866] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  279.469993][ T8635] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  279.501560][ T8635] syzkaller0: entered promiscuous mode
[  279.512675][ T8635] syzkaller0: entered allmulticast mode
[  280.156998][ T8663] ieee802154 phy0 wpan0: encryption failed: -22
[  280.418224][ T8671] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  280.628050][ T8679] loop4: detected capacity change from 0 to 128
[  280.654753][ T8679] EXT4-fs: Ignoring removed nobh option
[  280.703808][ T8679] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  281.017387][ T8679] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  282.499287][ T5866] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  282.530222][ T8700] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.742725][ T8700] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.882767][ T8700] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.095676][ T8700] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.198721][ T8709] loop3: detected capacity change from 0 to 8192
[  283.290762][ T1336] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.349189][ T1336] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.444450][ T1336] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.514215][ T1336] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.588771][ T8720] openvswitch: netlink: Message has 8 unknown bytes.
[  283.885929][ T8726] netlink: 16 bytes leftover after parsing attributes in process `syz.6.948'.
[  284.230947][ T8734] loop5: detected capacity change from 0 to 1024
[  284.383735][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.954'.
[  284.433834][ T8743] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  284.474392][ T8743] batman_adv: batadv0: Removing interface: batadv_slave_0
[  284.551735][ T8743] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  284.563309][ T8734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.582066][ T8743] batman_adv: batadv0: Removing interface: batadv_slave_1
[  284.589506][ T8749] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ0x0000000000000007
[  284.681944][ T8734] EXT4-fs error (device loop5): mb_free_blocks:2014: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  284.729848][ T8752] loop1: detected capacity change from 0 to 512
[  284.842589][ T8752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.888538][ T8752] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.970090][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.035081][ T8739] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  285.269232][ T5864] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.295501][ T8760] loop5: detected capacity change from 0 to 128
[  285.334948][ T8760] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  285.402705][ T8760] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  285.866154][ T8770] loop3: detected capacity change from 0 to 8192
[  286.230900][ T5882] Bluetooth: hci2: command 0x0401 tx timeout
[  286.415290][ T8781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.967'.
[  287.181114][ T8791] loop1: detected capacity change from 0 to 1024
[  287.271957][ T8791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.498199][ T8791] EXT4-fs error (device loop1): mb_free_blocks:2014: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  288.400464][ T5882] Bluetooth: hci6: command 0x0406 tx timeout
[  288.661440][ T5864] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.803654][ T8804] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.811435][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.572638][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.668958][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.855621][ T8804] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  291.019487][ T8829] hub 9-0:1.0: USB hub found
[  291.041860][ T8829] hub 9-0:1.0: 1 port detected
[  291.132860][ T8827] loop6: detected capacity change from 0 to 8192
[  291.409813][ T7182] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.579117][ T7182] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.597958][ T7182] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.652596][ T7182] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.082253][ T8841] IPv6: Can't replace route, no match found
[  292.249700][ T8848] random: crng reseeded on system resumption
[  292.734029][ T8862] loop1: detected capacity change from 0 to 512
[  292.828835][ T8862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.952749][ T5874] Bluetooth: hci3: command 0x0406 tx timeout
[  292.965729][ T8862] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  293.757437][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'.
[  293.812654][ T8874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.866439][ T8869] loop3: detected capacity change from 0 to 8192
[  293.870382][ T8874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.927066][ T8874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.966301][ T8874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  294.454322][ T8873] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  295.380509][ T8878] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  295.750759][ T5882] Bluetooth: hci2: command 0x0401 tx timeout
[  298.282263][ T8912] veth0_to_team: entered promiscuous mode
[  299.307168][ T8929] loop7: detected capacity change from 0 to 256
[  299.577366][ T5864] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.586722][ T8936] random: crng reseeded on system resumption
[  299.777755][ T8942] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1026'.
[  300.664825][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  300.664850][   T30] audit: type=1326 audit(1757809793.611:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  300.764490][   T30] audit: type=1326 audit(1757809793.611:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  300.830500][   T30] audit: type=1326 audit(1757809793.611:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  300.892984][   T30] audit: type=1326 audit(1757809793.611:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  300.934401][   T30] audit: type=1326 audit(1757809793.611:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  300.976511][ T8966] loop6: detected capacity change from 0 to 1024
[  301.025752][   T30] audit: type=1326 audit(1757809793.611:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  301.052124][ T8972] loop1: detected capacity change from 0 to 512
[  301.073299][ T8972] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  301.085900][   T30] audit: type=1326 audit(1757809793.611:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  301.137671][ T8972] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1037: bad orphan inode 131083
[  301.137707][ T8966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.157845][ T8972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.195896][   T30] audit: type=1326 audit(1757809793.611:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  301.234105][   T30] audit: type=1326 audit(1757809793.641:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  301.257979][   T30] audit: type=1326 audit(1757809793.641:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d658eba9 code=0x7ffc0000
[  301.307709][ T8966] EXT4-fs error (device loop6): mb_free_blocks:2014: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  301.323488][ T8980] netlink: '+}[@': attribute type 10 has an invalid length.
[  301.410760][ T5864] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.530254][ T6680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.654462][ T8982] loop4: detected capacity change from 0 to 8192
[  304.065448][ T9028] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  304.252262][ T9030] loop5: detected capacity change from 0 to 128
[  305.083943][ T9030] syz.5.1060: attempt to access beyond end of device
[  305.083943][ T9030] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128
[  305.141830][ T9030] syz.5.1060: attempt to access beyond end of device
[  305.141830][ T9030] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128
[  305.170828][ T9030] syz.5.1060: attempt to access beyond end of device
[  305.170828][ T9030] loop5: rw=2049, sector=177, nr_sectors = 24 limit=128
[  305.207248][ T9030] syz.5.1060: attempt to access beyond end of device
[  305.207248][ T9030] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128
[  305.293606][ T9034] loop4: detected capacity change from 0 to 8192
[  305.295520][ T9030] syz.5.1060: attempt to access beyond end of device
[  305.295520][ T9030] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128
[  305.370688][ T9030] syz.5.1060: attempt to access beyond end of device
[  305.370688][ T9030] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128
[  305.414986][ T9030] syz.5.1060: attempt to access beyond end of device
[  305.414986][ T9030] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128
[  305.492042][ T9030] syz.5.1060: attempt to access beyond end of device
[  305.492042][ T9030] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128
[  305.568614][ T9030] syz.5.1060: attempt to access beyond end of device
[  305.568614][ T9030] loop5: rw=2049, sector=289, nr_sectors = 9 limit=128
[  306.247200][ T9048] loop5: detected capacity change from 0 to 8192
[  306.298800][ T9048] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  306.390866][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  306.390891][   T30] audit: type=1326 audit(1757809799.331:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  306.489105][   T30] audit: type=1326 audit(1757809799.331:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  306.581624][   T30] audit: type=1326 audit(1757809799.341:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  306.643993][ T9056] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1069'.
[  306.731450][   T30] audit: type=1326 audit(1757809799.341:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  306.828449][   T30] audit: type=1326 audit(1757809799.341:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  306.916679][   T30] audit: type=1326 audit(1757809799.341:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  306.988913][   T30] audit: type=1326 audit(1757809799.371:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  307.052249][   T30] audit: type=1326 audit(1757809799.371:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  307.129963][   T30] audit: type=1326 audit(1757809799.371:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  307.131059][ T9069] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  307.177566][ T9067] IPVS: stopping master sync thread 9069 ...
[  307.223167][   T30] audit: type=1326 audit(1757809799.371:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd378eba9 code=0x7ffc0000
[  307.898316][ T9077] syz.1.1067 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  308.889608][ T9082] loop5: detected capacity change from 0 to 8192
[  309.538810][ T9103] netlink: 'syz.6.1083': attribute type 4 has an invalid length.
[  309.546716][ T9103] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1083'.
[  310.688637][ T9109] support for cryptoloop has been removed.  Use dm-crypt instead.
[  312.058066][   T30] kauditd_printk_skb: 52 callbacks suppressed
[  312.058091][   T30] audit: type=1326 audit(1757809805.001:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  312.708560][   T30] audit: type=1326 audit(1757809805.001:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  312.742356][   T30] audit: type=1326 audit(1757809805.001:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  312.773347][   T30] audit: type=1326 audit(1757809805.001:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  312.804154][   T30] audit: type=1326 audit(1757809805.001:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  312.828977][   T30] audit: type=1326 audit(1757809805.001:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  312.854626][   T30] audit: type=1326 audit(1757809805.001:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  312.882549][   T30] audit: type=1326 audit(1757809805.001:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  312.907223][   T30] audit: type=1326 audit(1757809805.001:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  312.939080][   T30] audit: type=1326 audit(1757809805.001:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd158eba9 code=0x7ffc0000
[  313.802481][ T9121] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  313.808753][ T9121] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  313.878260][ T9121] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  313.904246][ T9121] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  314.230809][ T9121] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  314.239112][ T9121] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  314.286946][ T9139] loop4: detected capacity change from 0 to 2048
[  314.296760][ T9121] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  314.332313][ T9121] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  314.356454][ T9139]  loop4: p1 < > p4
[  314.368649][ T9121] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  314.387174][ T9139] loop4: p4 size 8388608 extends beyond EOD, truncated
[  314.401760][ T9121] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  314.449126][ T9121] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  314.512570][ T9121] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  315.051467][ T9152] loop6: detected capacity change from 0 to 1024
[  315.135247][ T9151] loop4: detected capacity change from 0 to 8192
[  315.154535][ T9152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.347720][ T9164] loop5: detected capacity change from 0 to 512
[  315.364902][ T9164] EXT4-fs (loop5): orphan cleanup on readonly fs
[  316.222668][ T5882] Bluetooth: hci0: command 0x0406 tx timeout
[  316.228969][ T5882] Bluetooth: hci4: command 0x0406 tx timeout
[  316.287939][ T9164] EXT4-fs warning (device loop5): ext4_xattr_inode_get:555: inode #11: comm syz.5.1103: EA inode hash validation failed
[  316.310915][ T5874] Bluetooth: hci2: command 0x0401 tx timeout
[  316.317224][ T5874] Bluetooth: hci1: command 0x0406 tx timeout
[  316.364224][ T9164] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  316.391519][ T5874] Bluetooth: hci6: command 0x0406 tx timeout
[  316.448584][ T9164] ------------[ cut here ]------------
[  316.455479][ T9164] EA inode 11 ref_count=-1
[  316.469668][ T9172] loop7: detected capacity change from 0 to 512
[  316.484518][ T5874] Bluetooth: hci3: command 0x0406 tx timeout
[  316.502804][ T9164] WARNING: CPU: 0 PID: 9164 at fs/ext4/xattr.c:1047 ext4_xattr_inode_update_ref+0x3d4/0x570
[  316.513063][ T9164] Modules linked in:
[  316.517275][ T9164] CPU: 0 UID: 0 PID: 9164 Comm: syz.5.1103 Not tainted syzkaller #0 PREEMPT(full) 
[  316.527303][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  316.537413][ T9164] RIP: 0010:ext4_xattr_inode_update_ref+0x3d4/0x570
[  316.544252][ T9164] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 9b 01 00 00 48 8b 73 40 4c 89 e2 48 c7 c7 a0 02 c8 8b e8 bd 77 f0 fe 90 <0f> 0b 90 90 e9 4d fe ff ff e8 de d3 31 ff 44 0f b6 3d 7e 34 0a 0e
[  316.564795][ T9164] RSP: 0018:ffffc90012d37430 EFLAGS: 00010282
[  316.571556][ T9164] RAX: 0000000000000000 RBX: ffff888057a4a8d8 RCX: ffffc9000c36d000
[  316.579542][ T9164] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001
[  316.587567][ T9164] RBP: ffffc90012d374f0 R08: 0000000000000001 R09: 0000000000000000
[  316.595907][ T9164] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffffffffffff
[  316.604013][ T9164] R13: 1ffff920025a6e89 R14: ffff888057a4a9b0 R15: 0000000000000000
[  316.612048][ T9164] FS:  00007febd19f66c0(0000) GS:ffff8881246b4000(0000) knlGS:0000000000000000
[  316.621040][ T9164] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  316.627637][ T9164] CR2: 00007f6cfce3f000 CR3: 000000007c23f000 CR4: 0000000000350ef0
[  316.635750][ T9164] Call Trace:
[  316.639050][ T9164]  <TASK>
[  316.642082][ T9164]  ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[  316.648481][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.654210][ T9164]  ? __ext4_journal_ensure_credits+0x25e/0x2f0
[  316.661151][ T9164]  ext4_xattr_inode_dec_ref_all+0x52a/0xed0
[  316.667101][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.673335][ T9164]  ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10
[  316.679811][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.685523][ T9164]  ? errseq_check+0x4f/0x90
[  316.690059][ T9164]  ext4_xattr_delete_inode+0x4ee/0xb80
[  316.695602][ T9164]  ? rcu_is_watching+0x12/0xc0
[  316.700441][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.706104][ T9164]  ? __pfx_ext4_xattr_delete_inode+0x10/0x10
[  316.712174][ T9164]  ? ext4_journal_check_start+0x22b/0x340
[  316.717927][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.723687][ T9164]  ? __ext4_journal_start_sb+0x19e/0x690
[  316.729359][ T9164]  ? ext4_evict_inode+0x5cf/0x18e0
[  316.734552][ T9164]  ext4_evict_inode+0x7d6/0x18e0
[  316.739539][ T9164]  ? __pfx_ext4_evict_inode+0x10/0x10
[  316.745187][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.746027][ T9172] EXT4-fs: Ignoring removed mblk_io_submit option
[  316.750938][ T9164]  ? __pfx_ext4_evict_inode+0x10/0x10
[  316.763596][ T9164]  evict+0x3e6/0x920
[  316.767546][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.773816][ T9164]  ? __pfx_evict+0x10/0x10
[  316.778277][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.784008][ T9164]  iput+0x521/0x880
[  316.787855][ T9164]  ? __pfx_ext4_drop_inode+0x10/0x10
[  316.793208][ T9164]  ext4_orphan_cleanup+0x731/0x11e0
[  316.798543][ T9164]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  316.804614][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.810279][ T9164]  ? ext4_register_li_request+0xec/0x9b0
[  316.816419][ T9164]  ext4_fill_super+0x8a38/0xafa0
[  316.821866][ T9164]  ? __pfx_ext4_fill_super+0x10/0x10
[  316.827193][ T9164]  ? do_raw_spin_lock+0x12c/0x2b0
[  316.832667][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.836021][ T9172] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  316.838327][ T9164]  ? find_held_lock+0x2b/0x80
[  316.838378][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.859181][ T9164]  ? set_blocksize+0x406/0x500
[  316.864855][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.871206][ T9164]  ? sb_set_blocksize+0x176/0x1d0
[  316.876271][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.881998][ T9164]  ? setup_bdev_super+0x369/0x730
[  316.887073][ T9164]  get_tree_bdev_flags+0x38c/0x620
[  316.892305][ T9164]  ? __pfx_ext4_fill_super+0x10/0x10
[  316.897636][ T9164]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  316.903347][ T9164]  ? apparmor_capable+0x114/0x1d0
[  316.908401][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.914184][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.919847][ T9164]  ? security_capable+0x7e/0x260
[  316.924911][ T9164]  vfs_get_tree+0x8e/0x340
[  316.929367][ T9164]  path_mount+0x1513/0x2000
[  316.933949][ T9164]  ? __pfx_path_mount+0x10/0x10
[  316.938831][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.944547][ T9164]  ? kmem_cache_free+0x2d1/0x4d0
[  316.949524][ T9164]  ? putname+0x154/0x1a0
[  316.953843][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.959599][ T9164]  ? putname+0x154/0x1a0
[  316.964627][ T9164]  ? __x64_sys_mount+0x28d/0x310
[  316.969593][ T9164]  __x64_sys_mount+0x28d/0x310
[  316.975011][ T9164]  ? __pfx___x64_sys_mount+0x10/0x10
[  316.980382][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.986071][ T9164]  do_syscall_64+0xcd/0x4e0
[  316.990657][ T9164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.996569][ T9164] RIP: 0033:0x7febd379034a
[  317.001034][ T9164] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.020884][ T9164] RSP: 002b:00007febd19f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  317.029331][ T9164] RAX: ffffffffffffffda RBX: 00007febd19f5ef0 RCX: 00007febd379034a
[  317.037414][ T9164] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007febd19f5eb0
[  317.045465][ T9164] RBP: 0000200000000180 R08: 00007febd19f5ef0 R09: 000000000080078b
[  317.053499][ T9164] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0
[  317.061536][ T9164] R13: 00007febd19f5eb0 R14: 0000000000000473 R15: 0000200000000680
[  317.070214][ T9164]  </TASK>
[  317.073847][ T9164] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  317.081145][ T9164] CPU: 0 UID: 0 PID: 9164 Comm: syz.5.1103 Not tainted syzkaller #0 PREEMPT(full) 
[  317.090449][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  317.100609][ T9164] Call Trace:
[  317.103888][ T9164]  <TASK>
[  317.106824][ T9164]  dump_stack_lvl+0x3d/0x1f0
[  317.111469][ T9164]  vpanic+0x6e8/0x7a0
[  317.115506][ T9164]  ? __pfx_vpanic+0x10/0x10
[  317.120495][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.126270][ T9164]  ? ext4_xattr_inode_update_ref+0x3d4/0x570
[  317.132318][ T9164]  panic+0xca/0xd0
[  317.136106][ T9164]  ? __pfx_panic+0x10/0x10
[  317.140602][ T9164]  check_panic_on_warn+0xab/0xb0
[  317.145561][ T9164]  __warn+0xf6/0x3c0
[  317.149470][ T9164]  ? preempt_schedule_notrace+0x62/0xe0
[  317.155053][ T9164]  ? ext4_xattr_inode_update_ref+0x3d4/0x570
[  317.161072][ T9164]  report_bug+0x3c3/0x580
[  317.165431][ T9164]  ? ext4_xattr_inode_update_ref+0x3d4/0x570
[  317.171455][ T9164]  handle_bug+0x184/0x210
[  317.175809][ T9164]  exc_invalid_op+0x17/0x50
[  317.180333][ T9164]  asm_exc_invalid_op+0x1a/0x20
[  317.185208][ T9164] RIP: 0010:ext4_xattr_inode_update_ref+0x3d4/0x570
[  317.191844][ T9164] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 9b 01 00 00 48 8b 73 40 4c 89 e2 48 c7 c7 a0 02 c8 8b e8 bd 77 f0 fe 90 <0f> 0b 90 90 e9 4d fe ff ff e8 de d3 31 ff 44 0f b6 3d 7e 34 0a 0e
[  317.211574][ T9164] RSP: 0018:ffffc90012d37430 EFLAGS: 00010282
[  317.217664][ T9164] RAX: 0000000000000000 RBX: ffff888057a4a8d8 RCX: ffffc9000c36d000
[  317.225657][ T9164] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001
[  317.233739][ T9164] RBP: ffffc90012d374f0 R08: 0000000000000001 R09: 0000000000000000
[  317.241827][ T9164] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffffffffffff
[  317.249906][ T9164] R13: 1ffff920025a6e89 R14: ffff888057a4a9b0 R15: 0000000000000000
[  317.257919][ T9164]  ? __warn_printk+0x1a5/0x350
[  317.262744][ T9164]  ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[  317.269132][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.274934][ T9164]  ? __ext4_journal_ensure_credits+0x25e/0x2f0
[  317.281144][ T9164]  ext4_xattr_inode_dec_ref_all+0x52a/0xed0
[  317.287104][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.292883][ T9164]  ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10
[  317.299389][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.305049][ T9164]  ? errseq_check+0x4f/0x90
[  317.309579][ T9164]  ext4_xattr_delete_inode+0x4ee/0xb80
[  317.315061][ T9164]  ? rcu_is_watching+0x12/0xc0
[  317.319850][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.325508][ T9164]  ? __pfx_ext4_xattr_delete_inode+0x10/0x10
[  317.331505][ T9164]  ? ext4_journal_check_start+0x22b/0x340
[  317.337329][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.342976][ T9164]  ? __ext4_journal_start_sb+0x19e/0x690
[  317.348619][ T9164]  ? ext4_evict_inode+0x5cf/0x18e0
[  317.353756][ T9164]  ext4_evict_inode+0x7d6/0x18e0
[  317.358721][ T9164]  ? __pfx_ext4_evict_inode+0x10/0x10
[  317.364115][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.369770][ T9164]  ? __pfx_ext4_evict_inode+0x10/0x10
[  317.375165][ T9164]  evict+0x3e6/0x920
[  317.379078][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.384914][ T9164]  ? __pfx_evict+0x10/0x10
[  317.389355][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.395013][ T9164]  iput+0x521/0x880
[  317.398856][ T9164]  ? __pfx_ext4_drop_inode+0x10/0x10
[  317.404158][ T9164]  ext4_orphan_cleanup+0x731/0x11e0
[  317.409479][ T9164]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  317.415132][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.421214][ T9164]  ? ext4_register_li_request+0xec/0x9b0
[  317.426876][ T9164]  ext4_fill_super+0x8a38/0xafa0
[  317.431871][ T9164]  ? __pfx_ext4_fill_super+0x10/0x10
[  317.437180][ T9164]  ? do_raw_spin_lock+0x12c/0x2b0
[  317.442211][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.447857][ T9164]  ? find_held_lock+0x2b/0x80
[  317.452602][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.458248][ T9164]  ? set_blocksize+0x406/0x500
[  317.463029][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.468671][ T9164]  ? sb_set_blocksize+0x176/0x1d0
[  317.473710][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.479354][ T9164]  ? setup_bdev_super+0x369/0x730
[  317.484407][ T9164]  get_tree_bdev_flags+0x38c/0x620
[  317.489543][ T9164]  ? __pfx_ext4_fill_super+0x10/0x10
[  317.494851][ T9164]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  317.500522][ T9164]  ? apparmor_capable+0x114/0x1d0
[  317.505556][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.511201][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.516846][ T9164]  ? security_capable+0x7e/0x260
[  317.521799][ T9164]  vfs_get_tree+0x8e/0x340
[  317.526233][ T9164]  path_mount+0x1513/0x2000
[  317.530757][ T9164]  ? __pfx_path_mount+0x10/0x10
[  317.535622][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.541266][ T9164]  ? kmem_cache_free+0x2d1/0x4d0
[  317.546226][ T9164]  ? putname+0x154/0x1a0
[  317.550485][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.556134][ T9164]  ? putname+0x154/0x1a0
[  317.560392][ T9164]  ? __x64_sys_mount+0x28d/0x310
[  317.565336][ T9164]  __x64_sys_mount+0x28d/0x310
[  317.570115][ T9164]  ? __pfx___x64_sys_mount+0x10/0x10
[  317.575409][ T9164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.581076][ T9164]  do_syscall_64+0xcd/0x4e0
[  317.585616][ T9164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.591516][ T9164] RIP: 0033:0x7febd379034a
[  317.595932][ T9164] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.615549][ T9164] RSP: 002b:00007febd19f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  317.624497][ T9164] RAX: ffffffffffffffda RBX: 00007febd19f5ef0 RCX: 00007febd379034a
[  317.632473][ T9164] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007febd19f5eb0
[  317.640448][ T9164] RBP: 0000200000000180 R08: 00007febd19f5ef0 R09: 000000000080078b
[  317.648425][ T9164] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0
[  317.656400][ T9164] R13: 00007febd19f5eb0 R14: 0000000000000473 R15: 0000200000000680
[  317.664486][ T9164]  </TASK>
[  317.667735][ T9164] Kernel Offset: disabled
[  317.672052][ T9164] Rebooting in 86400 seconds..