last executing test programs:

22.086100793s ago: executing program 1 (id=62):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0x4044454)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40)
r2 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)
r3 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x90\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
fcntl$addseals(r3, 0x409, 0x20)
get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000ff3000/0xc000)=nil, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1f00000000000000000000000010000020200000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00m\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50)

22.036531136s ago: executing program 1 (id=64):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4f, 0x1, 0x0, 0x76db, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4f, 0x1, 0x0, 0x76db, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3b)

21.964959159s ago: executing program 1 (id=65):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0)
fcntl$lock(r2, 0x6, &(0x7f00000001c0)={0x0, 0x2, 0x300, 0x3, r0})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
socket$inet6(0xa, 0x5, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)

21.085546768s ago: executing program 1 (id=78):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000970080850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x1}})
io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r10, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000080), 0x4)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000000b63230c041a8883135151b672c7968ffd7c4809ac5171567f72b408165cd2b7af69902b4fb8ad728c3673f34fd817dc418757d2fc2a008fd55e89816566c5f9c6e98f2c7b5e7514b00513a596ef79f02b128"], 0x24, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x80000, 0x0, 0x0, 0x0, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r12=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000200)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x14, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x29a8}, 0x94)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

20.768848605s ago: executing program 1 (id=80):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x8, 0x4) (async)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) (async)
sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0xa0c6}], 0x1, 0x5557b0aa16784da4, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="ad43f8fffffffbdbdf250700"], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) (async)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfd, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40000)

20.351837263s ago: executing program 1 (id=84):
r0 = socket(0xa, 0x3, 0x3a)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
readv(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0xfffffeb1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r6=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r6}, 0xc)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/19, 0x1003000, 0x1000, 0xbe4d, 0x2}, 0x20)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xd, r6, 0xfffffffc}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)

20.315509566s ago: executing program 32 (id=84):
r0 = socket(0xa, 0x3, 0x3a)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
readv(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0xfffffeb1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r6=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r6}, 0xc)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/19, 0x1003000, 0x1000, 0xbe4d, 0x2}, 0x20)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xd, r6, 0xfffffffc}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)

18.996882299s ago: executing program 2 (id=98):
landlock_restrict_self(0xffffffffffffffff, 0x4) (async, rerun: 32)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x1)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 32)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x3, 0x0) (rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5, 0xfdfdffffffffffff, &(0x7f0000000500)="00000c44f5"}) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) (rerun: 32)

18.757725109s ago: executing program 2 (id=104):
r0 = io_uring_setup(0xaad, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x24, &(0x7f00000002c0), 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x44801)
close(r1)
ioctl$NILFS_IOCTL_GET_BDESCS(r1, 0xc0186e87, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x400, 0x0, 0x7, 0xb, 0x10000}, {0x10000, 0x6, 0x3, 0x80000001, 0x6}, {0x100, 0xc, 0x6e, 0x2, 0x8}], 0x3, 0x28, 0xd9eb, 0xfffffffffffffffb})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TUNGETVNETLE(r1, 0xc008744c, &(0x7f0000000180))

18.552869055s ago: executing program 2 (id=105):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x5})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@map, 0xf, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12)

18.542266316s ago: executing program 2 (id=106):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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")
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00')
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

18.454815976s ago: executing program 2 (id=107):
r0 = socket(0xa, 0x3, 0x3a)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
readv(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0xfffffeb1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r6=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r6}, 0xc)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/19, 0x1003000, 0x1000, 0xbe4d, 0x2}, 0x20)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xd, r6, 0xfffffffc}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)

18.076757584s ago: executing program 2 (id=108):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00')
openat(r0, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe2342, 0x16b)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r7, 0x16, 0x0, @void}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x6, 0x1, 0x8001, 0x66198, r0, 0x4, '\x00', r4, r7, 0x4, 0x3, 0x3}, 0x50)

17.986402629s ago: executing program 33 (id=108):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00')
openat(r0, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe2342, 0x16b)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r7, 0x16, 0x0, @void}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x6, 0x1, 0x8001, 0x66198, r0, 0x4, '\x00', r4, r7, 0x4, 0x3, 0x3}, 0x50)

4.13880627s ago: executing program 5 (id=294):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x44}}, 0x0)

4.011986858s ago: executing program 5 (id=296):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendfile(r1, r0, 0x0, 0x8)

3.708275212s ago: executing program 5 (id=300):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000e00)=ANY=[@ANYBLOB="756e695f786c6174653d302c696f636861727365743d63703836312c726f6469722c756e695f786c6174653d312c696f636861727365743d63703835302c73686f72746e616d653d6d697865642c696f636861727365743d69736f383835392d342c71756965742c73686f72746e616d653d6c6f7765722c696f636861727365743d63703933362c73686f72746e616d653d77696e6e742c726f6469722c757466383d302c666c7573682c00dff6d66f75a91be5f84ca1a787f0bac384746c6713f02d1d47d38af67fc7bf761ec3753e753c6f25ca1f98804a4b35fcc794ec7ba4e9f43d2c964f6f3802d20631fd6bc5fe6fd406f6bae330d1e34b5b2e4f223b765a6caaddc40ebc8b3abacc8d8b13700c0b14f50ac1aa3e38c79dbcd4455f559436cea93494a2e6239a7c95407ea31b3e570faada4251e0d55be21ad7dc4d0b2108f772c1cf062d9dfd7ed18dd9d3ad233767bea1ecb8de67fd46ed"], 0x29, 0x344, &(0x7f0000000f80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
fchmodat(r0, &(0x7f0000000300)='.\x00', 0xffffffd3)
r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x5b2, 0x4000)
futex(&(0x7f000000cffc)=0x2, 0x5, 0x2, 0x0, &(0x7f0000048000), 0x23fffffc)
ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xf61db)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x29, 0x344, &(0x7f0000000f80)="$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") (async)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async)
fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) (async)
fchmodat(r0, &(0x7f0000000300)='.\x00', 0xffffffd3) (async)
syz_open_dev$usbmon(&(0x7f0000000040), 0x5b2, 0x4000) (async)
futex(&(0x7f000000cffc)=0x2, 0x5, 0x2, 0x0, &(0x7f0000048000), 0x23fffffc) (async)
ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xf61db) (async)

3.682002885s ago: executing program 5 (id=301):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000016fda736241cbd4e9e8be0f01537ddc869f46c2428a40f2397e93bbdff2a66e260df2315db1b1b9cd9841ba0c84e3faf8e24ac46bc4bd69646ccd0c96f092e777c7fc47c0b3a4daf0f44c8c6e12a4d40306dcf57194be44f994eb8b503b2268781ef121012fc5173564e649e8b1631e7c47947e36e3070553e0c588dd9405901d79ed3641398b8ebfb529c285b8ef310fd7f2ed4900e1849ddf9", @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xa}, @val={0x8, 0x3, r4}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8001)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006e43a206ca78bfa389b6147b74969e2cd18cebc814f1fd9d478b82c5395e247e393a6545506a80e82c6810651b3ad5354d898ac8da138625506a742f9f0d698b01f1f13ae53a1dd03b0cd589c9299eb9a33b66", @ANYRES16=r6, @ANYBLOB="010000000000000000013a00000008000300", @ANYRES32=r7, @ANYBLOB="04005b00"], 0x20}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

3.656978721s ago: executing program 5 (id=302):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x121602, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={<r1=>0x0, 0x2}, 0x0) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x4, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r7, 0x4b3a, 0x1) (async)
ioctl$KDSETMODE(r7, 0x4b3a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r1, 0x401}, &(0x7f0000000180)=0xc) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r8=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e22, 0x5, @empty, 0xfc}}, 0x6, 0x400}, &(0x7f0000000480)=0x90) (async)
r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) (async)
r10 = fsmount(r9, 0x0, 0x6)
fchdir(r10) (async)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
recvmsg$unix(r12, &(0x7f00000004c0)={&(0x7f0000000280), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000300)=""/39, 0xffffffd5}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f00000006c0)=""/75, 0x4b}], 0x3, &(0x7f00000008c0)}, 0x60)
lseek(r11, 0x1, 0x1) (async)
getdents64(r11, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)

3.576704234s ago: executing program 5 (id=304):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}})
writev(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000040a01"], 0xd8}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)

3.495336893s ago: executing program 4 (id=306):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async)
r1 = fsopen(&(0x7f0000000080)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x3, &(0x7f00000000c0)='source', &(0x7f0000000840)='%\\,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0)
fallocate(r0, 0x0, 0x0, 0x90001) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffff, 0x2) (async)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r3 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r6], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$getown(r5, 0x9) (async)
r7 = socket$rxrpc(0x21, 0x2, 0xa) (async)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) (async)
connect$rxrpc(r8, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) (async)
sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async)
connect$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

2.476080959s ago: executing program 6 (id=308):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_ct={0x54, 0x0, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010102}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x0)

2.278044697s ago: executing program 0 (id=309):
r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x404, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$eJzs2E9rXFUYB+D33kxi2sZOqi6sm4oVWpBO/rWhqZvWhSAIFgquVAx2koZMmpJJ0WSV4lIXLgQVEbQbFyLNQuhGNCD4AXRjv4IgKrpwIYzcySQN6SSNdeKh6fPAyZxz37n5vWeGucydAB5YTxZ/soi+iBiMiHLreB4RPc1Zb8TS6vNujCxfKkYWjcaFX7PitLg+snxp7X9lrccD0TwljkfEc89n8ejbd+bWFxanx2u16lxrPTA/c2WgvrB4YmpmfLI6Wb08PHz61NjJodHRsY7tdWggXvvuq7MvL527+uXgK7PTRb99rdrGfXRS1uZYKSJe3Y2wBLpa++nacCwrJWwIAIBtFd/zH4mIp5rf4crRFbe/vJXj1rdJmwMAAAA6onGkAQAAAOxxqX9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/tBoZNEAAAAA9rTUvz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB/uT6yfGlt/J+5v5yLiP7V/ButsVopxVLzsTe6I2L/H1mUNpyXRcRgB/KXrkXE4+32nzXz+6O3udqcn0fE+cT5r3cgHx5kK8X152y7z1++fv2JNp+/0upp/9na9e/GHde/2/ldW1z/ruww4/MfX3p3y/xrEU+U2uVn6/nZFvlLO8z/5sXDH21Va3wWcSza52/MGpifuTJQX1g8MTUzPlmdrF4eHj59auzk0Ojo2MDEVK06uPq3bcYnX7zz/Xb7379Vfhbbvv7v7XD/Rw89+/Wn2+QfP7r9+9/u9S96Wt5h/u8/HPx7q1qRf3GL/d/t/V/ZYf4LN8/f3OFTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYI/KI6Issr6zP87xSiTgQEY/F/rw2W59/ZmL26uWLRS2iP7rzialadTAiyqvrrFgPNee318Ob1iMRcSgi3i/va64rb8zWLqbePAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOsORERfZHklIvKI+LOc55VK6q4AAACAjutP3QAAAACw69z/AwAAwN7n/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddujIyq0sIpbO7GuOQk+r1p20M2C35akbAJLpSt0AkEwpdQNAMu7xgewu9d57qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw9xw7vHIri4ilM/uao9DTqnUn7QzYbXnqBoBkulI3ACRTSt0AkIx7fCC7S733HioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7D19zZHllYjIm/M8r1QiHo6I/ujOJqZq1cGIOBgRP5W7HyrWQ6mbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOPqC4vT47Vadc7ExMRkfZL6ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAr1hcXp8VqtOldP3QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABp5T9nEVGMY+Wn+zZXe7K/ys3HiHjz4wsfvDU+Pz83VBz/bf34/Iet48Mp+gcAAAA2W7tPX7uPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Kn6wuL0eK1WndvFSeo9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zj8BAAD//5GsoMo=")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r1, &(0x7f0000004100)=[{{&(0x7f00000002c0), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
lseek(r0, 0x4, 0x6)
syz_open_dev$video4linux(0x0, 0x7ffffffbffffffff, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r3, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f"], 0x0, 0x305, &(0x7f0000000200)="$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")
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x2}}]}, 0x4c}}, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

2.266959487s ago: executing program 6 (id=311):
r0 = socket$packet(0x11, 0x2, 0x300) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
process_madvise(r3, &(0x7f0000000040)=[{&(0x7f0000000000)='v', 0x1}], 0x1, 0x65, 0x0) (async)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000000180)=@can={0x1d, r4}, 0x80, 0x0}}, {{&(0x7f00000022c0)=@can={0x1d, r4}, 0x80, 0x0}}], 0x2, 0x8008050)
r5 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0xf010000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x980915, 0xfffffffe, '\x00', @p_u8=0x0}}) (async)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/schedstat\x00', 0x0, 0x0)
preadv(r6, &(0x7f0000000480)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1, 0x2, 0x0) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000010180c200"], 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r8=>0x0}) (async)
r9 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000100)={0x3, 0x1, 0x1, 0x0, 0xf8}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000002c0)={0x2, @sliced={0x3ff, [0x80, 0xff, 0x10, 0x2, 0xba26, 0x4, 0x81, 0x400, 0xc38, 0x6, 0x0, 0x7, 0x1000, 0x7, 0xfff, 0x71bb, 0xfffd, 0x4, 0xc6, 0x5, 0x4, 0x7, 0x0, 0x9, 0x95d5, 0x2, 0x8, 0x7ff, 0x3, 0x3, 0x6, 0x3, 0x9, 0x2, 0x989a, 0x7ff, 0x7f, 0x8, 0x0, 0xf000, 0x5, 0xff, 0x401, 0x28f, 0x0, 0x81, 0x3ff, 0x6d07], 0x1}}) (async)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a000000ccb306000200b04b"], 0x38}}, 0x40010)

2.163945438s ago: executing program 6 (id=313):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x13a8, 0x4000}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1f, 0x5, @udp='udp:syz0\x00'}}}, ["", ""]}, 0x34}}, 0x2004000)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="2400000001080300000000000000000000000001050003003a00000005000300110000009b357bb02a5cc27a252490e04c58688254a7d1b7bdc71127034a082045d1a5f9db2377e1cea889d28544fe94c73957c61ddb7e68ef8f4e45380e2f666fcb596cf0edba2217b62789a498917780639dac7267918020d2fa510df445bd3b28dd7afdadbf260844f21a7de13cf6c0185c25ba5e65bc6bb2fe9aec1d05c7db33e3392aba04b7ee36c1452a88316b1201e6b32388b1f8eba5048f601914c4a9e430c2b3c9de6b4b3dd4c1cef308f60192ed5567fc41727cc01718eaf894f8104711cf1cd05327b222176fe612457cf2bd33865fb095b8b5e796f13ff3039296e2723e82a291a59ca220b55f3283b20db0439022fe647460b4bda57d7bf7ad2761fe1c5588091e17ba701d01493780f93117e54bfc352b88c630c7900a2cabb686522041918e3d06ef2a498ae118c3e6d63ade144c2069d0e60b4bda0efd46f280575c8072a3"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@dev, <r8=>0x0}, &(0x7f0000000200)=0x14)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x16}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_TIOCOUTQ(r9, 0x5411, &(0x7f0000000040))
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='9\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff0000000000000000000000000000010500040001000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_io_uring_setup(0x324a, &(0x7f0000000a00)={0x0, 0xdecd, 0x4000, 0x2, 0x3c}, &(0x7f0000000a80)=<r10=>0x0, &(0x7f0000000ac0), &(0x7f0000000b00))
syz_io_uring_setup(0x63a3, &(0x7f0000000b40)={0x0, 0xb177, 0x8000, 0x1, 0x52}, &(0x7f0000000bc0), &(0x7f0000000c00)=<r11=>0x0, &(0x7f0000000c40))
syz_io_uring_complete(r10, r11)

1.51624609s ago: executing program 6 (id=314):
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000600)={&(0x7f0000000540)=[{0x2, 0x2e8695cb, 0x7f, 0x100000001}, {0x2, 0x7, 0xe2c6, 0x2}, {0x1, 0x5, 0x7d74, 0x6}, {0x2, 0x7fffffff, 0x6}, {0xb, 0x7, 0xa0e, 0x3ff}], 0x5, 0x20, 0x0, 0xbc3b}) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (async)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000009aaa0000950000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000000b420001f0ffffff851000000600000085100000fbffffff9500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f0000000700)="76ea090000000000009ba56a88caa296816e2b7e823ce41d2115c9edf22179de9500208d4df768fe290560fee90e9009775bbaf80e988fc44efb57ba385bac3666ceb37e877be9ec76da9f61e01b8e", 0x0, 0x401, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
syz_emit_ethernet(0x12cf, &(0x7f0000000e00)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "91c0c1", 0x1299, 0x2f, 0xff, @remote, @empty, {[@dstopts={0x2f, 0x5, '\x00', [@pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0x2, [0x2, 0xfffffffffffffffa, 0x8000000000000000]}}]}, @dstopts={0x1, 0x18, '\x00', [@generic={0xd, 0x56, "6973fe5cd0634b6ecaf41386d699bdb5da3b56a51daf8ab225d72315f13d3b6d6af0312f3be9902e89f5d52c95ada6e4b042051094af28267e11476f68d4fa25faf48e18f640a6fc64f42fa91bcc3dce24689f2844f0"}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x58, {0x3, 0x14, 0xa0, 0x65, [0x3, 0x1, 0x30b, 0xff, 0x3, 0x9, 0x3ff, 0x3, 0x5, 0xc6ca]}}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x6c, 0x0, [0x1], "728ddbc28ee46a1a51d7ac62bd4fda204fbb10d3bdbc5cb00453cd995af342f869a75eb1478e2e110e57165e189eff10e99829c641ebac6fb01ec0ed486db698273a36e9116dab268df2bd5e178ae63b2e22a064fa65de3292dd33dac68b0826c88c9fad8c3b96741041a208"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3ff, 0x0], "451d104991cbaef8079ef673b2d76fa20f57a359ac9b5b6b404e3f89d3e54051024f911103547168310876b40df33aedd2fe1e2949d7508fe2c50b988b8767d283b240ccacce9b0280ab295560403d68e67c41cb858d1652560fb05be03db897f3bc41795ccea04b7e4824ed7ac67d0708637f42016753a66af1154b0c5d7c352c908029e7917a00e32277a5c883ee8d6d827cb0"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "058fae011c017817c23fda1c026c8f720ed803e7c9f669fb075d90c1f65620b84db4f9de0ef35f8029b60e2d0a931d3e6583fdcbc0504e281c00"/71}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0x2, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x5, 0x0, 0x1, 0x0, 0x4, 0x76}, 0x2, {0xfffffffe, 0x2, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "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"}}}}}}}, 0x0) (async)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[<r4=>0x0], &(0x7f0000000180)=[<r5=>0x0], 0x0, 0x0, 0x1, 0x1}) (async)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r8, 0x100005, 0x5, 0x0, 0x2, [], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe]})
r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, <r11=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]})
ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000280)={r11, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x8, 0x8004], [0x0, 0x3, 0x400000006]})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x7c, 0x30, 0xb, 0x70bd2a, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0xe}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x4, 0x3, 0xfffffb93, 0x1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, <r13=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_SETCRTC(r13, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) (async)
r14 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00')
getdents64(r14, &(0x7f0000000980)=""/4096, 0x1000)

1.405001903s ago: executing program 0 (id=315):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket(0x5, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20040884}, 0xe3eb8408353293a5)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000040)=0x5, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0x1c}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x74)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x1, 0x8c0, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x38, 0x3, 0x0, 0x0, "649cf69ea3e76f79ccd3238e0834d952b6054bdd457e2802a4c866ea94d240e73fb1c08097bae00c3c267a2b5dcdfb946272ca085f4fa96d531abcde7ae0ca2d"}}, 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x50)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.300370811s ago: executing program 6 (id=316):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x2000000, {0x7, 0x0, 0x0, r3, 0x0, 0x8008}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54e88224", @ANYRES16=r0, @ANYBLOB="0100000000000000000007000000080009000300000008000b0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0)

1.230527947s ago: executing program 6 (id=319):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @b={0xc, 0x2, 0x1, 0x1, 0x6, 0x6, 0x6, {0xf, "f6a244320d119b9c359038ee128745"}, 0x7, 0xfb, 0x7, 0x80, 0xd4, "fd28a8b1b9a1d13538b55469e1a849bc68c2b08420b24b67bff72fe2970bcb015ef848d306ed91fb3c9c8eafff45f49bd9ecdf2bf3862a9482889535cdd04c446d6259e4f7c9270ea934495e343b7f6fbfedfaeba0b75ad9cfbe4d18cb9e94a8cf1d4dd3b97979011ca98ede637d4ae84ddbdea348085346b3e3f385b344a243b5288f703d4f3b7eac09b88b6f288fbd6d12378dd6ca4737784d3aa0c44ed1ff42499562e5f0ba54056f22b05f276ed0e0ac44dc27d3892e8f276283bae9668667a3f63da69406d9675d9ce6c980d6939a030935"}}, 0xf3)

780.618979ms ago: executing program 4 (id=323):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000280)={0x0, 0x3, 0x11})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="ada68a2f96c6"})
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

596.109722ms ago: executing program 4 (id=325):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, r0, 0xec776000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0xb0, 0x30, 0xb, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_skbmod={0x98, 0x1, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x63}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb0}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0xb0, 0x30, 0xb, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_skbmod={0x98, 0x1, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x63}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb0}}, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) (async)
r1 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
ftruncate(r1, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
write$uinput_user_dev(r2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bpf$BPF_GET_PROG_INFO(0x25, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x4680, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, 0x0, 0x2) (async)
futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, 0x0, 0x2)
pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0xca) (async)
pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0xca)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000cdf000/0x3000)=nil)
mlock2(&(0x7f0000ca0000/0x2000)=nil, 0x2000, 0x1)
ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f0000000000)={0x1, 0x513, 0x1, 0x6})

540.067201ms ago: executing program 4 (id=327):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3d, 0x0, 0xfcf4})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000021c0)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500280012800e00010069703665727370616e00000014000280060003003000000008000100", @ANYRES32=r2, @ANYRES16=r1], 0x48}, 0x1, 0x0, 0x0, 0x4008040}, 0x9080)

440.855562ms ago: executing program 4 (id=328):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getneightbl={0x14, 0x42, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x500}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

434.544596ms ago: executing program 0 (id=329):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r1 = socket$kcm(0x11, 0x2, 0x0)
close(r1)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r4, 0x0, 0x0}, 0x20)
r5 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}]})
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0c71a, &(0x7f0000000080)={[], [{@smackfsdef={'smackfsdef', 0x3d, '\'.#\\A'}}]}, 0x82, 0x48f, &(0x7f0000000380)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f00000000c0), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e2403220c"], 0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$eJzs3d9rXFkdAPDvvcn0Z2pS9KEWrMVWkqKdSRrbBh+qguhTQa3vNSaTEDLJhMykbULRFP8AQUQFn3zyRfAPEKR/gggFfReVXZbddvdhYXc7y9yZSdN0pknpZKZNPh84M+ecuXe+58wwZ+6593JvAIfW+Yi4EBFPa7XapYgYbtanzRSbjVRf7snj+zP1lEStduv9JCJp1NUXG9v2niebqx2LiJ/8MOLnyYtxK+sbi9OlUnG1WS5Ul1YKlfWNywtL0/PF+eLy5OTEtanrU1enxrvSz6GIuPH9///u13/+wY2/f/Puf26/O/aLpFkf8awf3dboei77LFoGI2J1P4L1yWDWQwAA3gat7fyvRcSlGI6BbGsOAAAAOEhq3xmKT5OI2g5Hd1YAAAAAb600Owc2SfPN8wCGIk3z+cY5vF+KE2mpXKl+Y668tjzbOFd2JHLp3EKpON48V3gkckm9PJHln5WvbJWTrDwZEacj4rfDx7NyfqZcmu33zg8AAAA4JE7umP9/NNyY/2/zSd8aBwAAAHTPSL8bAAAAAOw7838AAAA4+Mz/AQAA4ED70c2b9VRr3f969s762mL5zuXZYmUxv7Q2k58pr67k58vl+eyafUu7vV+pXF75Viyv3StUi5VqobK+cXupvLZcvb3w3C2wAQAAgB46/dWH/04iYvPbx7NUd6TfjQJ6YvBVFv7f/rUD6L2BfjcA6JtX+v8HDpRcvxsA9F2yy+sdT975R/fbAgAA7I/RL7c//p/uum9gM+1RE4F9Yv8fHF677fcDDi7H/+HwysVAmMjD4bbbJUBf//h/rfZKDQIAALpuKEtJmm8e8x+KNM3nI05lc4JcMrdQKo5HxBci4l/DuaP18kS2ZuLYAQAAAAAAAAAAAAAAAAAAAAAAAADsUa2WHK0BAAAAB1pE+k7SvA/w6PDFoZ37B44kHw9nzxFx94+3fn9vulpdnajXf7BVX/1Ds/5KP/ZgAAAAADu15umteTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNOTx/dnWqmXcd/7XkSMtIs/GMey52ORi4gTHyYxuG29JCIGuhB/80FEnGkXP6k3K0aarWgX/3gf46cRcbIL8eEwe1gff77b7veXxvnsuf3v71o2Qr2+zuNfujX+DbSJX687tccYZx/9tdAx/oOIs4Ptx59W/KTD+Hdhj/F/9tONjU6v1f4UMdr2/yd5LlahurRSqKxvXF5Ymp4vzheXJycnrk1dn7o6NV6YWygVm49tY/zmK397+rL+n+gQf2SX/l/cY/8/e3Tv8Rcb2dzW6smz+GMX2n//ZzrET5vf/9eb+frro638ZiO/3bm//PPcy/o/26H/u33/Y3vs/6Uf/+q/e1wUAOiByvrG4nSpVFw91JnX+jTqm0VvRC/ezEz9c30DmtE288t9eOf6lnm/+9WNTF+HJQAAYB+8OAcGAAAAAAAAAAAAAAAAAAAAeq0XlxPL7Yi5mT124+r5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd83kAAAD//7kT0VY=")
r8 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r7, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x3, 0x6, 0x101, 0xe87}})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10)

414.260657ms ago: executing program 4 (id=331):
syz_emit_ethernet(0x46, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffaabb86dd60122d9200103afffe8000000000000000000000000000bbff02000000000000007800"/70], 0x0)
r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000001040)={[{@journal_dev={'journal_dev', 0x3d, 0x800}}, {@errors_remount}, {@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@quota}, {@noblock_validity}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
writev(r0, &(0x7f0000000540)=[{0x0}], 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2822c2, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000816000/0x4000)=nil, 0x1000, 0x2})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000a80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYBLOB="18020000", @ANYRES16=r4, @ANYBLOB="100029bd7000fddbdf250500000038000280040004001c0003800800010004000000080002000200000008000200e00000000800020001000000040004000800020002000000400005802c000280080004000000000008000200400000000800010013000000080001000b000000080003000400000007000100696200000700010069620000bc0005801c000280080001000600000008000300020000000800020054d3000007000100000800010065746800080001006574680008000100756470001c000280080001001100000008000100000000000800010014000000080001006574680014000280080002009f00000008000400800000003c000280080001001c0000000800040009000000080001000f0000000800030008000000080003000900000008000400030000000800040094570000070001006962000014000380080003000d0000000800030009000000340007800c0004000080ffffffffffff0800010000000000080002000600000008000200080000000c0003000000000000000080100007800c00040000100000000000007800068008000600810000000400050008000600ff0100005f000300708cedd9a5f44f9ddddfe445ec996203fee9017ec4389502ff039c526faa6bc867a0eeba3c1bc35628541b3a3cd521691ea3fa382337a165d1b532a7548cada38b95e0d25c1b9b0982d29dfdf564462a85c73dd9973c38c2864dd800"], 0x218}}, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000480)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff000}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f0000005f00)=[{{&(0x7f00000002c0)=@caif, 0x80, &(0x7f0000004340)=[{&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/25, 0x19}, {&(0x7f0000004240)=""/240, 0xf0}], 0x3, &(0x7f0000004380)=""/226, 0xe2}, 0xe35b}, {{&(0x7f0000004480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004500)=""/180, 0xb4}, {&(0x7f00000045c0)=""/67, 0x43}, {&(0x7f0000004640)=""/78, 0x4e}, {&(0x7f00000046c0)}, {&(0x7f0000004700)=""/3, 0x3}, {&(0x7f0000004740)=""/78, 0x4e}, {&(0x7f00000047c0)=""/218, 0xda}], 0x7, &(0x7f0000004940)=""/87, 0x57}, 0x3}, {{&(0x7f00000049c0)=@nfc, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004a40)=""/249, 0xf9}, {&(0x7f0000004b40)=""/8, 0x8}, {&(0x7f0000004b80)=""/174, 0xae}, {&(0x7f0000004c40)=""/182, 0xb6}, {&(0x7f0000004d00)=""/7, 0x7}, {&(0x7f0000004d40)=""/131, 0x83}, {&(0x7f0000004e00)=""/84, 0x54}], 0x7, &(0x7f0000004f00)=""/4096, 0x1000}}], 0x3, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
close(r8)

315.532098ms ago: executing program 0 (id=335):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="2108f086dd431899a270f854709d", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) (async)
fallocate(r1, 0x0, 0xfff, 0x9)
write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xe, @private2, 0x5}, 0x1c)

290.799641ms ago: executing program 0 (id=336):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58)
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00001a3000/0x2000)=nil], 0x0, &(0x7f0000000100), 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50)
r1 = inotify_init1(0x0)
r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x44000160)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = dup(r1)
setsockopt(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
inotify_rm_watch(r3, r2)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1001, &(0x7f0000002080)=""/4097}, 0x94)

244.826756ms ago: executing program 3 (id=337):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x84, 0x1}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x4, @local, 'dummy0\x00'}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="a61ea89d6c81d9d00cd4ef0a47e5b2e044029c31bad926427f40ca834a9e0cd2504f0018ff74fa20b2b7f8381d4d0e6ca1f1d33ac9daff6f54406d73af886503c4f0ef50606a40c06b92e0dcee22ea4bd6745da292d9a02d821406a25e0d4dd1ecbdbf4f3a2162697556a35d79b791f49ac6fc9b15ddce34bb96942438de6727e6a65416e9676e5bf5c922ac437c2b6dc8ad875b4f1aab1b5e", 0x99}], 0x1, &(0x7f00000002c0)=[{0xa0, 0x114, 0x9, "d55443772ba69024dc4e8a81555a2f0d059283fd378779723a06373f9d23e414a0e1445b30936f5745bb494b9e1d1adcd185cb2e799a2404b70bbf961948105485dc1a1028b44c753c71f41aef3fea09006545a589049dc379ee61d6380f5abcbad5d499c0fd28ad7ffe42293725d121db2b8d5caa38a208fa0944f2f652d0d3bbfe1103a67fdcb205499c38d3d88c22"}, {0x70, 0x116, 0x6, "5e3e0125fbc9b15c3f740e080c5bdf1948ef1180115fa25d3db8755d565060054be516f72b73821e8cef6b507fdbc1fef89111b7e9571256ac62792c2035d5c620f048e9df1d4646bf6473c6d2b5ac2cd8daea9a9ceaee6cf2"}, {0x100, 0x88, 0x2000000, "da6b3952dd572fd159a162244465206523e8bc9b0f75b3bba2456e6b09251a67aa9dfe767063621efbcf64a101125c59f418002d074c37db3a1d909916141c1fe8e6bf0c0ba57544eacee299b5a932ac9b8a971cb7a382c421605f5651b775137c8ea7c5e78adedc0004d089294aa9f29a5385aa7d7f77a328617bb0d01d42f9187fb55fdcefaa9445a0d1fcf7e10a47086d05abd09f8f36ad39cdf0325bc70938e8bcd02e1f694270adeab43cafa7582acedc3da57bd1f48638f18c7d02ea2faf322cc2bc420930a508e717d1d151b5025f5773b5ee8cae124ef9a9102ce478c40ea59a977a2fa276b8"}, {0x60, 0x119, 0x7f, "38b8701cc72a4a04ddaa59ffd2bd14fc607d626211a69c7f39696def72dbb1eba400bd1660b25f66c78adb798b1914c606a85669410981e7f44e22403123af4fca8a04a2247a8a6980b84fbd3bac71"}], 0x270}, 0x841)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000280)='syzkaller\x00'}, 0x1c)

239.798215ms ago: executing program 3 (id=338):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2002, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080))
ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000140)={{0x3, 0x1, 0x10040, 0x558f, 0x3}})
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0}, './file1\x00'})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 'vcan0\x00'}}, 0x1e)
sendfile(r3, r2, 0x0, 0x1)
accept4$alg(r1, 0x0, 0x0, 0x0)

237.936383ms ago: executing program 3 (id=339):
socket$igmp6(0xa, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0xa041, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1f5c81, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000002c0)={0x0, 0xffff, 0x0, 0x0, <r0=>0x0})
prlimit64(r0, 0x0, &(0x7f0000000340)={0x0, 0x9}, &(0x7f0000000380))
epoll_create1(0x80000)
socket$kcm(0x23, 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000380)=0x200000000000000c, 0x5, 0x3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x73)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xb, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e00008100", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)

220.78662ms ago: executing program 0 (id=340):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff})
prctl$PR_SET_PDEATHSIG(0x1, 0x41)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket(0x1d, 0x2, 0x6)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x20044050}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r5}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x1, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x20, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000926bd7000fbdbdf257600000028000300", @ANYRES32=r2, @ANYBLOB='\f\x00X\x00n\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00\v\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00P\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00b\x00\x00\x00\x00\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000)
getsockopt$nfc_llcp(r3, 0x6a, 0x2, 0x0, 0xffffffffffffff33)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="48390f06", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0500530001000000"], 0x24}, 0x1, 0x0, 0x0, 0x404005c}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x300a, 0x8001, 0x10000, 0x2, 0x5, 0x1})
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x82ff7000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r8=>0x0, 0x1}, &(0x7f00000006c0)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000700)={r8, @in6={{0xa, 0x4e22, 0x10, @mcast1, 0x3}}, 0x1, 0x2, 0x6, 0x464cc42, 0xd}, &(0x7f00000007c0)=0x98)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff080211000000080211000000000000000000000000006400010008000c006400000008000d003f0000000a0034000202020202020000080035000000000008007e0000000000"], 0x70}}, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)={@private0, <r11=>0x0}, &(0x7f0000000400)=0x14)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1200c}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00032abd7000fedbdf25080000004800018014000400fc00000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r10, @ANYBLOB="06000100495215c9820200000005000200070000000500020003000000080007570dddaec7409d3ac6867cce", @ANYRES32=r11, @ANYBLOB="0500050006000000"], 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x40)

105.137508ms ago: executing program 3 (id=341):
r0 = socket$pppoe(0x18, 0x1, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x11}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000000000000300000d0000000000000000000000000b000000000000000600000003000000000000000000000d00000000000000000100001304"], 0x0, 0x6a, 0x0, 0x1}, 0x28)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801)
write$evdev(r1, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b)
ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000240)=0x7)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000280)=""/254)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00))
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0)

637.565µs ago: executing program 3 (id=342):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b509050000000000dbaaf0ffe1000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000080000004600000076000000bf91000000000000b6080000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94)

0s ago: executing program 3 (id=343):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf25bd3e0000000c0099000b000000160000"], 0x20}, 0x1, 0x0, 0x0, 0x4030}, 0x4) (async, rerun: 64)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) (rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000580)="adcd1a9a3fc36e961ed062e71b0cff4adb2faf9492a462cf0ec132418519e1b268", 0x21) (async)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, 0xffffffffffffffff, 0x4b000) (async)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x14, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES32=r1], 0x1, 0x303, &(0x7f00000004c0)="$eJzs3U1rE2sUwPGT1zYpbbq43Mu9cOmDbnQztNG1NkgLYsBSG/EFhGk70ZAxKZlQiYjVlVvxQ7goXXZX0H6Bbtzpxo27bgQXdiFGMi9Nmk6aNA1NX/4/KHOa85zJ82RSOBM6me17b5/ms5aW1csSHFQSEBHZERmVoHgC7jZox1Fp9EouD/34/P+d+w9updLpqVmlplNzV5JKqZGxD89exNxhGwOyNfpo+3vy29bfW/9u/557krNUzlKFYlnpar74tazPm4ZazFl5TakZ09AtQ+UKllFy8kUnnzWLS0sVpRcWh+NLJcOylF6oqLxRUeWiKpcqKvRYzxWUpmlqOC5wDLbMZFZnZ/VUl7td6HpCOFalUkoPiUhsXyaz2pcJAQCAvmru/4Oietn/r13YLA/dXR9x+/+NqF//f/WLs689/X+tafXt/73n9+3/9cP1//s7ovPlSP0/Toax6L6HAvWwliyl9Lj792t7/XBt3A7o/wEAAAAAAAAAAAAAAAAAAAAAOA12qtVEtVpNeFvvR9zrxht/bxISkevHP2P0UqvjP9D++OMMqF+4Fx4RMd8sZ5YzztYdsCkiphgyLgn5Zb8fXLXYu/JI1YzKR3PFrV9ZzoTsTCorObt+QhIRaa6vVqdvpqcmlGNvfUTijfVJSchf/vVJ3/qoXLrYUK9JQj4tSFFMWbTnUa9/OaHUjdvppvqYPQ4AAAAAgLNAU7t8z981rVXeqd89v27+fCBUP78e9z0/D8t/4f6uHQAAAACA88KqPM/rpmmUDghi0n6ME0Q6GNMchE3TiIrI4araB94KO63y/pehx9PoLPCefE/Ku29Hz1+WwCFelhZBsKvjNVZbjTrqKryPjVqNkZnJ4z+CdvDPu/c/e7fDa+uDbVbafRA6+A0QOfC2MQAAAABOpXrT7z0y2d8JAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABwDnX2nWEhd3R3XznW5yUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ8afAAAA///LJ/+p")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
pwrite64(r3, &(0x7f0000005c80)="a9", 0x1, 0xc00000)
syncfs(r3) (async)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd700400000025320000080c009900590f00002600000095b6e92c9c68d909c3f83c5c07eab23f444aa4fe7d0a8d7e2896cc676047a4fe870c444fa73a6ebc79a3ed612f060f060ac13de6705088eb87ff0b8384e754d273976d110854369e2adaafb4a7d7060000000000000083439a85a646d8f47ba3efbe7bb6dd560c5f6e997452fc6cc445fe37b18f9f48973d52042820c7c83fe4e14a93b0d10abc7d5554784677e4886b3555cc13a8c8f816cf41fce27023e5e4d2cc"], 0x20}, 0x1, 0x0, 0x0, 0x404}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts.
[   29.029032][ T4699] cgroup: Unknown subsys name 'net'
[   29.128817][ T4699] cgroup: Unknown subsys name 'cpuset'
[   29.130708][ T4699] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   29.299359][ T4699] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   30.100487][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   30.101352][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   30.112960][ T4724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   30.114880][ T4727] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   30.116506][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   30.116511][ T4726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   30.118157][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   30.118298][ T4727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   30.118383][ T4727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   30.118529][ T4727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   30.118606][ T4727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   30.119537][ T4728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   30.119583][ T4728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   30.119652][ T4728] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   30.119719][ T4728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   30.120531][ T4728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   30.121460][ T4728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   30.121631][ T4728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   30.121784][ T4728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   30.121966][ T4728] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   30.122700][ T4728] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   30.123078][ T4728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   30.123575][ T4728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   30.124124][ T4728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   30.127535][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   30.468016][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.468303][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.468380][ T4720] bridge_slave_0: entered allmulticast mode
[   30.468835][ T4720] bridge_slave_0: entered promiscuous mode
[   30.469834][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.469866][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.469921][ T4720] bridge_slave_1: entered allmulticast mode
[   30.470329][ T4720] bridge_slave_1: entered promiscuous mode
[   30.476766][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.479274][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.486827][ T4720] team0: Port device team_slave_0 added
[   30.501070][ T4720] team0: Port device team_slave_1 added
[   30.529175][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.529202][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.529216][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.529934][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.529942][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.529958][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.552098][ T4720] hsr_slave_0: entered promiscuous mode
[   30.552458][ T4720] hsr_slave_1: entered promiscuous mode
[   30.569622][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.569695][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.569757][ T4723] bridge_slave_0: entered allmulticast mode
[   30.570161][ T4723] bridge_slave_0: entered promiscuous mode
[   30.570956][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.570974][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.571332][ T4723] bridge_slave_1: entered allmulticast mode
[   30.571756][ T4723] bridge_slave_1: entered promiscuous mode
[   30.584460][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.584503][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.584592][ T4711] bridge_slave_0: entered allmulticast mode
[   30.584988][ T4711] bridge_slave_0: entered promiscuous mode
[   30.586040][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.586062][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.586149][ T4711] bridge_slave_1: entered allmulticast mode
[   30.586589][ T4711] bridge_slave_1: entered promiscuous mode
[   30.596762][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.600407][ T4723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.604778][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.610690][ T4723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.627134][ T4711] team0: Port device team_slave_0 added
[   30.632924][ T4723] team0: Port device team_slave_0 added
[   30.639645][ T4711] team0: Port device team_slave_1 added
[   30.641288][ T4723] team0: Port device team_slave_1 added
[   30.653273][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.653347][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.653444][ T4717] bridge_slave_0: entered allmulticast mode
[   30.653984][ T4717] bridge_slave_0: entered promiscuous mode
[   30.654792][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.654818][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.654898][ T4717] bridge_slave_1: entered allmulticast mode
[   30.655353][ T4717] bridge_slave_1: entered promiscuous mode
[   30.664058][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.664077][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.664105][ T4723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.664681][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.664695][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.664719][ T4723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.679122][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.679132][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.679147][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.679798][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.679806][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.679822][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.693303][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.701387][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.712798][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.712996][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.713092][ T4713] bridge_slave_0: entered allmulticast mode
[   30.713502][ T4713] bridge_slave_0: entered promiscuous mode
[   30.716996][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.717018][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.717074][ T4713] bridge_slave_1: entered allmulticast mode
[   30.717877][ T4713] bridge_slave_1: entered promiscuous mode
[   30.727350][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.731452][ T4723] hsr_slave_0: entered promiscuous mode
[   30.732902][ T4723] hsr_slave_1: entered promiscuous mode
[   30.734388][ T4723] debugfs: 'hsr0' already exists in 'hsr'
[   30.735509][ T4723] Cannot create hsr debugfs directory
[   30.741168][ T4711] hsr_slave_0: entered promiscuous mode
[   30.741511][ T4711] hsr_slave_1: entered promiscuous mode
[   30.741709][ T4711] debugfs: 'hsr0' already exists in 'hsr'
[   30.741718][ T4711] Cannot create hsr debugfs directory
[   30.742476][ T4717] team0: Port device team_slave_0 added
[   30.743330][ T4717] team0: Port device team_slave_1 added
[   30.744843][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.770174][ T4713] team0: Port device team_slave_0 added
[   30.776831][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.776852][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.776866][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.783095][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.783106][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.783117][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.783918][ T4713] team0: Port device team_slave_1 added
[   30.815008][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.815034][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.815052][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.815599][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.815605][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.815616][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.823721][ T4720] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.830776][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.832335][ T4717] hsr_slave_0: entered promiscuous mode
[   30.832626][ T4717] hsr_slave_1: entered promiscuous mode
[   30.832810][ T4717] debugfs: 'hsr0' already exists in 'hsr'
[   30.832820][ T4717] Cannot create hsr debugfs directory
[   30.849377][ T4720] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.852069][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.852363][ T4720] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.854130][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.866904][ T4720] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.869216][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.875537][ T4713] hsr_slave_0: entered promiscuous mode
[   30.877226][ T4713] hsr_slave_1: entered promiscuous mode
[   30.878585][ T4713] debugfs: 'hsr0' already exists in 'hsr'
[   30.878613][ T4713] Cannot create hsr debugfs directory
[   30.953015][ T4723] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.955400][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.957370][ T4723] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.959746][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.960456][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.960508][ T4720] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.960651][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.960685][ T4720] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.961377][ T4723] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.963727][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.974675][ T4723] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.976762][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.988758][ T4717] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.990912][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.992628][ T4717] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.994971][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.996639][ T4717] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.998947][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.006496][ T4717] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.009237][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.027961][ T4711] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.030172][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.031717][ T4711] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.033873][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.035841][ T4711] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.038313][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.039905][ T4711] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.041929][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.050688][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.050725][ T4723] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.050804][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.050835][ T4723] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.066055][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.066099][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.066169][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.066197][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.077969][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.078009][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.078168][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.078201][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.080157][ T4713] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.081753][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.082011][ T4713] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.084126][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.090007][ T4713] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.091996][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.092599][ T4713] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.094076][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.109700][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.114024][ T4720] 8021q: adding VLAN 0 to HW filter on device team0
[   31.116602][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.120521][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.122190][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.123877][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.125399][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.128535][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.130330][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.143162][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.149477][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.151952][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.152001][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.169151][ T4717] 8021q: adding VLAN 0 to HW filter on device team0
[   31.187005][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.187056][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.190371][ T4723] 8021q: adding VLAN 0 to HW filter on device team0
[   31.204287][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.204327][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.205230][ T3653] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.205251][ T3653] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.216132][ T3653] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.216177][ T3653] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.223742][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.229116][ T4711] 8021q: adding VLAN 0 to HW filter on device team0
[   31.242504][  T930] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.242556][  T930] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.242919][  T930] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.242946][  T930] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.257273][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.258593][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.286346][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.286379][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.295533][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.320306][ T4713] 8021q: adding VLAN 0 to HW filter on device team0
[   31.335600][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.335643][ T3318] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.335972][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.335991][ T3318] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.380812][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.406867][ T4720] veth0_vlan: entered promiscuous mode
[   31.409760][ T4720] veth1_vlan: entered promiscuous mode
[   31.415724][ T4720] veth0_macvtap: entered promiscuous mode
[   31.428141][ T4720] veth1_macvtap: entered promiscuous mode
[   31.434771][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.443911][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.462462][ T3779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.462640][ T3779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.462659][ T3779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.462675][ T3779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.465251][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.511281][ T4723] veth0_vlan: entered promiscuous mode
[   31.540534][ T4723] veth1_vlan: entered promiscuous mode
[   31.549574][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.549602][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.555234][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.560361][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.581544][ T4711] veth0_vlan: entered promiscuous mode
[   31.584499][ T4711] veth1_vlan: entered promiscuous mode
[   31.594899][ T4711] veth0_macvtap: entered promiscuous mode
[   31.595947][ T4711] veth1_macvtap: entered promiscuous mode
[   31.601231][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.602198][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.612695][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.612719][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.619239][  T930] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.619287][  T930] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.619308][  T930] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.619324][  T930] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.627149][ T4717] veth0_vlan: entered promiscuous mode
[   31.632047][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.635409][ T4723] veth0_macvtap: entered promiscuous mode
[   31.653969][ T4723] veth1_macvtap: entered promiscuous mode
[   31.664347][ T4720] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.672135][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.672173][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.680271][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.685035][ T4717] veth1_vlan: entered promiscuous mode
[   31.704225][ T4717] veth0_macvtap: entered promiscuous mode
[   31.707231][ T4891] netlink: 'syz.0.1': attribute type 12 has an invalid length.
[   31.713784][ T4717] veth1_macvtap: entered promiscuous mode
[   31.718318][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.721368][   T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.721421][   T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.721444][   T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.721460][   T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.734862][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.734893][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.752898][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.766248][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.770116][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.770214][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.770246][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.770272][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.784853][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.784879][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.824259][  T930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.824287][  T930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.832573][ T4713] veth0_vlan: entered promiscuous mode
[   31.863653][ T4713] veth1_vlan: entered promiscuous mode
[   31.871347][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.871374][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.909866][ T4896] loop1: detected capacity change from 0 to 8192
[   31.916693][ T4713] veth0_macvtap: entered promiscuous mode
[   31.923446][ T4713] veth1_macvtap: entered promiscuous mode
[   31.930685][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.939520][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.939543][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.950087][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.013285][  T930] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.014366][  T930] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.014410][  T930] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.014435][  T930] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.167821][   T50] Bluetooth: hci0: command tx timeout
[   32.169259][   T50] Bluetooth: hci4: command tx timeout
[   32.176590][   T50] Bluetooth: hci2: command tx timeout
[   32.177880][   T50] Bluetooth: hci3: command tx timeout
[   32.179160][   T50] Bluetooth: hci1: command tx timeout
[   32.426650][ T4910] loop0: detected capacity change from 0 to 512
[   32.429686][ T4910] EXT4-fs: Ignoring removed orlov option
[   32.449352][ T4910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.455420][ T4910] xt_hashlimit: size too large, truncated to 1048576
[   32.482463][ T3278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.482494][ T3278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.488991][ T4910] xt_hashlimit: size too large, truncated to 1048576
[   32.529653][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.529683][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.537101][ T4910] xt_hashlimit: size too large, truncated to 1048576
[   32.570285][ T4910] xt_hashlimit: size too large, truncated to 1048576
[   32.631447][ T4910] xt_hashlimit: size too large, truncated to 1048576
[   33.074632][ T4910] xt_hashlimit: size too large, truncated to 1048576
[   33.087218][ T4932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'.
[   33.127284][ T4939] capability: warning: `syz.1.12' uses deprecated v2 capabilities in a way that may be insecure
[   33.145829][ T4910] xt_hashlimit: size too large, truncated to 1048576
[   33.203517][ T4910] xt_hashlimit: size too large, truncated to 1048576
[   33.215308][ T4949] netlink: 'syz.4.14': attribute type 4 has an invalid length.
[   33.220357][ T4949] netlink: 'syz.4.14': attribute type 4 has an invalid length.
[   33.306042][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.360493][ T4969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'.
[   33.360531][ T4969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[   33.406776][ T4964] loop4: detected capacity change from 0 to 8192
[   33.484201][ T4973] vhci_hcd vhci_hcd.3: invalid port number 0
[   33.486200][ T4964]  loop4: p1 < > p2 p4 < p5 >
[   33.486226][ T4964] loop4: partition table partially beyond EOD, truncated
[   33.486320][ T4964] loop4: p1 start 4294901760 is beyond EOD, truncated
[   33.486331][ T4964] loop4: p2 size 983040 extends beyond EOD, truncated
[   33.491926][ T4964] loop4: p5 size 983040 extends beyond EOD, truncated
[   33.502879][ T4969] geneve2: entered promiscuous mode
[   33.503937][ T4969] geneve2: entered allmulticast mode
[   33.504770][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 1038 - 0
[   33.505038][   T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 1038 - 0
[   33.505314][   T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 1038 - 0
[   33.505538][   T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 1038 - 0
[   33.570653][ T4975] Zero length message leads to an empty skb
[   33.573162][ T4975] netlink: 'syz.0.19': attribute type 21 has an invalid length.
[   33.823988][ T4980] qrtr: Invalid version 48
[   33.830066][ T4978] loop4: detected capacity change from 0 to 1024
[   33.830512][ T4978] EXT4-fs: Ignoring removed bh option
[   33.833707][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   33.844148][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   33.846973][ T4984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.26'.
[   33.852700][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[   33.890838][ T4978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.910593][ T4978] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   34.025111][ T4993] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001
[   34.039112][ T4995] netlink: 332 bytes leftover after parsing attributes in process `syz.2.28'.
[   34.039158][ T4995] netlink: 'syz.2.28': attribute type 9 has an invalid length.
[   34.039169][ T4995] netlink: 108 bytes leftover after parsing attributes in process `syz.2.28'.
[   34.039180][ T4995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.28'.
[   34.109693][ T4996] mmap: syz.3.26 (4996) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   34.248151][ T4728] Bluetooth: hci1: command tx timeout
[   34.248309][ T4728] Bluetooth: hci3: command tx timeout
[   34.248402][ T4728] Bluetooth: hci2: command tx timeout
[   34.248493][ T4728] Bluetooth: hci4: command tx timeout
[   34.248583][ T4728] Bluetooth: hci0: command tx timeout
[   34.302957][ T4997] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET)
[   34.304528][ T4997] warning: `syz.2.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   34.350938][ T4997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28'.
[   34.665386][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.777782][ T5009] loop4: detected capacity change from 0 to 512
[   34.778653][ T5009] /dev/loop4: Can't open blockdev
[   34.851130][ T5014] fuse: Bad value for 'fd'
[   34.933421][ T5024] loop3: detected capacity change from 0 to 512
[   35.053851][ T5024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.081222][ T5024] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   35.086061][ T5024] Quota error (device loop3): write_blk: dquota write failed
[   35.086131][ T5024] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[   35.086158][ T5024] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.35: Failed to acquire dquot type 0
[   35.093727][ T5024] overlayfs: failed to resolve './bus': -2
[   35.096772][ T5024] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28
[   35.108191][ T5024] EXT4-fs (loop3): This should not happen!! Data will be lost
[   35.108191][ T5024] 
[   35.108243][ T5024] EXT4-fs (loop3): Total free blocks count 0
[   35.108262][ T5024] EXT4-fs (loop3): Free/Dirty block details
[   35.108284][ T5024] EXT4-fs (loop3): free_blocks=65280
[   35.108302][ T5024] EXT4-fs (loop3): dirty_blocks=33
[   35.108314][ T5024] EXT4-fs (loop3): Block reservation details
[   35.108325][ T5024] EXT4-fs (loop3): i_reserved_data_blocks=33
[   35.130115][ T5024] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28
[   35.135908][ T5024] Injecting memory failure for pfn 0x21970d at process virtual address 0x20ffe000
[   35.170142][ T5024] Memory failure: 0x21970d: unhandlable page.
[   35.170175][ T5024] Memory failure: 0x21970d: recovery action for get hwpoison page: Ignored
[   35.210629][ T4723] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[   35.352229][ T5049] loop3: detected capacity change from 0 to 8
[   35.368077][ T5049] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   35.368102][ T5049] unable to read xattr id index table
[   35.371425][ T5049] SQUASHFS error: zlib decompression failed, data probably corrupt
[   35.371454][ T5049] SQUASHFS error: Failed to read block 0x9b: -5
[   35.371944][ T5049] SQUASHFS error: Unable to read metadata cache entry [99]
[   35.371956][ T5049] SQUASHFS error: Unable to read inode 0x104
[   35.733059][  T866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.742095][  T866] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   35.750320][ T5064] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size.
[   35.829200][ T5068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.829425][ T5068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.889908][ T5076] loop3: detected capacity change from 0 to 512
[   35.900792][ T5076] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   35.900830][ T5076] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   35.907846][ T5076] EXT4-fs (loop3): 1 truncate cleaned up
[   35.910437][ T5076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.963108][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.000397][ T5085] fuse: Bad value for 'fd'
[   36.074624][ T5096] loop1: detected capacity change from 0 to 512
[   36.077897][ T5096] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   36.083712][ T5096] EXT4-fs (loop1): 1 orphan inode deleted
[   36.083744][ T5096] EXT4-fs (loop1): 1 truncate cleaned up
[   36.085400][ T5096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.152149][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.166201][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'.
[   36.327725][ T4728] Bluetooth: hci4: command tx timeout
[   36.327763][ T4728] Bluetooth: hci2: command tx timeout
[   36.327791][ T4728] Bluetooth: hci3: command tx timeout
[   36.327821][ T4728] Bluetooth: hci1: command tx timeout
[   36.328110][   T50] Bluetooth: hci0: command tx timeout
[   36.371075][   T50] Bluetooth: Frame is too long (len 54, expected len 4)
[   36.444250][ T5131] nfs: Unknown parameter 'discard'
[   36.449180][ T5131] loop2: detected capacity change from 0 to 512
[   36.449990][ T5131] EXT4-fs: Ignoring removed bh option
[   36.454986][ T5131] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   36.455377][ T5131] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   36.458143][ T5131] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   36.458961][ T5131] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[   36.460807][ T5131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.528550][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.847027][ T5148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.70'.
[   37.045820][ T5158] can: request_module (can-proto-0) failed.
[   37.103382][ T5162] Cannot find add_set index 0 as target
[   37.317773][ T5176] loop1: detected capacity change from 0 to 512
[   37.318252][ T5176] EXT4-fs: Ignoring removed oldalloc option
[   37.320074][ T5176] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   37.322081][ T5176] EXT4-fs (loop1): 1 truncate cleaned up
[   37.322814][ T5176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.408336][   T26] IPVS: starting estimator thread 0...
[   37.497979][ T5179] IPVS: using max 46 ests per chain, 110400 per kthread
[   37.595092][ T4711] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[   37.598778][ T4711] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[   37.924954][ T5185] loop2: detected capacity change from 0 to 1024
[   37.926730][ T5185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   37.926773][ T5185] EXT4-fs (loop2): The Hurd can't support 64-bit file systems
[   37.959178][ T5187] loop2: detected capacity change from 0 to 2048
[   37.972561][ T5187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.985946][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.001121][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.043019][ T3278] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.043070][ T3278] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 1038 - 0
[   38.122957][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   38.125030][ T4719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   38.126871][ T4719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   38.136354][ T5197] loop3: detected capacity change from 0 to 256
[   38.164781][ T5203] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000080000000000000000000000000000000000000000'
[   38.174896][ T4719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   38.176559][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   38.206715][ T3278] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.209251][ T3278] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 1038 - 0
[   38.494170][   T50] Bluetooth: hci1: command tx timeout
[   38.495525][   T50] Bluetooth: hci3: command tx timeout
[   38.495577][   T50] Bluetooth: hci2: command tx timeout
[   38.495625][   T50] Bluetooth: hci4: command tx timeout
[   38.574880][ T3278] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.574921][ T3278] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 1038 - 0
[   38.582385][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'.
[   38.631392][ T3278] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.631431][ T3278] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 1038 - 0
[   38.650648][ T5228] macvlan2: entered allmulticast mode
[   38.651788][ T5228] veth1_vlan: entered allmulticast mode
[   38.654070][ T5228] veth1_vlan: left allmulticast mode
[   38.685368][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.685409][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.685476][ T5199] bridge_slave_0: entered allmulticast mode
[   38.685917][ T5199] bridge_slave_0: entered promiscuous mode
[   38.686795][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.686843][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.686895][ T5199] bridge_slave_1: entered allmulticast mode
[   38.687383][ T5199] bridge_slave_1: entered promiscuous mode
[   38.696197][ T5199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.697276][ T5199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.707917][ T5199] team0: Port device team_slave_0 added
[   38.709722][ T5199] team0: Port device team_slave_1 added
[   38.717925][ T5199] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.717944][ T5199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.717956][ T5199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.718474][ T5199] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.718482][ T5199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.718498][ T5199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.732746][ T5199] hsr_slave_0: entered promiscuous mode
[   38.733256][ T5199] hsr_slave_1: entered promiscuous mode
[   38.733470][ T5199] debugfs: 'hsr0' already exists in 'hsr'
[   38.733481][ T5199] Cannot create hsr debugfs directory
[   38.792468][ T5233] batadv_slave_0: entered promiscuous mode
[   38.998937][ T3278] bridge_slave_1: left allmulticast mode
[   38.998993][ T3278] bridge_slave_1: left promiscuous mode
[   38.999467][ T3278] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.003338][ T3278] bridge_slave_0: left allmulticast mode
[   39.004703][ T3278] bridge_slave_0: left promiscuous mode
[   39.005828][ T3278] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.114746][ T5250] loop3: detected capacity change from 0 to 512
[   39.118905][ T5250] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   39.121661][ T5250] EXT4-fs (loop3): invalid journal inode
[   39.122234][ T5250] EXT4-fs (loop3): can't get journal size
[   39.130533][ T5250] EXT4-fs (loop3): 1 truncate cleaned up
[   39.135414][ T5250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.179727][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.253834][ T3278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   39.268738][ T3278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   39.289900][ T5257] loop0: detected capacity change from 0 to 512
[   39.302433][ T3278] bond0 (unregistering): Released all slaves
[   39.305921][ T5257] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.97: iget: bad extra_isize 58 (inode size 256)
[   39.308835][ T5257] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   39.314311][ T5257] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.97: error while reading EA inode 11 err=-117
[   39.314392][ T5257] loop0: lost filesystem error report for type 5 error -117
[   39.318541][    C0] EXT4-fs (loop0): error count since last fsck: 2
[   39.318556][    C0] EXT4-fs (loop0): initial error at time 39: ext4_xattr_inode_iget:441: inode 11
[   39.318572][    C0] EXT4-fs (loop0): last error at time 39: ext4_xattr_inode_iget:446
[   39.324159][ T5257] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.97: iget: bad extra_isize 58 (inode size 256)
[   39.324196][ T5257] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   39.327700][ T5257] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.97: error while reading EA inode 11 err=-117
[   39.327731][ T5257] loop0: lost filesystem error report for type 5 error -117
[   39.338008][ T5257] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.97: iget: bad extra_isize 58 (inode size 256)
[   39.338045][ T5257] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[   39.342168][ T5257] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.97: error while reading EA inode 18 err=-117
[   39.342201][ T5257] loop0: lost filesystem error report for type 5 error -117
[   39.342394][ T5257] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.97: iget: bad extra_isize 58 (inode size 256)
[   39.342414][ T5257] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[   39.346647][ T5257] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.97: error while reading EA inode 18 err=-117
[   39.346660][ T5257] loop0: lost filesystem error report for type 5 error -117
[   39.347600][ T5257] EXT4-fs (loop0): 1 orphan inode deleted
[   39.348023][ T5257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.362268][ T5235] batadv_slave_0: left promiscuous mode
[   39.387524][ T5263] binder: 5262:5263 got reply transaction with no transaction stack
[   39.387576][ T5263] binder: 5262:5263 transaction reply to 0:0 failed 1/29201/-71, code 0 size 0-0 line 3139
[   39.387621][ T5263] binder: 5262:5263 ioctl c0306201 20000380 returned -14
[   39.421415][ T5199] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   39.425878][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.440784][ T5199] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.441101][ T5199] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   39.444577][ T5199] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.580894][ T5199] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   39.583303][ T5199] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.583609][ T5199] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   39.587160][ T5199] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.587875][ T5274] netlink: 7 bytes leftover after parsing attributes in process `syz.4.102'.
[   39.595872][ T5281] fuse: Unknown parameter '‰ÀIZ†ÿVªñ'
[   39.715618][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0
[   39.737325][ T5199] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.743976][ T5199] 8021q: adding VLAN 0 to HW filter on device team0
[   39.745731][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.745778][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.748730][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.748754][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.783745][ T3278] hsr_slave_0: left promiscuous mode
[   39.784812][ T3278] hsr_slave_1: left promiscuous mode
[   39.785104][ T3278] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.785118][ T3278] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.786423][ T3278] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.786493][ T3278] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.794800][ T3278] veth1_macvtap: left promiscuous mode
[   39.794842][ T3278] veth0_macvtap: left promiscuous mode
[   39.794877][ T3278] veth1_vlan: left promiscuous mode
[   39.794905][ T3278] veth0_vlan: left promiscuous mode
[   39.891635][ T5319] loop2: detected capacity change from 0 to 512
[   39.910936][ T5319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.931597][ T4717] EXT4-fs error (device loop2): ext4_lookup:1785: inode #11: comm syz-executor: iget: checksum invalid
[   39.934430][ T4717] EXT4-fs error (device loop2): ext4_lookup:1785: inode #11: comm syz-executor: iget: checksum invalid
[   40.001662][ T3278] team0 (unregistering): Port device team_slave_1 removed
[   40.005613][ T3278] team0 (unregistering): Port device team_slave_0 removed
[   40.055254][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1
[   40.168969][ T5199] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.243189][ T5199] veth0_vlan: entered promiscuous mode
[   40.245313][ T5199] veth1_vlan: entered promiscuous mode
[   40.247343][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.247678][   T50] Bluetooth: hci0: command tx timeout
[   40.251762][ T5199] veth0_macvtap: entered promiscuous mode
[   40.259463][ T5199] veth1_macvtap: entered promiscuous mode
[   40.263365][ T5199] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.266404][ T5199] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.272016][   T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.272066][   T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.272527][   T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.272551][   T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.288759][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2
[   40.309254][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.309279][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.381588][ T3653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.381614][ T3653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.453718][ T4728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   40.456516][ T4728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   40.459304][ T4728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   40.479635][ T4728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   40.479886][ T4728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   40.500310][ T3278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.590246][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3
[   40.626215][ T3278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.734822][ T3278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.806929][ T3278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.856333][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   40.873015][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   40.875055][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   40.876957][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   40.879206][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   40.881197][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   40.883199][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   40.884987][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   40.923278][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.924840][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.924937][ T5370] bridge_slave_0: entered allmulticast mode
[   40.925377][ T5370] bridge_slave_0: entered promiscuous mode
[   40.926095][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.926113][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.926163][ T5370] bridge_slave_1: entered allmulticast mode
[   40.926584][ T5370] bridge_slave_1: entered promiscuous mode
[   40.936540][ T5370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   40.938947][ T5370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.203251][ T5370] team0: Port device team_slave_0 added
[   41.208725][ T5370] team0: Port device team_slave_1 added
[   41.231748][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_0
[   41.233565][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   41.238969][ T5370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   41.239700][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_1
[   41.239709][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   41.239724][ T5370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   41.314507][ T3278] bridge_slave_1: left allmulticast mode
[   41.314548][ T3278] bridge_slave_1: left promiscuous mode
[   41.314650][ T3278] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.322121][ T3278] bridge_slave_0: left allmulticast mode
[   41.322146][ T3278] bridge_slave_0: left promiscuous mode
[   41.322208][ T3278] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.448140][ T3278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   41.478754][ T3278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   41.498882][ T3278] bond0 (unregistering): Released all slaves
[   41.517883][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4
[   41.525954][ T5370] hsr_slave_0: entered promiscuous mode
[   41.530677][ T5370] hsr_slave_1: entered promiscuous mode
[   41.532042][ T5370] debugfs: 'hsr0' already exists in 'hsr'
[   41.534326][ T5370] Cannot create hsr debugfs directory
[   41.563611][ T5450] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20001
[   42.038072][ T5461] loop5: detected capacity change from 0 to 128
[   42.273265][ T5370] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   42.276178][ T5370] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   42.301462][ T5370] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   42.303728][ T5370] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   42.309713][ T5370] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   42.314389][ T5370] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   42.316182][ T5370] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   42.318550][ T5370] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   42.325112][ T5474] bridge_slave_1: default FDB implementation only supports local addresses
[   42.327493][ T4728] Bluetooth: hci0: command 0x041b tx timeout
[   42.391742][ T3278] hsr_slave_0: left promiscuous mode
[   42.392781][ T3278] hsr_slave_1: left promiscuous mode
[   42.393479][ T3278] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.393549][ T3278] batman_adv: batadv0: Removing interface: batadv_slave_0
[   42.395916][ T3278] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.395928][ T3278] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.412163][ T3278] veth1_macvtap: left promiscuous mode
[   42.412204][ T3278] veth0_macvtap: left promiscuous mode
[   42.412245][ T3278] veth1_vlan: left promiscuous mode
[   42.412273][ T3278] veth0_vlan: left promiscuous mode
[   42.567636][ T4719] Bluetooth: hci2: command tx timeout
[   42.596215][ T3278] team0 (unregistering): Port device team_slave_1 removed
[   42.601237][ T3278] team0 (unregistering): Port device team_slave_0 removed
[   42.660368][ T5370] 8021q: adding VLAN 0 to HW filter on device bond0
[   42.665445][ T5370] 8021q: adding VLAN 0 to HW filter on device team0
[   42.687854][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5
[   42.709214][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.709264][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.710585][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.710605][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.418278][ T5553] loop3: detected capacity change from 0 to 512
[   43.422185][ T5553] journal_path: Non-blockdev passed as './file1'
[   43.422266][ T5553] EXT4-fs: error: could not find journal device path
[   43.559170][ T5370] 8021q: adding VLAN 0 to HW filter on device batadv0
[   43.647628][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6
[   43.694919][ T5370] veth0_vlan: entered promiscuous mode
[   43.700349][ T5370] veth1_vlan: entered promiscuous mode
[   43.717676][ T5370] veth0_macvtap: entered promiscuous mode
[   43.720573][ T5370] veth1_macvtap: entered promiscuous mode
[   43.733443][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_0
[   43.735908][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_1
[   43.759176][ T3278] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.759230][ T3278] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.759253][ T3278] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.759271][ T3278] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.846834][ T5578] __nla_validate_parse: 47 callbacks suppressed
[   43.851052][ T5578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'.
[   43.875160][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.875193][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.879829][ T5578] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check.
[   43.887264][ T5583] loop4: detected capacity change from 0 to 256
[   43.899817][ T5587] capability: warning: `syz.5.145' uses 32-bit capabilities (legacy support in use)
[   43.934044][ T5578] loop9: detected capacity change from 0 to 7
[   43.955847][ T5578] Dev loop9: unable to read RDB block 7
[   43.956828][ T3779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.956841][ T3779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.963468][ T5578]  loop9: unable to read partition table
[   43.963584][ T5578] loop9: partition table beyond EOD, truncated
[   43.963614][ T5578] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[   44.040593][ T5601] loop6: detected capacity change from 0 to 128
[   44.109726][ T5603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'.
[   44.132709][ T5606] overlayfs: failed to decode file handle (len=13, type=251, flags=0, err=-22)
[   44.230724][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.231179][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.253519][ T5624] loop3: detected capacity change from 0 to 1024
[   44.253895][ T5624] =======================================================
[   44.253895][ T5624] WARNING: The mand mount option has been deprecated and
[   44.253895][ T5624]          and is ignored by this kernel. Remove the mand
[   44.253895][ T5624]          option from the mount to silence this warning.
[   44.253895][ T5624] =======================================================
[   44.262810][ T5624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   44.280837][ T5624] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.153: lblock 0 mapped to illegal pblock 0 (length 6)
[   44.282978][ T5624] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[   44.282999][ T5624] EXT4-fs (loop3): This should not happen!! Data will be lost
[   44.282999][ T5624] 
[   44.283948][ T5624] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.153: lblock 0 mapped to illegal pblock 0 (length 6)
[   44.285821][ T5624] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.153: lblock 0 mapped to illegal pblock 0 (length 6)
[   44.286773][ T5624] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.153: lblock 0 mapped to illegal pblock 0 (length 6)
[   44.287380][ T5624] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.153: lblock 0 mapped to illegal pblock 0 (length 6)
[   44.305035][ T5624] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.153: lblock 0 mapped to illegal pblock 0 (length 6)
[   44.307893][ T5624] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.153: lblock 0 mapped to illegal pblock 0 (length 6)
[   44.309104][ T5624] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.153: lblock 0 mapped to illegal pblock 0 (length 6)
[   44.315141][ T5624] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.153: lblock 0 mapped to illegal pblock 0 (length 6)
[   44.318383][ T5624] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.153: lblock 0 mapped to illegal pblock 0 (length 6)
[   44.343221][ T3779] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28
[   44.343256][ T3779] EXT4-fs (loop3): This should not happen!! Data will be lost
[   44.343256][ T3779] 
[   44.343797][ T3779] EXT4-fs (loop3): Total free blocks count 0
[   44.343811][ T3779] EXT4-fs (loop3): Free/Dirty block details
[   44.343821][ T3779] EXT4-fs (loop3): free_blocks=0
[   44.343830][ T3779] EXT4-fs (loop3): dirty_blocks=32
[   44.343838][ T3779] EXT4-fs (loop3): Block reservation details
[   44.407477][ T4719] Bluetooth: hci0: command 0x041b tx timeout
[   44.521033][ T5608] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   44.524750][ T5608] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   44.650416][ T4719] Bluetooth: hci2: command tx timeout
[   44.733294][ T4400] 8021q: adding VLAN 0 to HW filter on device eth7
[   44.749085][ T5620] netlink: 'syz.4.152': attribute type 12 has an invalid length.
[   44.753378][ T3278] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.770415][ T5640] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   44.776024][ T3278] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.776074][ T3278] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.776091][ T3278] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.816758][ T5645] netlink: 104 bytes leftover after parsing attributes in process `syz.4.157'.
[   44.833160][ T5642] loop0: detected capacity change from 0 to 2048
[   44.863413][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.158'.
[   44.874683][ T5642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.882601][ T5642] netlink: 'syz.0.156': attribute type 1 has an invalid length.
[   44.915621][   T30] audit: type=1326 audit(44.900:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5647 comm="syz.6.158" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b77aa8 code=0x0
[   44.938499][ T5642] bond1: entered promiscuous mode
[   44.938674][ T5642] 8021q: adding VLAN 0 to HW filter on device bond1
[   44.950145][ T5658] vlan2: entered allmulticast mode
[   44.950178][ T5658] bond1: entered allmulticast mode
[   44.981382][ T5642] bond1: (slave bridge1): making interface the new active one
[   44.981412][ T5642] bridge1: entered promiscuous mode
[   44.981507][ T5642] bridge1: entered allmulticast mode
[   44.982806][ T5642] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   44.986165][ T5642] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.156: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   44.988089][ T5642] EXT4-fs (loop0): Remounting filesystem read-only
[   45.012684][ T5663] netlink: 'syz.5.162': attribute type 1 has an invalid length.
[   45.025586][ T5665] netlink: 'syz.4.163': attribute type 1 has an invalid length.
[   45.092617][ T4723] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[   45.135083][ T5676] loop3: detected capacity change from 0 to 512
[   45.136702][ T5676] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.165: inode has both inline data and extents flags
[   45.136739][ T5676] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   45.137420][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   45.137432][    C1] EXT4-fs (loop3): initial error at time 45: ext4_orphan_get:1397: inode 15
[   45.137448][    C1] EXT4-fs (loop3): last error at time 45: ext4_orphan_get:1397: inode 15
[   45.138410][ T5676] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.165: couldn't read orphan inode 15 (err -117)
[   45.138427][ T5676] loop3: lost filesystem error report for type 5 error -117
[   45.138944][ T5676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.162305][ T5678] loop4: detected capacity change from 0 to 512
[   45.163498][ T5666] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[   45.167795][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.441643][ T5678] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   45.465569][ T5678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[   45.467241][ T5678] System zones: 1-12
[   45.481700][ T5673] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   45.484789][ T5678] EXT4-fs (loop4): 1 truncate cleaned up
[   45.487085][ T5678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.513322][ T5665] veth3: entered promiscuous mode
[   45.515440][ T5665] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   45.524566][ T5690] loop5: detected capacity change from 0 to 256
[   45.543281][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.085013][ T5735] loop3: detected capacity change from 0 to 128
[   46.100159][ T5735] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   46.110915][ T5735] syz.3.178 (pid 5735) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   46.116740][ T5740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.184899][ T5740] EXT4-fs (loop6): shut down requested (2)
[   46.196432][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.204371][ T5735] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)"
[   46.231813][ T4723] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   46.241486][ T5370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.487644][ T4719] Bluetooth: hci0: command 0x041b tx timeout
[   46.593793][ T5775] netlink: 64 bytes leftover after parsing attributes in process `syz.4.187'.
[   46.598633][ T5775] syzkaller1: entered promiscuous mode
[   46.599830][ T5775] syzkaller1: entered allmulticast mode
[   46.602755][ T5775] netlink: 'syz.4.187': attribute type 1 has an invalid length.
[   46.604509][ T5775] netlink: 224 bytes leftover after parsing attributes in process `syz.4.187'.
[   46.625315][ T5777] EXT4-fs: Ignoring removed nobh option
[   46.625349][ T5777] EXT4-fs: Ignoring removed orlov option
[   46.626605][ T5777] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   46.642264][ T5777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.685672][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.719713][ T5789] ext4: Unknown parameter 'subj_user'
[   46.728895][ T4719] Bluetooth: hci2: command tx timeout
[   46.760708][ T5791] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[   46.764516][ T4705] udevd[4705]: incorrect ext4 checksum on /dev/loop4
[   47.098581][ T5804] sctp: [Deprecated]: syz.5.194 (pid 5804) Use of struct sctp_assoc_value in delayed_ack socket option.
[   47.098581][ T5804] Use struct sctp_sack_info instead
[   47.205060][ T5814] overlayfs: invalid origin (0000)
[   47.209992][ T5812] netlink: 24 bytes leftover after parsing attributes in process `syz.6.197'.
[   47.214447][ T5810] No such timeout policy "syz1"
[   47.280902][ T5820] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   47.299072][ T3779] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   47.309790][ T5822] syzkaller0: entered promiscuous mode
[   47.309822][ T5822] syzkaller0: entered allmulticast mode
[   47.317696][ T5824] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   47.319193][ T5824] ieee802154 phy0 wpan0: encryption failed: -90
[   47.339701][ T4723] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   47.422271][ T5831] netlink: 12 bytes leftover after parsing attributes in process `syz.6.204'.
[   47.463256][ T5836] ext2: Bad value for 'stripe'
[   47.846462][ T5859] FAT-fs (loop4): Directory bread(block 64) failed
[   47.846498][ T5859] FAT-fs (loop4): Directory bread(block 65) failed
[   47.846548][ T5859] FAT-fs (loop4): Directory bread(block 66) failed
[   47.846564][ T5859] FAT-fs (loop4): Directory bread(block 67) failed
[   47.846589][ T5859] FAT-fs (loop4): Directory bread(block 68) failed
[   47.846604][ T5859] FAT-fs (loop4): Directory bread(block 69) failed
[   47.846628][ T5859] FAT-fs (loop4): Directory bread(block 70) failed
[   47.846642][ T5859] FAT-fs (loop4): Directory bread(block 71) failed
[   47.846665][ T5859] FAT-fs (loop4): Directory bread(block 72) failed
[   47.846678][ T5859] FAT-fs (loop4): Directory bread(block 73) failed
[   48.141218][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.212'.
[   48.149429][ T5864] 8021q: adding VLAN 0 to HW filter on device bond1
[   48.154488][ T5864] macvlan2: entered promiscuous mode
[   48.155481][ T5864] macvlan2: entered allmulticast mode
[   48.156856][ T5864] bond1: (slave macvlan2): Opening slave failed
[   48.225900][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.226002][ T5868] batadv_slave_0: entered promiscuous mode
[   48.291413][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.212'.
[   48.305519][ T5864] macvlan2: entered promiscuous mode
[   48.306722][ T5864] macvlan2: entered allmulticast mode
[   48.308807][ T5864] bond1: (slave macvlan2): Opening slave failed
[   48.383737][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.383939][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.389319][ T5877] bridge0: entered allmulticast mode
[   48.394058][ T5877] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   48.570877][ T4719] Bluetooth: hci0: command 0x041b tx timeout
[   48.821165][ T4719] Bluetooth: hci2: command tx timeout
[   48.833392][ T5899] set_capacity_and_notify: 8 callbacks suppressed
[   48.833401][ T5899] loop3: detected capacity change from 0 to 512
[   48.834937][ T5899] EXT4-fs: Ignoring removed bh option
[   48.834956][ T5899] EXT4-fs: Ignoring removed oldalloc option
[   48.835785][ T5899] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   48.865849][ T5899] EXT4-fs (loop3): 1 truncate cleaned up
[   48.868892][ T5899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.486314][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.641437][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.227'.
[   49.656967][ T5923] loop3: detected capacity change from 0 to 1024
[   49.658777][ T5923] EXT4-fs: Ignoring removed bh option
[   49.972988][ T5923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.994834][ T5933] loop4: detected capacity change from 0 to 512
[   50.012254][ T5933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.083087][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.097196][ T5933] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.230: bg 0: bad block bitmap checksum
[   50.120852][ T5931] loop6: detected capacity change from 0 to 32768
[   50.126974][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.180493][ T5931]  loop6: unable to read partition table
[   50.180590][ T5931] loop_reread_partitions: partition scan of loop6 () failed (rc=-5)
[   50.217760][ T5950] IPVS: set_ctl: invalid protocol: 20 172.20.20.187:20001
[   50.255926][ T5945] infiniband syz1: set active
[   50.258762][ T5945] infiniband syz1: added bond0
[   50.274496][ T5956] netlink: 'syz.3.236': attribute type 298 has an invalid length.
[   50.283055][ T5945] RDS/IB: syz1: added
[   50.284627][ T5945] smc: adding ib device syz1 with port count 1
[   50.286651][ T5945] smc:    ib device syz1 port 1 has no pnetid
[   50.657027][ T5961] loop0: detected capacity change from 0 to 256
[   50.672368][ T5961] FAT-fs (loop0): Directory bread(block 64) failed
[   50.672410][ T5961] FAT-fs (loop0): Directory bread(block 65) failed
[   50.672450][ T5961] FAT-fs (loop0): Directory bread(block 66) failed
[   50.672468][ T5961] FAT-fs (loop0): Directory bread(block 67) failed
[   50.672498][ T5961] FAT-fs (loop0): Directory bread(block 68) failed
[   50.672513][ T5961] FAT-fs (loop0): Directory bread(block 69) failed
[   50.672540][ T5961] FAT-fs (loop0): Directory bread(block 70) failed
[   50.672555][ T5961] FAT-fs (loop0): Directory bread(block 71) failed
[   50.672581][ T5961] FAT-fs (loop0): Directory bread(block 72) failed
[   50.672595][ T5961] FAT-fs (loop0): Directory bread(block 73) failed
[   50.743638][ T5963] fuse: Unknown parameter 'group_iÃ'
[   50.893988][ T5973] loop6: detected capacity change from 0 to 1024
[   50.916590][ T5973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.159654][ T5990] loop4: detected capacity change from 0 to 32768
[   51.198768][ T5990]  loop4: p1 p3 < >
[   51.211835][ T5982] tipc: Invalid UDP bearer configuration
[   51.211885][ T5982] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   51.272731][ T4806] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   51.457545][ T4806] usb 1-1: Using ep0 maxpacket: 32
[   51.462264][ T4806] usb 1-1: config 0 has no interfaces?
[   51.462302][ T4806] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   51.462319][ T4806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.474928][ T4806] usb 1-1: config 0 descriptor??
[   51.551122][ T6019] vhci_hcd vhci_hcd.2: invalid port number 96
[   51.551186][ T6019] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7
[   51.554005][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'.
[   51.742727][ T5370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.813394][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.813632][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.963558][ T6036] vlan0: entered promiscuous mode
[   51.971199][ T6036] team0: Port device vlan0 added
[   52.373361][   T10] IPVS: starting estimator thread 0...
[   52.525706][ T6047] loop3: detected capacity change from 0 to 512
[   52.673194][ T6047] EXT4-fs (loop3): orphan cleanup on readonly fs
[   52.673736][ T6047] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.256: EA inode hash validation failed
[   52.673805][ T6047] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   52.674161][ T6047] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.256: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[   52.674183][ T6047] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   52.675213][ T6047] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.256: ea_inode dec ref err=-117
[   52.675346][ T6047] EXT4-fs (loop3): 1 orphan inode deleted
[   52.687493][ T6045] IPVS: using max 59 ests per chain, 141600 per kthread
[   52.688665][ T6051] netlink: 408 bytes leftover after parsing attributes in process `syz.5.257'.
[   52.688680][ T6051] netlink: 88 bytes leftover after parsing attributes in process `syz.5.257'.
[   52.688922][ T6047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   53.025328][ T6067] netlink: 68 bytes leftover after parsing attributes in process `syz.6.262'.
[   53.134112][ T6080] netlink: 'syz.6.267': attribute type 1 has an invalid length.
[   53.185492][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.275587][ T6096] loop6: detected capacity change from 0 to 512
[   53.313140][ T6096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0400-000000000000 r/w without journal. Quota mode: writeback.
[   53.342899][ T6096] netlink: 'syz.6.270': attribute type 28 has an invalid length.
[   53.383173][ T5370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0400-000000000000.
[   53.481102][ T6118] loop6: detected capacity change from 0 to 512
[   53.488323][ T6118] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.275: corrupted in-inode xattr: bad e_name length
[   53.488352][ T6118] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   53.490784][ T6118] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.275: couldn't read orphan inode 15 (err -117)
[   53.490809][ T6118] loop6: lost filesystem error report for type 5 error -117
[   53.495288][ T6118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.529537][   T30] audit: type=1326 audit(53.520:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.3.269" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff99377aa8 code=0x0
[   53.580929][ T6124] FAT-fs (loop4): Directory bread(block 64) failed
[   53.582733][ T6124] FAT-fs (loop4): Directory bread(block 65) failed
[   53.586432][ T6124] FAT-fs (loop4): Directory bread(block 66) failed
[   53.586469][ T6124] FAT-fs (loop4): Directory bread(block 67) failed
[   53.586500][ T6124] FAT-fs (loop4): Directory bread(block 68) failed
[   53.586516][ T6124] FAT-fs (loop4): Directory bread(block 69) failed
[   53.586541][ T6124] FAT-fs (loop4): Directory bread(block 70) failed
[   53.586555][ T6124] FAT-fs (loop4): Directory bread(block 71) failed
[   53.586581][ T6124] FAT-fs (loop4): Directory bread(block 72) failed
[   53.586594][ T6124] FAT-fs (loop4): Directory bread(block 73) failed
[   53.605080][ T6124] syz.4.276: attempt to access beyond end of device
[   53.605080][ T6124] loop4: rw=2051, sector=1320, nr_sectors = 32 limit=256
[   53.609895][ T6124] syz.4.276: attempt to access beyond end of device
[   53.609895][ T6124] loop4: rw=2049, sector=1264, nr_sectors = 56 limit=256
[   53.613148][ T6124] syz.4.276: attempt to access beyond end of device
[   53.613148][ T6124] loop4: rw=2049, sector=1352, nr_sectors = 36 limit=256
[   53.672853][  T930] kworker/u8:4: attempt to access beyond end of device
[   53.672853][  T930] loop4: rw=1, sector=1224, nr_sectors = 40 limit=256
[   53.767913][ T6134] bond2: entered allmulticast mode
[   53.770366][ T6134] 8021q: adding VLAN 0 to HW filter on device bond2
[   53.802351][ T5370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.837661][ T6149] EXT4-fs: inline encryption not supported
[   53.840741][ T6149] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   53.852293][ T6152] set_capacity_and_notify: 2 callbacks suppressed
[   53.853877][ T6149] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   53.853932][ T6149] EXT4-fs (loop4): 1 truncate cleaned up
[   53.854406][ T6149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.863404][ T6152] loop6: detected capacity change from 0 to 128
[   53.913596][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.987180][ T4799] usb 1-1: USB disconnect, device number 2
[   54.211709][ T6195] loop4: detected capacity change from 0 to 128
[   54.221477][ T6191] loop6: detected capacity change from 0 to 256
[   54.344233][ T6207] IPVS: length: 232 != 24
[   54.656214][ T6224] nfs: Unknown parameter 'wfdno'
[   54.712944][ T6224] loop0: detected capacity change from 0 to 8192
[   54.741371][ T6224] Dev loop0: RDB in block 1 has bad checksum
[   54.799613][ T6243] loop3: detected capacity change from 0 to 8192
[   54.905884][ T6249] loop3: detected capacity change from 0 to 4096
[   54.906271][ T6249] EXT4-fs: Ignoring removed mblk_io_submit option
[   54.909563][ T6249] EXT4-fs (loop3): Test dummy encryption mode enabled
[   54.920014][ T6249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.360712][ T6257] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[   55.787429][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.787726][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.995721][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.018387][ T6264] loop0: detected capacity change from 0 to 2048
[   56.038078][ T6264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.048617][ T6267] loop3: detected capacity change from 0 to 128
[   56.053909][ T6267] EXT4-fs (loop3): Test dummy encryption mode enabled
[   56.060207][ T6267] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   56.081868][ T6270] Soft offlining pfn 0x13ddb0 at process virtual address 0x20000000
[   56.264083][ T4723] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   56.312596][ T6280] overlayfs: failed to set xattr on upper
[   56.312619][ T6280] overlayfs: ...falling back to redirect_dir=nofollow.
[   56.312632][ T6280] overlayfs: ...falling back to metacopy=off.
[   56.312642][ T6280] overlayfs: ...falling back to uuid=null.
[   56.570672][ T6279] ip6t_srh: unknown srh invflags 4000
[   57.005457][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.300723][ T6333] loop3: detected capacity change from 0 to 512
[   57.306128][ T6333] EXT4-fs: Ignoring removed mblk_io_submit option
[   57.315185][ T6333] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   57.318040][ T6333] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   57.319708][ T6333] EXT4-fs (loop3): orphan cleanup on readonly fs
[   57.323773][ T6333] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.321: Invalid block bitmap block 0 in block_group 0
[   57.332724][ T6333] loop3: lost filesystem error report for type 5 error -117
[   57.337425][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   57.337453][    C0] EXT4-fs (loop3): last error at time 57: ext4_read_block_bitmap_nowait:483
[   57.343283][ T6333] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.321: Invalid block bitmap block 0 in block_group 0
[   57.346792][ T6333] loop3: lost filesystem error report for type 5 error -117
[   57.352474][ T6333] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.321: Invalid block bitmap block 0 in block_group 0
[   57.356421][ T6333] loop3: lost filesystem error report for type 5 error -117
[   57.357973][ T6333] Quota error (device loop3): write_blk: dquota write failed
[   57.359733][ T6333] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[   57.359755][ T6333] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.321: Failed to acquire dquot type 1
[   57.359772][ T6333] loop3: lost filesystem error report for type 5 error -28
[   57.367017][ T6333] EXT4-fs (loop3): 1 orphan inode deleted
[   57.371383][  T930] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5
[   57.371447][  T930] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1
[   57.371469][  T930] loop3: lost filesystem error report for type 5 error -117
[   57.380131][ T6333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   57.401769][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.640878][ T6349] netlink: 14 bytes leftover after parsing attributes in process `syz.4.323'.
[   57.692641][ T6349] pim6reg1: entered allmulticast mode
[   57.870621][ T6369] loop3: detected capacity change from 0 to 2048
[   57.884184][ T6375] ip6erspan0: entered allmulticast mode
[   57.890128][ T6369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.895458][ T6369] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.014330][ T6386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.061182][ T6397] Illegal XDP return value 32768 on prog  (id 76) dev N/A, expect packet loss!
[   58.130535][ T6410] Invalid source name
[   58.130565][ T6410] UBIFS error (pid: 6410): cannot open "./file0", error -22
[   59.688770][ T3779] 
[   59.690222][ T3779] ======================================================
[   59.691279][ T3779] WARNING: possible circular locking dependency detected
[   59.692292][ T3779] syzkaller #0 Not tainted
[   59.692937][ T3779] ------------------------------------------------------
[   59.693994][ T3779] kworker/u8:10/3779 is trying to acquire lock:
[   59.694942][ T3779] ffff0000d42c6938 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x170/0x220
[   59.696462][ T3779] 
[   59.696462][ T3779] but task is already holding lock:
[   59.697632][ T3779] ffff0000d42b8c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x16c/0x2d8
[   59.699407][ T3779] 
[   59.699407][ T3779] which lock already depends on the new lock.
[   59.699407][ T3779] 
[   59.701209][ T3779] 
[   59.701209][ T3779] the existing dependency chain (in reverse order) is:
[   59.702746][ T3779] 
[   59.702746][ T3779] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[   59.704165][ T3779]        percpu_down_read_internal+0x5c/0x294
[   59.705239][ T3779]        ext4_writepages+0x16c/0x2d8
[   59.706108][ T3779]        do_writepages+0x270/0x468
[   59.707000][ T3779]        __writeback_single_inode+0x144/0x1808
[   59.708065][ T3779]        writeback_single_inode+0x3b8/0xaa0
[   59.709127][ T3779]        write_inode_now+0x170/0x208
[   59.710014][ T3779]        iput+0x6bc/0xb90
[   59.710787][ T3779]        ext4_xattr_block_set+0x1aac/0x2188
[   59.711800][ T3779]        ext4_expand_extra_isize_ea+0xb18/0x13a0
[   59.712854][ T3779]        __ext4_expand_extra_isize+0x29c/0x370
[   59.713907][ T3779]        __ext4_mark_inode_dirty+0x3a4/0x810
[   59.714933][ T3779]        ext4_evict_inode+0x7a0/0xfc4
[   59.715864][ T3779]        evict+0x4b8/0x740
[   59.716591][ T3779]        iput+0x858/0xb90
[   59.717287][ T3779]        ext4_process_orphan+0x240/0x2b4
[   59.718276][ T3779]        ext4_orphan_cleanup+0x7b8/0xd30
[   59.719241][ T3779]        ext4_fill_super+0x45a4/0x4d60
[   59.720193][ T3779]        get_tree_bdev_flags+0x380/0x434
[   59.721097][ T3779]        get_tree_bdev+0x2c/0x3c
[   59.721912][ T3779]        ext4_get_tree+0x28/0x38
[   59.722763][ T3779]        vfs_get_tree+0x90/0x28c
[   59.723585][ T3779]        fc_mount+0x24/0xac
[   59.724336][ T3779]        do_new_mount+0x2a4/0x540
[   59.725212][ T3779]        path_mount+0x5d0/0xa68
[   59.726024][ T3779]        do_mount+0xe8/0x148
[   59.726812][ T3779]        __arm64_sys_mount+0x334/0x380
[   59.727751][ T3779]        invoke_syscall+0x98/0x244
[   59.728639][ T3779]        el0_svc_common+0xe8/0x23c
[   59.729472][ T3779]        do_el0_svc+0x48/0x58
[   59.730253][ T3779]        el0_svc+0x64/0x260
[   59.731040][ T3779]        el0t_64_sync_handler+0x48/0x148
[   59.732095][ T3779]        el0t_64_sync+0x198/0x19c
[   59.732931][ T3779] 
[   59.732931][ T3779] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[   59.734226][ T3779]        down_write+0x50/0xc0
[   59.735029][ T3779]        ext4_xattr_set_handle+0x138/0xe00
[   59.736017][ T3779]        ext4_initxattrs+0xa4/0x118
[   59.736908][ T3779]        security_inode_init_security+0x24c/0x378
[   59.738021][ T3779]        ext4_init_security+0x44/0x58
[   59.738968][ T3779]        __ext4_new_inode+0x28dc/0x3390
[   59.739920][ T3779]        ext4_create+0x1e8/0x3f4
[   59.740753][ T3779]        path_openat+0x1244/0x2a6c
[   59.741659][ T3779]        do_file_open+0x1c4/0x2e4
[   59.742539][ T3779]        do_sys_openat2+0x114/0x1e8
[   59.743452][ T3779]        do_sys_open+0xac/0xdc
[   59.744256][ T3779]        __arm64_sys_openat+0x9c/0xb8
[   59.745169][ T3779]        invoke_syscall+0x98/0x244
[   59.746094][ T3779]        el0_svc_common+0xe8/0x23c
[   59.747029][ T3779]        do_el0_svc+0x48/0x58
[   59.747848][ T3779]        el0_svc+0x64/0x260
[   59.748619][ T3779]        el0t_64_sync_handler+0x48/0x148
[   59.749626][ T3779]        el0t_64_sync+0x198/0x19c
[   59.750513][ T3779] 
[   59.750513][ T3779] -> #0 (jbd2_handle){++++}-{0:0}:
[   59.751717][ T3779]        __lock_acquire+0x1780/0x2f44
[   59.752612][ T3779]        lock_acquire+0x140/0x368
[   59.753467][ T3779]        wait_transaction_locked+0x178/0x220
[   59.754451][ T3779]        start_this_handle+0x5b0/0x1c10
[   59.755348][ T3779]        jbd2__journal_start+0x260/0x520
[   59.756322][ T3779]        __ext4_journal_start_sb+0x228/0x948
[   59.757342][ T3779]        ext4_do_writepages+0xb18/0x3ac8
[   59.758222][ T3779]        ext4_writepages+0x194/0x2d8
[   59.759055][ T3779]        do_writepages+0x270/0x468
[   59.759863][ T3779]        __writeback_single_inode+0x144/0x1808
[   59.760873][ T3779]        writeback_sb_inodes+0x79c/0x1744
[   59.761813][ T3779]        __writeback_inodes_wb+0xec/0x210
[   59.762718][ T3779]        wb_writeback+0x3e8/0x10e0
[   59.763535][ T3779]        wb_workfn+0x9ac/0xcb4
[   59.764343][ T3779]        process_scheduled_works+0x79c/0x1098
[   59.765422][ T3779]        worker_thread+0x754/0xba0
[   59.766290][ T3779]        kthread+0x2f8/0x3c8
[   59.767093][ T3779]        ret_from_fork+0x10/0x20
[   59.767935][ T3779] 
[   59.767935][ T3779] other info that might help us debug this:
[   59.767935][ T3779] 
[   59.769619][ T3779] Chain exists of:
[   59.769619][ T3779]   jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem
[   59.769619][ T3779] 
[   59.771907][ T3779]  Possible unsafe locking scenario:
[   59.771907][ T3779] 
[   59.773131][ T3779]        CPU0                    CPU1
[   59.773975][ T3779]        ----                    ----
[   59.774836][ T3779]   rlock(&sbi->s_writepages_rwsem);
[   59.775700][ T3779]                                lock(&ei->xattr_sem);
[   59.776884][ T3779]                                lock(&sbi->s_writepages_rwsem);
[   59.778231][ T3779]   lock(jbd2_handle);
[   59.778982][ T3779] 
[   59.778982][ T3779]  *** DEADLOCK ***
[   59.778982][ T3779] 
[   59.780425][ T3779] 4 locks held by kworker/u8:10/3779:
[   59.781330][ T3779]  #0: ffff0000c1f19140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x748/0x1098
[   59.783306][ T3779]  #1: ffff80009c267c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x750/0x1098
[   59.785469][ T3779]  #2: ffff0000d42ba0d8 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc
[   59.787278][ T3779]  #3: ffff0000d42b8c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x16c/0x2d8
[   59.789011][ T3779] 
[   59.789011][ T3779] stack backtrace:
[   59.789900][ T3779] CPU: 1 UID: 0 PID: 3779 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT 
[   59.791452][ T3779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   59.793163][ T3779] Workqueue: writeback wb_workfn (flush-259:0)
[   59.794232][ T3779] Call trace:
[   59.794792][ T3779]  show_stack+0x2c/0x3c (C)
[   59.795628][ T3779]  __dump_stack+0x30/0x40
[   59.796343][ T3779]  dump_stack_lvl+0xd8/0x12c
[   59.797117][ T3779]  dump_stack+0x1c/0x28
[   59.797818][ T3779]  print_circular_bug+0x328/0x330
[   59.798690][ T3779]  check_noncircular+0x158/0x174
[   59.799550][ T3779]  __lock_acquire+0x1780/0x2f44
[   59.800360][ T3779]  lock_acquire+0x140/0x368
[   59.801106][ T3779]  wait_transaction_locked+0x178/0x220
[   59.802016][ T3779]  start_this_handle+0x5b0/0x1c10
[   59.802882][ T3779]  jbd2__journal_start+0x260/0x520
[   59.803728][ T3779]  __ext4_journal_start_sb+0x228/0x948
[   59.804660][ T3779]  ext4_do_writepages+0xb18/0x3ac8
[   59.805492][ T3779]  ext4_writepages+0x194/0x2d8
[   59.806299][ T3779]  do_writepages+0x270/0x468
[   59.807098][ T3779]  __writeback_single_inode+0x144/0x1808
[   59.808084][ T3779]  writeback_sb_inodes+0x79c/0x1744
[   59.808995][ T3779]  __writeback_inodes_wb+0xec/0x210
[   59.809862][ T3779]  wb_writeback+0x3e8/0x10e0
[   59.810658][ T3779]  wb_workfn+0x9ac/0xcb4
[   59.811356][ T3779]  process_scheduled_works+0x79c/0x1098
[   59.812256][ T3779]  worker_thread+0x754/0xba0
[   59.813054][ T3779]  kthread+0x2f8/0x3c8
[   59.813746][ T3779]  ret_from_fork+0x10/0x20
[   60.168528][ T6317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   60.211883][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.488062][ T1595] ieee802154 phy0 wpan0: encryption failed: -22
[   64.489367][ T1595] ieee802154 phy1 wpan1: encryption failed: -22
[   64.494052][ T1034] cfg80211: failed to load regulatory.db