last executing test programs:

1m50.23588011s ago: executing program 1 (id=53):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001200230b00000000000000c55fc112aaa568b9abcf00d45f8d5916c4e112b51e8ac00affc7b97846a71584493006db37efaaaf7c9d82b15975895917486de621f25aa6d10bc5b099380c29a81db2f79f035154bc77314fa017f81ad1653a2b018a6f7d0f9f27dfb980722286403943113216054408c0ef58462b1cabf59b1a878ca1d40b5d3ff39a26eb9f6fdfd5bed1ee45e0216875339befb2555ecdbd052b23b4edaea9f89eab329690a778a97e2fcd279233e43db2586057c0adda60bf67bacea890fb0e692816365fadf0ce592565280121cb241cd157ad60829ab598e0a1f3000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004001280"], 0x24}}, 0x0)
syz_open_dev$media(&(0x7f0000000340), 0x4, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf2501"], 0x114}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180))
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x21, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x103, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac02}, @typed={0x14, 0x20, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0x8f}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="3c0000101800dd8d0000000000000000020000000000ff060000000008001e000500000018001680e56b2d9b195342c2e02330ac9bf4140001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = semget$private(0x0, 0x6, 0x0)
semtimedop(r5, &(0x7f0000000100)=[{0x1, 0x1f}, {0x0, 0x0, 0x1000}], 0x2, &(0x7f0000000140)={0x77359400})
sendto$inet6(r4, &(0x7f0000000000)="fbbdbd1cf847f26b380a047325f9c81b4cfa685dd27b02da9b18419c58f5d83ebb8c5ce78772db52db15bd41ca0d1e09e83a78a608d0f47e2e4f9793b43522bf53104576b1b3ad090a458d5fab0227b4778cd33bbf16a744730fd19524179f13a5c9839489d9b7f155faeb36e5a14426b36eb457eadeebbfdff2d420160458a62ff30581d4b43718c2185be92ca77da1183fb16c547aad8b75c6c00bca4485688d94567437ee34b0040faf16ebbad4a7e2949c305a3c834373c9a2fb7738e0264c6d1ba03e1356b631048d4b2cd7baada15f0d081140ba8e82ffa22bf0198c471fd4e24e9d42d0845c99", 0xea, 0x4000000, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @loopback, 0xa13b}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001200230b00000000000000c55fc112aaa568b9abcf00d45f8d5916c4e112b51e8ac00affc7b97846a71584493006db37efaaaf7c9d82b15975895917486de621f25aa6d10bc5b099380c29a81db2f79f035154bc77314fa017f81ad1653a2b018a6f7d0f9f27dfb980722286403943113216054408c0ef58462b1cabf59b1a878ca1d40b5d3ff39a26eb9f6fdfd5bed1ee45e0216875339befb2555ecdbd052b23b4edaea9f89eab329690a778a97e2fcd279233e43db2586057c0adda60bf67bacea890fb0e692816365fadf0ce592565280121cb241cd157ad60829ab598e0a1f3000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004001280"], 0x24}}, 0x0) (async)
syz_open_dev$media(&(0x7f0000000340), 0x4, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf2501"], 0x114}], 0x1}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x21, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x103, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac02}, @typed={0x14, 0x20, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0x8f}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="3c0000101800dd8d0000000000000000020000000000ff060000000008001e000500000018001680e56b2d9b195342c2e02330ac9bf4140001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
semget$private(0x0, 0x6, 0x0) (async)
semtimedop(r5, &(0x7f0000000100)=[{0x1, 0x1f}, {0x0, 0x0, 0x1000}], 0x2, &(0x7f0000000140)={0x77359400}) (async)
sendto$inet6(r4, &(0x7f0000000000)="fbbdbd1cf847f26b380a047325f9c81b4cfa685dd27b02da9b18419c58f5d83ebb8c5ce78772db52db15bd41ca0d1e09e83a78a608d0f47e2e4f9793b43522bf53104576b1b3ad090a458d5fab0227b4778cd33bbf16a744730fd19524179f13a5c9839489d9b7f155faeb36e5a14426b36eb457eadeebbfdff2d420160458a62ff30581d4b43718c2185be92ca77da1183fb16c547aad8b75c6c00bca4485688d94567437ee34b0040faf16ebbad4a7e2949c305a3c834373c9a2fb7738e0264c6d1ba03e1356b631048d4b2cd7baada15f0d081140ba8e82ffa22bf0198c471fd4e24e9d42d0845c99", 0xea, 0x4000000, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @loopback, 0xa13b}, 0x1c) (async)

1m50.153276264s ago: executing program 1 (id=55):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x6, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x1, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0xf3d0, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x2, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x4}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0xc890, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x7, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x7}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15e9, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x5}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x57, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x5, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0x9}, {0x41e2e2f, 0x6, 0x6, 0x2, 0xfffffffc, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x1ff, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x80000000, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x7fffffff, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xeffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x6, 0x43, 0x4, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3, 0x1}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x6, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x1, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0xf3d0, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x2, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x4}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0xc890, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x7, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x7}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15e9, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x5}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x57, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x5, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0x9}, {0x41e2e2f, 0x6, 0x6, 0x2, 0xfffffffc, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x1ff, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x80000000, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x7fffffff, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xeffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x6, 0x43, 0x4, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3, 0x1}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, <r0=>0xffffffffffffffff})
sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

1m50.152716854s ago: executing program 1 (id=56):
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201)
ioctl$I2C_RETRIES(r0, 0x701, 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1b, 0x0, 0xffffffffffffffff, 0xd}, 0x48)

1m50.115794952s ago: executing program 1 (id=58):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0xed8}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@data_err_ignore}, {@noload}, {@nobh}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x81)

1m49.994952979s ago: executing program 1 (id=61):
r0 = syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$eJzs3U9qU0EcB/Bf0rSJ3SSgK+nigRs3hqY3CFJBDAiRLOoqwbYgTSikENCF7c67uPIO3sBjeAGzKETSF03SxuK/+jT5fCDMD+Z9YSaLzCxm8tpbvaP945PDvdufolRKohBx9v48IiIfa5F68CFt1yMiFxsx6ywAgP9Ns9mpZz0Gbla/X++M927FKz2td5kMCAAAAAAAAAAAgN/W3ipeOf8fw4jKzPn/3KTNO/8PAEvB+f/l1+/XO5uT/ds85/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7AxHo/Lomk/W4wMA/jzrPwCsHus/AKye4dxanwvrPwAsv2d7z5/UG43dZpKUInpvB61BK23T/vphvIxuHMR2lOM8xvuDibR+9Lixu51cqES7dzrJnw5aa/P5WpSjsjhfS/PJfH49NmfzO1GOO4vzOwvzG3H/XkT+60SrUY6PL+I4urEf4+w0/6aWJA+fNi7lixfPAQAAAAAAAAAAAAAAAAAAwN9QTb5ZeH+/Wv1ef5r/if8HuHS/vhB3C9nOHQAAAAAAAAAAAAAAAAAAAP4VJ69eH3W63YP+wuLz5C7/dc8opsWtH/pWf60oRETmE1SsTJHxDxMAAAAAAAAAAAAAAAAAAKyg6aXfrEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANmZvv//5oqs5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACshi8BAAD//2dk6nI=")
r1 = openat(r0, &(0x7f0000000040)='.\x00', 0x202, 0x0)
open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000000100000002"], 0x0) (async)
open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000000100000002"], 0x0)

1m48.71196106s ago: executing program 1 (id=83):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
syz_open_procfs$userns(0x0, &(0x7f0000000180))
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
syz_emit_ethernet(0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffff6761ffffffffffff86dd6a0ede4800042f01fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c206558000a000241056d1174abb3258848"], 0x0)

1m48.662162325s ago: executing program 32 (id=83):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
syz_open_procfs$userns(0x0, &(0x7f0000000180))
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
syz_emit_ethernet(0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffff6761ffffffffffff86dd6a0ede4800042f01fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c206558000a000241056d1174abb3258848"], 0x0)

1m34.791759118s ago: executing program 4 (id=275):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000001) (async)
setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r7 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f00000031c0), 0x2, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x0, [{}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x10000}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x0, 0x0, 0x5}}) (async)
write$smackfs_label(r7, 0x0, 0x2) (async)
syz_usbip_server_init(0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x40441, 0x0) (async)
socket$rds(0x15, 0x5, 0x0) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
syz_io_uring_setup(0x795e, &(0x7f0000000300)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0, &(0x7f00000000c0)=<r11=>0x0)
syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})

1m34.661623945s ago: executing program 4 (id=278):
r0 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
recvmmsg(r0, &(0x7f0000005c40)=[{{&(0x7f0000000000)=@can={0x1d, <r1=>0x0}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/226, 0xe2}, {&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000240)=""/194, 0xc2}], 0x3, &(0x7f0000000380)=""/33, 0x21}, 0x7}, {{&(0x7f00000003c0)=@sco={0x1f, @none}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/91, 0x5b}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/118, 0x76}, {&(0x7f0000002600)=""/147, 0x93}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/242, 0xf2}], 0x8, &(0x7f0000003840)=""/211, 0xd3}, 0x40}, {{&(0x7f0000003940)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000004bc0)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000049c0)=""/187, 0xbb}, {&(0x7f0000004a80)=""/20, 0x14}, {&(0x7f0000004ac0)=""/65, 0x41}, {&(0x7f0000004b40)=""/85, 0x55}], 0x5, &(0x7f0000004c40)=""/209, 0xd1}, 0x3}, {{&(0x7f0000004d40)=@isdn, 0x80, &(0x7f0000005080)=[{&(0x7f0000004dc0)=""/159, 0x9f}, {&(0x7f0000004e80)=""/217, 0xd9}, {&(0x7f0000004f80)=""/249, 0xf9}], 0x3, &(0x7f00000050c0)=""/222, 0xde}, 0x2c0}, {{&(0x7f00000051c0)=@tipc=@name, 0x80, &(0x7f0000005500)=[{&(0x7f0000005240)=""/218, 0xda}, {&(0x7f0000005340)=""/217, 0xd9}, {&(0x7f0000005440)=""/82, 0x52}, {&(0x7f00000054c0)=""/57, 0x39}], 0x4, &(0x7f0000005540)=""/233, 0xe9}, 0x1}, {{&(0x7f0000005640)=@generic, 0x80, &(0x7f0000005700)=[{&(0x7f00000056c0)=""/39, 0x27}], 0x1, &(0x7f0000005740)=""/250, 0xfa}, 0x2}, {{&(0x7f0000005840)=@nfc_llcp, 0x80, &(0x7f0000005c00)=[{&(0x7f00000058c0)=""/98, 0x62}, {&(0x7f0000005940)=""/153, 0x99}, {&(0x7f0000005a00)=""/228, 0xe4}, {&(0x7f0000005b00)=""/235, 0xeb}], 0x4}, 0xf9}], 0x7, 0x12022, 0x0)
connect(r0, &(0x7f0000005e00)=@xdp={0x2c, 0x0, r1, 0x35}, 0x80)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000005ec0)={0x3, 0x18, [0xabaa, 0x8, 0x1, 0x6], &(0x7f0000005e80)=[0x0, 0x0, 0x0]})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000005f00))
ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000006040)={0x1f, &(0x7f0000005f40)=[{0x17, '\x00', @data=0x2, 0xfffffff8}, {0x37, '\x00', @st={0x4, [{0x2, @svalue}, {0x1, @uvalue=0x2}, {0x1, @svalue=0x3}, {0x3, @uvalue=0x100000001}]}, 0x2}, {0x1f, '\x00', @buffer={"a4f5d3068f78ce58e8dd1d105f2571aff5b67a61806eec961ac124309619d2df", 0x20}, 0x10}]})
r5 = socket$inet_sctp(0x2, 0x69025044a6228d02, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000006080)={<r6=>0x0, @in6={{0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x8}, 0x9}}, 0x3, 0x9}, &(0x7f0000006140)=0x90)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000006180)={r6, 0x400, 0x8}, 0x8)
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000062c0)={<r7=>r4, &(0x7f00000061c0)='\\.^\x00', 0x200, &(0x7f0000006200)={@align, {0x6, 0xc, 0x80000000}}, 0x8f000000, &(0x7f0000006240), &(0x7f0000006280)=0x6})
ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000006300)={0x30, 0x8})
fcntl$setsig(r3, 0xa, 0x40)
lremovexattr(&(0x7f0000006340)='./file0\x00', &(0x7f0000006380)=@known='user.syz\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000063c0))
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000006400)=""/36, &(0x7f0000006440)=0x24)
r8 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r8, 0x8982, &(0x7f0000006480))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000064c0)={{0x1, 0x1, 0x18, <r9=>r3, {0xffffffffffffffff}}, './file0\x00'})
write$smackfs_cipsonum(r9, &(0x7f0000006500)=0x8, 0x14)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000006540)={<r10=>r6, 0x54, "1cbffdd336b6b4efd75061fc5354c1cf053f8cc7c0987e23507e8cfdc94c2d15c7c8aef4a8d8bebb2b95f1b41a311ad1d88269ac953d87c68d7fe014fadc681274ed6d307695364ecd413229c7cffb80d6e36aef"}, &(0x7f00000065c0)=0x5c)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006640), r7)
sendmsg$NL80211_CMD_SET_PMK(r9, &(0x7f0000006780)={&(0x7f0000006600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006740)={&(0x7f0000006680)={0x98, r11, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f3bbbdfafb8a977f027006ae54c6d2bf"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cae3e103d62353c1697ac8040c40cc4b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "3d70ca0ca889059dc7914fd74bdb2656"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "43480f414b6ecb8b030eb3c28482cc4a"}, @NL80211_ATTR_PMK={0x14, 0xfe, "308e0b2ffb7be867c0a6c1faa99f55e9"}, @NL80211_ATTR_PMK={0x14, 0xfe, "07105fcdbdd2a031eb81208263a9f0af"}]}, 0x98}}, 0x20000000)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f00000067c0)={0x76, 0x8001, 0x8, 0x7, r10}, 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000006800)={r6, 0x7, 0x6}, 0x8)
ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000006840))
mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x1000009, 0x100010, 0xffffffffffffffff, 0x0)

1m33.309846425s ago: executing program 4 (id=289):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@test_dummy_encryption}, {@debug}, {@minixdf}, {@jqfmt_vfsv1}, {@prjquota}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xe2, 0x47c, &(0x7f0000000cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x200, 0x200, 0xffffffc0, 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)

1m33.00397672s ago: executing program 4 (id=291):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000580)=0x2, 0x4)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x91ba9e79e7b92055, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r5, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609)
getrlimit(0x8, &(0x7f00000001c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r6 = openat$smackfs_revoke_subject(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$smackfs_label(r6, 0x0, 0x2)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000940)}, 0x20)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$getregset(0x4204, r7, 0x40d, &(0x7f0000000000)={0x0})
syz_usbip_server_init(0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004900)={0xffffffffffffffff, 0x0, 0x980, 0xa1, &(0x7f00000037c0)="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", &(0x7f00000047c0)=""/161, 0x0, 0x0, 0x1f, 0x35, &(0x7f0000004880)="e4f1c7b40e80d3df0ae5d6a958903eeb4ed1608156f695388dd43c52ac3c5c", &(0x7f00000048c0)="fe88e69b82ac7f227d09c54a30e9e2413305b58d104bab178bba3ea683687de49232e9172152d7ec5d80b5cc34629da382510e8ed1", 0x0, 0x0, 0x5}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000380)="c643fab226864ff7d34d841bd106", 0x0, 0x502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
openat(0xffffffffffffff9c, 0x0, 0x490042, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)

1m31.11459531s ago: executing program 4 (id=306):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x800480, &(0x7f0000000240), 0x1, 0x786, &(0x7f0000000f80)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x4c, 0x1, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x29, 0x6, "2bd4edd8f07143009187de57cd25f0ae369d138de171ad6ffa39be2a57fe594ae1760dca58"}]}, 0x4c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0xa0, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x26, 0x6, "8c303a1b6ee3ae4e36ff7d2daa5c2fdd4e33e9919b8b32c6d696652bc00ce41a0589"}, @NFTA_TABLE_USERDATA={0x5c, 0x6, "eb04b395a4b4454ba700131ac46649d81f7dc5ff5cbf06771db8f2f23e0084d9dcc69ab3bc372d753ed8ff4d39b3284a25b928aa073bf22721034607d33026bef5a8f4c8e9dcdfd0c27e518aa945eb68d2b74be4e6fe54f2"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x20}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pipe2(&(0x7f0000000000), 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe09c, 0x0, 0x1, 0x99}, 0x0, 0x0, &(0x7f0000000000))
socket$kcm(0x11, 0x3, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x1c6, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r3], 0x24}}, 0x4000000)
syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0/file2\x00', 0x40, 0x0, 0x0, 0x0, 0x0)

1m30.503809454s ago: executing program 4 (id=317):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x60000000, 0xfffffd41, 0x0, 0x0, 0x0, 0x4}, 0x50)
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x6d5, 0x4)
recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000019000000731103000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m30.33393953s ago: executing program 33 (id=317):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x60000000, 0xfffffd41, 0x0, 0x0, 0x0, 0x4}, 0x50)
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x6d5, 0x4)
recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000019000000731103000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.413766651s ago: executing program 0 (id=1532):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x7b36, 0x4)
sendto$inet6(r6, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/38, 0x26}, 0x3}], 0x2, 0x22021, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x2000000}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc})
writev(r3, &(0x7f0000002a00)=[{&(0x7f0000001880)="fd", 0x1}], 0x1)

3.552608178s ago: executing program 0 (id=1536):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

3.518879807s ago: executing program 0 (id=1538):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2008052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@errors_remount}, {@resuid}]}, 0x3, 0x4dc, &(0x7f0000000c40)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00')
readv(r1, &(0x7f0000000880)=[{&(0x7f00000000c0)=""/168, 0xa8}], 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
lseek(r1, 0x2, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000001880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x8, 0x1, 0x0, 0xf, 0x2, [{0x5, 0xc9f, 0x3}], 'Iw'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1760"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x4a, 0x0, 0x1, 0x3e}, 0x28)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0xc8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xf809, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20)
getdents64(r3, &(0x7f0000000340)=""/69, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
listen(r8, 0x0)

3.392947379s ago: executing program 2 (id=1541):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv-cbc-aes-sha256-neon\x00'}, 0x58)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x20000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553f6c94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0), 0xfec8)
recvmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/190, 0xbe}, {&(0x7f0000000400)=""/145, 0x91}], 0x2}, 0x9}], 0x1, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6)
r4 = openat(r3, &(0x7f0000000380)='.\x00', 0x0, 0x101)
getdents64(r4, &(0x7f0000000140)=""/46, 0x2e)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="971c20455d9b551642df133845be8cb963eed04d68ce1f44bd273e59854df5cc3dfa450d0bb1d9a0af913bbea9dc", @ANYRES8=r1, @ANYRESDEC=r5], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
getdents64(r4, 0xfffffffffffffffe, 0x29)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7)
sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xb94cdd2ff5e95883}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400e5a5e54dcc93450000", @ANYRES16=r8, @ANYBLOB="200029bd7000fddbdf255e000000050019010d00000008009f0004000000"], 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x840)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ff9, 0x0, 0x0, 0x6, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}})
write$yama_ptrace_scope(r7, &(0x7f0000000040)='3\x00', 0x2)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffc, 0x0, 0x0, 0x1c, 0x18, "43443af4ff8c8ad271d16eb2123b3b1bd68150cf090004a3a3026f60c75585bee41b9ac4620700000022c014cc874a103a4a7408000000009dd38cb4a000", "e2e6b11135c1ce32ffcca6b388251926088888aad5f38476d748212e81691cfcdaf180c177dd28f6fa00006ca0981b01ab00", "f9285f39feffbcfdb3eaebf6b08cf712fe7f00", [0x200000000000000d, 0x8000000d]})
ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @initdev}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a03090000000000000000070000000900010073797a30000000001c000000090a010400000000000000000a000000080001"], 0x64}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844)
r9 = socket$phonet(0x23, 0x2, 0x1)
recvfrom$phonet(r9, &(0x7f0000000200)=""/76, 0x4c, 0x40, &(0x7f0000000340)={0x23, 0xfb, 0x2, 0xcb}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)

3.362884846s ago: executing program 5 (id=1542):
socket$igmp(0x2, 0x3, 0x2) (async)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async)
r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0) (async)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800000, &(0x7f0000000380), 0x1, 0x4b7, &(0x7f0000000540)="$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") (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2, 0x10, r1, 0x1ae79000)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async)
r5 = socket$kcm(0x10, 0x2, 0x4) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x2, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e272f750375ed08a56331dbf9ed7a15e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800020004000000bdad446b9bbc7ace5b0dd385dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

3.297917022s ago: executing program 5 (id=1543):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") (async)
socket$key(0xf, 0x3, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
unshare(0x28000600)
syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
wait4(0x0, 0x0, 0x40000000, 0x0) (async)
read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0xeffd)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.stat\x00', 0x275a, 0x0)
userfaultfd(0x0) (async)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]})

3.270531549s ago: executing program 2 (id=1544):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0x1, 0x548, &(0x7f0000000480)="$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") (async)
r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="6505b17207198b99dbe76f20bde81cea0285cc507d9bf6d964d66e639ee02b4ee85112d44ebccf665fa69076e2ae0fa8c516ef17a0544d69103865a6fd95bb7fa430712e346d226eea7a34f1bd663cea91455c447910030f2885fe9db24425a75f602d0770c28e978fb743a0378cfc23f887422a1fe1eac141a2e9d5a9cfef6cbcf811a0d8e6130cd2af52be678f19a71a6d4fe07872b1fa6ed0", 0x9a, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x1c100610) (async)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r0, r0}, &(0x7f0000000240)=""/57, 0x39, &(0x7f0000000300)={&(0x7f0000000280)={'sha256-asm\x00'}, &(0x7f00000002c0)="3b952a3d64e54ee3e38fccb967564fb00dbf1e96dd9f8b2ace2c82ce2f3512cfb039601747c388aa69067b69b926", 0x2e})
setxattr$trusted_overlay_opaque(&(0x7f0000002000)='./file1\x00', &(0x7f0000004080), 0x0, 0x0, 0x1)

3.143320391s ago: executing program 2 (id=1545):
bind$rds(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$video4linux(0x0, 0x401, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10)
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000000c0)={0x60, 0x2, &(0x7f000041d000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x9, &(0x7f0000000040)=[{0x7fffffffffffffff, 0xff, 0x1ff}, {0x8000000000, 0xea, 0x6}, {0x4b002bdc, 0x7, 0x9}, {0x7, 0x2, 0x2}, {0x9e53, 0x14e70183, 0xe1}], 0x5, 0x3ff, 0x46, 0x2, 0x0, 0x16})
mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil)
madvise(&(0x7f0000289000/0x4000)=nil, 0x4000, 0x64)
io_uring_setup(0x6c5b, 0x0)
preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000240)=""/179, 0xb3}], 0x1, 0x3, 0x100)

3.085905373s ago: executing program 5 (id=1546):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x10, &(0x7f0000000580), 0x41, 0x4e8, &(0x7f00000005c0)="$eJzs3U9oVNsZAPDvTv5YY2LSUrHVFgItVrGdmESjQilmVRAtbS100T8Sk5iISSaYCagUahCLFCpddGFx1Y1ddBO6K9IiFB681Vu4eG8hCm/1njyfPHkuXOVxJ3d0jGPyYmLuY/z94DL3nEnmfHc+7p1zhnPPBPDW6o6IIxHRFBHFiOjM6gvZFpcWt/TvTvXPj6dbEgsLJx4lkUTE0f758eprJdnjluwFvpU+XInY2/xyuzMXLp4dmpgYPZeVe8qT0z0zFy7+6Mzk0Njo2OjUwMGDhw8dGDhweP2OdfP26ze//fdjd669M/fdbVuGJ9N427Pnao9jvXRHd/aetERH7RNJxKn1bixnX8s7AFbtk8LOW3nHAABsvELW92+u9P87oykWO+v37/72cWf8sS3v+AAAAIC1W1hoyh4BAACAxpUY+wMAAECDq84DONo/P17dNmruwYOfblRLvMrDwYjoWsx/9f7uxWean93T2/KG7u/9w9OI7uh48tFPvvH/dIs3dB82X03zH+YdAXlq3Z93BORpxy/yjoA8vXc17wi4NBcRt4/U6f8na+7ztS8pJ0vKxwfT/t9fZmrr9P/eHr88kXcE5OlnA3lHQJ5uPMo7Am4PRsS+et//FSrr91Vtjoi26tp+6+RQe/r5/+/7tXUvf/4XHqxjkyzxcDDixzVrO56qyX+mqykrdVS+KmxJTp+ZGN0XEVsjYne0bErLvcu00Ttw46/16r/zJM3/P5Pq93/plrZf/S4wi+NB86YX/29kqDy01uNm0cO5iB3N9fL/vP+fZLl+Xf8tXftzvfqBPZV1RXctn3/epIV/ROyqe/4/H60ly67P2lO5HPRULwp1/OuDz67Uq//+79P8n90j//lJz/+25fNfuf4/W693ZvVtXP7fzSf16p/eSvP/t0uvc/1vTX5VCbA1qzs/VC6f641oTY69XN+3+pgbVfX9qL5faf53f6/+53+1/5dk60J3RcTXX6PNuXvTd+rVXy+k+b/xO+d/ftL8j6xw/icvnP+r35l//4c/qNf2zqtp/rt+vfL5v78SzO6sRv9vZV82QXnHCQAAAAAAAMD6KFTu00kKxWf7hUKxuDjP95vRVpgozZT3ni7NTo0s3s/TFS2F6lSvzpr5oL3Z/JBquW9JuT+bO3K1c3OlXBwuTYzkffAAAADQ4Noj7v3m8n+2b3nF+D91tzPvKAEAAIC1SMf/HffaKst5fW6cDwAAAA0pHf8//tOn74bxPwAAADSs2vE/AAAA0Nh+fvx4ui1Uf/dvqjR25uz49OG+fcXJ2eHicOncdHGsVBqrrNg3ufLrTZRK0719MXu+pzw6U+6ZuXDx5GRpdqp8svK7sSdHWzbgmICVFbd+vC3vGAAAgI2zlt/1t2PHTqPu5H1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLb4IAAD//wws/WY=") (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, r0, 0x1, 0x80000000, 0xff, 0x7ff})

3.085571115s ago: executing program 5 (id=1547):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0x2}, 0x1c)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x7b36, 0x4)
sendto$inet6(r6, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/38, 0x26}, 0x3}], 0x2, 0x22021, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x2000000}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc})
writev(r3, &(0x7f0000002a00)=[{&(0x7f0000001880)="fd", 0x1}], 0x1)

2.705725809s ago: executing program 2 (id=1549):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000ab4ef0000000000c00000048a22681c9f742c0f55f9e23c3f483620c000000020000000000000000040004000000"], 0x0, 0x26}, 0x28)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x7, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x7, 0x100, @void}}}}}}}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xb99, 0x8, {<r2=>0x0}, {0xffffffffffffffff}, 0xa31, 0xf})
timer_create(0x1, &(0x7f0000000180)={0x0, 0x3f, 0x2, @tid=r2}, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180002fff900000000000000000000009500ffe300000000e2641748978503772dc346151a15589d2355c6cab52ee199e1d70c0f8896d07219f733ae9eb2288576e71afe36b0e5adfad7f324b7ae64f51f2b839afdded083a3be65b9aebcf3610d4b4746587ee2d2b969305f569762db92bd6f04410b284a8938638a7be741dac20565ce10476684e81df4ce5bb1d99b7dc6a17d319c5c1e4de9aff63c739557420abe43573359e352d3a444f2962c15194915ec0128705921a34181ecb8fc5fda98cdca6e21a7a0e4bbeb3e55ed5f5b5657e15de42bdb3136e7daf57e334fb151acf7a47508ef3a3dc5b8a39a614759ca"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200)={0x0, 0x40}, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffff91}, 0x6d)

2.643755218s ago: executing program 2 (id=1551):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x10001, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x100}, {0x0, 0x8000000, 0xfffffffffffffffa, 0x2e21abae}, 0x200000, 0x2, 0x1, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffff89ffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000000000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000020004400050000000000000000000000000000000000000004d23c0000000a000000ff"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @dev, 0x4}, 0x80, 0x0}, 0xe07e872424db6f0e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x58, r5, 0xe8e69d8086e1c4d0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e5a4c446ce6c"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket(0x10, 0xa, 0x4)

2.643442688s ago: executing program 0 (id=1552):
set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pimreg0\x00', 0x400})
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0)

2.487282338s ago: executing program 0 (id=1553):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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")
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'geneve0\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x3a, 0x6, [{}, {}, {}, {}, {}, {}]}})

2.334105911s ago: executing program 0 (id=1555):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r2, 0xf)
wait4(r2, 0x0, 0x2, 0x0)
tkill(r2, 0x3)
sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000034, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private0={0xfc, 0x0, '\x00', 0x4}, 0xd}, 0x1c)
socket(0x3, 0x2, 0xffffffff)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000000c0)={0x44, 0x1, 0x2, "6040a7170200ff0120000000fcff00ff1057e31e940000000000000000aeff00", 0x50313134})
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getregset(0x4204, r8, 0x40a, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000008c0)={[{@usrquota}, {@auto_da_alloc}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@errors_remount}]}, 0x7, 0x605, &(0x7f00000001c0)="$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")
r9 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r9, &(0x7f0000001080)={0x2020}, 0x2020)

2.21387612s ago: executing program 5 (id=1556):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a0471a, &(0x7f0000000280)={[{@delalloc}]}, 0x82, 0x48f, &(0x7f0000000380)="$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")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @loopback}, &(0x7f0000000300)=0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x180)
read$FUSE(r1, &(0x7f0000000e40)={0x2020}, 0x2020)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0xfff, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x0, 0x5})
preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000e00)={0x17c04, r1, 0x1000, 0x24000003, 0x400000006, 0x7})

1.755037367s ago: executing program 6 (id=1557):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000001300)=@gcm_128={{0x304}, "ae619710c70056b9", "23c37f2f85cb5a0ec81334d653ef0bfd", "f4c06a33", "ba3400"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "4a14d78c1f93592c", "fe13e929075a41cf5ef894a3b4547c04", "3ed69de9", "2dae2a652f922632"}, 0x28)
setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)={'lowerdir'}, 0x9, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x8, 0x801, 0x4, 0x7, 0x4}) (async)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x8, 0x801, 0x4, 0x7, 0x4})
unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x200)

1.673653088s ago: executing program 2 (id=1558):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@noblock_validity}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@block_validity}]}, 0x1, 0x5d4, &(0x7f00000015c0)="$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")
lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='security.4'], 0x0, 0x0, 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000f40916020000000000000000000800090014000000"], 0x30}}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000140)="800000800000210ee7decd7a000340008100987bd7f566bac388fc822acc1c7a3f49173c0e3e0cd27591", 0x2a, 0x40, &(0x7f00000001c0)={0x11, 0x2, r7, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14)
r9 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r9, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000007000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000820000009700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
setsockopt$inet6_int(r9, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4)
recvmmsg(r9, &(0x7f00000008c0)=[{{0x0, 0xffffffffffffff7c, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x11}, 0x7}], 0x50, 0x102, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000640))

1.605174863s ago: executing program 6 (id=1559):
r0 = fanotify_init(0x4, 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x8)
fanotify_mark(r0, 0x4, 0x40000038, r1, &(0x7f0000000040)='./file0\x00') (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x138, 0x10, 0x1, 0x70bd2d, 0x100, {{@in6=@mcast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x8001) (async, rerun: 64)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0) (rerun: 64)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) (async)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0)
r5 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?\xff\xff\xff\xff\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x83<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t#\x00\x00\x00T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\n\xe0\xcbd2%\"c]\x8b\xc7P\xac\x94hu\\\xf2x\xea\x1dp6\x00\x8d', 0x1)
r6 = msgget$private(0x0, 0x0)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000480)=<r8=>0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x28c, r7, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'deflate\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'deflate\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'deflate\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x24b, 0x14, 'C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?\xff\xff\xff\xff\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x83<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t#\x00\x00\x00T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\n\xe0\xcbd2%\"c]\x8b\xc7P\xac\x94hu\\\xf2x\xea\x1dp6\x00\x8d'}]}, 0x28c}, 0x1, 0x0, 0x0, 0x1}, 0x90)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
msgctl$MSG_STAT(r6, 0xb, &(0x7f00000004c0)=""/235)
r9 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
preadv(r9, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4104, 0x1008}], 0x1, 0x5, 0x3) (async)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9)

1.429682135s ago: executing program 6 (id=1561):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000000)="240000001a005f2014f9f4070009040081000000002c00000000000008000f0001000000", 0x24)
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0))
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c00028005000300010000000800024000000012080004400000000a0900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

1.426375987s ago: executing program 3 (id=1563):
r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0xc0040, 0x2c)
getdents64(r3, &(0x7f0000000000)=""/49, 0x31)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000000)=""/49, 0x31)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
fsmount(r1, 0x1, 0x5)
renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x0)
r5 = fsmount(r0, 0x0, 0x0)
setuid(0xee00)
getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000100)=<r6=>0x0)
fchownat(r5, &(0x7f0000000180)='./file0\x00', r6, 0x0, 0x1000)

1.424545243s ago: executing program 6 (id=1564):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000000f40)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004040000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001980), r0)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3dc82abd7000fbdbdf250400fc00140001800d0001007564703a73797a58d161ac"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080), 0x1)
sendto$inet6(r5, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendmmsg$sock(r5, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b82c", 0xffa0}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="0256", 0x2}], 0x1}}], 0x2, 0x4000080)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

1.379738081s ago: executing program 3 (id=1565):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = getpid()
capset(&(0x7f0000000500)={0x20080522, r1}, &(0x7f0000000200)={0x3, 0x200004, 0x800, 0x1, 0x7, 0x1})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0})
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000001a0001002abd700000000000818000000010"], 0x1c}}, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)

1.324658546s ago: executing program 5 (id=1566):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f00000020c0)=""/156, &(0x7f0000000040)=0x9c)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
write$P9_RREAD(r4, &(0x7f000001f6c0)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x100b)
r5 = getpid()
tkill(r5, 0x401)
sched_getattr(r5, &(0x7f00000000c0)={0x38}, 0x38, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf9000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sched_getattr(r2, &(0x7f0000000100)={0x38}, 0x38, 0x0)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000141, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc000200060000ec05"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r8}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r8}, 0x38)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x101d0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800000, &(0x7f0000000380), 0x1, 0x4b7, &(0x7f0000000540)="$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")

1.273878958s ago: executing program 3 (id=1567):
socket$inet6_tcp(0xa, 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7)
r0 = socket$inet6(0xa, 0x1, 0x100)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x2000001, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB="e7dd42fb557624214a57d26fafe6fa30586614598b5fd85e82f549fbc668e44de4be51c89cc0d80774f99290b17b63724ed5f38e8c00c06643b2a475068274d1557e9020902ec306"])

292.686762ms ago: executing program 3 (id=1568):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x2, 0xfff2})
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0)
removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="7518f0a99303d3d3a410"])

175.157287ms ago: executing program 3 (id=1569):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffe, 0x80000000})
r1 = userfaultfd(0x1)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0)
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000001180))
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x20000, 0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={<r4=>0x0, 0x4, "60c42452"}, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000100)={r4, 0x9}, &(0x7f0000000140)=0x8)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0)
write$rfkill(r5, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r5}, 0x8)

118.915846ms ago: executing program 6 (id=1570):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000007c0)=[@in={0x2, 0x4e20, @multicast2}], 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20c22, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=':::\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'\x8f\x18#][e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x1, 0x0, 0x0)
pread64(r2, 0x0, 0x0, 0x1)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=0x0, @ANYRES64=<r3=>r0, @ANYBLOB="bb4e68912d8153be", @ANYBLOB="8a4f22b7d3e3b463eba4990e6271a5", @ANYRESOCT=r2], 0x70}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000180)=0x100000001, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x401, @mcast2, 0x400}}, 0x0, 0x0, 0xe, 0x0, "b308cd085b4342e75b68ec1a3a61bb5efb3ac8b3c511d7eaedaefe851ac4909ecaa6db400dfe6fc6c7b41c0fac092b7076ef575452ff9adc44aec7700ef2c12b99bbc7ae698bd9aef5b2e5898841d56c"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0xc88}}, 0x0, 0x0, 0xa, 0x0, "25c633e7eb9cd356ed39fbff030000000000006fbd53f01408930c00000000c5e167b8a7734908000000b9cc9b1e235b9500"}, 0xd8)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYRESHEX=r3, @ANYRESDEC, @ANYBLOB="e0000002000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd7000043500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0xfffffe27)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304, 0x3a}, "56db7a2700f81000", "a8ef1a3a42071799b7bbebfa6dc371290d0e3808802000", '\x00', "4e0887090800"}, 0x38)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r8, 0x112, 0x9, 0x0, 0x39)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2)

61.81807ms ago: executing program 3 (id=1571):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f00000003c0)=')', 0x1}], 0x1}}], 0x3, 0x4000800)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14, 0x80010, r0, 0xe53b8000)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
openat$cgroup_pressure(r3, &(0x7f0000000480)='io.pressure\x00', 0x2, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fcntl$setsig(r4, 0x3, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0xc, &(0x7f0000000480)=@raw=[@exit, @exit, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x0, 0x5, 0x0, 0x4, 0x4}], &(0x7f0000000700)='syzkaller\x00', 0xffffffff, 0xa0, &(0x7f0000000740)=""/160, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1cd0b, r4, 0x6, &(0x7f0000000840)=[r1], &(0x7f00000009c0)=[{0x0, 0x2, 0xe, 0xc}, {0x2, 0x1, 0x6, 0xb}, {0x4, 0x1, 0x6, 0x6}, {0x3, 0x1, 0x6, 0x1}, {0x1, 0x5, 0xb, 0x5}, {0x1, 0x3, 0x5, 0x3}], 0x10, 0xb1e}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x104}, 0x1, 0x0, 0x0, 0x91}, 0x24008000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7)

0s ago: executing program 6 (id=1572):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x1000, {0x7a}, [{0x69, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x8c}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x9a4c7000)
r2 = gettid()
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000380001800c00010062697477697365002800028008000340000000040800014000000014080002400000001208000640000000050400048a0900010073797a30"], 0x10c}}, 0x0)
bind$nfc_llcp(r3, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061e80ba44c006af5160e961711a03764761beeab91e8e5c0d48bd63ffdb93bd43b847a1597c8ef03da5be42200", 0x37}, 0x60)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
listen(r3, 0x0)
r6 = socket(0x1e, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8005, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r3, @ANYBLOB=',wfdno=', @ANYRESDEC=r6])
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0xdc73)
r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000480)=[{0x1d, '\x00', @data=0xfff, 0x7}, {0x3c, '\x00', @buffer={"c2d1dfc7c6e3369b0ed7171100a6cdfe4fbe0e8ec5a4817ab7b558697676f4d7", 0x20}, 0x3}]})
fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000200))
ioctl$FE_GET_EVENT(r7, 0x80286f4e, &(0x7f0000000080)={0x0, {0x0, 0x0, @vsb}})

kernel console output (not intermixed with test programs):

22] FAT-fs (loop5): Filesystem has been set read-only
[   64.958318][ T6824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.472'.
[   64.959060][ T6824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.472'.
[   65.099305][ T6820] overlayfs: failed to resolve './bus': -2
[   65.128776][ T6833] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   65.266059][ T6834] loop2: detected capacity change from 0 to 512
[   65.326005][ T6834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   65.935136][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   66.202438][ T6884] loop2: detected capacity change from 0 to 512
[   66.239032][ T6884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.476533][ T6888] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.560459][   T30] kauditd_printk_skb: 5 callbacks suppressed
[   66.560493][   T30] audit: type=1326 audit(66.530:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6894 comm="syz.3.492" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0378f68 code=0x0
[   66.697701][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.749835][ T6908] loop2: detected capacity change from 0 to 128
[   66.753285][ T6908] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   66.776972][ T6909] netlink: 32 bytes leftover after parsing attributes in process `syz.5.496'.
[   66.840763][ T6914] trusted_key: syz.6.497 sent an empty control message without MSG_MORE.
[   66.841813][ T4719] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   66.861528][ T6919] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   66.861554][ T6919] unable to read xattr id index table
[   66.867954][ T6919] SQUASHFS error: zlib decompression failed, data probably corrupt
[   66.867986][ T6919] SQUASHFS error: Failed to read block 0x9b: -5
[   66.868004][ T6919] SQUASHFS error: Unable to read metadata cache entry [99]
[   66.868018][ T6919] SQUASHFS error: Unable to read inode 0x127
[   66.871240][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'.
[   66.876513][ T6919] [U] 
[   66.878390][ T6919] [U] K{‘
[   66.882216][ T6919] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ
[   66.882987][ T6919] [U] TžØ–/,�~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1�Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ¾ª(È5ˆOBܤ‡ÍƒJÖ
[   66.883227][ T6919] [U] ±K\&—}6£6œXÎHX�¥Ôµ„ÌÞ.`¸A“$Û40|϶¿�9°ØÞ¨„¯ÀÏU‚Ò4�ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’4”ß
[   66.890061][ T6919] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØI�N¨™[Z(•„C|TË]Z{�Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØ�SH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž�÷ÉWUH„FN—Ž�ÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à     ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿C�Õ³žV¦=�‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI
˜¢œAÏÌ6-ÚD�ÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯
OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ
[   66.898753][ T6919] [U]         +�W‰G?]£Ó'A:    »Ú)Õ
ÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:�^0À�TÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ×;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼�Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿Bĵٜ NÓY"VI2ÛÌ
[   66.903529][ T6919] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ�°¶ºQÎÙ
 ŸÇ3‹ÆQ¯ÔN^HP*½Ü$   µ.Î7YÓ±œ2³
[   66.905888][ T6919] [U] ½?�©ßHÜÄ*ÙÁ”Î3Í�7ÜÉ�¾^#Q�"0~‡‚Ð(ÉOÏXLŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ
[   66.908418][ T6919] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“�®ŸŸÑ�2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ�„RTÔ¶ŒBÚ[+/<<R�B�ÊÄÕ|ФEŽžÑÛ –V96#ÛÚÑͤʦJºUº%
S851ƒ�ÞÒ©S�P±¨\£ƒ?Qª|L�´QXµ0ÂKÔ1ORÉ´2¡½|ÖÜDÖFÌ¿»Ù�ÚË2Þ”–¨×0ÌÅH•}C[/¤»“ŸPX^¼ÈO
[   66.913702][ T6919] [U] ÖØ›·Ü—(JÅЛ•§MÛÜXZ˜;œ½±ÓßØ�_¹»µÔ*3÷3…¿5¸\ƒXM³ÚU�‰AK!AQ`¿Ë;FЕ�I+ÖÐVUHÅÐÂMÑJ³´Æ·ÙÛZÄCØÃZ‹¼Â)_ÇŸ¡  Ô‘¡&ßÖ¡ßÁAÇXTOÈÝÊ_½ Ú¼¦:¨Â×%À²PÒ×ÈCÖ²‚YÖ+_ÞÜ›ÝÛ}UÏM˜ƒÆ«CÅ!KJÒ7пG¯Ë=BÈ
[   66.918243][ T6919] [U] Ù½¥Fœ%ŽXAÙÂLŸ2R*GŒÒVW¬Ñ$ƒÜJ     ÃA˜›F¶¿�·+ؾ9Í„VIºÖ—¼KÙ¾Å1}_©Â
Á¥%ÃR6„•(]“¦/Ÿ¶Ø�Å™YܺÇÞHä¾ÜÑR GªÄRN/Ü«Î#!ÊDÙÛÚ«%ÞÛËDªÏ-{Ð$ÞVU‘ÝT²¼ª$:MTRÔEŽC1V‰D~ÎÈ];[˜ËÚÐ÷SQ¾¯œÙ(ÌËE,X¦8Â"Ù
ÆÐG¥DŸÚµ2@T8ž¾´ÒƒÀÐßÀT8.RC+Ä@Ëʦ‡P‡UÁ
P”‰¼¶C±‡Ë'Å„YLÓ-SS1E?Å7ÓO‡§Ì^]¦†ÂÓC”½H]§JKR]RKQ܆�ØÝ£Þ´OTCÔÆX¶¨¾4™NË  ³Ï&�Á­ÐÚ‹ŠÓ@¶:M7¿~�+”W*ÛÁ–XMÜÓ>>—¡{Q¢Ú×
_²Õ�LX8ÊU„ÇØÎ{ÐZ³ÍØ�)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ�„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q    ÌDWŸÒظ=ؽ|Q¬   ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE�`Ʀ\
[   66.927792][ T6919] [U] M¢XÎÂ"Ä{;ŽÕ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_  HPϱœSªD­�¦Ø:]‚{Ë©ÔÝÆȽ
[   66.929630][ T6919] [U] I,Ç>ÇÓ¤ ÎÙ5�1Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼Š�Vˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ
[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í   Ø¿
[   66.931700][ T6919] [U] 22½“Æ©ÐÛ©X?0;3U±
[   66.933108][ T6919] [U] ÞœÕ
Æ�ÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_
•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË,        ‘Ä      ÞD~×D©£¡+ÃW;A\˜F
PÉÞȘ|$ºØ)�
KØ�I³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ       ÝÍ¿ËAE©�TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMƲÇ
[   66.939617][ T6919] [U] [ª['XN€'²÷Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙ
WÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘LØ›§Ëœ»×B~ÅMÒÔÖ
[   66.941392][ T6919] [U] ™LÖ>�Ñ�D+ˆD¯§—®Ì"5ŽÊ��H3<ª¨ÅIR=F^”F�NÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖYÂ
[   66.942917][ T6919] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW��]ÔÊÄÌ©�
[   66.944302][ T6919] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSK�YÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ
[   66.946349][ T6919] [U] ¹EC�
[   66.949307][ T6919] [U] �—”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·�Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µŽÇIÛRIÓ�PMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ
[   66.977381][ T6917] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß@BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUD
Ç©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX�™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ
[   66.988226][ T6936] 9p: Bad value for 'rfdno'
[   67.427421][ T6953] dvmrp1: entered allmulticast mode
[   67.742016][ T6989] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[   67.749166][ T6989] syzkaller0: entered promiscuous mode
[   67.749194][ T6989] syzkaller0: entered allmulticast mode
[   68.103449][   T50] Bluetooth: hci3: hcon 000000008a761871 sent 1 < count 1280
[   68.256607][ T7009] veth1_to_team: entered promiscuous mode
[   68.258319][ T7009] gretap0: entered promiscuous mode
[   68.260547][ T7009] hsr1: entered promiscuous mode
[   68.409785][ T7038] set_capacity_and_notify: 1 callbacks suppressed
[   68.412608][ T7038] loop5: detected capacity change from 0 to 512
[   68.452070][ T7038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.458185][ T7038] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.534: corrupted xattr block 6: invalid header
[   68.460794][ T7038] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.534: corrupted xattr block 6: invalid header
[   68.464743][ T7038] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.534: corrupted xattr block 6: invalid header
[   68.472876][ T7050] loop2: detected capacity change from 0 to 1024
[   68.475622][ T7038] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.534: corrupted xattr block 6: invalid header
[   68.476715][ T7050] EXT4-fs: Ignoring removed orlov option
[   68.487411][ T7038] 9pnet_fd: p9_fd_create_unix (7038): problem connecting socket: ./file0/file0: -111
[   68.504610][ T7050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.559525][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.564131][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.617835][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.620083][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.675355][ T7086] __nla_validate_parse: 8 callbacks suppressed
[   68.676685][ T7086] netlink: 48 bytes leftover after parsing attributes in process `syz.5.547'.
[   68.700666][   T50] Bluetooth: hci3: SCO packet for unknown connection handle 200
[   68.716979][ T7092] loop5: detected capacity change from 0 to 2048
[   68.737658][ T7092]  loop5: p2 < > p3 < p5 > p4
[   68.738730][ T7092] loop5: partition table partially beyond EOD, truncated
[   68.738861][ T7092] loop5: p2 start 4278190080 is beyond EOD, truncated
[   68.744487][ T7092] loop5: p4 size 8192 extends beyond EOD, truncated
[   68.746339][ T7092] loop5: p5 size 8192 extends beyond EOD, truncated
[   69.581557][ T7098] netlink: 'syz.0.548': attribute type 5 has an invalid length.
[   69.590942][ T7098] ip6erspan0: entered promiscuous mode
[   69.621786][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[   69.627236][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   69.637852][ T4733] udevd[4733]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[   69.781954][ T7122] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621
[   69.782289][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.551'.
[   69.805859][ T7122] vlan2: entered promiscuous mode
[   69.808030][ T7122] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   69.808211][ T7122] vlan2: entered allmulticast mode
[   69.808226][ T7122] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   69.837872][ T7124] sit1: entered allmulticast mode
[   69.876583][ T7124] loop2: detected capacity change from 0 to 256
[   69.938022][ T7134] 9p: Bad value for 'rfdno'
[   69.971323][ T7138] loop0: detected capacity change from 0 to 256
[   70.045209][ T7144] loop2: detected capacity change from 0 to 512
[   70.049603][ T7144] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   70.058329][ T7144] EXT4-fs (loop2): 1 truncate cleaned up
[   70.058770][ T7144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.068202][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.215747][ T7166] loop2: detected capacity change from 0 to 512
[   70.217409][ T7166] EXT4-fs: Ignoring removed orlov option
[   70.219904][ T7166] EXT4-fs: Ignoring removed mblk_io_submit option
[   70.236423][ T7166] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[   70.241574][ T7166] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.559: attempt to clear invalid blocks 2 len 1
[   70.241608][ T7166] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   70.244243][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   70.244257][    C0] EXT4-fs (loop2): initial error at time 70: ext4_clear_blocks:876: inode 13
[   70.244272][    C0] EXT4-fs (loop2): last error at time 70: ext4_clear_blocks:876: inode 13
[   70.251224][ T7166] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   70.259159][ T7166] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.559: invalid indirect mapped block 1819239214 (level 0)
[   70.262923][ T7166] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   70.263269][ T7166] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.559: invalid indirect mapped block 1819239214 (level 1)
[   70.263293][ T7166] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   70.272065][ T7166] EXT4-fs (loop2): 1 truncate cleaned up
[   70.272572][ T7166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.331447][ T7173] loop0: detected capacity change from 0 to 4096
[   70.339080][ T7173] EXT4-fs: inline encryption not supported
[   70.342275][ T7173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   70.342317][ T7173] EXT4-fs (loop0): Test dummy encryption mode enabled
[   70.344252][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.348383][ T7173] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[   70.348444][ T7173] System zones: 0-5
[   70.352167][ T7173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.571107][ T7200] loop2: detected capacity change from 0 to 256
[   70.856100][ T7214] tipc: Started in network mode
[   70.856137][ T7214] tipc: Node identity 765acf342cf, cluster identity 4711
[   70.856389][ T7214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.857002][ T7214] syzkaller0: entered promiscuous mode
[   70.857015][ T7214] syzkaller0: entered allmulticast mode
[   70.865500][ T7214] tipc: Resetting bearer <eth:syzkaller0>
[   70.877852][ T7203] tipc: Resetting bearer <eth:syzkaller0>
[   70.887282][ T7203] tipc: Disabling bearer <eth:syzkaller0>
[   70.960059][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.6.573'.
[   70.960094][ T7227] netlink: 47 bytes leftover after parsing attributes in process `syz.6.573'.
[   71.002533][ T7239] Injecting memory failure for pfn 0x219430 at process virtual address 0x20000000
[   71.008239][ T7239] Memory failure: 0x219430: unhandlable page.
[   71.008270][ T7239] Memory failure: 0x219430: recovery action for get hwpoison page: Ignored
[   71.247024][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'.
[   71.267794][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'.
[   71.277306][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'.
[   71.400188][ T7272] loop2: detected capacity change from 0 to 512
[   71.409712][ T7272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   71.473264][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   71.569784][ T7279] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   71.571632][ T4471] team_slave_0: entered promiscuous mode
[   71.571671][ T4471] team_slave_1: entered promiscuous mode
[   71.581631][ T7279] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   71.640523][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.593'.
[   71.641945][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'.
[   71.759529][ T7295] EXT4-fs (loop5): Test dummy encryption mode enabled
[   71.764813][ T7295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022]
[   71.764857][ T7295] System zones: 1-2, 4-12, 8-8
[   71.767698][ T7295] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.596: iget: bad i_size value: 38620345925642
[   71.767737][ T7295] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   71.770158][ T7295] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.596: couldn't read orphan inode 15 (err -117)
[   71.770193][ T7295] loop5: lost filesystem error report for type 5 error -117
[   71.774241][    C1] EXT4-fs (loop5): error count since last fsck: 2
[   71.774254][    C1] EXT4-fs (loop5): initial error at time 71: ext4_orphan_get:1399: inode 15
[   71.774271][    C1] EXT4-fs (loop5): last error at time 71: ext4_orphan_get:1404
[   71.781035][ T7295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.141744][ T7322] binder: 7321:7322 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   72.141788][ T7322] binder: 7322 RLIMIT_NICE not set
[   72.141922][ T7322] binder: 7321:7322 BC_FREE_BUFFER no match for buffer at offset 0
[   72.193616][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   72.306586][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.608'.
[   72.619449][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.715138][ T7355] Injecting memory failure for pfn 0x136a3a at process virtual address 0x20000000
[   72.720874][ T7355] Memory failure: 0x136a3a: Sending SIGBUS to syz.5.613:7355 due to hardware memory corruption
[   72.723327][ T7355] Memory failure: 0x136a3a: recovery action for dirty LRU page: Recovered
[   72.726522][ T7355] Injecting memory failure for pfn 0x219430 at process virtual address 0x20001000
[   72.729215][ T7355] Memory failure: 0x219430: Sending SIGBUS to syz.5.613:7355 due to hardware memory corruption
[   72.731909][ T7355] Memory failure: 0x219430: recovery action for already poisoned page: Failed
[   73.192776][ T7367] EXT4-fs: inline encryption not supported
[   73.198547][ T7367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   73.198599][ T7367] EXT4-fs (loop5): Test dummy encryption mode enabled
[   73.207806][ T7367] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   73.207874][ T7367] System zones: 0-5
[   73.215974][ T7367] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.823532][ T7401] Injecting memory failure for pfn 0x219430 at process virtual address 0x20ffe000
[   73.824461][ T7401] Memory failure: 0x219430: Sending SIGBUS to syz.3.628:7401 due to hardware memory corruption
[   73.824548][ T7401] Memory failure: 0x219430: recovery action for already poisoned page: Failed
[   73.911073][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.939724][ T7417] set_capacity_and_notify: 2 callbacks suppressed
[   73.940929][ T7417] loop5: detected capacity change from 0 to 512
[   73.970074][ T7417] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.631: Unimplemented hash flags: 0x0001
[   73.970119][ T7417] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.631: Corrupt directory, running e2fsck is recommended
[   73.976887][ T7417] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[   73.978417][ T7417] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.631: corrupted in-inode xattr: invalid ea_ino
[   73.978452][ T7417] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   73.981134][ T7417] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.631: couldn't read orphan inode 15 (err -117)
[   73.984590][    C0] EXT4-fs (loop5): error count since last fsck: 1
[   73.984603][    C0] EXT4-fs (loop5): initial error at time 73: ext4_iget_extra_inode:5180: inode 15
[   73.984619][    C0] EXT4-fs (loop5): last error at time 73: ext4_iget_extra_inode:5180: inode 15
[   73.990869][ T7417] loop5: lost filesystem error report for type 5 error -117
[   73.992490][ T7417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.004454][ T7417] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.631: Unimplemented hash flags: 0x0001
[   74.004486][ T7417] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.631: Corrupt directory, running e2fsck is recommended
[   74.004541][ T7417] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.631: path /102/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[   74.022859][ T7417] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 2: comm syz.5.631: path /102/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0
[   74.028472][ T7417] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 8: comm syz.5.631: path /102/file0: bad entry in directory: directory entry overrun - offset=0, inode=33261, rec_len=132120, size=1024 fake=0
[   74.042944][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.070682][ T7426] loop2: detected capacity change from 0 to 1024
[   74.091066][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 201
[   74.095274][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 201
[   74.260115][ T7445] __nla_validate_parse: 2 callbacks suppressed
[   74.261450][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.639'.
[   74.457605][ T7447] xt_CT: You must specify a L4 protocol and not use inversions on it
[   74.734201][ T7467] xt_NFQUEUE: number of total queues is 0
[   75.208803][ T7507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.659'.
[   75.210748][ T7507] netlink: 6 bytes leftover after parsing attributes in process `syz.3.659'.
[   75.222731][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'.
[   75.222761][ T7509] netlink: 6 bytes leftover after parsing attributes in process `syz.0.660'.
[   75.432179][ T7526] loop2: detected capacity change from 0 to 512
[   75.438929][ T7526] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   75.439642][ T7526] EXT4-fs error (device loop2): ext4_get_journal_inode:5900: comm syz.2.666: inode #2147418112: comm syz.2.666: iget: illegal inode #
[   75.439661][ T7526] loop2: lost filesystem error report for type 5 error -117
[   75.443444][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   75.443465][    C1] EXT4-fs (loop2): initial error at time 75: ext4_get_journal_inode:5900
[   75.443480][    C1] EXT4-fs (loop2): last error at time 75: ext4_get_journal_inode:5900
[   75.443591][ T7526] EXT4-fs (loop2): no journal found
[   75.443606][ T7526] EXT4-fs (loop2): can't get journal size
[   75.445297][ T7526] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[   75.448462][ T7526] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[   75.449430][ T7526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.452903][ T7526] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.666: Invalid inode bitmap blk 4 in block_group 0
[   75.479748][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.497674][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.664'.
[   75.524701][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.6.668'.
[   75.562661][ T7541] loop2: detected capacity change from 0 to 128
[   75.565883][ T7541] EXT4-fs: Ignoring removed nobh option
[   75.579079][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.6.672'.
[   75.579438][ T7544] netlink: 6 bytes leftover after parsing attributes in process `syz.6.672'.
[   75.584271][ T7541] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   75.653258][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.6.676'.
[   75.806818][   T30] audit: type=1326 audit(75.780:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.682" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82778f68 code=0x7ffc0000
[   75.810901][   T30] audit: type=1326 audit(75.780:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.682" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82778f68 code=0x7ffc0000
[   75.811256][   T30] audit: type=1326 audit(75.780:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.682" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=216 compat=0 ip=0xffff82778f68 code=0x7ffc0000
[   75.811275][   T30] audit: type=1326 audit(75.780:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.682" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82778f68 code=0x7ffc0000
[   75.811564][   T30] audit: type=1326 audit(75.780:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.682" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff82778f68 code=0x7ffc0000
[   75.811821][   T30] audit: type=1326 audit(75.780:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.682" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82778f68 code=0x7ffc0000
[   75.811978][   T30] audit: type=1326 audit(75.780:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.682" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82778f68 code=0x7ffc0000
[   75.812094][   T30] audit: type=1326 audit(75.780:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.682" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=71 compat=0 ip=0xffff82778f68 code=0x7ffc0000
[   75.812172][   T30] audit: type=1326 audit(75.780:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.682" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82778f68 code=0x7ffc0000
[   75.812240][   T30] audit: type=1326 audit(75.780:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.682" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82778f68 code=0x7ffc0000
[   75.943692][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.943864][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.028510][ T7586] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.034781][ T7586] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.141733][ T7594] IPVS: starting estimator thread 0...
[   76.223473][ T7607] IPVS: using max 60 ests per chain, 144000 per kthread
[   76.297932][ T7606] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   76.297982][ T7606] tipc: Enabled bearer <udp:s>, priority 10
[   76.300493][ T5842] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.300558][ T5842] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.300583][ T5842] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.300604][ T5842] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.325017][   T50] Bluetooth: hci0: Malformed LE Event: 0x0d
[   76.400604][ T4719] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   76.433620][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   76.617336][ T7643] loop2: detected capacity change from 0 to 512
[   76.624310][ T7643] EXT4-fs (loop2): Encoding requested by superblock is unknown
[   76.703477][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   76.870656][ T7649] could not allocate digest TFM handle digest_null
[   76.893136][ T7648] could not allocate digest TFM handle digest_null
[   76.899342][ T7654] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   77.233540][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   77.339169][ T7680] loop2: detected capacity change from 0 to 2048
[   78.263653][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   78.423952][ T7748] usb usb1: usbfs: process 7748 (syz.0.731) did not claim interface 0 before use
[   78.466319][ T7756] IPVS: Error connecting to the multicast addr
[   78.481760][ T7758] loop2: detected capacity change from 0 to 1024
[   78.483314][ T7758] EXT4-fs: Ignoring removed mblk_io_submit option
[   78.484690][ T7758] EXT4-fs: Ignoring removed i_version option
[   78.484726][ T7758] EXT4-fs: Ignoring removed orlov option
[   78.484734][ T7758] EXT4-fs: Ignoring removed bh option
[   78.485058][ T7758] EXT4-fs: test_dummy_encryption requires encrypt feature
[   78.490441][ T7758] binder: 7757:7758 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   78.492231][ T7758] binder: 7758 RLIMIT_NICE not set
[   78.543231][ T7766] binder: 7757:7766 ioctl c0306201 200001c0 returned -14
[   78.644396][ T7764] loop5: detected capacity change from 0 to 32768
[   78.695981][ T7764]  loop5: [ICS] p1 p2 p3 p4
[   78.696409][ T7764] loop5: p1 start 1970170188 is beyond EOD, truncated
[   78.696425][ T7764] loop5: p2 start 540156012 is beyond EOD, truncated
[   78.696435][ T7764] loop5: p3 start 1684545584 is beyond EOD, truncated
[   78.696443][ T7764] loop5: p4 start 1667592992 is beyond EOD, truncated
[   78.726697][ T7774] xt_nat: multiple ranges no longer supported
[   78.776898][ T7776] loop5: detected capacity change from 0 to 8192
[   78.824264][ T7781] IPv6: sit1: Disabled Multicast RS
[   79.034037][ T7795] netlink: 'syz.6.748': attribute type 1 has an invalid length.
[   79.034066][ T7795] netlink: 'syz.6.748': attribute type 4 has an invalid length.
[   79.034623][ T7795] netlink: 'syz.6.748': attribute type 1 has an invalid length.
[   79.034634][ T7795] netlink: 'syz.6.748': attribute type 4 has an invalid length.
[   79.153090][ T7805] ÿÿÿÿ: renamed from bridge_slave_1
[   79.303596][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   79.308154][ T7758] binder: 7757:7758 ioctl c0306201 200003c0 returned -14
[   79.350637][ T7812] loop2: detected capacity change from 0 to 4096
[   79.355486][ T7812] EXT4-fs: inline encryption not supported
[   79.358782][ T7812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   79.358808][ T7812] EXT4-fs (loop2): Test dummy encryption mode enabled
[   79.362372][ T7812] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[   79.362431][ T7812] System zones: 0-5
[   79.363641][ T7812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.396786][ T7815] __nla_validate_parse: 16 callbacks suppressed
[   79.399180][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.754'.
[   79.468963][ T7832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.759'.
[   79.523601][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.760'.
[   79.526201][ T7834] netlink: 6 bytes leftover after parsing attributes in process `syz.3.760'.
[   79.560038][ T7841] loop5: detected capacity change from 0 to 512
[   79.570132][ T7841] EXT4-fs (loop5): 1 truncate cleaned up
[   79.570604][ T7841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.585323][ T7841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.626903][ T7844] binder: BINDER_SET_CONTEXT_MGR already set
[   79.626930][ T7844] binder: 7843:7844 ioctl 4018620d 20000040 returned -16
[   79.627131][ T7844] binder: tried to use weak ref as strong ref
[   79.627139][ T7844] binder: 7843:7844 Acquire 1 refcount change on invalid ref 0 ret -22
[   79.627226][ T7844] binder: 7843:7844 got transaction to invalid handle, 1
[   79.627295][ T7844] binder: 7843:7844 cannot find target node
[   79.627310][ T7844] binder: 7843:7844 transaction call to 0:0 failed 8/29201/-22, code 0 size 252-0 line 3252
[   79.627572][ T4471] binder: undelivered TRANSACTION_ERROR: 29201
[   79.645373][ T7847] netlink: 'syz.3.765': attribute type 1 has an invalid length.
[   79.645404][ T7847] nbd: error processing sock list
[   79.771404][ T7870] loop5: detected capacity change from 0 to 4096
[   79.813934][ T7870] ext4: Unknown parameter 'seclabel'
[   79.841810][ T7873] netlink: 64 bytes leftover after parsing attributes in process `syz.6.772'.
[   79.848010][ T7594] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   79.855137][ T7594] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   80.126001][ T7881] loop5: detected capacity change from 0 to 512
[   80.138808][ T7881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.152622][ T7881] bridge0: port 3(erspan0) entered blocking state
[   80.154265][ T7881] bridge0: port 3(erspan0) entered disabled state
[   80.158704][ T7881] erspan0: entered allmulticast mode
[   80.160322][ T7881] erspan0: entered promiscuous mode
[   80.203660][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.224877][ T7894] bond1: peer notification delay (6) is not a multiple of miimon (9), value rounded to 0 ms
[   80.247396][ T7897] loop5: detected capacity change from 0 to 2048
[   80.248964][ T7897] vfat: Unknown parameter 'þ'
[   80.252346][ T7897] binder: 7896:7897 ioctl 40047211 20000240 returned -22
[   80.283991][ T7899] netlink: 16 bytes leftover after parsing attributes in process `syz.5.779'.
[   80.312722][ T7899] loop5: detected capacity change from 0 to 2048
[   80.325659][ T7899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.343557][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   80.348463][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.417913][ T7905] loop5: detected capacity change from 0 to 1024
[   80.421388][ T7905] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   80.425570][ T7905] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11c, mo2=0102]
[   80.425719][ T7905] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102
[   80.428862][ T7905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   80.435377][ T7905] netlink: 56 bytes leftover after parsing attributes in process `syz.5.781'.
[   80.455351][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.530393][ T7912] loop5: detected capacity change from 0 to 512
[   80.534973][ T7912] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.784: invalid block
[   80.535009][ T7912] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   80.538429][ T7912] EXT4-fs (loop5): Remounting filesystem read-only
[   80.541456][ T7912] EXT4-fs (loop5): 2 truncates cleaned up
[   80.543233][ T7912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.623858][ T7916] xt_CT: You must specify a L4 protocol and not use inversions on it
[   80.966635][ T7933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.787'.
[   80.966671][ T7933] netlink: 6 bytes leftover after parsing attributes in process `syz.3.787'.
[   81.119525][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'.
[   81.136602][ T7963] /dev/loop0: Can't open blockdev
[   81.199647][ T7963] netlink: 'syz.2.794': attribute type 16 has an invalid length.
[   81.383534][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   81.435341][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.115539][ T8005] Injecting memory failure for pfn 0x120bdd at process virtual address 0x20276000
[   82.159914][ T8005] Memory failure: 0x120bdd: keeping poisoned page in swap cache
[   82.163343][ T8005] Memory failure: 0x120bdd: recovery action for clean swapcache page: Recovered
[   82.163503][ T8005] Injecting memory failure for pfn 0x120bde at process virtual address 0x20277000
[   82.167738][ T8005] Memory failure: 0x120bde: keeping poisoned page in swap cache
[   82.169348][ T8005] Memory failure: 0x120bde: recovery action for clean swapcache page: Recovered
[   82.223866][ T8013] autofs4:pid:8013:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[   82.391125][ T8021] FAULT_INJECTION: forcing a failure.
[   82.391125][ T8021] name failslab, interval 1, probability 0, space 0, times 1
[   82.391347][ T8021] CPU: 0 UID: 0 PID: 8021 Comm: syz.0.808 Not tainted syzkaller #0 PREEMPT 
[   82.391364][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[   82.391369][ T8021] Call trace:
[   82.391373][ T8021]  show_stack+0x2c/0x3c (C)
[   82.391393][ T8021]  __dump_stack+0x30/0x40
[   82.391404][ T8021]  dump_stack_lvl+0xd8/0x12c
[   82.391413][ T8021]  dump_stack+0x1c/0x28
[   82.391423][ T8021]  should_fail_ex+0x41c/0x590
[   82.391434][ T8021]  should_failslab+0xc4/0x120
[   82.391442][ T8021]  __kmalloc_noprof+0x108/0x6b8
[   82.391450][ T8021]  tomoyo_realpath_from_path+0xbc/0x4dc
[   82.391459][ T8021]  tomoyo_path_number_perm+0x1f0/0x500
[   82.391466][ T8021]  tomoyo_file_ioctl+0x2c/0x3c
[   82.391474][ T8021]  security_file_ioctl+0xdc/0x2b0
[   82.391481][ T8021]  __arm64_sys_ioctl+0xa8/0x1c4
[   82.391492][ T8021]  invoke_syscall+0x98/0x244
[   82.391502][ T8021]  el0_svc_common+0xec/0x23c
[   82.391511][ T8021]  do_el0_svc+0x4c/0x5c
[   82.391521][ T8021]  el0_svc+0x64/0x260
[   82.391531][ T8021]  el0t_64_sync_handler+0x48/0x148
[   82.391539][ T8021]  el0t_64_sync+0x198/0x19c
[   82.391583][ T8021] ERROR: Out of memory at tomoyo_realpath_from_path.
[   82.433585][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   83.409202][ T8049] fuse: fd is not a fuse device
[   83.410655][ T8049] netlink: zone id is out of range
[   83.411891][ T8049] netlink: zone id is out of range
[   83.413018][ T8049] netlink: del zone limit has 4 unknown bytes
[   83.451861][ T8051] FAULT_INJECTION: forcing a failure.
[   83.451861][ T8051] name failslab, interval 1, probability 0, space 0, times 0
[   83.452039][ T8051] CPU: 1 UID: 0 PID: 8051 Comm: syz.3.816 Not tainted syzkaller #0 PREEMPT 
[   83.452056][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[   83.452061][ T8051] Call trace:
[   83.452064][ T8051]  show_stack+0x2c/0x3c (C)
[   83.452087][ T8051]  __dump_stack+0x30/0x40
[   83.452100][ T8051]  dump_stack_lvl+0xd8/0x12c
[   83.452110][ T8051]  dump_stack+0x1c/0x28
[   83.452120][ T8051]  should_fail_ex+0x41c/0x590
[   83.452132][ T8051]  should_failslab+0xc4/0x120
[   83.452140][ T8051]  kmem_cache_alloc_noprof+0x94/0x5d8
[   83.452149][ T8051]  security_file_alloc+0x3c/0x300
[   83.452157][ T8051]  init_file+0x90/0x28c
[   83.452164][ T8051]  alloc_empty_file+0x80/0x1cc
[   83.452171][ T8051]  alloc_file+0x58/0x98
[   83.452178][ T8051]  alloc_file_pseudo+0xe0/0x198
[   83.452185][ T8051]  __shmem_file_setup+0x210/0x284
[   83.452193][ T8051]  shmem_file_setup+0x40/0x54
[   83.452199][ T8051]  memfd_alloc_file+0x9c/0x2f0
[   83.452208][ T8051]  __arm64_sys_memfd_create+0x310/0x3e4
[   83.452217][ T8051]  invoke_syscall+0x98/0x244
[   83.452227][ T8051]  el0_svc_common+0xec/0x23c
[   83.452236][ T8051]  do_el0_svc+0x4c/0x5c
[   83.452245][ T8051]  el0_svc+0x64/0x260
[   83.452255][ T8051]  el0t_64_sync_handler+0x48/0x148
[   83.452264][ T8051]  el0t_64_sync+0x198/0x19c
[   83.463459][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   84.033829][   T30] kauditd_printk_skb: 1 callbacks suppressed
[   84.034038][   T30] audit: type=1326 audit(84.010:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8069 comm="syz.5.821" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83178f68 code=0x7ffc0000
[   84.034071][   T30] audit: type=1326 audit(84.010:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8069 comm="syz.5.821" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83178f68 code=0x7ffc0000
[   84.045590][ T8065] syzkaller0: entered promiscuous mode
[   84.045679][ T8065] syzkaller0: entered allmulticast mode
[   84.379835][ T8083] FAULT_INJECTION: forcing a failure.
[   84.379835][ T8083] name failslab, interval 1, probability 0, space 0, times 0
[   84.379896][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.5.824 Not tainted syzkaller #0 PREEMPT 
[   84.379907][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[   84.379912][ T8083] Call trace:
[   84.379915][ T8083]  show_stack+0x2c/0x3c (C)
[   84.379935][ T8083]  __dump_stack+0x30/0x40
[   84.379946][ T8083]  dump_stack_lvl+0xd8/0x12c
[   84.379955][ T8083]  dump_stack+0x1c/0x28
[   84.379964][ T8083]  should_fail_ex+0x41c/0x590
[   84.379978][ T8083]  should_failslab+0xc4/0x120
[   84.379987][ T8083]  __kmalloc_noprof+0x108/0x6b8
[   84.379996][ T8083]  tomoyo_encode2+0x10c/0x330
[   84.380004][ T8083]  tomoyo_encode+0x34/0x50
[   84.380011][ T8083]  tomoyo_realpath_from_path+0x488/0x4dc
[   84.380019][ T8083]  tomoyo_path_number_perm+0x1f0/0x500
[   84.380027][ T8083]  tomoyo_file_ioctl+0x2c/0x3c
[   84.380035][ T8083]  security_file_ioctl+0xdc/0x2b0
[   84.380042][ T8083]  __arm64_sys_ioctl+0xa8/0x1c4
[   84.380052][ T8083]  invoke_syscall+0x98/0x244
[   84.380062][ T8083]  el0_svc_common+0xec/0x23c
[   84.380071][ T8083]  do_el0_svc+0x4c/0x5c
[   84.380081][ T8083]  el0_svc+0x64/0x260
[   84.380091][ T8083]  el0t_64_sync_handler+0x48/0x148
[   84.380100][ T8083]  el0t_64_sync+0x198/0x19c
[   84.380263][ T8083] ERROR: Out of memory at tomoyo_realpath_from_path.
[   84.513476][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   85.118324][ T8095] FAULT_INJECTION: forcing a failure.
[   85.118324][ T8095] name failslab, interval 1, probability 0, space 0, times 0
[   85.118363][ T8095] CPU: 0 UID: 0 PID: 8095 Comm: syz.5.827 Not tainted syzkaller #0 PREEMPT 
[   85.118376][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[   85.118381][ T8095] Call trace:
[   85.118384][ T8095]  show_stack+0x2c/0x3c (C)
[   85.118404][ T8095]  __dump_stack+0x30/0x40
[   85.118415][ T8095]  dump_stack_lvl+0xd8/0x12c
[   85.118424][ T8095]  dump_stack+0x1c/0x28
[   85.118433][ T8095]  should_fail_ex+0x41c/0x590
[   85.118445][ T8095]  should_failslab+0xc4/0x120
[   85.118452][ T8095]  kmem_cache_alloc_noprof+0x94/0x5d8
[   85.118461][ T8095]  vm_area_alloc+0x2c/0x144
[   85.118470][ T8095]  mmap_region+0xdb0/0x1c38
[   85.118481][ T8095]  do_mmap+0xa50/0xf0c
[   85.118489][ T8095]  vm_mmap_pgoff+0x298/0x46c
[   85.118497][ T8095]  ksys_mmap_pgoff+0xd0/0x5b4
[   85.118506][ T8095]  __arm64_sys_mmap+0x108/0x120
[   85.118516][ T8095]  invoke_syscall+0x98/0x244
[   85.118526][ T8095]  el0_svc_common+0xec/0x23c
[   85.118535][ T8095]  do_el0_svc+0x4c/0x5c
[   85.118544][ T8095]  el0_svc+0x64/0x260
[   85.118560][ T8095]  el0t_64_sync_handler+0x48/0x148
[   85.118572][ T8095]  el0t_64_sync+0x198/0x19c
[   85.166587][ T8096] bond2: entered promiscuous mode
[   85.444787][ T8104] xt_hashlimit: size too large, truncated to 1048576
[   85.543479][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   86.319681][ T8114] __nla_validate_parse: 5 callbacks suppressed
[   86.319719][ T8114] netlink: 28 bytes leftover after parsing attributes in process `syz.5.831'.
[   86.319736][ T8114] netlink: 6 bytes leftover after parsing attributes in process `syz.5.831'.
[   86.354661][ T8116] loop5: detected capacity change from 0 to 512
[   86.355041][ T8116] ext4: Bad value for 'data'
[   86.583462][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   86.662239][ T8056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   86.787760][   T50] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[   86.813821][ T8136] netlink: 72 bytes leftover after parsing attributes in process `syz.0.839'.
[   86.813856][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'.
[   86.883631][ T8142] FAULT_INJECTION: forcing a failure.
[   86.883631][ T8142] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   86.883901][ T8142] CPU: 1 UID: 0 PID: 8142 Comm: syz.2.837 Not tainted syzkaller #0 PREEMPT 
[   86.883917][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[   86.883923][ T8142] Call trace:
[   86.883926][ T8142]  show_stack+0x2c/0x3c (C)
[   86.883946][ T8142]  __dump_stack+0x30/0x40
[   86.883957][ T8142]  dump_stack_lvl+0xd8/0x12c
[   86.883967][ T8142]  dump_stack+0x1c/0x28
[   86.883976][ T8142]  should_fail_ex+0x41c/0x590
[   86.883987][ T8142]  should_fail+0x14/0x24
[   86.883997][ T8142]  should_fail_usercopy+0x20/0x30
[   86.884007][ T8142]  simple_read_from_buffer+0xc4/0x238
[   86.884017][ T8142]  proc_fail_nth_read+0x1a8/0x248
[   86.884025][ T8142]  vfs_read+0x230/0x8c8
[   86.884035][ T8142]  ksys_read+0x12c/0x228
[   86.884045][ T8142]  __arm64_sys_read+0x7c/0x90
[   86.884054][ T8142]  invoke_syscall+0x98/0x244
[   86.884064][ T8142]  el0_svc_common+0xec/0x23c
[   86.884074][ T8142]  do_el0_svc+0x4c/0x5c
[   86.884083][ T8142]  el0_svc+0x64/0x260
[   86.884093][ T8142]  el0t_64_sync_handler+0x48/0x148
[   86.884102][ T8142]  el0t_64_sync+0x198/0x19c
[   87.074964][ T8160] input: syz0 as /devices/virtual/input/input6
[   87.101184][ T8162] bond2 (unregistering): Released all slaves
[   87.105087][   T50] Bluetooth: Wrong link type (-57)
[   87.131896][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.847'.
[   87.131926][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.847'.
[   87.166983][ T8171] loop5: detected capacity change from 0 to 1024
[   87.167318][ T8171] EXT4-fs: Ignoring removed bh option
[   87.185741][ T8171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.225111][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.234234][ T8182] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   87.377022][ T8200] xt_l2tp: wrong L2TP version: 0
[   87.409972][ T8205] overlayfs: missing 'lowerdir'
[   87.441486][ T8214] fuse: Bad value for 'fd'
[   87.623471][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   87.765092][ T8219] bond2: entered allmulticast mode
[   87.767277][ T8220] macvlan2: entered promiscuous mode
[   87.767299][ T8220] macvlan2: entered allmulticast mode
[   87.767687][ T8220] bond2: entered promiscuous mode
[   87.768308][ T8220] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   87.823778][ T8220] bond2: left promiscuous mode
[   87.997959][ T8230] ublk_ctrl_add_dev: invalid recovery flags 10
[   88.138136][ T8243] netlink: 'syz.3.870': attribute type 15 has an invalid length.
[   88.139740][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.870'.
[   88.145643][ T8243] netlink: 'syz.3.870': attribute type 15 has an invalid length.
[   88.145726][ T8085] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2304 - 0
[   88.145832][ T8085] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2304 - 0
[   88.145857][ T8085] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2304 - 0
[   88.145871][ T8085] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2304 - 0
[   88.156240][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.870'.
[   88.162798][ T8245] netlink: 268 bytes leftover after parsing attributes in process `syz.5.873'.
[   88.205730][ T8249] netlink: 'syz.3.875': attribute type 1 has an invalid length.
[   88.205760][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'.
[   88.274278][   T26] atkbd serio1: keyboard reset failed on 
[   88.552413][ T8270] xt_hashlimit: size too large, truncated to 1048576
[   88.663494][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   88.838445][ T8289] Bluetooth: MGMT ver 1.23
[   88.858763][ T8289] netlink: 'syz.3.887': attribute type 1 has an invalid length.
[   89.186481][ T8309] ªªªªªª: renamed from vlan0 (while UP)
[   89.463481][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   89.594076][ T8345] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[   89.703588][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   89.781019][ T8339] fuse: Bad value for 'fd'
[   90.121976][ T8382] bridge0: port 3(syz_tun) entered blocking state
[   90.122061][ T8382] bridge0: port 3(syz_tun) entered disabled state
[   90.122158][ T8382] syz_tun: entered allmulticast mode
[   90.124077][ T8382] syz_tun: entered promiscuous mode
[   90.124313][ T8382] bridge0: port 3(syz_tun) entered blocking state
[   90.124350][ T8382] bridge0: port 3(syz_tun) entered forwarding state
[   90.433352][ T8424] binder: 8423:8424 ioctl c0306201 20000100 returned -14
[   90.434106][ T8425] binder: 8423:8425 ioctl c0306201 20000100 returned -14
[   90.471742][ T8428] FAULT_INJECTION: forcing a failure.
[   90.471742][ T8428] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   90.471860][ T8428] CPU: 1 UID: 0 PID: 8428 Comm: syz.3.924 Not tainted syzkaller #0 PREEMPT 
[   90.471872][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[   90.471879][ T8428] Call trace:
[   90.471882][ T8428]  show_stack+0x2c/0x3c (C)
[   90.471902][ T8428]  __dump_stack+0x30/0x40
[   90.471913][ T8428]  dump_stack_lvl+0xd8/0x12c
[   90.471923][ T8428]  dump_stack+0x1c/0x28
[   90.471932][ T8428]  should_fail_ex+0x41c/0x590
[   90.471943][ T8428]  should_fail_alloc_page+0xec/0x10c
[   90.471952][ T8428]  prepare_alloc_pages+0x194/0x4a4
[   90.471960][ T8428]  __alloc_frozen_pages_noprof+0x134/0x320
[   90.471968][ T8428]  alloc_pages_mpol+0x1ec/0x3c0
[   90.471977][ T8428]  folio_alloc_mpol_noprof+0x4c/0x248
[   90.471985][ T8428]  vma_alloc_folio_noprof+0x100/0x1dc
[   90.471994][ T8428]  vma_alloc_zeroed_movable_folio+0x74/0x88
[   90.472004][ T8428]  folio_prealloc+0x3c/0x1b0
[   90.472011][ T8428]  do_wp_page+0x16e8/0x4074
[   90.472018][ T8428]  handle_mm_fault+0x123c/0x253c
[   90.472025][ T8428]  do_page_fault+0x77c/0xb88
[   90.472034][ T8428]  do_mem_abort+0x70/0x194
[   90.472043][ T8428]  el0_da+0x78/0x254
[   90.472053][ T8428]  el0t_64_sync_handler+0x10c/0x148
[   90.472062][ T8428]  el0t_64_sync+0x198/0x19c
[   90.472146][ T8428] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   90.743781][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   90.935941][ T8456] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   91.783490][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   91.954886][ T8485] Injecting memory failure for pfn 0x219430 at process virtual address 0x20ffe000
[   91.955060][ T8485] Memory failure: 0x219430: Sending SIGBUS to syz.6.937:8485 due to hardware memory corruption
[   91.955092][ T8485] Memory failure: 0x219430: recovery action for already poisoned page: Failed
[   92.665365][ T8493] __nla_validate_parse: 15 callbacks suppressed
[   92.674002][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'.
[   92.823475][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   92.958108][ T8509] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   93.811749][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.948'.
[   93.811791][ T8517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.948'.
[   93.816239][ T8517] Injecting memory failure for pfn 0x16006f at process virtual address 0x20ffe000
[   93.830358][ T8521] ÿÿÿÿ: renamed from bridge_slave_1 (while UP)
[   93.863467][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   93.893145][ T8526] netlink: 'syz.5.950': attribute type 6 has an invalid length.
[   93.896493][ T8527] netlink: 'syz.5.950': attribute type 6 has an invalid length.
[   93.902512][ T8517] Memory failure: 0x16006f: keeping poisoned page in swap cache
[   93.907166][ T8517] Memory failure: 0x16006f: Sending SIGBUS to syz.3.948:8517 due to hardware memory corruption
[   93.907220][ T8517] Memory failure: 0x16006f: recovery action for dirty swapcache page: Delayed
[   93.907247][ T8517] Injecting memory failure for pfn 0x15d162 at process virtual address 0x20fff000
[   93.907694][ T8517] Memory failure: 0x15d162: Sending SIGBUS to syz.3.948:8517 due to hardware memory corruption
[   93.907723][ T8517] Memory failure: 0x15d162: recovery action for dirty LRU page: Recovered
[   93.938538][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'.
[   93.978811][ T8532] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[   93.998457][ T8534] veth1_macvtap: entered promiscuous mode
[   94.010295][ T8532] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.011868][ T8532] syzkaller0: entered promiscuous mode
[   94.013189][ T8532] syzkaller0: entered allmulticast mode
[   94.028516][ T4471] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   94.045230][ T8532] tipc: Resetting bearer <eth:syzkaller0>
[   94.074193][ T8530] tipc: Resetting bearer <eth:syzkaller0>
[   94.087981][ T8530] tipc: Disabling bearer <eth:syzkaller0>
[   94.398785][ T8579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.964'.
[   94.693365][ T4471] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   94.699642][   T30] audit: type=1326 audit(94.670:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8576 comm="syz.5.963" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83178f68 code=0x0
[   94.903580][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   95.427029][   T30] audit: type=1326 audit(95.400:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8608 comm="syz.5.973" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83178f68 code=0x0
[   95.598960][ T8630] netlink: 28 bytes leftover after parsing attributes in process `syz.6.981'.
[   95.614087][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.6.981'.
[   95.953541][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   96.391444][   T30] audit: type=1326 audit(96.360:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8643 comm="syz.3.984" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0378f68 code=0x0
[   96.398216][   T30] audit: type=1326 audit(96.370:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8643 comm="syz.3.984" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0378f68 code=0x0
[   96.430547][ T8656] loop5: detected capacity change from 0 to 256
[   96.432731][ T8656] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   96.561950][ T8667] loop5: detected capacity change from 0 to 2048
[   96.605026][ T8667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.622660][ T8667] fs-verity (loop5, inode 13): fs-verity keyring is empty, rejecting signed file!
[   96.707902][ T8690] binder: 8688:8690 ioctl c0306201 20000240 returned -14
[   96.719297][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.793514][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.995'.
[   96.983578][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   98.023557][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   98.064701][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'.
[   98.109067][ T8749] netlink: 'syz.2.1007': attribute type 2 has an invalid length.
[   98.599733][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1010'.
[   99.064457][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   99.437690][ T8783] loop5: detected capacity change from 0 to 1024
[   99.438104][ T8783] EXT4-fs: Ignoring removed bh option
[   99.438456][ T8783] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled
[   99.455415][ T8783] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002]
[   99.457165][ T8783] System zones: 0-1, 3-12
[   99.459457][ T8783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.804293][ T8685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  100.103553][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  100.239238][ T8813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1024'.
[  100.249756][ T8815] tipc: Enabled bearer <udp:s>, priority 10
[  100.297983][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.338469][ T8823] loop5: detected capacity change from 0 to 1024
[  100.356885][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'.
[  100.372506][ T8823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.388281][ T8823] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #12: comm syz.5.1027: corrupted in-inode xattr: e_value size too large
[  100.391403][ T8823] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #12: comm syz.5.1027: corrupted in-inode xattr: e_value size too large
[  100.417242][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.578913][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'.
[  100.598485][ T8854] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  100.637979][ T8854] syzkaller0: entered promiscuous mode
[  100.638008][ T8854] syzkaller0: entered allmulticast mode
[  100.789162][ T8881] overlayfs: failed to resolve './file0': -2
[  100.790288][ T8880] loop5: detected capacity change from 0 to 1024
[  100.808956][ T8885] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1048'.
[  100.855154][ T8893] IPVS: length: 51 != 24
[  100.950524][ T8903] netlink: 'syz.6.1055': attribute type 2 has an invalid length.
[  100.950555][ T8903] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1055'.
[  100.987322][ T8911] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  101.143480][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  101.253489][   T26] tipc: Node number set to 801801172
[  101.452679][ T8931] IPVS: Scheduler module ip_vs_sip not found
[  101.838299][   T12] Bluetooth: Error in BCSP hdr checksum
[  101.861327][ T4722] Bluetooth: hci4: unexpected subevent 0x2b length: 30 < 253
[  101.863276][ T4722] Bluetooth: hci4: unexpected subevent 0x2b length: 30 < 253
[  101.868316][ T8946] netlink: 'syz.3.1068': attribute type 1 has an invalid length.
[  101.877903][ T8946] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.879592][ T8950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1069'.
[  101.890359][ T8946] bond2: (slave veth3): Enslaving as an active interface with a down link
[  101.900735][ T8946] bond2: (slave dummy0): making interface the new active one
[  101.903027][ T8946] dummy0: entered promiscuous mode
[  101.905230][ T8946] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  101.913365][ T8946] bond2 (unregistering): (slave veth3): Releasing active interface
[  101.936458][ T8946] bond2 (unregistering): (slave dummy0): Releasing active interface
[  101.974835][ T8946] bond2 (unregistering): Released all slaves
[  102.085244][ T1434] Bluetooth: Error in BCSP hdr checksum
[  102.101280][   T30] audit: type=1326 audit(102.070:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8970 comm="syz.3.1074" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0378f68 code=0x0
[  102.183513][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  102.186622][ T8974] 9p: Bad value for 'rfdno'
[  102.322210][ T8991] 9p: Unknown access argument 18446744073709551615: -34
[  103.225294][ T9024] loop5: detected capacity change from 0 to 512
[  103.233509][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  103.252756][ T9026] binder: 9025:9026 tried to acquire reference to desc 0, got 1 instead
[  103.252858][ T9027] binder: 9025:9027 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  103.252871][ T9027] binder: 9027 RLIMIT_NICE not set
[  103.256582][ T9027] binder: undelivered transaction 13, put_user failed
[  103.256603][ T9027] binder: 9025:9027 ioctl c0306201 200006c0 returned -14
[  103.270077][ T4471] binder: undelivered TRANSACTION_COMPLETE
[  103.273065][ T9031] macsec1: entered promiscuous mode
[  103.275836][ T9031] virt_wifi0: entered promiscuous mode
[  103.276852][ T9031] macsec1: entered allmulticast mode
[  103.277833][ T9031] virt_wifi0: entered allmulticast mode
[  103.557553][ T9058] loop5: detected capacity change from 0 to 512
[  103.570079][ T9058] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1099: invalid indirect mapped block 4294967295 (level 1)
[  103.570120][ T9058] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  103.573439][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  103.573473][    C0] EXT4-fs (loop5): initial error at time 103: ext4_free_branches:1023: inode 11
[  103.573520][    C0] EXT4-fs (loop5): last error at time 103: ext4_free_branches:1023: inode 11
[  103.580120][ T9058] EXT4-fs (loop5): Remounting filesystem read-only
[  103.580259][ T9058] EXT4-fs (loop5): 2 truncates cleaned up
[  103.581005][ T9058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.863563][   T50] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  103.957322][ T9061] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1100'.
[  103.970780][ T9069] netlink: 'syz.2.1102': attribute type 10 has an invalid length.
[  103.972557][ T9070] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1103'.
[  104.028473][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.028609][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.033046][ T9078] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1106'.
[  104.033123][ T9078] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1106'.
[  104.033495][ T9078] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1106'.
[  104.033535][ T9078] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1106'.
[  104.033575][ T9078] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1106'.
[  104.033610][ T9078] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1106'.
[  104.033644][ T9078] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1106'.
[  104.033677][ T9078] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1106'.
[  104.049253][ T9078] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  104.263502][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  104.324953][ T9121] 9p: Bad value for 'rfdno'
[  104.356938][ T9123] xt_ecn: cannot match TCP bits for non-tcp packets
[  104.379599][   T30] audit: type=1326 audit(104.350:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9120 comm="syz.0.1122" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8778f68 code=0x0
[  104.420996][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.536670][ T9146] batman_adv: batadv0: Adding interface: ip6gretap1
[  104.536699][ T9146] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.536725][ T9146] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[  104.561026][ T9148] loop5: detected capacity change from 0 to 512
[  104.582250][ T9148] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1132: inode has both inline data and extents flags
[  104.585028][ T9148] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  104.585364][ T9148] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1132: couldn't read orphan inode 15 (err -117)
[  104.591143][ T9148] loop5: lost filesystem error report for type 5 error -117
[  104.591815][ T9148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.313523][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  105.425171][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.492737][ T9180] loop5: detected capacity change from 0 to 4096
[  105.497011][ T9180] EXT4-fs: inline encryption not supported
[  105.500788][ T9180] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  105.502563][ T9180] EXT4-fs (loop5): Test dummy encryption mode enabled
[  105.503816][ T9180] EXT4-fs (loop5): invalid inodes per group: 9
[  105.503816][ T9180] 
[  105.676147][ T9182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.982391][ T9206] team0: Device wg0 is of different type
[  105.984498][ T9206] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  106.343483][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  106.782839][ T9256] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.817207][    C1] bridge0: received packet on ÿÿÿÿ with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  107.383690][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  107.704238][    C1] bridge0: received packet on ÿÿÿÿ with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  107.896839][ T9292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.423516][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  109.115850][ T9344] veth5: entered promiscuous mode
[  109.473487][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  109.721747][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.014959][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.017442][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.018835][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.021110][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.022686][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  110.096206][ T5842] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.199651][ T5842] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.235560][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  110.237512][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  110.240260][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  110.241935][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  110.251324][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  110.342240][ T5842] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.391281][ T9367] ubi0: attaching mtd0
[  110.391320][ T9367] ubi0 error: ubi_attach_mtd_dev: bad VID header (2228560) or data offsets (2228624)
[  110.458622][ T9387] loop5: detected capacity change from 0 to 512
[  110.488906][ T9387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.511316][ T5842] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.513487][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  110.516224][ T9356] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.516277][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.516375][ T9356] bridge_slave_0: entered allmulticast mode
[  110.516851][ T9356] bridge_slave_0: entered promiscuous mode
[  110.517591][ T9356] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.517617][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.517672][ T9356] bridge_slave_1: entered allmulticast mode
[  110.518103][ T9356] bridge_slave_1: entered promiscuous mode
[  110.539700][ T9356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.540741][ T9356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.558482][ T9356] team0: Port device team_slave_0 added
[  110.560574][ T9356] team0: Port device team_slave_1 added
[  110.606254][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.606286][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.606536][ T9356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.607393][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.607757][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.607910][ T9356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.654897][ T9356] hsr_slave_0: entered promiscuous mode
[  110.656287][ T9356] hsr_slave_1: entered promiscuous mode
[  110.657562][ T9356] debugfs: 'hsr0' already exists in 'hsr'
[  110.658546][ T9356] Cannot create hsr debugfs directory
[  110.723028][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.020831][ T5842] bridge_slave_1: left allmulticast mode
[  111.020869][ T5842] bridge_slave_1: left promiscuous mode
[  111.020949][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.027884][ T5842] bridge_slave_0: left allmulticast mode
[  111.027915][ T5842] bridge_slave_0: left promiscuous mode
[  111.028001][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.104804][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.135582][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.148863][ T5842] bond0 (unregistering): Released all slaves
[  111.151473][ T5842] bond1 (unregistering): Released all slaves
[  111.155973][ T5842] bond2 (unregistering): Released all slaves
[  111.239694][ T5842] tipc: Left network mode
[  111.246754][ T9369] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.248314][ T9369] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.249943][ T9369] bridge_slave_0: entered allmulticast mode
[  111.251938][ T9369] bridge_slave_0: entered promiscuous mode
[  111.254310][ T9369] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.255733][ T9369] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.257170][ T9369] bridge_slave_1: entered allmulticast mode
[  111.258945][ T9369] bridge_slave_1: entered promiscuous mode
[  111.269056][ T9369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.272259][ T9369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.340505][ T9369] team0: Port device team_slave_0 added
[  111.342104][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8
[  111.345119][ T9369] team0: Port device team_slave_1 added
[  111.352904][ T9369] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.357619][ T9369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.362818][ T9369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.364477][ T9369] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.364487][ T9369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.364503][ T9369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.397594][ T9369] hsr_slave_0: entered promiscuous mode
[  111.399142][ T9369] hsr_slave_1: entered promiscuous mode
[  111.400540][ T9369] debugfs: 'hsr0' already exists in 'hsr'
[  111.401781][ T9369] Cannot create hsr debugfs directory
[  111.536977][ T9468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.539428][ T9468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.553547][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  111.627065][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10
[  111.643656][ T5842] hsr_slave_0: left promiscuous mode
[  111.644796][ T5842] hsr_slave_1: left promiscuous mode
[  111.645054][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.645065][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.645457][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.645466][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.651421][ T5842] veth1_macvtap: left promiscuous mode
[  111.651779][ T5842] veth0_macvtap: left promiscuous mode
[  111.651831][ T5842] veth1_vlan: left promiscuous mode
[  111.651865][ T5842] veth0_vlan: left promiscuous mode
[  112.037862][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  112.042709][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  112.103521][   T50] Bluetooth: hci0: command tx timeout
[  112.276331][ T9356] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  112.281376][ T9356] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  112.281740][ T9356] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  112.300482][ T9356] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  112.301440][ T9356] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  112.313647][ T9356] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  112.317310][ T9356] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  112.320974][ T9356] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  112.344081][   T50] Bluetooth: hci3: command tx timeout
[  112.410994][ T4400] 8021q: adding VLAN 0 to HW filter on device eth9
[  112.426014][ T9356] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.437866][ T9356] 8021q: adding VLAN 0 to HW filter on device team0
[  112.441765][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.441807][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.564160][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.564208][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.572452][ T9356] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  112.574543][ T9356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.583468][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  113.255966][ T9356] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.418252][ T9356] veth0_vlan: entered promiscuous mode
[  113.429578][ T9356] veth1_vlan: entered promiscuous mode
[  113.454066][ T9356] veth0_macvtap: entered promiscuous mode
[  113.457739][ T9356] veth1_macvtap: entered promiscuous mode
[  113.474541][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.478433][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.495215][   T39] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.495291][   T39] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.495327][   T39] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.495347][   T39] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.569691][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.569727][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.569863][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.569877][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.617826][ T9369] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  113.622610][ T9369] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  113.623065][ T9369] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  113.624181][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  113.625287][ T9369] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  113.626268][ T9369] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  113.627787][ T9369] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  113.628084][ T9369] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  113.866962][ T9369] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  113.946622][ T9369] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.955366][ T9369] 8021q: adding VLAN 0 to HW filter on device team0
[  113.961063][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.961105][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.972697][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.972739][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.070324][ T9613] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8
[  114.098200][ T9581] __nla_validate_parse: 31 callbacks suppressed
[  114.098239][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'.
[  114.182687][ T9369] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.184238][   T50] Bluetooth: hci0: command tx timeout
[  114.216130][ T9369] veth0_vlan: entered promiscuous mode
[  114.222778][ T9369] veth1_vlan: entered promiscuous mode
[  114.247771][ T9369] veth0_macvtap: entered promiscuous mode
[  114.251245][ T9369] veth1_macvtap: entered promiscuous mode
[  114.268931][ T9369] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.277656][ T9369] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.281596][   T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.282853][   T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.282875][   T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.282890][   T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.295519][ T9642] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1223'.
[  114.297298][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1223'.
[  114.300058][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1223'.
[  114.377846][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.377882][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.390343][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.390376][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.427089][   T50] Bluetooth: hci3: command tx timeout
[  114.430689][ T9654] x_tables: duplicate underflow at hook 1
[  114.434103][ T9659] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bond, syncid = 4, id = 0
[  114.673459][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  114.760315][ T9666] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  114.760374][ T9666] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  114.760405][ T9666] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  114.760431][ T9666] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  114.760463][ T9666] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  114.760488][ T9666] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  114.760513][ T9666] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  114.862081][ T9688] loop0: detected capacity change from 0 to 512
[  114.877283][ T9688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.895096][ T9693] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  114.925483][ T9369] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.979765][ T9703] syzkaller1: entered promiscuous mode
[  114.981018][ T9703] syzkaller1: entered allmulticast mode
[  115.411048][ T9721] loop6: detected capacity change from 0 to 256
[  115.494550][ T9725] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  116.060289][ T9758] loop5: detected capacity change from 0 to 128
[  116.060962][ T9758] EXT4-fs: Ignoring removed nobh option
[  116.064949][ T9758] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  116.312677][   T50] Bluetooth: hci0: command tx timeout
[  116.368756][ T9763] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1253'.
[  116.387864][ T5175] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  116.503773][   T50] Bluetooth: hci3: command tx timeout
[  116.665574][ T9783] loop0: detected capacity change from 0 to 8
[  116.671778][ T9784] loop5: detected capacity change from 0 to 512
[  116.676665][ T9784] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  116.678548][ T9784] EXT4-fs (loop5): orphan cleanup on readonly fs
[  116.683147][ T9784] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present
[  116.697253][ T9783] overlay: filesystem on ./file0 is read-only
[  116.717353][ T9784] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  116.717410][ T9784] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1261: Failed to acquire dquot type 1
[  116.717428][ T9784] loop5: lost filesystem error report for type 5 error -5
[  116.723466][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  116.723503][    C1] EXT4-fs (loop5): initial error at time 116: ext4_acquire_dquot:7041
[  116.723551][    C1] EXT4-fs (loop5): last error at time 116: ext4_acquire_dquot:7041
[  116.726607][ T9784] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1261: bg 0: block 40: padding at end of block bitmap is not set
[  116.726660][ T9784] loop5: lost filesystem error report for type 5 error -117
[  116.727290][ T9784] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  116.727344][ T9784] loop5: lost filesystem error report for type 5 error -117
[  116.727697][ T9784] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #16: comm syz.5.1261: data will be lost
[  116.727903][ T9784] EXT4-fs (loop5): 1 truncate cleaned up
[  116.737986][ T9784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  116.782957][   T30] audit: type=1326 audit(116.750:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9788 comm="syz.6.1264" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5978f68 code=0x0
[  116.895424][ T9796] loop0: detected capacity change from 0 to 512
[  116.905241][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.350253][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1268'.
[  117.392405][ T9812] loop5: detected capacity change from 0 to 1024
[  117.430849][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1264'.
[  117.438568][ T9812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  117.486597][ T9812] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.1270: Freeing blocks not in datazone - block = 0, count = 16
[  117.502004][ T9812] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1270: bg 0: block 112: padding at end of block bitmap is not set
[  117.514045][ T9812] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28
[  117.516511][ T9812] EXT4-fs (loop5): This should not happen!! Data will be lost
[  117.516511][ T9812] 
[  117.518594][ T9812] EXT4-fs (loop5): Total free blocks count 0
[  117.521136][ T9812] EXT4-fs (loop5): Free/Dirty block details
[  117.522305][ T9812] EXT4-fs (loop5): free_blocks=0
[  117.522325][ T9812] EXT4-fs (loop5): dirty_blocks=80
[  117.522334][ T9812] EXT4-fs (loop5): Block reservation details
[  117.522342][ T9812] EXT4-fs (loop5): i_reserved_data_blocks=5
[  117.783543][    C1] net_ratelimit: 49 callbacks suppressed
[  117.783602][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  118.049966][ T9834] syzkaller1: entered promiscuous mode
[  118.051180][ T9834] syzkaller1: entered allmulticast mode
[  118.476879][   T50] Bluetooth: hci0: command tx timeout
[  118.507612][ T5175] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  118.508324][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  118.594510][ T4722] Bluetooth: hci3: command tx timeout
[  118.819969][ T9870] loop6: detected capacity change from 0 to 256
[  118.820448][ T9870] vfat: Unknown parameter 'nnonumtail'
[  118.833480][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  119.034620][ T9883] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  119.840430][ T9913] devpts: Bad value for 'max'
[  119.863527][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  120.903473][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  121.009199][ T9939] loop5: detected capacity change from 0 to 256
[  121.092103][ T9944] overlay: ./file0 is not a directory
[  121.342933][ T9934] syz.2.1304 (9934): drop_caches: 2
[  121.419315][ T9971] input: syz1 as /devices/virtual/input/input9
[  121.609026][T10000] x_tables: duplicate underflow at hook 1
[  121.707664][T10009] loop5: detected capacity change from 0 to 512
[  121.712536][T10009] EXT4-fs (loop5): Test dummy encryption mode enabled
[  121.712572][T10009] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  121.712585][T10009] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities
[  121.724656][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1332'.
[  121.735302][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1332'.
[  121.735355][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1332'.
[  121.740643][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1332'.
[  121.742453][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1332'.
[  121.750130][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1332'.
[  121.751728][T10013] sctp: [Deprecated]: syz.6.1333 (pid 10013) Use of int in maxseg socket option.
[  121.751728][T10013] Use struct sctp_assoc_value instead
[  121.756190][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1332'.
[  121.760803][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1332'.
[  121.762830][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1332'.
[  121.776016][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1332'.
[  121.822346][T10014] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.822590][T10014] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.831368][T10022] loop5: detected capacity change from 0 to 4096
[  121.831922][T10022] EXT4-fs: inline encryption not supported
[  121.834909][T10022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  121.834939][T10022] EXT4-fs (loop5): Test dummy encryption mode enabled
[  121.853537][T10022] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  121.853594][T10022] System zones: 0-5
[  121.854934][T10022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.943089][T10014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.944821][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  121.950797][T10014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.963806][T10014] tipc: Resetting bearer <eth:vlan0>
[  122.200081][   T39] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 2304 - 0
[  122.200144][   T39] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.200231][   T39] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 2304 - 0
[  122.200261][   T39] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.200300][   T39] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 2304 - 0
[  122.200328][   T39] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.200363][   T39] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 2304 - 0
[  122.200390][   T39] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.399678][T10041] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  122.748743][T10039] overlayfs: failed to clone upperpath
[  122.820548][T10061] fuse: Bad value for 'fd'
[  122.983525][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  123.339391][T10094] loop6: detected capacity change from 0 to 8192
[  123.377950][T10094]  loop6: AHDI p1 p2 p3 p4
[  123.378152][T10094] loop6: p1 start 65535 is beyond EOD, truncated
[  123.381143][T10094] loop6: p3 start 1671679 is beyond EOD, truncated
[  123.381223][T10094] loop6: p4 size 1073741824 extends beyond EOD, truncated
[  123.754537][T10101] »»»»»»: renamed from vlan0 (while UP)
[  124.023856][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  124.860195][T10147] veth0_to_bond: entered allmulticast mode
[  124.861991][T10147] fuse: Bad value for 'fd'
[  124.934997][   T50] Bluetooth: hci4: ACL packet too small
[  125.063579][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  125.560897][T10165] netlink: 'syz.2.1367': attribute type 2 has an invalid length.
[  125.561335][T10165] netlink: 'syz.2.1367': attribute type 2 has an invalid length.
[  125.945803][ T1598] ieee802154 phy0 wpan0: encryption failed: -22
[  125.945852][ T1598] ieee802154 phy1 wpan1: encryption failed: -22
[  126.103517][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  126.245874][T10190] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  126.280771][T10190] bond2 (unregistering): Released all slaves
[  126.640139][T10206] fuse: Bad value for 'fd'
[  126.756465][   T30] audit: type=1326 audit(126.730:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10210 comm="syz.5.1380" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83178f68 code=0x0
[  127.013625][T10134] Bluetooth: Error in BCSP hdr checksum
[  127.143506][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  127.274831][ T1262] Bluetooth: Error in BCSP hdr checksum
[  127.358613][T10220] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  127.533588][ T1262] Bluetooth: Error in BCSP hdr checksum
[  128.183571][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  128.383226][T10249] __nla_validate_parse: 167 callbacks suppressed
[  128.386457][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1392'.
[  128.410277][T10251] veth0_to_batadv: entered allmulticast mode
[  128.410432][T10251] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  128.825112][ T4722] Bluetooth: hci5: command 0x1003 tx timeout
[  128.826354][   T50] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  128.906580][T10273] loop6: detected capacity change from 0 to 1024
[  128.908279][T10273] EXT4-fs: Ignoring removed nomblk_io_submit option
[  128.937953][T10273] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  128.938108][T10273] System zones: 0-1, 3-36
[  128.950075][T10273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.980692][T10282] binder: 10281:10282 ioctl 40046205 0 returned -22
[  128.980956][T10282] binder: 10281:10282 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  128.980981][T10282] binder: 10282 RLIMIT_NICE not set
[  128.990287][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'.
[  128.992751][ T9356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.039723][T10286] binder: 10281:10286 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  129.039785][T10286] binder: 10286 RLIMIT_NICE not set
[  129.067696][T10134] wlan1: Trigger new scan to find an IBSS to join
[  129.178677][T10303] netlink: 'syz.3.1408': attribute type 11 has an invalid length.
[  129.223485][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  129.251344][T10302] PKCS7: Unknown OID: [4] 0.0
[  129.251382][T10302] PKCS7: Only support pkcs7_signedData type
[  129.323050][T10308] netlink: 'syz.6.1411': attribute type 11 has an invalid length.
[  129.409147][T10309] loop6: detected capacity change from 0 to 1024
[  129.409584][T10309] EXT4-fs: Ignoring removed nobh option
[  129.409613][T10309] EXT4-fs: Ignoring removed nomblk_io_submit option
[  129.435919][T10309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.510080][ T9356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.555545][   T30] audit: type=1326 audit(129.530:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10315 comm="syz.6.1413" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5978f68 code=0x0
[  129.714591][T10325] binder: 10323:10325 ioctl 4c82 0 returned -22
[  130.263589][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  130.694376][T10358] overlayfs: failed to clone upperpath
[  131.134885][T10375] sctp: [Deprecated]: syz.2.1432 (pid 10375) Use of int in max_burst socket option.
[  131.134885][T10375] Use struct sctp_assoc_value instead
[  131.303508][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  132.317266][T10398] loop6: detected capacity change from 0 to 512
[  132.332818][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1437'.
[  132.343722][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  132.492944][T10423] bond0: entered promiscuous mode
[  132.498496][T10423] bond_slave_0: entered promiscuous mode
[  132.501656][T10423] bond_slave_1: entered promiscuous mode
[  132.502222][T10423] batadv0: entered promiscuous mode
[  132.502450][T10423] debugfs: 'hsr1' already exists in 'hsr'
[  132.502466][T10423] Cannot create hsr debugfs directory
[  132.502699][T10423] 8021q: adding VLAN 0 to HW filter on device hsr1
[  132.506391][T10423] bond0: left promiscuous mode
[  132.506416][T10423] bond_slave_0: left promiscuous mode
[  132.506487][T10423] bond_slave_1: left promiscuous mode
[  132.508793][T10423] batadv0: left promiscuous mode
[  132.524093][T10411] netlink: 'syz.0.1442': attribute type 46 has an invalid length.
[  132.532109][T10424] bond0: entered promiscuous mode
[  132.533147][T10424] bond_slave_0: entered promiscuous mode
[  132.534655][T10424] bond_slave_1: entered promiscuous mode
[  132.536596][T10424] batadv0: entered promiscuous mode
[  132.538515][T10424] debugfs: 'hsr1' already exists in 'hsr'
[  132.539782][T10424] Cannot create hsr debugfs directory
[  132.541192][T10424] 8021q: adding VLAN 0 to HW filter on device hsr1
[  132.549697][T10424] bond0: left promiscuous mode
[  132.549771][T10424] bond_slave_0: left promiscuous mode
[  132.549933][T10424] bond_slave_1: left promiscuous mode
[  132.554152][T10424] batadv0: left promiscuous mode
[  133.050919][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1454'.
[  133.066153][T10462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1455'.
[  133.383726][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  133.597704][T10488] overlayfs: missing 'workdir'
[  133.605771][T10490] overlayfs: missing 'lowerdir'
[  133.741171][T10497] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1463'.
[  134.103991][T10134] wlan1: Trigger new scan to find an IBSS to join
[  134.151318][T10514] vlan0: entered promiscuous mode
[  134.151412][T10514] hsr0: entered promiscuous mode
[  134.151551][T10514] vlan0: entered allmulticast mode
[  134.151567][T10514] hsr0: entered allmulticast mode
[  134.151575][T10514] hsr_slave_0: entered allmulticast mode
[  134.151586][T10514] hsr_slave_1: entered allmulticast mode
[  134.153369][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1467'.
[  134.157503][T10514] hsr_slave_0: left promiscuous mode
[  134.158665][T10514] hsr_slave_1: left promiscuous mode
[  134.190585][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.192829][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.192880][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.192906][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.192930][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.192951][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.192972][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.192989][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193004][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193020][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193035][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193053][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193069][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193084][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193099][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193115][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193130][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193147][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193163][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193178][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193193][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193208][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193278][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193302][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193320][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193339][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193355][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193371][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193407][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193424][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193440][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193455][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193473][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193488][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193503][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193519][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193536][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193552][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193574][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193591][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193607][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193622][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193638][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193653][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193674][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193693][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193709][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193726][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193743][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193758][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193773][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193789][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193804][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193819][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193836][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193851][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193866][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193882][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193897][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193912][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193929][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193944][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193960][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193975][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.193992][   T50] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.228586][T10520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1469'.
[  134.228601][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1469'.
[  134.228617][T10520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1469'.
[  134.405600][ T4719] cgroup: fork rejected by pids controller in /syz2
[  134.423690][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  134.473110][ T8726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.511439][ T8726] bridge0: port 3(syz_tun) entered disabled state
[  134.521244][ T8726] syz_tun (unregistering): left allmulticast mode
[  134.521494][ T8726] syz_tun (unregistering): left promiscuous mode
[  134.521523][ T8726] bridge0: port 3(syz_tun) entered disabled state
[  134.531108][T10541] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  134.660603][T10548] input: syz1 as /devices/virtual/input/input12
[  135.081799][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  135.083754][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  135.085118][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  135.086195][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  135.086460][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  135.209185][T10134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.350744][T10583] macvlan2: entered allmulticast mode
[  135.350779][T10583] batadv_slave_1: entered allmulticast mode
[  135.351306][T10583] batman_adv: batadv0: Adding interface: macvlan2
[  135.351315][T10583] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.351332][T10583] batman_adv: batadv0: Interface activated: macvlan2
[  135.367691][T10583] 9p: Could not find request transport: fd¢rfdno=0x0000000000000003
[  135.378976][T10561] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.380322][T10561] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.380418][T10561] bridge_slave_0: entered allmulticast mode
[  135.380906][T10561] bridge_slave_0: entered promiscuous mode
[  135.382682][T10561] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.382734][T10561] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.382800][T10561] bridge_slave_1: entered allmulticast mode
[  135.383334][T10561] bridge_slave_1: entered promiscuous mode
[  135.395250][T10561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.397217][T10561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.408080][T10561] team0: Port device team_slave_0 added
[  135.409019][T10561] team0: Port device team_slave_1 added
[  135.415990][T10561] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.416009][T10561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.416278][T10561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.417812][T10561] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.418079][T10561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.418106][T10561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.429299][T10561] hsr_slave_0: entered promiscuous mode
[  135.429646][T10561] hsr_slave_1: entered promiscuous mode
[  135.430181][T10561] debugfs: 'hsr0' already exists in 'hsr'
[  135.430362][T10561] Cannot create hsr debugfs directory
[  135.463580][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  135.621248][T10561] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.018580][T10610] loop6: detected capacity change from 0 to 512
[  136.035169][T10610] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1492: invalid indirect mapped block 4294967295 (level 1)
[  136.035223][T10610] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  136.039310][T10610] EXT4-fs (loop6): Remounting filesystem read-only
[  136.039693][T10610] EXT4-fs (loop6): 2 truncates cleaned up
[  136.045156][T10610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.124324][T10561] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.144023][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  136.149302][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  136.153352][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  136.155608][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  136.157545][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  136.193145][T10134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.240217][T10561] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.281862][T10134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.356818][T10561] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.407183][T10134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.437920][T10614] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.438003][T10614] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.438084][T10614] bridge_slave_0: entered allmulticast mode
[  136.438622][T10614] bridge_slave_0: entered promiscuous mode
[  136.439642][T10614] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.439696][T10614] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.439794][T10614] bridge_slave_1: entered allmulticast mode
[  136.440221][T10614] bridge_slave_1: entered promiscuous mode
[  136.452141][T10614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.453273][T10614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.460581][T10614] team0: Port device team_slave_0 added
[  136.461550][T10614] team0: Port device team_slave_1 added
[  136.472772][T10614] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.472792][T10614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.472809][T10614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.474240][T10614] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.474250][T10614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.474268][T10614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.497939][T10134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.503691][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  136.518143][T10614] hsr_slave_0: entered promiscuous mode
[  136.518519][T10614] hsr_slave_1: entered promiscuous mode
[  136.518740][T10614] debugfs: 'hsr0' already exists in 'hsr'
[  136.518750][T10614] Cannot create hsr debugfs directory
[  136.580494][T10561] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  136.601295][T10561] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  136.616963][T10561] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  136.623873][T10561] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  136.627773][T10632] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  136.642634][T10561] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  136.645298][T10561] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  136.647162][T10561] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  136.652872][T10634] use of bytesused == 0 is deprecated and will be removed in the future,
[  136.653170][T10561] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  136.656626][T10634] use the actual size instead.
[  136.733766][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1496'.
[  136.747925][T10134] bridge_slave_1: left allmulticast mode
[  136.747959][T10134] bridge_slave_1: left promiscuous mode
[  136.748416][T10134] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.752396][T10134] bridge_slave_0: left allmulticast mode
[  136.752486][T10134] bridge_slave_0: left promiscuous mode
[  136.752561][T10134] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.845371][T10134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.894605][ T9356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.919428][T10134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.945291][T10134] bond0 (unregistering): Released all slaves
[  136.956712][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1500'.
[  137.052143][T10561] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.059208][T10561] 8021q: adding VLAN 0 to HW filter on device team0
[  137.061376][T10098] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.061426][T10098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.065753][T10100] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.065803][T10100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.144029][   T50] Bluetooth: hci2: command tx timeout
[  137.258262][T10134] hsr_slave_0: left promiscuous mode
[  137.260616][T10134] hsr_slave_1: left promiscuous mode
[  137.262117][T10134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.263811][T10134] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.266169][T10134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.267909][T10134] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.278461][T10134] veth1_macvtap: left promiscuous mode
[  137.279709][T10134] veth0_macvtap: left promiscuous mode
[  137.280840][T10134] veth1_vlan: left promiscuous mode
[  137.280876][T10134] veth0_vlan: left promiscuous mode
[  137.393938][T10134] team0 (unregistering): Port device team_slave_1 removed
[  137.397782][T10134] team0 (unregistering): Port device team_slave_0 removed
[  137.455346][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8
[  137.485248][T10561] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.519042][T10561] veth0_vlan: entered promiscuous mode
[  137.522804][T10561] veth1_vlan: entered promiscuous mode
[  137.543503][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  137.555684][T10561] veth0_macvtap: entered promiscuous mode
[  137.558441][T10561] veth1_macvtap: entered promiscuous mode
[  137.568573][T10561] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.571549][T10561] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.577993][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.579895][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.582501][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.582587][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.656779][T10698] Option '2O€ÉÇ—Wz
[  137.656779][T10698] ­ f:ó–ã5úÉùÔAŠÀ-
[  137.656779][T10698] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~RãN+o¸ý{j\°' to dns_resolver key: bad/missing value
[  137.697080][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.697110][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.708379][T10614] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  137.711220][T10614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  137.713926][T10614] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  137.729423][T10614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  137.737219][T10106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.737251][T10106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.742870][T10614] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  137.758312][T10614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  137.758676][T10614] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  137.762153][T10614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  137.852640][T10614] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.871518][T10614] 8021q: adding VLAN 0 to HW filter on device team0
[  137.878684][T10106] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.878721][T10106] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.882662][T10098] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.882706][T10098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.906254][T10720] input: syz1 as /devices/virtual/input/input13
[  137.917041][T10723] 9p: Bad value for 'wfdno'
[  137.921281][T10723] 9p: Bad value for 'wfdno'
[  137.965041][T10730] loop2: detected capacity change from 0 to 1024
[  137.965353][T10730] EXT4-fs: Ignoring removed orlov option
[  137.965379][T10730] EXT4-fs: Ignoring removed orlov option
[  137.969045][T10730] EXT4-fs: test_dummy_encryption requires encrypt feature
[  138.185380][   T50] Bluetooth: hci3: command tx timeout
[  138.228844][T10711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.318000][T10711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.324176][T10614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.346892][T10614] veth0_vlan: entered promiscuous mode
[  138.351340][T10614] veth1_vlan: entered promiscuous mode
[  138.361519][T10614] veth0_macvtap: entered promiscuous mode
[  138.363068][T10614] veth1_macvtap: entered promiscuous mode
[  138.370061][T10614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.371384][T10614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.377450][T10134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.377492][T10134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.377508][T10134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.377524][T10134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.416579][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.416609][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.429271][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.429308][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.528733][T10745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1493'.
[  138.583607][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  138.967836][T10752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1511'.
[  138.967893][T10752] netlink: 'syz.3.1511': attribute type 2 has an invalid length.
[  138.967901][T10752] netlink: 'syz.3.1511': attribute type 1 has an invalid length.
[  138.967908][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'.
[  139.322610][ T4722] Bluetooth: hci2: command tx timeout
[  139.323680][   T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  139.323701][   T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT 
[  139.323718][   T50] Tainted: [L]=SOFTLOCKUP
[  139.323723][   T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[  139.323729][   T50] Workqueue: hci1 hci_rx_work
[  139.323751][   T50] Call trace:
[  139.323755][   T50]  show_stack+0x2c/0x3c (C)
[  139.323771][   T50]  __dump_stack+0x30/0x40
[  139.323784][   T50]  dump_stack_lvl+0xd8/0x12c
[  139.323796][   T50]  dump_stack+0x1c/0x28
[  139.323807][   T50]  sysfs_warn_dup+0x9c/0xb8
[  139.323819][   T50]  sysfs_create_dir_ns+0x190/0x1f4
[  139.323831][   T50]  kobject_add_internal+0x290/0x6f0
[  139.323845][   T50]  kobject_add_varg+0x9c/0xe8
[  139.323857][   T50]  kobject_add+0x110/0x1c8
[  139.323868][   T50]  device_add+0x394/0x9e0
[  139.323882][   T50]  hci_conn_add_sysfs+0xbc/0x1e8
[  139.323892][   T50]  le_conn_complete_evt+0xc68/0x10f8
[  139.323902][   T50]  hci_le_conn_complete_evt+0x114/0x3d8
[  139.323910][   T50]  hci_le_meta_evt+0x2b0/0x46c
[  139.323921][   T50]  hci_event_packet+0x4c0/0x9c8
[  139.323931][   T50]  hci_rx_work+0x2f4/0xd78
[  139.323942][   T50]  process_scheduled_works+0x788/0x10b8
[  139.323953][   T50]  worker_thread+0x798/0xbd0
[  139.323964][   T50]  kthread+0x304/0x3d4
[  139.323973][   T50]  ret_from_fork+0x10/0x20
[  139.324003][   T50] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  139.324023][   T50] Bluetooth: hci1: failed to register connection device
[  139.478908][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'.
[  139.623546][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  140.046777][T10789] loop6: detected capacity change from 0 to 512
[  140.087762][T10789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.163028][ T9356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.263499][ T4722] Bluetooth: hci3: command tx timeout
[  140.663691][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  140.697707][T10810] overlay: ./file0 is not a directory
[  140.706534][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1528'.
[  141.347703][T10828] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1534'.
[  141.362637][T10830] tipc: Disabling bearer <eth:vlan0>
[  141.393944][ T4722] Bluetooth: hci2: command tx timeout
[  141.703523][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  142.038361][T10866] loop2: detected capacity change from 0 to 512
[  142.042365][T10866] EXT4-fs: Ignoring removed bh option
[  142.043881][T10866] EXT4-fs: inline encryption not supported
[  142.046868][T10866] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  142.061228][T10866] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  142.065353][T10866] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1544: bg 0: block 248: padding at end of block bitmap is not set
[  142.065397][T10866] loop2: lost filesystem error report for type 5 error -117
[  142.070473][T10866] Quota error (device loop2): write_blk: dquota write failed
[  142.073371][T10866] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  142.073434][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  142.073462][    C1] EXT4-fs (loop2): last error at time 142: ext4_validate_block_bitmap:441
[  142.080043][T10866] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1544: Failed to acquire dquot type 1
[  142.082294][T10866] loop2: lost filesystem error report for type 5 error -28
[  142.085475][T10866] EXT4-fs (loop2): 1 truncate cleaned up
[  142.087514][T10866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  142.108833][T10868] could not allocate digest TFM handle sha256-asm
[  142.126007][T10561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  142.361259][T10877] Injecting memory failure for pfn 0x1635f7 at process virtual address 0x20289000
[  142.385199][ T4722] Bluetooth: hci3: command tx timeout
[  142.535899][T10877] Memory failure: 0x1635f7: Sending SIGBUS to syz.2.1545:10877 due to hardware memory corruption
[  142.535961][T10877] Memory failure: 0x1635f7: recovery action for dirty LRU page: Recovered
[  142.535986][T10877] Injecting memory failure for pfn 0x1635f6 at process virtual address 0x2028a000
[  142.536172][T10877] Memory failure: 0x1635f6: Sending SIGBUS to syz.2.1545:10877 due to hardware memory corruption
[  142.536195][T10877] Memory failure: 0x1635f6: recovery action for dirty LRU page: Recovered
[  142.536208][T10877] Injecting memory failure for pfn 0x1635f5 at process virtual address 0x2028b000
[  142.536395][T10877] Memory failure: 0x1635f5: Sending SIGBUS to syz.2.1545:10877 due to hardware memory corruption
[  142.536418][T10877] Memory failure: 0x1635f5: recovery action for dirty LRU page: Recovered
[  142.536430][T10877] Injecting memory failure for pfn 0x1635f4 at process virtual address 0x2028c000
[  142.536467][T10877] Memory failure: 0x1635f4: Sending SIGBUS to syz.2.1545:10877 due to hardware memory corruption
[  142.536487][T10877] Memory failure: 0x1635f4: recovery action for dirty LRU page: Recovered
[  142.674085][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1552'.
[  142.743602][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  142.853050][T10905] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1554'.
[  142.860613][   T30] audit: type=1326 audit(142.830:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10904 comm="syz.3.1554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0378f68 code=0x0
[  143.473618][ T4722] Bluetooth: hci2: command tx timeout
[  143.646324][T10976] bpf setsockopt: ignoring program buffer with optlen=30428 (max_optlen=4096)
[  143.651448][T10979] loop2: detected capacity change from 0 to 1024
[  143.689366][T10979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  143.701347][T10979] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1558: bg 0: block 112: padding at end of block bitmap is not set
[  143.763469][T10982] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1559'.
[  143.783524][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  143.847863][T10979] syzkaller0: entered promiscuous mode
[  143.851216][T10979] syzkaller0: entered allmulticast mode
[  143.868347][T10999] loop6: detected capacity change from 0 to 256
[  143.868784][T10999] vfat: Deprecated parameter 'posix'
[  143.868793][T10999] FAT-fs: "posix" option is obsolete, not supported now
[  143.914602][T11001] overlayfs: failed to clone upperpath
[  143.989070][T11004] 9p: Bad value for 'wfdno'
[  144.553716][T11009] netlink: 'syz.6.1564': attribute type 4 has an invalid length.
[  144.823538][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  144.913518][ T4722] Bluetooth: hci3: command tx timeout
[  145.014063][T11013] fuse: Bad value for 'fd'
[  145.295426][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1572'.
[  145.295462][T11021] netlink: 101 bytes leftover after parsing attributes in process `syz.6.1572'.
[  145.326941][T11021] ==================================================================
[  145.326958][T11021] BUG: KASAN: slab-out-of-bounds in try_module_get+0x50/0x114
[  145.326982][T11021] Write of size 4 at addr ffff0000cbf696f0 by task syz.6.1572/11021
[  145.326991][T11021] 
[  145.326997][T11021] CPU: 1 UID: 0 PID: 11021 Comm: syz.6.1572 Tainted: G             L      syzkaller #0 PREEMPT 
[  145.327009][T11021] Tainted: [L]=SOFTLOCKUP
[  145.327012][T11021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[  145.327017][T11021] Call trace:
[  145.327020][T11021]  show_stack+0x2c/0x3c (C)
[  145.327035][T11021]  __dump_stack+0x30/0x40
[  145.327047][T11021]  dump_stack_lvl+0xd8/0x12c
[  145.327058][T11021]  print_address_description+0xb0/0x238
[  145.327068][T11021]  print_report+0x68/0x84
[  145.327075][T11021]  kasan_report+0x8c/0xc4
[  145.327086][T11021]  kasan_check_range+0x17c/0x1ac
[  145.327096][T11021]  __kasan_check_write+0x20/0x30
[  145.327108][T11021]  try_module_get+0x50/0x114
[  145.327118][T11021]  dvb_device_open+0xf4/0x254
[  145.327127][T11021]  chrdev_open+0x398/0x3e8
[  145.327138][T11021]  do_dentry_open+0x5c4/0xfc0
[  145.327149][T11021]  vfs_open+0x44/0x2dc
[  145.327160][T11021]  path_openat+0x21fc/0x2a60
[  145.327170][T11021]  do_file_open+0x1c8/0x2e8
[  145.327179][T11021]  do_sys_openat2+0x114/0x1e8
[  145.327190][T11021]  do_sys_open+0xb0/0xe0
[  145.327201][T11021]  __arm64_sys_openat+0xa0/0xbc
[  145.327213][T11021]  invoke_syscall+0x98/0x244
[  145.327225][T11021]  el0_svc_common+0xec/0x23c
[  145.327237][T11021]  do_el0_svc+0x4c/0x5c
[  145.327248][T11021]  el0_svc+0x64/0x260
[  145.327259][T11021]  el0t_64_sync_handler+0x48/0x148
[  145.327270][T11021]  el0t_64_sync+0x198/0x19c
[  145.327279][T11021] 
[  145.327282][T11021] Allocated by task 1:
[  145.327286][T11021]  kasan_save_track+0x40/0x78
[  145.327294][T11021]  kasan_save_alloc_info+0x44/0x54
[  145.327304][T11021]  __kasan_kmalloc+0x9c/0xb4
[  145.327312][T11021]  __kmalloc_cache_noprof+0x2e8/0x5ec
[  145.327320][T11021]  bus_add_driver+0x94/0x500
[  145.327329][T11021]  driver_register+0x220/0x310
[  145.327338][T11021]  __platform_driver_register+0x90/0xa4
[  145.327350][T11021]  vidtv_bridge_init+0x4c/0x74
[  145.327362][T11021]  do_one_initcall+0x274/0xc38
[  145.327372][T11021]  do_initcall_level+0x12c/0x1c4
[  145.327381][T11021]  do_initcalls+0x70/0xd0
[  145.327389][T11021]  do_basic_setup+0x7c/0x90
[  145.327397][T11021]  kernel_init_freeable+0x268/0x3a8
[  145.327405][T11021]  kernel_init+0x24/0x1dc
[  145.327412][T11021]  ret_from_fork+0x10/0x20
[  145.327418][T11021] 
[  145.327420][T11021] The buggy address belongs to the object at ffff0000cbf69600
[  145.327420][T11021]  which belongs to the cache kmalloc-256 of size 256
[  145.327427][T11021] The buggy address is located 32 bytes to the right of
[  145.327427][T11021]  allocated 208-byte region [ffff0000cbf69600, ffff0000cbf696d0)
[  145.327435][T11021] 
[  145.327437][T11021] The buggy address belongs to the physical page:
[  145.327442][T11021] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10bf68
[  145.327449][T11021] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  145.327456][T11021] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[  145.327464][T11021] page_type: f5(slab)
[  145.327472][T11021] raw: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122
[  145.327479][T11021] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  145.327486][T11021] head: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122
[  145.327493][T11021] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  145.327500][T11021] head: 05ffc00000000001 fffffdffc32fda01 00000000ffffffff 00000000ffffffff
[  145.327507][T11021] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  145.327511][T11021] page dumped because: kasan: bad access detected
[  145.327515][T11021] 
[  145.327517][T11021] Memory state around the buggy address:
[  145.327521][T11021]  ffff0000cbf69580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  145.327526][T11021]  ffff0000cbf69600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  145.327532][T11021] >ffff0000cbf69680: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[  145.327536][T11021]                                                              ^
[  145.327541][T11021]  ffff0000cbf69700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  145.327546][T11021]  ffff0000cbf69780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  145.327550][T11021] ==================================================================
[  145.331549][T11021] Disabling lock debugging due to kernel taint
[  145.430777][T10561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  145.863435][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  146.903470][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  147.943433][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  148.993541][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  150.023432][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  151.073489][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  152.103435][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  153.153462][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  154.183431][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  155.233465][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available