last executing test programs:

58.823588023s ago: executing program 0 (id=100):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x280183, 0x0) (rerun: 32)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r3, 0x40c, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}]}, @NL80211_ATTR_KEYS={0x44, 0x51, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c90c09c70ff72b595062bb02e0"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0xd, 0x4, "d11a9fec9c1d1dc968"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x8480)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000fddbdf2554000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2f, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) (async, rerun: 64)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000000007000000000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4009041}, 0x20000004) (async)
sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0)

58.654078834s ago: executing program 0 (id=104):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000a40)={0x3, 0xe7d, @status={[0x4, 0x7fff, 0x6, 0x8001, 0x4, 0x3]}, [0x35c, 0xf, 0xfffffffffffffff1, 0x10001, 0x0, 0x7, 0x7ff, 0x1, 0xd, 0x6, 0x1, 0xb, 0x366, 0xd19, 0x0, 0xfffffffffffffffa, 0x8, 0x2, 0x6, 0x76, 0x4, 0x5, 0xfffffffffffffffb, 0x7, 0x7ff, 0x4, 0x10, 0x2, 0xf, 0x2, 0x6, 0xfffffffffffffff9, 0x3, 0x7, 0x16c, 0xc7, 0x7, 0xfffffffffffffffb, 0x0, 0x7, 0x1, 0x7ff, 0x260, 0x8, 0x1, 0x1, 0x1, 0x4, 0x4, 0x1, 0xfb6, 0x80000000, 0x2, 0x80, 0xfffffffffffffffd, 0xd4b461e, 0x0, 0x5, 0xfffffffffffffffe, 0x7ff, 0x7, 0x2, 0xe7, 0x4]})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

58.611377679s ago: executing program 0 (id=105):
r0 = epoll_create1(0x0)
socket$tipc(0x1e, 0x5, 0x0) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
listen(r1, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r2)
eventfd2(0x4, 0x800) (async)
eventfd2(0x4, 0x800)
r3 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1)
mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
unshare(0x20000400)
epoll_create1(0x80000) (async)
r4 = epoll_create1(0x80000)
epoll_create1(0x80000) (async)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000))
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40890)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async)
r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r8, 0xc02064a4, &(0x7f0000000580)={r9, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETGAMMA(r8, 0xc02064a4, &(0x7f0000000580)={r9, 0x0, 0x0, 0x0, 0x0})
r10 = dup(r0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r10}}) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r10}})

57.735837754s ago: executing program 0 (id=113):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r6, r6)
setpgid(0x0, r6)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r5}, './file1\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async)
preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
setpgid(r6, r6) (async)
setpgid(0x0, r6) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r5}, './file1\x00'}) (async)

57.487790785s ago: executing program 0 (id=114):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03ff0000feff00"/16], 0xc8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xf7, 0x25e, &(0x7f0000000e80)="$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")
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='.\x00', &(0x7f0000000000)='ext4\x00', 0x1400801, 0x0)
r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
preadv(r1, &(0x7f0000001f80)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {0x0}], 0x2, 0x4, 0x5)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000a80)={'sit0\x00', &(0x7f0000000a40)={@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 0x30, 0x0, [{@remote}, {@initdev}, {@private}]}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=@deltaction={0x5c, 0x18, 0x1, 0x70bdac, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20048840)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r4, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000200)=[0x0], &(0x7f00000002c0)=[0x0], <r5=>0x0, 0xdd, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="e2f4b5885d95e40d04ecc3dc152afb036e", @ANYRESOCT=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05002dbd7000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="140023800500110000fe000001001300000000f2ed11c1115a919024fc00"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0)
landlock_create_ruleset(&(0x7f0000000340)={0x0, 0x2, 0x1}, 0x18, 0x0)
setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f00000003c0)=0x8000, 0x4)
getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000080)=""/15, &(0x7f0000000240)=0xf)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x800008, &(0x7f00000000c0)=ANY=[@ANYBLOB='shortname=win95,un\x00\x00\x00\x00ate=1,dos1xfloppy,rodir,discard,snt,\x00'/71], 0xfc, 0x259, &(0x7f0000000540)="$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")
setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f00000009c0)={{0x16, @multicast1, 0x4e24, 0x1, 'ovf\x00', 0x10, 0x5, 0x63}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x4e21, 0x1, 0xda, 0x96, 0x9}}, 0x44)

57.257682224s ago: executing program 0 (id=118):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async)
keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0}) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) (async)
getsockname(r0, 0x0, &(0x7f0000000080)) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40000000000000061144c000000000004000000000000009500000000000000cb21aade2c1c40186d773678127e765f84a7634b8914708945b2ed0817d29232a7c33d390c182ba5052942cf04594f89ea9a891f33587fcc563de933becdbeeaa74f6afabcc844cbb153fa449e432a00ee43ccb3b5e99a6b42b2d0429009295024c7ab1bb89dbc2565a6a5e9596b0d6e27a44db8da589283baa3f21546508a7398a2ec6712"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48) (rerun: 32)

57.198266099s ago: executing program 32 (id=118):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async)
keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0}) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) (async)
getsockname(r0, 0x0, &(0x7f0000000080)) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40000000000000061144c000000000004000000000000009500000000000000cb21aade2c1c40186d773678127e765f84a7634b8914708945b2ed0817d29232a7c33d390c182ba5052942cf04594f89ea9a891f33587fcc563de933becdbeeaa74f6afabcc844cbb153fa449e432a00ee43ccb3b5e99a6b42b2d0429009295024c7ab1bb89dbc2565a6a5e9596b0d6e27a44db8da589283baa3f21546508a7398a2ec6712"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48) (rerun: 32)

35.674971527s ago: executing program 1 (id=388):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) (async)
socket$packet(0x11, 0x2, 0x300) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

35.560147049s ago: executing program 1 (id=391):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @remote, 0xb}, 0x1c) (async, rerun: 32)
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) (rerun: 32)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
syz_read_part_table(0x1077, &(0x7f0000002240)="$eJzs0DFOAzEQBdCfzXpJUIBjUHA/KqRQcAJaas5By5GQKAY56z0C0LxXjHbH42/L4V8dP9p9kjonx+x7pyqZk1wleV2HDr3sk69KvmtO7ZJd2m2y5HrkVB5SVfX+1Jd70lKrczKPz/R928m9tJuckpymy9/n4TlvS/KS6fEyOY2x5C7r3baY0W9/+VYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Ft+AgAA//9qjipa")
syz_emit_ethernet(0x6e, &(0x7f0000000480)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private0, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, "028343", 0x1, 0x3a, 0xff, @mcast1, @remote, [], "005cefbd266831e3"}}}}}}}, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa5}, [@call={0x85, 0x0, 0x0, 0xb}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) (rerun: 64)

35.365496574s ago: executing program 1 (id=392):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x28b50cf, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}, {@redirect_dir_follow}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x1, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeed, 0x8031, 0xffffffffffffffff, 0x4000)
bind$802154_dgram(r1, &(0x7f0000000280)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0)
sendfile(r2, r2, 0x0, 0xc3)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000194}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}, @cred={{0x1c}}], 0x38, 0x804}}], 0x2, 0x40000)
r6 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

35.201156169s ago: executing program 1 (id=395):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@lazytime}]}, 0x3, 0x466, &(0x7f0000000800)="$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")
r0 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000440)=ANY=[@ANYBLOB='uni_xlate=1,iocharset=maccenteuro,shortname=winnt,codepage=857,sRortname=lower,shortname=wi95,iocharset=maciceland,uni_xlate=1,shortnwe\t\x00check=strict,shortname=mixed,rodir,utf8=0,rodir,iocharset=cp860,\x00\x00\x00\x00\x00\x00\x00'], 0x81, 0x2a6, &(0x7f0000000180)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(r0, &(0x7f0000000140)='./bus\x00', 0x82)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
keyctl$unlink(0x9, 0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r3, 0x560d, 0x10000000000004)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xa, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x40000)
r4 = inotify_init1(0x80000)
inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x4000000)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

35.125689485s ago: executing program 1 (id=396):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000000), 0x4)
r1 = syz_io_uring_setup(0x175d, &(0x7f0000000940)={0x0, 0x393, 0x40, 0x0, 0x259}, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000a40)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x3}, @ioring_restriction_sqe_op={0x1, 0x8}], 0x2)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmzswtnfZOv2jnEu7vl0zn3nPm9pzb9plz7uk5dwIoraH0SyVif0TMJhGDyeJSXnc0M4car7v/9ydn0kcStdrrfyaRNNOy1yfN54H0SzWiLyJ+/imJfV2ry51buHphcmZm+kpzf2T+4uzI3MLVw+cvTp6bPjd9aezFsfHjx46Pjx7Z0nldy0k7deP9Dwc/m3jru2/+SUa//20iiRPxSvOFy89juwzFUP1nkqzOGhjf7sIK0tX8O6nVarUsLekutk5sXPb764mIJ2MwuuLBL28wPn210MoBO6qWNN67gTJKxD+UVNYPyK7tV14HVwrplQCdcO9kYwBgdfx3N8YGo68+NrD7fhLLh3WSiNjayFyrPRFx5/bEjbO3J27EDo3DAfkWr0fEU3nxn9Tjvxp9Ua3Hf6Ul/tN+wenmc5r+2hbLXzlULP6hcxrx37dm/Eeb+H8nfb7WiOF3t1h+9cHme/0t8d+/1VMCAAAAAACA0rp1MiJeyPv/f2Vp/k/kzP8ZiIgT21D+0Ir91f//r9zdhmKAHPdORrycO/+3ks3+rXYtW8JajZ7k7PmZ6SMR8b+IOBQ9u9L90TXKOPz5vq/b5Q015/9lj7T8O825gM163O3e1XrM1OT85EOcMtB073rE07nzf5Ol9j/Jaf/Td4bZDZax77mbp9vlrR//wE6pfRtxMLf9f3DXimTt+3OM1PsDI1mvYLVnPv7ih3blbzX+3WICHl7a/u9eO/6ryfL79cxtvoyjC921dnlb7f/3Jm/U7yrU20z7aHJ+/spoRG9yqitNbUkf23yd4XGUxUMWL2n8H3p27fG/vP5/f0QsrvjeyV+ta4ozT/w78Hu7+uj/Q3HS+J/aVPu/+Y2xm9Uf25W/sfb/WL2tP9RMMf4HDV9lYdrbmp4Tjt15WZ2uLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DioRsSeSyvDSdqUyPBwxEBH/j92Vmctz88+fvfzBpak0r/75/5Xsk34HG/tJ9vn/1WX7Yyv2j0bE3oj4squ/vj985vLMVNEnDwAAAAAAAAAAAAAAAAAAAI+IgTbr/1N/dBVdO2DHdRddAaAwOfH/SxH1ADpP+w/lJf6hvMQ/lJf4h/IS/1Bea8f/2+MdqwjQcdp/KC/xDwAAAAAAj5W9B279mkTE4kv99Ueqt5nXU2jNgJ1WKboCQGHc4gfKy9QfKC/X+ECyTn5f24PWO3Its2ce4mAAAAAAAAAAAAAAKJ2D+63/h7Ky/h/Ky/p/KK9s/f+BgusBdJ5rfCDWWcmfu/5/3aMAAAAAAAAAAAAAgO00t3D1wuTMzPQVG28+GtXo5EatVruW/hU8KvXZ/o2kOUO9I4VmU+E7f6a9GznBbK3fxr5zce9JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAq/8CAAD//wIyJYU=")

34.823279527s ago: executing program 1 (id=402):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000009f00)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c6e66732c726f6469722c6e6f6e756d7461696c3d302c757466383d312c757466383d302c696f636861727365743d6d616363656e746575726f2c726f6469722c636865636b3d7374726963742c757466383d312c757466383d302c726f6469722c636f6465706167653d3835322c726f6469722c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d77696e39352c726f6469722c6e6e6f6e756d55492fc57461696c3d312c756e695f786c6174653d302c73686f72746e616d653d6d697865642c757466383d312c73686f72746e616d653d6c6f7765722c75746638"], 0x6, 0x2d7, &(0x7f0000000640)="$eJzs3btrZGUUAPBzJ3ceajFTWIngBS2sls22NhNkF8RULlOsFhrcXZDMIOxCxAeOW4mdjaV/gSD4h2hhZynYCnausHDlvnYee50ZJRPR/H6Q5OT7vnO/cx8kt8nJO8/PTm9ncffBJz/HYJBEZ9yPeJjEKDrR+CxWjL8MAOC/7GGex295pWX6py825A72WBcAsD9bfv/X0vLzrWLFdxdXGwCwHzdvvfn60fHx9TeybBA3Zp+fTZKIKL5W80d3472Yxp24GsN4FFG+KHSjfFsowht5ns/TrDCKl2bzs0mROXv7+/r4R79GlPmHMYxROfT4baPMf+34+mFWWcqfF3U8Xe8/LvKvxTCefZy8kn+tJT8mvXj5xaX6r8Qwfnw33o9p3C6LWOR/ephlr+Zf/f7xW0V5RX4yP5v0y3UL+UGz+fyC7xEAAAAAAAAAAAAAAAAAAAAAAP8/V+reOf0o+/cUQ3X/nYNHxTfdyBqj1f48VX7SHGjRHyg6eZ7P8/i66a9zNcuyvF64yE/jubRuLAgAAAAAAAAAAAAAAAAAAACX3P0PPzo9mU7v3DuXoOkGkEbEHzcj/ulxxksjL8Tmxf16z5PptFOHq2vS5ZE4aNYkERvLKE7inC7LtuCpJ2qug2++bc1Kq74Lxcf61GD7pt32vf5m8EG3uo6ta5qn6/Qkab+G/WhGBsWNi/Ub14v23buxNtL7qwqbR3G30+m1Tg3XR4bbLl3vmTKYb1hT3La2qR/K4JVfqrKXzmJlca+8qq1H7tbBUvras7HT8xyDKv3JnxWJbh0AAAAAAAAAAAAAAAAAALBXi7/+bZl8sDG1k/f3VhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXKjF///fJUhXk3fI6sW9+//WuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB5/BkAAP//UXpTZA==") (async)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000009f00)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c6e66732c726f6469722c6e6f6e756d7461696c3d302c757466383d312c757466383d302c696f636861727365743d6d616363656e746575726f2c726f6469722c636865636b3d7374726963742c757466383d312c757466383d302c726f6469722c636f6465706167653d3835322c726f6469722c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d77696e39352c726f6469722c6e6e6f6e756d55492fc57461696c3d312c756e695f786c6174653d302c73686f72746e616d653d6d697865642c757466383d312c73686f72746e616d653d6c6f7765722c75746638"], 0x6, 0x2d7, &(0x7f0000000640)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=<r1=>0x0)
sendto(r0, &(0x7f00000000c0)="6e21d57e6c06a6208f1eef7f91fcd17cacd2953fb41a3859d8c6641da72ad55bae6ed1a51331f5b89eb91c065fbcb3c5e7d77abdc3fbeaf238357701c4ac4f3a8394ea257dafd0dae56d0a0cd758598861245146287d48ab6f94341077f3e213bd2eeb55a450edb221767e328c6110f524eb15cc34e5d6d75d0c395abd38642fd3dfc1189d162fad50050aeb0bc145ef9b2d41c460cebd124da84d0dd46c2ec308324ec3f0966c5a55c745fadb74d27e6979b9ae07f05902a0d9f61d58470217e3a20accb033f287a247bb7bdd51b16583091d7118554068ecdce0a74f08eb8515a23c893fd4fd3e7b", 0xe9, 0x0, &(0x7f00000001c0)=@nfc_llcp={0x27, r1, 0x0, 0x3, 0x9b, 0xf, "b3c1497ad389e029808a87ec35d320f00a6253a094c813b5d46a5a8a1fe024647c5402e46caf76ba1b7d5e02518d264d0e798f6dfde66bf1eeb307d088e57d", 0x22}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000078ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
ftruncate(r0, 0x1)
linkat(r0, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400)

34.822375704s ago: executing program 33 (id=402):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000009f00)=ANY=[@ANYBLOB="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"], 0x6, 0x2d7, &(0x7f0000000640)="$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") (async)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000009f00)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c6e66732c726f6469722c6e6f6e756d7461696c3d302c757466383d312c757466383d302c696f636861727365743d6d616363656e746575726f2c726f6469722c636865636b3d7374726963742c757466383d312c757466383d302c726f6469722c636f6465706167653d3835322c726f6469722c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d77696e39352c726f6469722c6e6e6f6e756d55492fc57461696c3d312c756e695f786c6174653d302c73686f72746e616d653d6d697865642c757466383d312c73686f72746e616d653d6c6f7765722c75746638"], 0x6, 0x2d7, &(0x7f0000000640)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=<r1=>0x0)
sendto(r0, &(0x7f00000000c0)="6e21d57e6c06a6208f1eef7f91fcd17cacd2953fb41a3859d8c6641da72ad55bae6ed1a51331f5b89eb91c065fbcb3c5e7d77abdc3fbeaf238357701c4ac4f3a8394ea257dafd0dae56d0a0cd758598861245146287d48ab6f94341077f3e213bd2eeb55a450edb221767e328c6110f524eb15cc34e5d6d75d0c395abd38642fd3dfc1189d162fad50050aeb0bc145ef9b2d41c460cebd124da84d0dd46c2ec308324ec3f0966c5a55c745fadb74d27e6979b9ae07f05902a0d9f61d58470217e3a20accb033f287a247bb7bdd51b16583091d7118554068ecdce0a74f08eb8515a23c893fd4fd3e7b", 0xe9, 0x0, &(0x7f00000001c0)=@nfc_llcp={0x27, r1, 0x0, 0x3, 0x9b, 0xf, "b3c1497ad389e029808a87ec35d320f00a6253a094c813b5d46a5a8a1fe024647c5402e46caf76ba1b7d5e02518d264d0e798f6dfde66bf1eeb307d088e57d", 0x22}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000078ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
ftruncate(r0, 0x1)
linkat(r0, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400)

34.821264597s ago: executing program 4 (id=405):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$eJzs3M9vFFUcAPDvzO6WgmIr4g8QpIpG4o+Wlh9y8KLRhIMmJnrAeKptIZVCDa2JEKLVAx4NiXfjf2E86cWoF0286t2QEMMF1Mua2Zltl2W33dIfS9vPJ5n2zczrvvedmTf75r3tBrBlDWQ/koj7I+KPiOjLV2/PMJD/unXj8tg/Ny6PJVGtvv13Ust388blsXrW+t/dl69Uq8X6thblXnkvYnRqauJCsT40e+7DoZmLl16cPDd6ZuLMxPmREyeOHtnfc3zk2KrEmcV1c+8n0/v2nHz36ptjp66+/3NSjjzuaIpjtQzkR7elZ1a7sC7b2ZCuHdh5B35dSLe6EuimUkRkp6tSa/99UYrt8/v64vXPm/P3rncFgTVTrVari9yV56rAJpbE0nl6izsFsJkUjwC159/6so7dj667/kr+AJTFfatY8j3lSPPEgUrT8+1qGoiIU3P/fp0tsUbjEAAAjb7P+j8vtOr/pfFInujJfjxQzKH0R8SDEbErIh6KiN0R8XBELe+jEfHYMstvniG5s/+TXrvr4DqQ9f9eLua2bu//pfUs/aVibWct/kpyenJq4nBxTA5FZdvpyWRieJEyfnjt9y/b7Wvs/2VLVn69L1jU49r2plH38dHZ0RUF3eD6ZxF7yxG3KtEUfxL1aZwkIvZExN67LGPyuXLbfUvHv4j2L9ux6jcRz+bnfy6a4q9L2s5PDr90fOTYUG9MTRweql8Vd/rltytvNW0q1RMrin8VZOd/R8vrfz7+/qQ3YubipbO1+dqZ5Zdx5c8v2j7TdHL9lxcGqE/uLK7/nuSd2oaeYsfHo7OzF4YjepI37tw+svBq9fV6/iz+Qwdbt/9dsXAkHo+IfRGxPyKeyB4Ki7o/GRFPRcTBReL/6dWnP1h+/OszV5rFP77U+Y/G87/8ROnsj98tHX92j2t3/o/WUoeKLZ3c/zqt4EqOHQAAAGwUae0z8Ek6mJSLdJoODuaf4d8dO9Kp6ZnZ509Pf3R+PP+sfH9U0vpIV1/DeOhwMTbc3/Da/Q37jxTjxl+VttfWB8emp8a7GDeQt/Na+5+/F+TtP/NXqdu1A9ZcPo+WdrsaQBeswjw6sEFp/7A1JYu2/8q61gVYf97/Yetq1f4/bZt78Ns1rQywrrz/w9bVQfufy3+17xUAG5P3f9i6tH/Yktr+b3zadld2u1jBtwGsTeK/4vsM75X6bP5EpPdENTZcIoll/lW54y+zWEai2pe3/2zLttbNHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFP4PwAA//+dU9wM")
symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0))
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0xa4)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(tea)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000))
getdents64(r1, &(0x7f0000000f80)=""/4087, 0xff7)

34.435823991s ago: executing program 4 (id=408):
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, @desc1})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
mount$nfs(&(0x7f0000000100)='{.', 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file1\x00', 0x180c850, &(0x7f0000000200)={[{@shortname_win95}, {@shortname_winnt}, {@numtail}, {@numtail}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@numtail}, {@shortname_mixed}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@rodir}, {@utf8no}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@uni_xlateno}]}, 0x1, 0x371, &(0x7f0000002980)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0x42, 0x81)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000008510000002000000851f0000c400000095000000000000009500a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0xffffffffffffff05, &(0x7f00000006c0)=""/198, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r0}, 0x94)

33.580988626s ago: executing program 4 (id=416):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)="27850500000000000000002fb9f4129230564bc9680088a800008100", 0x1c}, {&(0x7f0000000440)="cb4e88a8af3288a8eef1", 0xa}, {&(0x7f0000000cc0)="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", 0xf34}], 0x3}, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x4000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x16, 0x301, 0x70bd25, 0x0, {0x1}}, 0x14}}, 0x400c000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f00000003c0)=0x10)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r4, 0x9}, &(0x7f0000000440)=0x8)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r6, &(0x7f0000000180)={&(0x7f0000000000), 0x14, &(0x7f0000000100)={&(0x7f0000000080)="78130bd770fae8", 0x7}, 0x1, 0x0, 0x0, 0x1}, 0x20008000)
ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000a00))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101203, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl1\x00', <r10=>0x0, 0x2f, 0x7f, 0x7f, 0x400, 0x5, @dev={0xfe, 0x80, '\x00', 0x28}, @remote, 0xf861, 0x7800, 0x9, 0x2}})
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@gettfilter={0x0, 0x2e, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xe}, {0x3, 0xd}, {0xd, 0xfff3}}, [{0x0, 0xb, 0x7}, {0x0, 0xb, 0x7}]}, 0xfffffffffffffe6b}}, 0x24008000)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r7}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c1126000000000009500000000000000d0c9b835929e1a5c9051d9369b97dd798b9e652a3e14eb59d7bd6f4cf6e325eca59713ff5f93bdf9e970a466bc9ad3e14cbc350d93e48a1bfdbab5b316265101b8310bb08d5c76858f44eb335f1f8428db374b577f8fa6faab4a3d2348b5e43e0bcd12c3ffd56c0ad2bbd83e2eef8f2de2e975485e2f5adacacab9972a5bc1305e89e1a945c8803b9ad6c9656b898fea7ba22960df7d3f43799d6555228cddd9bc6a468a503f0ccbe4f41c0ba0d98c0a30f384"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

33.171976122s ago: executing program 4 (id=422):
r0 = gettid()
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0)
getdents64(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c0000001d0a01010000000000000000010000000900010073797a30000000000c0010"], 0x54}}, 0x0)
getdents64(r1, &(0x7f0000000600)=""/102, 0x66)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d1cd338500000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/192])

33.016444545s ago: executing program 4 (id=426):
r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}})
ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000080)=0x4000)

31.865648837s ago: executing program 4 (id=431):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x103}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94)

31.799043703s ago: executing program 34 (id=431):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x103}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94)

31.401781772s ago: executing program 2 (id=439):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000340)={0x8, 0xd9}, 0x1)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x2000082, &(0x7f00000006c0)={[{@utf8no}, {@shortname_mixed}, {@uni_xlate}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@rodir}, {@uni_xlate}, {@shortname_win95}, {@fat=@nfs_nostale_ro}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_win95}, {@utf8no}, {@fat=@check_strict}, {@fat=@usefree}, {@shortname_winnt}, {@utf8}]}, 0x9, 0x353, &(0x7f0000006280)="$eJzs3T1sW9UXAPDjPid2o3//8YBUwWTYkFDVBDHAlKoqUkUGKLL4WrBoykccKsXCUhjieAFVTCAWJJjYOsDYGTEgxMbASpFQAbHQLVIjHvLHs59jhySDI6r+fkN0dO497x6/XMXJU3LzejvWr87Ftbt370S5XIjiysWV2C1EJU5FEn07MUVh56P5aXkA4D9vN03jr7Tv8NmfLGSR934AuH/13v/fPDNKlI5YWIyIG/+bVVsAwAztpmk5Dv/5//mp2eszawsAmKGJ5/+PjQ3ve8xfHP5OAABw/3rxlVefu7AacaVaLUdsfNiqtWrxzGj8wrV4OxqxFudjMfai/6gg+t8tdD8+e3n10vlq12+VqHUrWrWIU6P6pFdfiqVYjEpkjxqy+qRbv9Srr0bETru3fmwUWrW5WBis//NCrMVyLMZDE/URl1cvLVcHF6htZPXtiE6Usya6/Z+Lxfjxjbgejbga3dpR/9tL1erFdHWsvnWz1JsHAAAAAAAAAAAAAAAAAAAAAACzcK46VBmef5NutFsfXNk/oTJ2Pk6tPzw4H6jTPx8oLWWn89xI9p8PNH4+T6tWzJ0SBAAAAAAAAAAAAAAAAAAAAA+25tZ81BuNtc3m1vvr+aCdy7z7/Vffno5sqDgofScZVcUgOXadbGLuykkMl0iH5WkyNmcQJBHZ5J36zVvDjvNzSsNXMVHeDUoTQ4VBT/VG48yjv34+rervbrDTyyQxcVvGg8Jg/dzQxv+7iXJE7B1UdXCwfMic22maHlS+/dlkVRQiinHsNo4QfHfnrYefbJ59qpf5ZnDow+NPLL50+9Mv/1ivN6LTvzONxvxmcy89wpW7vU4OJbn9Uxjc58KUnTA96Iwync3mVj356c+XH/n4h32Tk+n7J81n3jt4ra/3Z+b7QSGikt2Ef2t1bsrmnx68dm+4e4//iTv7xUr91vYvvx+1KvdFwkEdAAAAAAAAAAAAAAAAAABwInJ/K34MT78wu44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OSN/v9/LuhMZI4S3GvH5FBpbbN54OKnT/SlAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwAPsnAAD//y8kcO4=")
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x18)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7f5c700f5703"}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xdca}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c0}, 0x8000)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0)
r5 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@phonet, &(0x7f0000000140)=0x80)
sendto$inet(r5, &(0x7f0000000180)="34ebe8a90391533c88cbf6494b72a7808fe9d80269ef0762b4724dcafa408689f6f03b0f696b7426e1c885c84e940133d0aba55673bf630a6ac794331808f5535ae9019efbab71ebf4abc264d8044b156d3679cb23a7f1eac3955dfc8318a28fa303bf8bd4871b2c777c3e3c3165a87ff5fd221384cdcc6a89fa3da4d6feaf6ec503a1", 0x83, 0x0, 0x0, 0x0)

31.26703458s ago: executing program 2 (id=441):
clock_adjtime(0x17, &(0x7f0000000700)={0x3ff, 0xfff0bdbd, 0x4100, 0xb, 0x0, 0x6, 0x800000000000003, 0x800000000006, 0x8, 0x100, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x4, 0x2, 0x0, 0x0, 0x2, 0x9, 0xd9, 0x7, 0xfffffffffffffffd, 0x3, 0x0, 0xe})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x542, &(0x7f0000000cc0)="$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")
newfstatat(0xffffffffffffff9c, &(0x7f0000008dc0)='./file2\x00', 0x0, 0x100)
clock_adjtime(0x17, &(0x7f0000000700)={0x3ff, 0xfff0bdbd, 0x4100, 0xb, 0x0, 0x6, 0x800000000000003, 0x800000000006, 0x8, 0x100, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x4, 0x2, 0x0, 0x0, 0x2, 0x9, 0xd9, 0x7, 0xfffffffffffffffd, 0x3, 0x0, 0xe}) (async)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x542, &(0x7f0000000cc0)="$eJzs3dFrJHcdAPDvTHYvubucSdUHLViLVu6q3ubSeG3woSqIPhXUiq91TTYhZHN7JJv2EopN8Q8QRLTgiz75IvgHCNIX30Uo6LuoKFKv+qDQdmRmZ3u5vd3k4HYzsPl8YG7mNzM73+9v9uaX329n2A3g3HoyIq5FxExEPB0RC+X6tJziqDfl+71z99W1fEoiy158O4mkXNc/1mw5v1y+bC4ivvX1iO8lD8bdOzjcbrbbrd2yvNTdSd7NssPrWzvNzdZm69bKyvKzq8+t3ly9MZZ6LkbE81/9209++MuvPf/bz7/y55f+ce37eVr/y7LXYqAe49Srer04F321iNidRLCK1Ioa9tysOBcAAE6W9/c/HBGfKvr/CzFT9OYAAACAaZJ9aT7eTSIyAAAAYGqlETEfSdoon/edjzRtNHrP8H40LqXtzl73cxud/Vvr+baIxainG1vt1o3y2YHFqCd5ebl8xrZffmagvBIRj0XEjxcuFuXGWqe9XvWHHwAAAHBOXB4Y//9noTf+LxxVnBwAAAAwPotVJwAAAABMnPE/AAAATD/jfwAAAJhq33jhhXzK+r9/vf7ywf525+Xr66297cbO/lpjrbN7u7HZ6WwW39m3c9rx2p3O7S/Erf07S93WXndp7+DwpZ3OfvFb4XNnUiEAAADgAY998s0/JRFx9MWLxZS7UG6rR2Qzx3euVZEhMCnpkHUzo3b+62RzAc7W8Wv9YoV5AGdPlx7Or3rVCQCVS07ZPvLhnd+PPxcAAGAyrn589P3/tzcqTQ2YsPL+f3La+B+YPiOf9TludvJ5AGevd//v/axn2B56BjCt6if1AFz6MPXS8dz/P+VRwkSDAgAAFZsvpiRtlOOA+UjTRiPiSvGzAPVkY6vduhERH4qIPy7UZ/PycvHKRG8eAAAAAAAAAAAAAAAAAAAAAAAAAB5SliWRAQAAAFMtIv17/5e5ri48NT/4+cCF5L8LxTwiXvnZiz+90+x2d5fz9f/6YH33jXL9M1V8ggEAAAAM6o/T++N4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABind+6+utafzjLuP78SEYvD4tdirpjPRT0iLv07idqx1yURMTOG+EevR8THhsVP8rRisczivvgXItKIuDiu+EPP/wnxoxf/8hjiw3n2Zt7+fHnY9ZfGk8V8+PVXK6dHNbr9Sz9o/2ZGtH9XRh20fn/x8bd+vTQy/usRj9eGtz/9+El+vCHxP/2Qdfzutw8PR23LfhFxdVj7l9wfa6m7c3tp7+Dw+tZOc7O12bq1srL87OpzqzdXbyxtbLVb5b9DY/zoE795/17pvQfqf+mE9reo/4jz/9QJdZ49tvzeW3fufqS3OPDORD1+niW1ofHT3uyzD8bv/+37TLlXXs7PYfrGd4bm8sSv/vDEqDzz+q+PqP/cKfW/dkL9j3v6mz/4y0PuCgCcgb2Dw+1mu93atVDxQlL2eB/lOP1PRE7d+cqj5pz3O6s+Y60kkthutmfjvk3N6hPrLbxWvhvNdv9qG9ORf1f+V5lk8mfdEAEAABN3r9M/uOXeDRj3mQEAAAAAAAAAAAAAAAAAAGCyTv0asFGb0oh4yK8TG4x5VE1VAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9P8AAAD//xQlyxg=") (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000008dc0)='./file2\x00', 0x0, 0x100) (async)

31.095919799s ago: executing program 2 (id=442):
r0 = syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000300)='./file1/file0\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000500)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
unshare(0x22020400)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec774000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
madvise(&(0x7f0000012000/0x1000)=nil, 0x1000, 0xb)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000004c0))
move_pages(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000ddffffff0800000085000000ae0000009500000000000000ebd4560706e2353cbb70de236a834e3db4847023d932e26bbe249194a1d4160b106f02c0e3c6a625040000001618042b065172a07672b92fe2260063d20ff4d2bf13bbd3945e0ee028a581bd81539a1a8e9d8eb0cb7dbcec68012294e67bccdd36f43ad1af70094ca93ae31613fc2340da2b6f3316aec78675f2872f87a92297d676499b869a606e6f01ecbd05ef69fec52640"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94)
writev(r0, &(0x7f0000004600)=[{&(0x7f0000000380)='0', 0x1}], 0x1)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e20, 0x8, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000cc0)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x9, @empty, 0x1}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000008c0)="634b013cecfa5563fb5185f3c0dd3bbeea2a188438f334ddcb154ecabfa223aa82fe75f85c2600c7dd6cab22eb99d98d437a40edf5e7260a2c5d7e6499128d7b129c3e82cb948690e58964e54ca64efbd01e892714dd3476cad30ece1c2c9d26267b4387037c382e691bb4852b535fc266fc294ded82851cce928b907f2712b4c24615f799ca67a0494d0bf0a992151be27b046fefae2f36b8512b9d240217d222ef90fa39453f90bc8331bf869c877f629bc7306cc6732d384f4fbd3b1d5a06cdd7d1c381a011c408774bc713f4dcf66a15524ae80149c15f123a6119b9", 0xde}], 0x1, &(0x7f0000000ac0)}}], 0x1, 0x2400d447)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x763c43, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r8, 0x25, 0x2, @void}, 0x10)
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be0044"], 0xfdef)
setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)

30.77198318s ago: executing program 2 (id=445):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x2, 0xadea})
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

30.637737235s ago: executing program 2 (id=446):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa800, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

30.219979617s ago: executing program 2 (id=453):
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000140))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9a) (async)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x0, 0x0) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=<r2=>0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r4) (async)
fchownat(r1, &(0x7f0000000180)='./file0\x00', r2, r4, 0x1000) (async)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) (async)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r9, 0x890b, &(0x7f0000000480)={@null, 0xb, 'veth0\x00'})
fcntl$setstatus(r8, 0x4, 0x2000)
mq_open(&(0x7f0000000000)='&\'\x00', 0x800, 0x40, &(0x7f0000000080)={0x3, 0xfffffffffffffff9, 0xc, 0x4})

30.121863499s ago: executing program 35 (id=453):
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000140))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9a) (async)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x0, 0x0) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=<r2=>0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r4) (async)
fchownat(r1, &(0x7f0000000180)='./file0\x00', r2, r4, 0x1000) (async)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) (async)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r9, 0x890b, &(0x7f0000000480)={@null, 0xb, 'veth0\x00'})
fcntl$setstatus(r8, 0x4, 0x2000)
mq_open(&(0x7f0000000000)='&\'\x00', 0x800, 0x40, &(0x7f0000000080)={0x3, 0xfffffffffffffff9, 0xc, 0x4})

21.036112178s ago: executing program 5 (id=549):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="03090000000000000000128008000100677265001400ac14142e08000700e000030a08000a0071207a4d48549ffc3e69d72779f03c053f0d83efcb520f934d4ab6a92496e60ca106559730e509e94cfa076b56a824738d", @ANYRES32, @ANYRES64=r0, @ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0x2000880)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
gettid()

21.020996853s ago: executing program 5 (id=550):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007d123d57d108d222609e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r2, &(0x7f0000000000)="fa", 0xfffffdef)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getchain={0x3c, 0x66, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x6, 0x9}, {0xffff, 0xfff1}, {0xc, 0x4}}, [{0x8, 0xb, 0xfffffffc}, {0x8, 0xb, 0x925}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x44080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

20.047844081s ago: executing program 5 (id=562):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x80, 0x0, 0xfffffffd, 0x26})
r1 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x18)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2}, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
socket(0xa, 0x5, 0x0)
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000000100))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xf361}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000004440000001e0a05020000000000000000010000000900020073797a32000000001800038014000080100001800400028008000180000000000900010073797a30"], 0xc8}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x411}}}, 0x7)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000005c0))
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20f}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

19.751884015s ago: executing program 5 (id=565):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000540000000000000070000006b1112000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsetxattr$security_evm(r0, &(0x7f0000000080), &(0x7f00000002c0)=@md5={0x1, "9f5fd82e0058c4457f3b92dbb5a54fd8"}, 0x11, 0x3)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r9=>0x0})
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r9, @ANYRES16=r6], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
getdents64(r1, &(0x7f0000000b40)=""/192, 0xc0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x30}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

19.501227673s ago: executing program 5 (id=574):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)
ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000040)={0xfffffffffffffff7, 0x5})

18.134476126s ago: executing program 5 (id=586):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b80)}], 0x1}}], 0x1, 0xc004)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x0, @ofdm={0x2, 0xc, 0x14, 0xa, 0x7}}) (async)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x0, @ofdm={0x2, 0xc, 0x14, 0xa, 0x7}})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df4bb84674d7", 0xe}], 0x1}}], 0x1, 0x20008000)
shutdown(r5, 0x1)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18)

18.001344097s ago: executing program 36 (id=586):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b80)}], 0x1}}], 0x1, 0xc004)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x0, @ofdm={0x2, 0xc, 0x14, 0xa, 0x7}}) (async)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x0, @ofdm={0x2, 0xc, 0x14, 0xa, 0x7}})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df4bb84674d7", 0xe}], 0x1}}], 0x1, 0x20008000)
shutdown(r5, 0x1)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18)

3.382589588s ago: executing program 3 (id=809):
r0 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setreuid(r1, 0x0)
setpriority(0x2, 0xff, 0xff000000)
syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000020601020000000600000000000000000e0003006205000400000000000900020073797a3000000000050004000100000005000500020000000500010006000000"], 0x50}, 0x1, 0x0, 0x0, 0x40051}, 0x44040)
memfd_secret(0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050)
mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d"])
socket$inet6_sctp(0xa, 0x1, 0x84)

2.339535986s ago: executing program 9 (id=814):
r0 = syz_io_uring_setup(0x25ae, &(0x7f0000000540)={0x0, 0x8550, 0x10, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SHUTDOWN={0x22, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480)=<r7=>0x0, &(0x7f00000005c0)=0x4)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000640)={r7, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c0015"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r11, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe)
ioctl$VHOST_SET_LOG_BASE(r11, 0x4008af04, &(0x7f0000000380)=&(0x7f0000000240))
r12 = dup3(r9, r4, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r13 = epoll_create1(0x0)
syz_usb_connect(0x2, 0xb19, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0x47, 0x9f, 0x60, 0xff, 0xa168, 0x611, 0x5ade, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb07, 0x4, 0x5, 0x6, 0x50, 0x4d, "", [{{0x9, 0x4, 0x81, 0x80, 0x0, 0xd3, 0xfe, 0xf9, 0xa, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "fb8979c5e9"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xf939, 0x2, 0x3, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0xe}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x1, 0xae, 0x81, 0xc0, 0x3, 0x3}, @obex={0x5, 0x24, 0x15, 0xfff}, @mdlm_detail={0xfc, 0x24, 0x13, 0xf9, "d2281c4f20628ebb3d1a6dfe5c4cd4c155553b99c844893ec5134f83fc853329eb2c2f1b4fa5a7abc778e52bc479d46b8dc84156016208be91915d1a418462b8abf185fda88e2191dacb6cac9b3bca6d8a5b0d02d2f239442b1c6951d914e8e0749231c266a6e4712fc4ead1cd645a1211f068156292ab7bde0066adce8321d60a961306495d8e6299e02610f1bf6ae5c2c5dd8082069ff0fdd76187e3cd21bab954e8ec6bf247b1dfea44cece92c0536706af8a6db16536677d06c2ce37b55044e8c77a3478e5c73a2cea5e1e6e7b61ac7432721230a9b46f76d457e99316edd10b3afcfcac31a249b679110505375872e2d6a5aff2c369"}]}]}}, {{0x9, 0x4, 0xb8, 0x81, 0x10, 0xff, 0x5, 0x6b, 0x1, [@hid_hid={0x9, 0x21, 0xfffc, 0x8, 0x1, {0x22, 0xfcd}}], [{{0x9, 0x5, 0x0, 0x4, 0x40, 0x8, 0xe4, 0x4}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x4, 0x8, 0xe, [@generic={0x31, 0x7, "cf695a50f8224f3c7d2503faf1572a2d5b6ca02dbb2323a91f6be91a648acd30a3f72e30c6d1d022b0847380ea70a9"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x40, 0x0, 0xb2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x9}]}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x1, 0x8, 0x8a}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x4, 0xbe, 0xb3, [@generic={0x40, 0x7, "1c9fcb20b4a69fb0acdfa0bbdfe26fc5f7b92c4d387faaca7333ab7888584587dcf23d97d3d416fdfc519e7c27abb2a6ff63ad05dcaca92fed50296659ae"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0x4, 0xb, 0xe0, [@generic={0x72, 0x4, "6fd40b54a93d852bb62f124e778ad5456a8d39b76a79b058f2d456a75052c56f1090c62c03b35c6871029b539a1279b2e77c3e7b0106a2b3853cf5efadfc0000c10275db6d4817cbd69d1ba408ef4bd2cb1d4dc8f83f4e87e6d23ad5637d9cdf43490965cc56d4ef4e7bbd9a93526c6c"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0xb5, 0x1, 0xa}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0xb, 0xf, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfc, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3}]}}, {{0x9, 0x5, 0x80, 0xa2cf943aa39508c, 0x400, 0x5, 0x6a, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x200}, @generic={0x6d, 0x11, "2694aa1a94d4234d5efec1a14a592a70c2b51d92400b2aa9ebd308b4b370cf1323cb33b002aaf01cc18c1a5027b43bbb65f44410c059828345951477397140d87fd545ec82b3779f04db238b1409464fd79044613db1721ccfbf6ae186144fcdbd7477f653aceeb4a1f55e"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x2, 0x8, 0x8, [@generic={0xfd, 0x0, "4575af34e002baddfa0e3bcc1cf1983baf827c0af8bec4c9dda931be696f2469ad20f339ad62a90fd09f5f711ee229afe344d302ba432e449e0079ef041bad8aef6b11e9109b3e51a05a65559081d1206b2b5c8a590963eb6baae74ebab40781d4c6d337b13e39dea29866b290cd3e9bd3c90072c0ae5cb3731400d05f1e4e3f4daca5a3859e9388f0fe45d9b31ae4de8752559d7908176175acbfccfa20002b1049cb78c9f684f503b13972872734a5803ca82521ec795ad71c7111f12d89c0b2006d56a26e769c791a5a2c3981e66968a12f1e36f5b6cb7fdc0674def0a7ac9ec30b4946b044f2f916c0d4d88af2d8bf05ba67e7a036f5be5c2b"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x43, 0x80, 0x40}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x2, 0x10, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x81}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3df, 0x9f, 0x7, 0x9, [@generic={0x7c, 0x9, "288274cf473cec7244f927cb4d204a57a614baa714f0a0584196aa5e40ed98f532868966856d1e101a67d25b5b0477bbac2bb52da31f565aaefbed12dc7867b4169059d0823f1dc283375fc9a81256dcfeb11b2b8501ac0e10fe2ff7edc7a10d3ccf78be798c1112537438d2ea6686dfa2a73924e19b98c85f4f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x2}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x3, 0x6, 0xa, [@generic={0x11, 0x22, "c3e49d5a668cd3fb18072fd4c4771b"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x7, 0xa, 0xa2}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xea, 0x8, 0xf, [@generic={0x84, 0x27, "a3ed9ee1a43741806fb5e6ba99a156f8f61f314547b46af992bf4ad09619d5549fe00b6a2ba6459c928ef25b87170a38a5d94a6ca4c0dcbe467022a2fbe66a3425f31c2ee5ad2b4cbb1bff1ac821270f1e13e6c2f6f70e265c866bdcce103a79c44f59b4b484ce8b75b89f52158292a257146367f1ee40ea4bdc329e6fa25a250dac"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3}]}}]}}, {{0x9, 0x4, 0x4, 0x0, 0xe, 0x2d, 0x6a, 0xaa, 0x80, [], [{{0x9, 0x5, 0xf, 0x10, 0x40, 0x7, 0x1, 0x5, [@generic={0x5b, 0x31, "57f75d8ad5141fd3ce4bec345d0b8106950b2e38342154cc725b2699c973f02aba70c95b825fb2f793b77d22e71b1dec9bc5af3021178cf958783a0a1c455a3e5d87d0ae6bd007895b157b6f71381096715c93daf759bbfb22"}, @generic={0x6b, 0x22, "19c0b8244964cabf567536cfbbf8e0821e92b5c8115232e17e22ad7a475e332d92caf74d20aab2125ea60dbc0d10931643828f986863fb9058e0e9c1452f70b32c809775242a191d91ef5e12c4bc246bea26db7c0800c1672eca3a4d4a456207895e549c46797b685b"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x1e, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x66b}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x26, 0x2, 0x80}}, {{0x9, 0x5, 0xf, 0x8, 0x0, 0x2, 0xf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xdf, 0x400}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x8, 0x94, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x98, 0x9}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x6, 0x4, 0xf7, [@generic={0xfd, 0x8, "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"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x4886}]}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0xe, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x3}]}}, {{0x9, 0x5, 0xc, 0x3, 0x10, 0x3, 0x40, 0x3, [@generic={0xb2, 0x24, "2b79c00d8a80c4adfaaad721e50817ec30c637b9090d772746b4a4aa16bf0262120a6ea0c266f9a0ca51b74ca51a8bb92aabfac0ad452d99f207411c50efcf709c08dec924ea7be883ed59d54b5ce8c80e21902c826596b4eaf6c6b3a96a5741de0aa5098acbf0b3d1d8528a82b1359a0dc6678f6a807d626f6610345d790967087bac4efbb6aa927a0844364213b3e95ddd904128d44aad0794dcdd614dbd660bd686496abbb23e8257db422e09c97b"}, @generic={0xf1, 0x30, "1df526206d416a05ef852a1fa28d7d84fb2ed4609b17d702b668230a4a11635cc4ba0043c387e5f87ddc9682972986222e6269339003bb2b5c952901d570ce1bf33b15814699d02da771aa4fda9a7691015bfc9047f9423638f53ecb33123d5a52a9012238ac7b54d2e57411c5dee0033e52455a2fc0444721e375db3859a7834c020368d3d8636e21dcdf7add70240c0c0dc8943885a524059175ce9e72d26104816777c65b10a6fe06c36fd96e5dff133206fc57b6df1b360364b125aaaa4bd59766ec53fa3aca299673c3d4a07e1fd7db5f18c0729b69a55605626795c89385fe9602e467cd8bae40dbee5dbd61"}]}}, {{0x9, 0x5, 0x4, 0x9, 0x400, 0xc4, 0x7, 0x3}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x3, 0x2, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}]}}, {{0x9, 0x5, 0x6, 0x9, 0x200, 0x4, 0x2, 0x10}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x57, 0x8, 0x3, [@generic={0xa8, 0xf, "c69f004e621fcd0bdca34c80dd47406d35bfcc7d5196a4b4b8dc1cbb5a19f126a4a427181f4b749d8de40b07deb46575235620090139712619f8b0078fe23872841f294de37e4b80dfd3e15ecc2fdbac3e6d5d53f3724b73e0fd78aa694a098552e35e17e7ccb737b201ca88ab02b4e85158ebb926121188b78edb44f59cd463cad4ffffa370aeb1b127b7d7bfe62608792309cc452cc9df14c536986b0d7158e654e3f1f6bf"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x6}]}}, {{0x9, 0x5, 0x2, 0x12, 0x0, 0x6, 0x5, 0x21, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xb9e7}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0xfb, 0x8a, 0x5, [@generic={0x37, 0x1, "2d3fe037560b89c5dc92d2128bbd72760dfedbf8fb321a25e14785aa5d54d4f6f9120bddffa13ad59c7fdd80bfa39877a1f5b7e36a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x2}]}}]}}, {{0x9, 0x4, 0xce, 0xa, 0x0, 0x90, 0xa8, 0x4d, 0xed, [@generic={0x3f, 0x3, "552f8985800ce9030908c233a14e9e9f54c5c3762b4b5c152c8b3846eaede7d04e4de05e422a682d3c95c736f6ad48b30b1fa44a9567e36880c72dc247"}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "3ec3e6ba4b2c"}, {0x5, 0x24, 0x0, 0xe9f6}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x7, 0x77}, {0x6, 0x24, 0x1a, 0x0, 0x1}, [@obex={0x5, 0x24, 0x15, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x84, 0xd, 0x3, 0x1}]}]}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x250, 0x8, 0x9f, 0x9, 0x10, 0x7}, 0x5, &(0x7f0000001240)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x402}}, {0xbe, &(0x7f0000001300)=@string={0xbe, 0x3, "65bfa0466d51947daf07c4cbf8ef10aef23ef5172dc205877d52ad68e8a120bbed505e6f33d77684aee063a13c2b976256a83e5a9798b0487bac24b1111b285436d12e33a9a7337928ec4fa17c1e2ec5a96d03e598d8de2f18d1c64a927b201313b6d5802911d74e80f7d3d440bc74397936271026fe4189cc6b0c2e8a4a32c88e8ed2c83b95994ec44d69e74d5600ac4292b4d89168554ee559438f2e1d03ee9c438ca3e4a253dec5a227f17c0354805dbc77418d904cb13a4b2104"}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x448}}]})
epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000000)={0xc0002003})
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xc6e, 0xee, 0x8, 0xff, 0x0, 0x3, 0x2, 0x3, <r14=>0x0}, &(0x7f0000000080)=0x20)
setsockopt$inet_sctp6_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f00000000c0)={r14, 0x5, 0xfff, 0x10}, 0x10)

2.194755797s ago: executing program 3 (id=815):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020)
r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
pwrite64(r1, 0x0, 0x0, 0x4fed0)

2.06290058s ago: executing program 3 (id=819):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r3, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x3c, 0x3e9, 0x800, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x1, 0x0, 0x8, 0x2, 0x6, 0x8, 0x0, 0xf5, 0x8a}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c004}, 0x40080)
r4 = dup(r2)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0xffffffffffffff1e}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00')
pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
bind$llc(r1, &(0x7f0000000100)={0x1a, 0x312, 0x5, 0xd, 0x3, 0x9, @broadcast}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r6, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000300), 0x94}, 0x6}], 0x1, 0x10027, 0x0)
syz_mount_image$fuse(&(0x7f0000001000), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, 0xffffffffffffffff)

1.96555708s ago: executing program 6 (id=821):
r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x21, 0x4800003e, r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x80009)
r3 = getpid()
sendfile(r2, r1, 0x0, 0x3b2e)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
ptrace$ARCH_SHSTK_STATUS(0x1e, r3, &(0x7f0000000000), 0x5005)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000340)={'team0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xcc, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc0}, 0x15)
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r8 = socket$netlink(0x10, 0x3, 0x400000000000004)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
writev(r8, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005400), 0x0, 0x1000)
r10 = syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64=0x0, @ANYRES64=r4], 0x2, 0x1cf, &(0x7f0000000780)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUbEQQ3ZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT8xrykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE8YP//83uIKcmNLAkKYQxpikxibWtuXMnBBmfja3BQotySeYQo9yLJ0pYXFAqOrkT0vNtw6JbjO2PXVgO8Nz+DjPmoI+QaPjEgxOCwX/y4CMSWhoKNNYy7TUdsGXIo2/El6rjZ0yGNztmZbBApSlAUSuhPJkwXoSkld46GhqGqUkJzRskkhIciswfMmwdQ/naoEGBqRoU2FgYNjOCItbCLgGY4yCUTAKRsEoGAWjYBSMglEwCkbBKBgRABAAAP//cSSaOg==")
mknodat$null(r10, &(0x7f00000000c0)='./file0\x00', 0x400, 0x103)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x18, 0x16, 0x301, 0x70bd25, 0x25dfdbff, {0xc}, [@nested={0x4, 0xee}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044004}, 0x24044074)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
setuid(0xee00)
fcntl$getflags(r10, 0x408)

1.618482064s ago: executing program 6 (id=822):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000032000000fe8000000000000000000000000000aa000000000000000008000000000000000b000000000000000a000000000000000600000000000000000000000000000000000000f7000000030000000000000000000000000000000700000000000000dc98769788d115668d590200000000000000f8ffffffffffffff0c000000000000000202000029bd7000000000000200040028"], 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r1=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b0368002e0064000212475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="20000280", @ANYRES32=r2, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', <r5=>0x0})
sendmmsg$inet(r4, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @loopback}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@empty]}]}}}], 0x38}}], 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r6=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480)=<r7=>0x0, &(0x7f00000004c0)=0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r9=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r11=>0x0})
r12 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r11, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r12, @ANYRES32=r12], 0x44}}, 0x2000800)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0xfff, 0x2, 0x8, 0x3, 0x1, 0x6, 0x7ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640)=<r15=>0x0, &(0x7f0000000680)=0x4)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000f40)={0x474, 0x0, 0x25b5372c82a817d5, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x6, 0x5, 0xfffffff4}]}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x1a0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffe00}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}]}}, {{0x8, 0x1, r11}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r15}}}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0xc0}, 0x8040)
openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x16b03, 0x19f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r16 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000100)={[{@xino_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0/file1'}}, {@verity_require}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', r16, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)

1.564633687s ago: executing program 6 (id=823):
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001400c759fa65e84d99e6d52502000000", @ANYRES32=r1, @ANYBLOB="080003000000000008000100ac1e000108000200e000"], 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
r2 = getpid()
r3 = openat(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', 0x842, 0x10c)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000340)={0x0, 0x0, r3})
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x2a, 0x1, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"})
r6 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x400040, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0)
ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES32=0x0, @ANYBLOB="010426bd7063", @ANYRES32=r9], 0x1c}}, 0x4008054)
write$nci(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="7105010802010202030d0e0001e5800606bed29d2ba4bf0b846fabc6db96ede423b7c216a4343a016e592bd59d1d35dc817ca662c9809dfc9906000000c4e20f4207efb50ee442da0f99fa19a8a12f2ac2f464eedb0e0c9e59957b5ec5b28fe0b8aae9430a35b6c75a7db5b21d48de25d708d728e0c7d5cb96b0d46a1c7b4a3d193146bdbb4426a2e37ec57cfc2528f061bc00"/160], 0x17)
syz_emit_ethernet(0x184, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0)

1.420166914s ago: executing program 9 (id=824):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0xc2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r5 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='\'/\x00', 0xfffffffffffffffd)
r6 = add_key(&(0x7f0000000240)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="3fbc242513b7c1e9ed09", 0xa, 0xfffffffffffffffa)
keyctl$link(0x8, r5, r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="00000000005413aa49040000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, 0x0, &(0x7f0000000180)=r7}, 0x20)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r8, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
sendfile(r8, r8, 0x0, 0xe3aa6ea)
openat$incfs(r0, 0x0, 0x20000, 0x22)

984.005252ms ago: executing program 7 (id=825):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_CAPBSET_DROP(0x18, 0x23)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff04000000000088a800008100"], 0x0)

983.356673ms ago: executing program 7 (id=826):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$unix(r1, &(0x7f0000006100), 0x0, 0x80c1)

969.472359ms ago: executing program 3 (id=827):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) (async)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r2, &(0x7f00000126c0)=[{{&(0x7f000000a200)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd0de}, 0x1c, 0x0, 0x0, &(0x7f000000a2c0)=ANY=[], 0x2}}], 0x1, 0x8000)
r3 = dup(r1)
write$UHID_INPUT(r3, &(0x7f0000001980)={0xc, {"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", 0x5c1}}, 0x505) (async)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_def_err_data_reporting={{0x9}, {0x40, 0x4}}}}, 0x8) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff6c, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000001080)={0x20, r4, 0x1, 0x0, 0x25dfdbff, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x0)

923.896386ms ago: executing program 7 (id=828):
socket$inet6(0xa, 0x80002, 0x0)
epoll_create1(0x80000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x24000840)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3ce0000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)

851.647919ms ago: executing program 3 (id=829):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2212404, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize}, {@nobarrier}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
truncate(0x0, 0x3)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c"], 0xfdef) (async)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c"], 0xfdef)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
syz_read_part_table(0x104f, &(0x7f0000001080)="$eJzsz7ENgmAQBeCHiIFGVnAFN3AJVrHGLZyBEeycilj9xmAo7I0x+b7mXu6ueeGnzqWUbLPr6ySndb3Jo02zpFV3XGab5NJkn2vmcujbusvH52qsbsOS7iWZMs7lpXqfh+lrxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjzwDAAD//+NcE+8=")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) (async)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0, 0x70000}) (async)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0, 0x70000})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000040))
r6 = dup(r5)
r7 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg(r7, &(0x7f0000008900)=[{{&(0x7f0000006380)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, 0x0}}, {{&(0x7f0000006c40)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28000000000000003a000000070000000572a0a7ec7ead3df31714ff16d04a9bff00000000000000d0010806371df7f453c23743fd027a621029d4debe1a5d87efedcfbb41273266daeba77e3b056f82f8967520bf1de973"], 0x28}}], 0x2, 0x400c080)
ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r8=>r2, {0x6}}, './file0\x00'})
ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000100)={0x1, r6})
openat(r6, &(0x7f00000000c0)='./file0\x00', 0x204000, 0x1a2) (async)
openat(r6, &(0x7f00000000c0)='./file0\x00', 0x204000, 0x1a2)
fsopen(&(0x7f0000000280)='tmpfs\x00', 0x0) (async)
r9 = fsopen(&(0x7f0000000280)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x8, 0x89, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90)

847.61228ms ago: executing program 7 (id=830):
syz_emit_ethernet(0x6a, &(0x7f0000001340)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a9f7", 0x34, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2b, 0x0, @loopback={0xff00000000000000}, @loopback={0x0, 0xffffac1414aa}, [], "8292c2c8"}}}}}}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x40, r1, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x19}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x16}, {0x2, 0x7}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) (async)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
recvfrom$rxrpc(r2, &(0x7f0000000000)=""/35, 0x23, 0x2002, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x8, @mcast1, 0x8}}, 0x24) (async)
r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x0)
sendmsg$tipc(r3, &(0x7f0000000700)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x1}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000140)="19e537c29512e9d6fd197b4c76b36b5e322df871ba090fd8379894807ef29d1cf2a18e8a96e1f128833da24cc9fa3616b8d450ed6291451c3b2df99eb0f889b198f7059b5eb61db775384b2d96004ad6d71c8716d54717528eb9d8afbfdb3c2c35", 0x61}, {&(0x7f0000000300)="717845c1b940d7383a994d02d00050122b484548691270cde8e30bbeb6295aebadb7c184042e142e07ba59ceacbf2a8b1e507ef7a81031926aacf6c072d6c48e68d76d1672f2fe95fca2e40269c303f4a7d8b0904b8b900dc158f21e577e4af3d5094540d8f54caaa81a72220e5c0a1de7c9d1567ab83195cecfc290873d7ec018d45473aa963e89c0cb3cafa569ea7f8fd82478005aa2743a36620d4a9d778b78e5cdebdcd1fb20a353548301e3ed13c7132228225c62ec541a968bc58863a9b54f3ebc38dc7ad91b711dbb3678d096e55b3ac3e3e339320fe8f9a184f5e429c1c666fc6941f18dfbd594412e50d3b702030301", 0xf4}, {&(0x7f00000004c0)="aa90ee10b565889272cbc25640a48a735ce94beb3921850d7a70fa51162c20e0884d54dc93f98ca267ffcf583638306f2726197b8ab08592857ae81b225968dc264628ba46e5770fb9092942a3e9fffd9ed4e9f27a1737ad21f01ac3269ff4df80acf304deedbebaeb0161262b031b0d7ba0425d919ae6304d525c298bf7efe33728fb2e2f68aed8691b0b8b2b59fb60a1c7c4a79bdaeaf5fc37dbfcf296c828ca0b81f29a09c9c8f69ecbb0dddef0358380353ed2627d45687da1f6ccbfa4b7cc2cc89b2e98027c80f8c74b1a5ddc9cd567417edcf4ec9d5a6de6fd0c94dab2764b4e379c9d5353b299998e1363a86a25ff499ee752", 0xf6}, {&(0x7f00000005c0)="13e8ca3649441796a75737ae27661268caecd9011ad1926d5efc4d43e35ef94d7bda9b8ed9380af14f8667dddbaf0fa45c6223d454cf6da98383", 0x3a}, {&(0x7f0000000600)="4a7905f844eb936332cf201fb0cb1481b621f13c97a0905aa595732791fe91626c8ee501217cd05cc1aebc7a11162855a72c1f9935db7d66772d191afaf6d4de3ed1e53446aa903e73e8f65eab0014baf5d2de0413e02dba0c1eebf181cadaef923af6ba9903343c", 0x68}], 0x5, 0x0, 0x0, 0x801}, 0x20008040)

831.185891ms ago: executing program 8 (id=831):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x2000000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_NET_NS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

814.852035ms ago: executing program 7 (id=832):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xf)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', <r1=>0x0, 0x10, 0x1, 0x8000, 0x2, {{0x3b, 0x4, 0x1, 0x2d, 0xec, 0x67, 0x0, 0x3, 0x2f, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x14, 0x69, 0x3, 0xb, [{@multicast2, 0x4}, {@multicast1, 0x8}]}, @timestamp_prespec={0x44, 0x4c, 0xda, 0x3, 0x6, [{@multicast1, 0xb}, {@multicast2, 0x7}, {@private=0xa010102, 0x9}, {@loopback, 0x3}, {@remote}, {@remote, 0x2da}, {@multicast1}, {@local, 0x8000}, {@rand_addr=0x40, 0x8}]}, @timestamp_addr={0x44, 0x4c, 0x92, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5be0}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast1, 0x2}, {@private=0xa010100, 0x6}, {@rand_addr=0x64010102, 0x6}, {@multicast1, 0x1}, {@private=0xa010102, 0xb5}, {@remote}]}, @timestamp_addr={0x44, 0x14, 0xc9, 0x1, 0x3, [{@empty, 0x40000000}, {@loopback}]}, @rr={0x7, 0x17, 0x96, [@dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010100, @remote, @local, @multicast2]}, @end]}}}}})
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0xffffffff, '\x00', r1, r2, 0x5, 0x5, 0x3}, 0x50)
r4 = fcntl$dupfd(r3, 0x406, r0)
ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f00000002c0)=""/131) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x3, 0x7, 0xc6})
connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r4)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xf1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6000000}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x401]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000)
socket$inet6(0xa, 0x80000, 0x0) (async)
r6 = syz_open_dev$dvb_dvr(&(0x7f0000000580), 0x9, 0x100)
ioctl$DVB_DVR_DMX_EXPBUF(r6, 0xc00c6f3e, &(0x7f00000005c0)={0x7, 0x80000, r2}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={<r7=>0xffffffffffffffff})
ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f0000000640)={'veth0_to_hsr\x00', {0x2, 0x0, @local}}) (async)
ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000680)) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r8=>r4, {0x5}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r9=>r0, {0x3}}, './file0/file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r10=>r0, {0xad}}, './file0\x00'})
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000780), 0x4) (async)
setsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f00000007c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r1}, 0x14) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='syzkaller\x00', 0x1ff, 0xe1, &(0x7f00000008c0)=""/225, 0x63b80, 0x697bf12a877ed486, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000009c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0x2, 0x46a8, 0x6}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000a40)=[{0x4, 0x5, 0x6, 0x6}, {0x3, 0x1, 0xc, 0xa}, {0x3, 0x3, 0x1, 0x7}, {0x5, 0x4, 0x0, 0x8}, {0x1, 0x3, 0x8, 0x3}, {0x1, 0x3, 0xa, 0xc}, {0x1, 0x5, 0x3, 0xa}], 0x10, 0x8}, 0x94) (async)
syz_emit_ethernet(0x5e, &(0x7f0000000b80)={@empty, @random="b2e4d7f548ae", @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x1, 0x0, 0x4}}, {@canfd={0xd, {{0x3, 0x1}, 0xd, 0x0, 0x0, 0x0, "9d78dd3ef86ec82ee2dbaf8729cfb58865fd22ddb37eb2d6a1506d1e1df93af8e1d68693a9b0bbcc05422617aa26542d140231188edbe7bc5d2612cbd99ff3e9"}}}}, &(0x7f0000000c00)={0x0, 0x2, [0x7ea, 0x3e1, 0x2f9, 0x370]}) (async)
ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000000c40)=r1)
r11 = accept4(r10, &(0x7f0000000c80)=@caif, &(0x7f0000000d00)=0x80, 0x800)
getsockopt$PNPIPE_IFINDEX(r11, 0x113, 0x2, &(0x7f0000000d80)=<r12=>0x0, &(0x7f0000000dc0)=0x4)
sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) (async)
r13 = socket$kcm(0x29, 0x2, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r13, 0x1, 0x53, &(0x7f0000000ec0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000f00)=0x2c)

735.499411ms ago: executing program 8 (id=833):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xe, 0x40, 0x2, 0x3}, {0x80, 0x7, 0x4, 0x7f}]})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0xf25)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_iso={0x0, {0xc, 0x1}, 0x80000000, 0x0, &(0x7f0000000100)="e939a8373b7f9e005ca7dc1e442de96b8ae3efa29ae52d259da49d", 0x1b, 0x9, 0x3db, 0x26, 0x1, 0x7, &(0x7f0000000140)="d6e0fcbf0c882a49bb5c1a47484262873f9a5458", [{0x9, 0x2, 0x7}, {0x2, 0x6, 0x1}, {0x7f, 0x10, 0x3ff}, {0x48a4, 0x6, 0x9}, {0x19, 0x1, 0x8001}, {0x4, 0x1, 0x72}, {0x8, 0x1, 0xfffffffb}, {0x2, 0x9, 0xa6}, {0x8, 0x10001}, {0x2, 0x200, 0x6}, {0x5, 0x5, 0x4}, {0x1, 0x312a, 0x5}, {0xbe2b, 0x1, 0x3}, {0xfff, 0x6, 0xe}, {0x800, 0xd12f}, {0x3, 0x3ff, 0x7}, {0x4, 0x0, 0x89f0}, {0x3, 0x9, 0x1ff}, {0x0, 0x3, 0xa}, {0x2, 0xe, 0x7}, {0xfff, 0xfffffff3, 0xfffffffa}, {0x9, 0x490, 0x2}, {0x5, 0x100, 0x1}, {0x10001, 0x6, 0xfffffff1}, {0x0, 0x3, 0x7}, {0x4, 0xf1e, 0x4}, {0x7f, 0x10, 0x9}, {0x5, 0x1020, 0x8}, {0x7f, 0x5, 0x4}, {0x4, 0xfd29, 0x2}, {0x5, 0xffffffff, 0x9}, {0xffffffff, 0x6, 0x8}, {0x8, 0x1, 0xacb}, {0x6, 0xffff485d}, {0x8, 0x30000000, 0xa2}, {0x7a, 0xc2f, 0x6}, {0xaa, 0x97, 0x4}, {0x5, 0xb, 0x5}]})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000380))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)={0x2000})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x200102, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0)
sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x40)
pwritev2(r3, &(0x7f00000009c0)=[{&(0x7f00000005c0)="ee6211bed86b31a1777a72647ba852c66a638dd9d85eb79dd54a4ba3b66a5c7a788e8c460bd5f351c6d3532ffe3a722207a4f826d068adecdd8d79102a0365bfe4145bbedf04a5b619582d03487ab0da8f0f847ce9ad3bb439d97269ead1da06ed201d", 0x63}, {&(0x7f0000000640)="a40983bb0a48f862eb7638b76f6557681e7f476f8cd372b4a613b1cd3ce2677101572aaa0e0c85216891c46ed409742565aa285ddd4e2a6d8fd4b9f53f8706668d11b79ede4d331ba785a03a078fd0996cb5530208d5fb26354454625347b95624985e973f98c04ec7ea90add6f81273f6ca9435face77644d8fc4c9299935decfefa4", 0x83}, {&(0x7f0000000700)="87b7c1964d057b0147b2b4564b4a5e1d026c19b86d06b2e673dcd8a51e866841f10cb01da9bfa894a62038c1fff0bfa07347a781288692cab76c912b47738a262ebb196dbcffc5fc06cf77302046902b6bb3cbe6c27e7f40ce927c173600df7b7beea661e37675b40e720dc2be38bbed7e34356eabe4716e5b1b8230391ee551a0566c989c0f6cf111", 0x89}, {&(0x7f00000007c0)="977a5e2ea0f903b23ba23b00de54018e2f700792d8a92078086ff2f3d71c051a5f7369d594338568fed44f5505d93dbbaf2d17d29e4d8fa88cb7cd9811f851704b56e28d05c45f2b7a6784f227d85f7a78a2db5106c0f7fc0e70fe9cbaeb27b07bc99b229d88a0cd4da7dcbc3c3342334058c52ecfe88b1d25c209113a21cd0b1bf96764d7624c0ece8b1691c1c1f77769486b3734b1cc72772e5762a9f7013b82b5c3fbc314a09e4bf82521ba4e4a95cdfd", 0xb2}, {&(0x7f0000000880)="32311a280027d6797b0f4703db5ce4c81454898e455496d43d3510c58f096e5640a5274ec1d3caf2d14cef3a31ff2174425195c3f534", 0x36}, {&(0x7f00000008c0)="14853c319d3796d0fb9fd239be49cd12b9577a85c29bbbfdd1e427295678c6057da586ebaa5c69131c0a5633c80b688c40df1ba98131953e68058c642dd1f7", 0x3f}, {&(0x7f0000000900)="738d77b14f440d157883503803418e7794229702a378547dc8aae44e1bb502", 0x1f}, {&(0x7f0000000940)="9fdaeff13b98e2e9cddc5a4658a6ea05764d06acd4a8c94b53650ebb42525a8ad620430619653c21b050e2a1dd6b901ea6f09b5fbc441265490f77c73385a9fa479b7f7ee7ed49d61ae62a2d764b79721d665d6af621", 0x56}], 0x8, 0xa, 0x7ff, 0x1)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000a40)={<r5=>0x0, 0xffffffff}, &(0x7f0000000a80)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000ac0)={<r6=>r5, 0x0, 0x30}, &(0x7f0000000b00)=0xc)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000b40)={@in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x4d, 0x0, "abf156d56a8de3ed255c483e359eec1616150f35fade88d574979de4a477dffa25fc1f3c9f4c7c02183b44043e92582e7bf5e684b3b9faeaf2ac548571c7967a7337591011f08c359bf679fa68994f89"}, 0xd8)
mkdirat(r0, &(0x7f0000000c40)='./file1\x00', 0x40)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000c80)={r5, 0xfe2}, &(0x7f0000000cc0)=0x8)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000d00)=0x3, 0x4)
ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000e00)={&(0x7f0000000d40)=[{0x10000, 0x45cb5b04, 0x2, 0x100000001}, {0x7fff, 0xff, 0x1, 0x4}, {0x1000, 0x3, 0xcc8, 0x401}, {0xff, 0xff, 0xc9d5, 0x3}, {0x9, 0xffffffffffffffff, 0x3, 0x1}, {0xb, 0x3, 0x1, 0x10000}], 0x6, 0x20, 0x6, 0x7ff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000001340)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f0000000f00)={0x3f0, r7, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x5e}}}}, [@NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f3e02e18110a9d64"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x200}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f12650956d8979c1ce48427578de8191"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d5e151478cc635d38b786fe52cb94cb4c8b63cb7951b1ecf"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ff0fcce3b122f64398b997de21ec8c04a73ccdbcabf0c65b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b14ded0219d3cc82"}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "47a34732de554981"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cfcc8cbe907d6cff"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ebf52fea1efd10a8f0f84a6d049fb9d8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8c059b0ef6244dcf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e81aeb5794426a2d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e78c77ab335c32621bd8d18d36190168812e6c236705a4cf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "79a3ecee5bba396a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7f5d9f46838db299"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8ac0e1f89ef66ae3f1603e8a21e53fa4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1a894b50dec279cd3309540eb2b95a8aa3e791fb9ddc33489f59cad41b50d738"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8d799aa32deb602930912a731be1280fb77e536b962c7993"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7abdbf08bebf0a0fad97e2f039d77583"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5d11b6777e4c7e8f389e4895a6932898267320b0c53fedd0"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ef2bc3818b0864ab"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="09bc91fa07f0d3b33b90ee580491fc2a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3e56e80e91054cf6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9d3098099d17b4f0"}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bbb5d387074cba4d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "09123514a51a45d0"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1e850bcafde25264d372d8c3626f0f41"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7f71b8dc70feda50"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c74af024b0be61b26ddf653c5016afcc"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "260b2ddb7b19621d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c11f64580398fb98"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c1a5c8b6b2fa1493e3400915d918911542517f07fa1038e3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x34}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ba6e376bd0571994b9e83ece5b3730b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3eaeca52af721f6160bae5c2227997c5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a1d304c0f06bf338"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7030dd56ab9104343f6ec4f4ca6f5bfaedacda509abee535"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c45b73db49019cf74a80bd6871d77c61"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="75e9b32e26611929ea620ef59d121a35bd6f02c6f4458f0a"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="699ebbb9ab2eafd1a3a0574f0b3b186f80d38bdc774f967580c12baf010c5fa3"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="974a6ab436c612c9ccb5f143bb2d2cff9fa837c4538f2d5d323c0ade3029f0ca"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="71d64cc858389d0c91766d8a555e537c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3ac813843f2f370ac65c42f5a3727e1a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5f019f6b30bb7e00becb9b3aa1c61555"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xbdb8}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="182f1f8130f7c0facd5976f0f169cf1d60534cc7a2c7d04019479c61fe941d5f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x8000}, 0x14)
r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001380), 0x2800, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f00000013c0)={0x0, 0x5}, 0x8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r10, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x750}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xeb5b}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, r7, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xeb}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x40)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000001640)={r6, 0x81}, 0x8)
ioctl$BTRFS_IOC_QUOTA_CTL(r9, 0xc0109428, &(0x7f0000001680)={0x3, 0xcc})

729.113126ms ago: executing program 7 (id=834):
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
prlimit64(0x0, 0xd, &(0x7f0000000240)={0x8, 0x401000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffe}, 0x28)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_socket_connect_nvme_tcp()
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000001a00010028bd70000000000002202000000000070000000008000300", @ANYRES32=r5, @ANYBLOB="08000100ac1414bb080002000a010100ed54a055bdcbcf151a4db41c33f7931773a960d156f178c17b973f9c54ca43cdc964810765423f01885340dac4207b24abc7d6323e5f1935cd2d794a70310aa7978ad2ed1c7dc7a75a2e00"/102], 0x34}}, 0xea5bc50b6199d77e)
sendto$inet_nvme_pdu(r3, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000203010200000000000000000500000408000440000000001000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)=0x4)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r3], 0x98}, 0x1, 0x7}, 0x24000005)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r11, 0x0, 0x20, &(0x7f0000000280)={@rand_addr=0x64010102, @loopback}, 0x8)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880)

720.019054ms ago: executing program 8 (id=835):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@shortname_lower}, {@rodir}, {@uni_xlateno}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@numtail}, {@shortname_win95}, {@numtail}, {@fat=@flush}, {@utf8no}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@numtail}, {@fat=@flush}, {@shortname_win95}, {@rodir}]}, 0x1, 0x38c, &(0x7f0000000200)="$eJzs3U+IW8UfAPBv+pLdTeHX3cMPioISvQm69A8eFA9byhaKuaiEVg9isFuUzVrYYHB7aLpexKPgUUHwIh704KFnERTx5sGrVbQqHrS3gsWRJC/Ja5PdrtRtXfx8DuWb78y8mXmdTd6+R2ZfuJ5Wz1Ti7NWrV2JurhTlpeNLca0UC5HF0MWYNDMlBwDsDddSit/TwCiZTYnGSndoaADALul9/qduMfP659vVTz79AWDPy3//r25XZ24y9eMTvX/P7d64AIDdM3H//8Fx2f2Dx/yFR/3lqQ8EAIC95Zlnn3vyWD3i6WptLmLtjU6j04jHx+XHzsbL0YqVOBTzcT1icKGQUjr9ff/FiZP15UO1Wq0bPy1EIyLe6zQi1rqdxuBK4VjWbz8bh2M+FvL2+dVGSik78Ul9+XCtLyIudvv9x1qp06jE/rz/b/fHShyJWvx/on3EyfrykVp+gMbasH03YnN836I3/sWYj69fjHPRijPVU5HS8LKmvnzhcK12PNVvaN9pzMaZ0VmYcgcEAAAAAAAAAAAAAAAAAAAAAABuw2JtZGG0/00a79+zuDilvL8/zqB9vj/Q5mB/oDSbIqXfXnuk8WY22KtnuD/QzfvzdBrl2Hd3pw4AAAAAAAAAAAAAAAAAAAD/Gu2NmWi2Wivr7Y3zq8Wgu97e2BcRvcwrX370WTUm69wiKOd9FIpqeer8ajNlw8opu6FOHmS9zoeZDy+NRlysMzuaxdRh9IrbM1vU+d8DP7wzztyXDY/857hOFtMnmN00jGFQiYi1AxFRjRgVVcZT3vKMHc2DI7c4q5dTSlsd58Lzk62iFFH++/9x2wepF3xx5aV7jrYPPtrPfJoGHnp4/tTlt9//ZbXZ6vXc0/pgZr19Pa0289fTF9tKqbxFp1lh/ZTyc1gqroTydkPdvDHTzL759fS9b321s5mmYubVKXWywXQ+Xm9vlPKflH7RzCDo5W5qVW2dzCLOL0XxOJUpi//2gqmL7eC7S81LF777eafHKbxJjDfqqP7T7z8AAAAAAAAAAAAAAAAAAMBY4bviufzLvpXtWj32VB7M7e7oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODOGP/9/0KwOZHZSfBHNyaLZlfW2xEH7vY0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4j/srAAD//x9pY8c=") (async)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@shortname_lower}, {@rodir}, {@uni_xlateno}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@numtail}, {@shortname_win95}, {@numtail}, {@fat=@flush}, {@utf8no}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@numtail}, {@fat=@flush}, {@shortname_win95}, {@rodir}]}, 0x1, 0x38c, &(0x7f0000000200)="$eJzs3U+IW8UfAPBv+pLdTeHX3cMPioISvQm69A8eFA9byhaKuaiEVg9isFuUzVrYYHB7aLpexKPgUUHwIh704KFnERTx5sGrVbQqHrS3gsWRJC/Ja5PdrtRtXfx8DuWb78y8mXmdTd6+R2ZfuJ5Wz1Ti7NWrV2JurhTlpeNLca0UC5HF0MWYNDMlBwDsDddSit/TwCiZTYnGSndoaADALul9/qduMfP659vVTz79AWDPy3//r25XZ24y9eMTvX/P7d64AIDdM3H//8Fx2f2Dx/yFR/3lqQ8EAIC95Zlnn3vyWD3i6WptLmLtjU6j04jHx+XHzsbL0YqVOBTzcT1icKGQUjr9ff/FiZP15UO1Wq0bPy1EIyLe6zQi1rqdxuBK4VjWbz8bh2M+FvL2+dVGSik78Ul9+XCtLyIudvv9x1qp06jE/rz/b/fHShyJWvx/on3EyfrykVp+gMbasH03YnN836I3/sWYj69fjHPRijPVU5HS8LKmvnzhcK12PNVvaN9pzMaZ0VmYcgcEAAAAAAAAAAAAAAAAAAAAAABuw2JtZGG0/00a79+zuDilvL8/zqB9vj/Q5mB/oDSbIqXfXnuk8WY22KtnuD/QzfvzdBrl2Hd3pw4AAAAAAAAAAAAAAAAAAAD/Gu2NmWi2Wivr7Y3zq8Wgu97e2BcRvcwrX370WTUm69wiKOd9FIpqeer8ajNlw8opu6FOHmS9zoeZDy+NRlysMzuaxdRh9IrbM1vU+d8DP7wzztyXDY/857hOFtMnmN00jGFQiYi1AxFRjRgVVcZT3vKMHc2DI7c4q5dTSlsd58Lzk62iFFH++/9x2wepF3xx5aV7jrYPPtrPfJoGHnp4/tTlt9//ZbXZ6vXc0/pgZr19Pa0289fTF9tKqbxFp1lh/ZTyc1gqroTydkPdvDHTzL759fS9b321s5mmYubVKXWywXQ+Xm9vlPKflH7RzCDo5W5qVW2dzCLOL0XxOJUpi//2gqmL7eC7S81LF777eafHKbxJjDfqqP7T7z8AAAAAAAAAAAAAAAAAAMBY4bviufzLvpXtWj32VB7M7e7oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODOGP/9/0KwOZHZSfBHNyaLZlfW2xEH7vY0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4j/srAAD//x9pY8c=")
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x6, 0x7, 0x2, {0xe, @pix={0xfffffff8, 0x2a, 0x59555956, 0x9, 0x6, 0x1, 0x4, 0x4, 0x1, 0x6, 0x2, 0x1}}, 0x107})
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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")
chdir(&(0x7f00000001c0)='./file0\x00') (async)
chdir(&(0x7f00000001c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000440)=ANY=[], 0xfe37, 0x0)
getresuid(&(0x7f0000000280), 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmctl$IPC_RMID(r1, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x0) (async)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x0)
truncate(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0)

687.902733ms ago: executing program 8 (id=836):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000300)) (async)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
unshare(0x2c020400) (async)
r5 = syz_open_dev$video(&(0x7f0000000140), 0x80000001, 0x0)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000180)={0x36c2, 0xd, 0x1, 0x0, 0x1}) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./control\x00', 0x200, 0x83)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, 0x0) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async)
close(r1) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x14, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x8, 0x9f, &(0x7f0000000640)=""/159, 0x41000, 0x13, '\x00', 0x0, 0x17, r6, 0x8, &(0x7f0000000780)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xa, 0x4, 0xd03}, 0x10, 0xfc82, r0, 0x3, 0x0, &(0x7f0000000800)=[{0x3, 0x3, 0x7, 0x5}, {0x1, 0x1, 0xb, 0x2}, {0x0, 0x3, 0xc, 0x1}], 0x10, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)

623.95558ms ago: executing program 6 (id=837):
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x3, 0x25fa929a}, 0x0) (async)
sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0xb)
mmap(&(0x7f00000c7000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r2, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000080)={0x1, 0x2, 0x0, {0x3, 0xffffff00, 0x6, 0x7}}) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
timer_create(0x7, 0x0, &(0x7f0000bbdffc)=<r5=>0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async)
lsm_get_self_attr(0x69, 0x0, 0xffffffffffffffff, 0x1) (async)
syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200200008004500274a320982da7a19d215010051000000069078ac1c14", @ANYRESHEX=r5, @ANYBLOB='\x00\x00\x00', @ANYRES16], 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
sendmmsg$inet(r6, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c80)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x4085)
sendmmsg$inet(r6, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000005c0)="9e", 0x1}], 0x1}}], 0x1, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async)
socket(0x400000000010, 0x3, 0x0)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)

570.202614ms ago: executing program 3 (id=838):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r0, &(0x7f00000031c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x81)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
setrlimit(0x0, &(0x7f00000001c0)={0x7})
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000100b0103", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20008810}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$FUSE_STATX(r0, &(0x7f0000000080)={0x130, 0x0, r1, {0x4000000000007, 0x8, 0x0, '\x00', {0x8, 0x0, 0x4, 0x412, 0xffffffffffffffff, 0xee00, 0xa000, '\x00', 0x3, 0x4, 0x8, 0xa000000000000001, {0x9, 0xfffffff0}, {0x5ea, 0x5}, {0x89ef, 0x7}, {0x1, 0x101}, 0xffffffff, 0x5, 0x200, 0xfffffffb}}}, 0x130)

534.130142ms ago: executing program 9 (id=839):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_clone3(&(0x7f0000001800)={0x5000, &(0x7f0000000000)=<r0=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x20}, &(0x7f00000005c0)=""/4096, 0x1000, &(0x7f00000015c0)=""/77, &(0x7f0000001640)=[0xffffffffffffffff], 0x1}, 0x58)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000003c0)="fc0c352edd34a2aaa1046307290ed455c9ab852e60558fc9065ccb3dd64dbdca38", 0x21}], 0x1}, 0x200000e0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x11e6}})
pidfd_getfd(r0, r1, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
r8 = dup(r7)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x39fab)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r9], 0x158}, 0x1, 0xba01, 0x0, 0x4008881}, 0x24000040)

472.132155ms ago: executing program 6 (id=840):
socket$inet6(0xa, 0x80002, 0x0)
epoll_create1(0x80000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x24000840)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00e00010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)

406.649172ms ago: executing program 6 (id=841):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x10, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x112, 0xe, 0x0, &(0x7f0000000080))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8080c61)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r3, &(0x7f0000000740)='E', 0x1, 0x4fed3)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x5, 0x100000001, 0x1})

278.225521ms ago: executing program 8 (id=842):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
rt_sigprocmask(0x0, &(0x7f00000000c0), 0xfffffffffffffffe, 0x8)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000000680)={@random="5b685c7e778f", @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "00c000", 0x9c, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "8f2c7b93cc6caf56c1aa534842810c8dd97ea22eb270e61549b7ef936071061e", "f5c0c7f195b385697c0a99a497ad97eccebde15ac7e64550d88e9647bd91b364531416c3ddf3e460357db25022bbdaab", "0e7097f2b37ac004732c2dc78f4156902e3260e61174781b56c90ad3", {"ac6671116533de35f7076e5ced52aa12", "94ed48555c20b5d168dc31483e1b13c6"}}}}}}}}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
futex(&(0x7f0000002640), 0x4, 0x0, 0x0, 0x0, 0x0) (async)
futex(&(0x7f0000002640), 0x4, 0x0, 0x0, 0x0, 0x0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0x0, 0x4, 0xfffc, 0x21, 0xfff3})

76.050746ms ago: executing program 9 (id=843):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x80}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xbe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xfa}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x41)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f00000001c0))

68.226074ms ago: executing program 8 (id=844):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6bc2af429c0cabcc4f4d46ea", @ANYRES16=r0, @ANYBLOB="010000000000000000002e00000008000200", @ANYRESOCT=r1, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x0)

35.424638ms ago: executing program 9 (id=845):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d006f7e74691687214000"], 0x1, 0x1a5, &(0x7f0000000040)="$eJzs0DFrE2Ecx/Hv/7lLchFUouLQwQYUzwvV3qXq4BScIvTAwUUwaKhnU7yIzWWwpUUXKUi1b0GnriooCCIWnIuD4CDn0k2aoTiIgpxc8gRfRJ/PcL97noPnf8+vkywmJeDv3socDYucxSE+I9jApAy3UGqUb/X6h86NUXBZr9dHWcbSH5Kl5bvtOI561UtVKjDxfwP4WaXyJxuJo17yiuOKgdBAvu6tzLXlVkjWoKtuh1RmqT3FarHoPWPCPsixm1hk7jpXFOeGww5P97v3p5Ol5bML3fZ8NB/dq9dnLvrnff+CA8SR/wbxnojiOat4IaWQsrdKocXjbfsAU4J4HZVaUhtQbLGxbZ05OTVAebtkCB/dAaV3TqeqrnEa50Z+oSZHhRdYIadmKSts7izEkd9ErqrXEthf7F8FhePoPtauK/ld3GzIriPBDgU3oF4LmMmr4QhbrKWolGbKZsrOdyblfT5F94r9KH++lPFxJ6DIg3a/3wuK8EnckLobZln2MK+ULdTwvyrwQZ+gg2/jF8MwDMMwDMMwDGMf+BcAAP//uWZrTg==")
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)
r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
read$smackfs_logging(r0, &(0x7f00000002c0), 0x14)
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d006f7e74691687214000"], 0x1, 0x1a5, &(0x7f0000000040)="$eJzs0DFrE2Ecx/Hv/7lLchFUouLQwQYUzwvV3qXq4BScIvTAwUUwaKhnU7yIzWWwpUUXKUi1b0GnriooCCIWnIuD4CDn0k2aoTiIgpxc8gRfRJ/PcL97noPnf8+vkywmJeDv3socDYucxSE+I9jApAy3UGqUb/X6h86NUXBZr9dHWcbSH5Kl5bvtOI561UtVKjDxfwP4WaXyJxuJo17yiuOKgdBAvu6tzLXlVkjWoKtuh1RmqT3FarHoPWPCPsixm1hk7jpXFOeGww5P97v3p5Ol5bML3fZ8NB/dq9dnLvrnff+CA8SR/wbxnojiOat4IaWQsrdKocXjbfsAU4J4HZVaUhtQbLGxbZ05OTVAebtkCB/dAaV3TqeqrnEa50Z+oSZHhRdYIadmKSts7izEkd9ErqrXEthf7F8FhePoPtauK/ld3GzIriPBDgU3oF4LmMmr4QhbrKWolGbKZsrOdyblfT5F94r9KH++lPFxJ6DIg3a/3wuK8EnckLobZln2MK+ULdTwvyrwQZ+gg2/jF8MwDMMwDMMwDGMf+BcAAP//uWZrTg==") (async)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) (async)
openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
read$smackfs_logging(r0, &(0x7f00000002c0), 0x14) (async)

0s ago: executing program 9 (id=846):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0)
r2 = socket(0xa, 0x3, 0x87)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000500)={0x2})
sendto(r2, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000140)='team0\x00', &(0x7f0000000180)='./file0\x00', r1)
socket$packet(0x11, 0x2, 0x300)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r7, &(0x7f0000000380)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000fffffff8000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b702000000000000739a00fe00000000b5090800000000007baaf0ff00000000be9800000000000004080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf9100000000000076080000010000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_getrule={0x1c, 0x22, 0x10, 0x70bd28, 0x25dfdbfa, {0xa, 0x80, 0x80, 0x4, 0x7, 0x0, 0x0, 0x1, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000010)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r9)
r10 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r10, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r12=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000080)={r12}, 0x8)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c)
sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, 0x11, 0x800, 0x70bd27, 0x25dfdbfd, {0x13}, [@generic="61362c826ffa3a1801f5964b0fa45b2fa01e453f40eea5736cc3c3", @typed={0x8, 0x12a, 0x0, 0x0, @ipv4=@loopback}, @generic="d211a41cfc60dc9f4e2087cc8870deb881c9d8d13b5170bd11905ea043fb3a36250f2d6aef5f881fae5034a65a9078f5119b4bd600ee61bff1a8fa89218f8cdd1061d96a4540a32ad53d4cd9e9ec23fdb4", @nested={0x30, 0x18, 0x0, 0x1, [@generic="f7d6f64d1d0c27ebfb59ffcd652317deb6082c99ea1b2aeb66f3f94118e02b174bd5ec123a56f721ce38dfa8"]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4041}, 0x20008050)

0s ago: executing program 3 (id=853):
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100))
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xe86c0, 0x161)
r3 = fanotify_init(0xf00, 0x0)
fanotify_mark(r3, 0x1, 0x4000003a, r2, 0x0)
chdir(0x0)
symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400)
chdir(&(0x7f00000003c0)='./bus\x00')
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r4=>0x0})
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505084041502", @ANYRES8=r7], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000001200)={0x68c, r7, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x66, 0x2, 0x3, 0x2, 0x6, 0x8]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2e5}, @NL80211_ATTR_FRAME={0x635, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xbf}, @broadcast, @device_b, @initial, {0x3, 0x1}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x1, 0x0, 0x2}}, 0x1000, 0x1, @device_b, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0x32, "6abaac3dbbee225ca461ec1f316479e3043d4f2b4fafaf42b37ec4442d6bda57191e2d99db2ec2126d0a00e44e27504e8722"}, {0xdd, 0x8a, "b620fb21f56f92c0e0851bb8742249ac0efa40b14099cb479729ed62ea2330efd601dd883eb5fb939e707815daec54917966d94d94adc1e7069391353fb6b20bfa0a6e3c8d1c29ace24c43e9994bd4fc59ce3270306eec3b8c4c66b3248f34b0c8a6ea7cb95d7c2507e4cdfc2accd7ae4e9e117a2f02c475899faf95d5578af192ec48c8600cc6fe11fb"}, {0xdd, 0xf2, "37a5ed6f63bde3287a988509b1f9b07d4e802c4fda5ca564a6818091bd00e6efcd5bcc07957e662938762a54cad53677bdf4f1ae5f0fd988d6003d548153ac1a8f2380c85e644e7d6bb271251dc17a74a71c432d1d3fb2db611f27d995b3c967dc19a3ccb781be02d85572c1ba127efdf9ae1cd32b2c9250f58deff1e7af47e86642426e747e7c13ef9b3eb001befdea06888dd45dc4aec12e7ee841bc3ff668ebe5e81c53fb6b0443e88c73b1d667ecc35536004def9126f71c39516c86da0f8d7c24ce5608329d09e23859eddfe88dbc8ec69e9a0350ceda1b1738a47008afb3ef952b2888a00264bcc76fd964885a8761"}, {0xdd, 0xde, "3a602be970e8de147fddca7fbbe96369febf26193a371e9a5e18361997be8f0a98dd61da9033a623bff4deff1728c3276f74f06fb62bd2996b0c8e9b4b737ddc62d70a1375d1b3107eb741b1fd196b6c3461b10e55fc3359f59b4135e7dcea49dae6ef65ee4901f2879438e3871fe8143cd3910ae3153316fddebbcff9ac4b01026f70b1d7e9acdca0c4b6e9d4fb56a4e14e9e63906dc0edacfdfe43ae3e7cb564291d45ce361c486c79aa28c276af3101269be160e36124c17c45943a94985f06793049715467cbcaf595859f83f813bbfa920b46448aa0f4a98e3b5f33"}, {0xdd, 0xfe, "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"}, {0xdd, 0xe2, "ef1ffa372b39e7dc0fd07ecea7c3478bed3d6e7ac47d72905a92643df9858d0e7368826470801d6f4511c8bf199174b50a3e8b6a0c0e4edb01cae5192889f867c72a2622e3024a594b10a15a0cfc044395be881f0a624911b4f2d0b48b901249a467654fc1f016869773a7dc08564da78d8e3404977428f01d3998d78c4cef827b4ab76713f04071d4cab406fa04735bada8ae2b015668ee736aa5b161d9868fddf1bb911bb9ef8004fae1d3fe6ab9aa10303e5c0f3e408b88f88b19dda3a2723f1eb88e3d333954c980c446ee8ec82e777b9ad43ee4afdbfc75feafc077c7f44783"}, {0xdd, 0x83, "db71fcc3a9e65403d0c375e76bcf3c4f75f3a9f8520b82084e898fba296f670faf3e00b1c23ef816907343707f8dba25d737e620be0efa840bed64d1bb748ac331f61cb81c08146efbab29efd34be38831fc620380a6611f200ba5fe7c92f236d703e360a04ddd2de4838a720d6eb0c2d7acd895ab44e62484faa7735f814694b0b654"}, {0xdd, 0x7c, "9193d8d4fce3c61aa675c94a42663a393ee5b81da3a584e96ceb86b29d9f3714323dcd1cfd6e4cc133d75daed4ee6080a8d9a0904fab73c6328c854fccf8895b3173dca2d2ddf30e3b9ff29d7292b5d9af80a2938c17a5ee4efda5d418f0d2929da834357d41c81d29f1e388471f6d10cafa232236a684e29225f63e"}, {0xdd, 0xf, "cd3e57ed7b287c327a12b488e054b5"}, {0xdd, 0xd, "99bd713d8872e1a2704d62a0c1"}, {0xdd, 0x66, "b9afa16b809ff1260213fd02d2f072aa6c459ae9aab4bba91379eba96b10e8e4e2da46c3064110e64d5a881621e64764652a8a26923890542ef952d05a6e27e130eff57a3961b36784513dbb3634e327956ea43621b7fae58fba8da5dde4250e3392d094d697"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x63e}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x90e}]}, 0x68c}, 0x1, 0x0, 0x0, 0x8041}, 0x11)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')

kernel console output (not intermixed with test programs):


[   47.865458][ T4699] Dev nbd0: unable to read RDB block 0
[   47.867083][ T4699]  nbd0: unable to read partition table
[   47.951678][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'.
[   47.953802][ T5742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'.
[   47.993814][ T5744] tc_dump_action: action bad kind
[   48.129172][ T5747] netlink: 'syz.5.220': attribute type 25 has an invalid length.
[   48.129198][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.220'.
[   48.132095][ T5747] netlink: 'syz.5.220': attribute type 25 has an invalid length.
[   48.132106][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.220'.
[   48.132535][   T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   48.132639][   T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   48.132662][   T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   48.132676][   T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   48.152296][ T5747] loop5: detected capacity change from 0 to 512
[   48.177143][ T5751] loop2: detected capacity change from 0 to 512
[   48.179145][ T5751] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[   48.395878][ T4709] Bluetooth: hci4: command tx timeout
[   48.527967][ T5777] loop5: detected capacity change from 0 to 512
[   48.530024][ T5777] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   48.533914][ T5777] EXT4-fs error (device loop5): __ext4_iget:5481: inode #11: block 2: comm syz.5.227: invalid block
[   48.536517][ T5777] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   48.536795][ T5777] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.227: couldn't read orphan inode 11 (err -117)
[   48.541273][ T5777] fserror_report: 8 callbacks suppressed
[   48.543001][ T5777] loop5: lost filesystem error report for type 5 error -117
[   48.543761][ T5777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.585431][ T5780] loop4: detected capacity change from 0 to 256
[   48.585790][ T5780] vfat: Bad value for 'fmask'
[   48.595763][ T5780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.599121][ T5780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.602910][ T5284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.755494][ T5794] loop3: detected capacity change from 0 to 1024
[   48.755869][ T5794] EXT4-fs: Ignoring removed mblk_io_submit option
[   48.778648][ T5794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   48.802951][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   48.828915][ T5803] overlayfs: overlapping lowerdir path
[   48.829790][ T5803] overlayfs: overlapping lowerdir path
[   48.858304][ T5808] Bluetooth: MGMT ver 1.23
[   48.873449][ T5811] loop3: detected capacity change from 0 to 1024
[   48.876988][ T5811] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   48.877042][ T5811] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   48.879471][ T5799] loop1: detected capacity change from 0 to 1024
[   48.880280][ T5811] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   48.880413][ T5811] EXT4-fs (loop3): orphan cleanup on readonly fs
[   48.882134][ T5811] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.238: Inode bitmap for bg 0 marked uninitialized
[   48.882146][ T5811] loop3: lost filesystem error report for type 5 error -117
[   48.883361][ T5811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   48.892998][ T5799] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   48.893054][ T5799] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   48.894446][ T5799] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   48.894553][ T5799] EXT4-fs (loop1): orphan cleanup on readonly fs
[   48.894578][ T5799] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #3: comm syz.1.235: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0)
[   48.894715][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   48.894725][    C0] EXT4-fs (loop1): initial error at time 48: ext4_ext_check_inode:521: inode 3
[   48.894741][    C0] EXT4-fs (loop1): last error at time 48: ext4_ext_check_inode:521: inode 3
[   48.898203][ T5799] EXT4-fs (loop1): Remounting filesystem read-only
[   48.898262][ T5799] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   48.898276][ T5799] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   48.906771][ T5799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   48.994120][ T5816] loop5: detected capacity change from 0 to 256
[   48.996348][ T5816] vfat: Unknown parameter 'nnonumtail'
[   49.013108][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.714816][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.732667][ T5821] loop2: detected capacity change from 0 to 512
[   49.768238][ T5821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.937216][ T5821] overlayfs: failed to resolve './bus': -2
[   50.034267][ T5837] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   50.039673][ T5837] fscrypt (loop4, inode 12): Unsupported encryption flags (0x10)
[   50.040070][ T5837] __nla_validate_parse: 5 callbacks suppressed
[   50.040080][ T5837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.244'.
[   50.047005][ T5836] EXT4-fs (loop3): 1 orphan inode deleted
[   50.047420][ T5836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.052620][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.077136][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.143189][ T5847] SQUASHFS error: Unable to read inode 0xa7
[   50.151094][ T5845] binder: 5844:5845 tried to acquire reference to desc 0, got 1 instead
[   50.151809][ T5845] binder: 5844:5845 got transaction with invalid data ptr
[   50.151837][ T5845] binder: 5844:5845 transaction call to 5844:0 failed 11/29201/-14, code 0 size 0-12288 line 3496
[   50.159125][ T4835] binder: undelivered TRANSACTION_ERROR: 29201
[   50.162021][ T5852] netlink: 52 bytes leftover after parsing attributes in process `syz.3.248'.
[   50.236431][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.254'.
[   50.305485][ T5868] EXT4-fs: Ignoring removed oldalloc option
[   50.308294][ T5868] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   50.312570][ T5868] EXT4-fs (loop3): 1 truncate cleaned up
[   50.326737][ T5868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.337233][ T5868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.131232][ T5868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.440427][ T5890] Alternate GPT is invalid, using primary GPT.
[   51.440673][ T5890]  loop2: p2 p3 p7
[   51.811388][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   51.817746][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[   51.825832][ T5117] udevd[5117]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   52.545410][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'.
[   52.609943][ T5920] nfs: Unexpected value for 'acl'
[   52.624727][ T5920] EXT4-fs: quotafile must be on filesystem root
[   52.937631][    C0] vcan0: j1939_tp_rxtimer: 0x00000000ee9cc500: rx timeout, send abort
[   53.356927][ T5941] set_capacity_and_notify: 9 callbacks suppressed
[   53.358700][ T5941] loop5: detected capacity change from 0 to 512
[   53.362275][ T5941] EXT4-fs: Ignoring removed oldalloc option
[   53.364146][ T5941] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   53.390277][ T5941] EXT4-fs (loop5): 1 truncate cleaned up
[   53.437874][    C0] vcan0: j1939_tp_rxtimer: 0x00000000fbae41db: rx timeout, send abort
[   53.438291][    C0] vcan0: j1939_tp_rxtimer: 0x00000000ee9cc500: abort rx timeout. Force session deactivation
[   53.451731][ T5944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.454274][ T5944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.489256][ T5946] loop3: detected capacity change from 0 to 1024
[   53.585675][ T5954] loop4: detected capacity change from 0 to 256
[   53.586014][ T5954] vfat: Unknown parameter 'ÿÿ'
[   53.598603][ T5954] loop4: detected capacity change from 0 to 512
[   53.599258][ T5954] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   53.599271][ T5954] EXT4-fs (loop4): #clusters per group too big: 32768
[   53.840237][ T5949] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.273: lblock 0 mapped to illegal pblock 0 (length 1)
[   53.843849][ T5949] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   53.843901][ T5949] EXT4-fs (loop3): This should not happen!! Data will be lost
[   53.843901][ T5949] 
[   53.844514][ T5949] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.273: lblock 0 mapped to illegal pblock 0 (length 1)
[   53.847426][ T5949] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   53.847484][ T5949] EXT4-fs (loop3): This should not happen!! Data will be lost
[   53.847484][ T5949] 
[   53.937924][    C0] vcan0: j1939_tp_rxtimer: 0x00000000fbae41db: abort rx timeout. Force session deactivation
[   53.942522][ T5962] tc_dump_action: action bad kind
[   53.970793][ T5964] syzkaller0: entered promiscuous mode
[   53.970820][ T5964] syzkaller0: entered allmulticast mode
[   54.081664][ T5966] netlink: 60 bytes leftover after parsing attributes in process `syz.2.279'.
[   54.082686][ T5966] netlink: 60 bytes leftover after parsing attributes in process `syz.2.279'.
[   54.172777][ T5972] loop5: detected capacity change from 0 to 1024
[   54.233377][ T5973] dns_resolver: Unsupported server list version (0)
[   54.294557][ T5982] netlink: 'syz.1.284': attribute type 1 has an invalid length.
[   54.296852][ T5980] loop5: detected capacity change from 0 to 4096
[   54.297645][ T5980] ext4: Unknown parameter 'subj_type'
[   54.300545][ T5982] netlink: 'syz.1.284': attribute type 3 has an invalid length.
[   54.327500][ T5984] loop1: detected capacity change from 0 to 512
[   54.327865][ T5984] EXT4-fs: inline encryption not supported
[   54.349976][ T5984] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.285: bad orphan inode 15
[   54.350008][ T5984] loop1: lost filesystem error report for type 5 error -117
[   54.350138][ T4712] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[   54.354744][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   54.354755][    C0] EXT4-fs (loop1): initial error at time 54: ext4_orphan_get:1423
[   54.354767][    C0] EXT4-fs (loop1): last error at time 54: ext4_orphan_get:1423
[   54.360232][ T5984] ext4_test_bit(bit=14, block=5) = 0
[   54.375112][ T5984] EXT4-fs error (device loop1): __ext4_new_inode:1079: comm syz.1.285: reserved inode found cleared - inode=1
[   54.378531][ T5984] EXT4-fs (loop1): shut down requested (0)
[   54.405007][ T5988] loop3: detected capacity change from 0 to 512
[   54.405670][ T5988] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   54.413120][ T5988] EXT4-fs (loop3): 1 truncate cleaned up
[   54.432949][ T5990] bond1 (unregistering): Released all slaves
[   54.500428][ T5997] netlink: 60 bytes leftover after parsing attributes in process `syz.4.288'.
[   54.546511][ T6005] loop3: detected capacity change from 0 to 512
[   54.546983][ T6005] EXT4-fs: Ignoring removed oldalloc option
[   54.548917][ T6005] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   54.552810][ T6005] EXT4-fs (loop3): 1 truncate cleaned up
[   54.566595][ T6005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.568922][ T6005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.996685][ T6016] loop4: detected capacity change from 0 to 128
[   55.278127][ T6046] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.297: invalid indirect mapped block 256 (level 2)
[   55.280920][ T6046] fserror_report: 1 callbacks suppressed
[   55.280954][ T6046] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   55.283077][ T6046] EXT4-fs (loop5): 2 truncates cleaned up
[   55.284802][    C1] EXT4-fs (loop5): error count since last fsck: 1
[   55.284812][    C1] EXT4-fs (loop5): initial error at time 55: ext4_free_branches:1023: inode 11
[   55.284827][    C1] EXT4-fs (loop5): last error at time 55: ext4_free_branches:1023: inode 11
[   55.339415][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'.
[   55.342479][   T12] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap
[   55.346542][   T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[   55.349367][   T12] EXT4-fs (loop5): This should not happen!! Data will be lost
[   55.349367][   T12] 
[   55.351124][   T12] EXT4-fs (loop5): Total free blocks count 0
[   55.352345][   T12] EXT4-fs (loop5): Free/Dirty block details
[   55.353472][   T12] EXT4-fs (loop5): free_blocks=0
[   55.354474][   T12] EXT4-fs (loop5): dirty_blocks=2
[   55.357787][   T12] EXT4-fs (loop5): Block reservation details
[   55.358882][   T12] EXT4-fs (loop5): i_reserved_data_blocks=2
[   55.365603][ T5284] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[   55.465170][ T6060] bond1: option lp_interval: invalid value (0)
[   55.465206][ T6060] bond1: option lp_interval: allowed values 1 - 2147483647
[   55.467464][ T6076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.302'.
[   55.469556][ T6076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.302'.
[   55.474876][ T6060] bond1 (unregistering): Released all slaves
[   55.503845][ T6079] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   55.503943][ T6079] unable to read xattr id index table
[   55.510317][ T6079] SQUASHFS error: zlib decompression failed, data probably corrupt
[   55.510504][ T6079] SQUASHFS error: Failed to read block 0x9b: -5
[   55.510518][ T6079] SQUASHFS error: Unable to read metadata cache entry [99]
[   55.513182][ T6079] SQUASHFS error: Unable to read inode 0x127
[   55.727162][ T6118] ext4: Unknown parameter 'uid<00000000000000000000'
[   55.832367][ T6124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.836809][ T6124] netlink: 'syz.1.312': attribute type 10 has an invalid length.
[   55.841239][ T6124] bridge0: port 3(syz_tun) entered disabled state
[   55.843041][ T6124] syz_tun: left allmulticast mode
[   55.844173][ T6124] syz_tun: left promiscuous mode
[   55.844277][ T6124] bridge0: port 3(syz_tun) entered disabled state
[   55.858630][ T6124] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   55.869769][ T6124] 8021q: adding VLAN 0 to HW filter on device bond2
[   55.872994][ T6124] nbd: must specify a size in bytes for the device
[   56.387840][ T6137] journal_path: Lookup failure for './file0'
[   56.389070][ T6137] EXT4-fs: error: could not find journal device path
[   56.414270][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'.
[   56.444520][ T6142] netlink: 380 bytes leftover after parsing attributes in process `syz.3.316'.
[   56.463038][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'.
[   56.673917][ T6170] EXT4-fs (loop5): Test dummy encryption mode enabled
[   56.676293][ T6170] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   56.676362][ T6170] System zones: 0-5
[   56.704770][ T6170] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[   56.707558][ T6170] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[   56.709562][ T6170] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.321: Failed to acquire dquot type 0
[   56.829334][ T6185] fuse: Bad value for 'fd'
[   57.835366][ T4709] Bluetooth: hci1: command 0x0c1a tx timeout
[   57.836766][ T6122] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[   58.786700][ T6122] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   58.789456][ T6122] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   58.789921][ T6122] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   58.789982][ T6122] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   58.790001][ T6122] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   58.793592][ T6122] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   58.856814][ T6191] set_capacity_and_notify: 10 callbacks suppressed
[   58.865111][ T6191] loop5: detected capacity change from 0 to 512
[   58.899331][ T6191] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.328: bg 0: block 5: invalid block bitmap
[   58.899365][ T6191] loop5: lost filesystem error report for type 5 error -117
[   58.904722][    C0] EXT4-fs (loop5): error count since last fsck: 1
[   58.904761][    C0] EXT4-fs (loop5): initial error at time 58: ext4_validate_block_bitmap:432
[   58.904789][    C0] EXT4-fs (loop5): last error at time 58: ext4_validate_block_bitmap:432
[   58.904849][ T6191] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   58.904872][ T6191] loop5: lost filesystem error report for type 5 error -117
[   58.911453][ T6191] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.328: invalid indirect mapped block 3 (level 2)
[   58.911483][ T6191] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   58.917501][ T6191] EXT4-fs (loop5): 1 orphan inode deleted
[   58.917515][ T6191] EXT4-fs (loop5): 1 truncate cleaned up
[   58.943899][ T6212] loop3: detected capacity change from 0 to 512
[   58.950236][ T6212] ext4: Unknown parameter 'noacl'
[   59.031223][ T6208] syzkaller0: entered promiscuous mode
[   59.031258][ T6208] syzkaller0: entered allmulticast mode
[   59.078837][ T6221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.092109][ T6221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.146678][ T6227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.148625][ T6227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.261973][ T6229] vhci_hcd vhci_hcd.2: invalid port number 96
[   59.262012][ T6229] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7
[   59.748823][ T6226] bond1: option tlb_dynamic_lb: invalid value (4)
[   59.751281][ T6226] bond1 (unregistering): Released all slaves
[   59.865926][ T6238] loop2: detected capacity change from 0 to 512
[   59.914762][ T4718] Bluetooth: hci0: command 0x0c1a tx timeout
[   59.914789][ T4709] Bluetooth: hci1: command 0x0c1a tx timeout
[   59.958966][ T6245] syzkaller0: entered promiscuous mode
[   59.959002][ T6245] syzkaller0: entered allmulticast mode
[   59.966662][ T6245] netlink: 72 bytes leftover after parsing attributes in process `syz.4.343'.
[   59.969028][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'.
[   59.977172][ T6245] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.986244][ T6245] bond1: entered promiscuous mode
[   59.986269][ T6245] bond1: entered allmulticast mode
[   60.020493][   T30] audit: type=1326 audit(60.010:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6255 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0977aa8 code=0x7ffc0000
[   60.026345][   T30] audit: type=1326 audit(60.010:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6255 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=91 compat=0 ip=0xffffb0977aa8 code=0x7ffc0000
[   60.026381][   T30] audit: type=1326 audit(60.010:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6255 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0977aa8 code=0x7ffc0000
[   60.026407][   T30] audit: type=1326 audit(60.010:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6255 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0977aa8 code=0x7ffc0000
[   60.026429][   T30] audit: type=1326 audit(60.010:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6255 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb0977aa8 code=0x7ffc0000
[   60.026448][   T30] audit: type=1326 audit(60.010:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6255 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0977aa8 code=0x7ffc0000
[   60.026466][   T30] audit: type=1326 audit(60.010:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6255 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0977aa8 code=0x7ffc0000
[   60.026484][   T30] audit: type=1326 audit(60.010:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6255 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb0977aa8 code=0x7ffc0000
[   60.050287][ T6259] sctp: [Deprecated]: syz.1.349 (pid 6259) Use of int in max_burst socket option.
[   60.050287][ T6259] Use struct sctp_assoc_value instead
[   60.162760][ T6267] x_tables: duplicate underflow at hook 2
[   60.170586][ T6269] xt_hashlimit: Unknown mode mask C4, kernel too old?
[   60.191844][ T6271] loop4: detected capacity change from 0 to 512
[   60.195691][ T6271] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   60.210700][ T6271] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.354: bad orphan inode 13
[   60.210734][ T6271] loop4: lost filesystem error report for type 5 error -117
[   60.210884][ T6271] ext4_test_bit(bit=12, block=18) = 1
[   60.210892][ T6271] is_bad_inode(inode)=0
[   60.210896][ T6271] NEXT_ORPHAN(inode)=0
[   60.210900][ T6271] max_ino=32
[   60.210903][ T6271] i_nlink=1
[   60.240034][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'.
[   60.321930][ T6282] loop5: detected capacity change from 0 to 512
[   60.455791][ T6297] loop5: detected capacity change from 0 to 512
[   60.464271][ T6297] EXT4-fs (loop5): Test dummy encryption mode enabled
[   60.464315][ T6297] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   60.469540][ T6297] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.359: orphan file block 0: bad magic
[   60.469571][ T6297] loop5: lost filesystem error report for type 5 error -117
[   60.472864][ T6297] EXT4-fs (loop5): mount failed
[   60.490630][ T6295] netlink: 'syz.3.361': attribute type 1 has an invalid length.
[   60.490662][ T6295] netlink: 'syz.3.361': attribute type 2 has an invalid length.
[   60.676786][ T6307] No such timeout policy "syz1"
[   60.814856][ T4718] Bluetooth: hci3: command 0x0c1a tx timeout
[   60.815028][ T4718] Bluetooth: hci2: command 0x0c1a tx timeout
[   60.816495][ T4709] Bluetooth: hci4: command 0x0c1a tx timeout
[   61.189559][ T6318] syzkaller0: entered promiscuous mode
[   61.189588][ T6318] syzkaller0: entered allmulticast mode
[   61.328774][ T6329] loop4: detected capacity change from 0 to 128
[   61.329195][ T6329] EXT4-fs: inline encryption not supported
[   61.333171][ T6329] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal
[   61.479582][ T6341] loop4: detected capacity change from 0 to 1024
[   61.482526][ T6341] EXT4-fs: Ignoring removed orlov option
[   61.520745][ T6339] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   61.523291][ T6339] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   61.594230][ T6341] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.374: bit already cleared for inode 13
[   61.608163][ T6340] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[   61.724241][ T6370] loop4: detected capacity change from 0 to 4096
[   61.731183][ T6370] EXT4-fs (loop4): Test dummy encryption mode enabled
[   61.737298][ T6370] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8802c018, mo2=0002]
[   61.753356][ T6370] netlink: 'syz.4.380': attribute type 10 has an invalid length.
[   61.770838][ T6370] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.773289][ T6370] team0: Port device bond0 added
[   61.879088][   T30] kauditd_printk_skb: 58 callbacks suppressed
[   61.879125][   T30] audit: type=1326 audit(61.870:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89177aa8 code=0x0
[   62.049710][   T30] audit: type=1326 audit(62.030:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89177aa8 code=0x7ffc0000
[   62.055000][   T30] audit: type=1326 audit(62.030:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff89177aa8 code=0x7ffc0000
[   62.061923][   T30] audit: type=1326 audit(62.030:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89177aa8 code=0x7ffc0000
[   62.068165][   T30] audit: type=1326 audit(62.030:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=160 compat=0 ip=0xffff89177aa8 code=0x7ffc0000
[   62.072653][   T30] audit: type=1326 audit(62.030:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89177aa8 code=0x7ffc0000
[   62.077102][   T30] audit: type=1326 audit(62.030:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89177aa8 code=0x7ffc0000
[   62.091300][ T6407] loop1: detected capacity change from 0 to 8192
[   62.127951][ T6407]  loop1: AHDI p3 p4
[   62.128071][ T6407] loop1: p3 start 4286513152 is beyond EOD, truncated
[   62.285888][ T6413] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   62.288459][ T6413] EXT4-fs (loop2): invalid journal inode
[   62.288521][ T6413] EXT4-fs (loop2): can't get journal size
[   62.294043][ T6413] EXT4-fs (loop2): 1 truncate cleaned up
[   62.302388][ T6413] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   62.363203][ T6411] process 'syz.1.392' launched '/dev/fd/7' with NULL argv: empty string added
[   62.417677][ T6421] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   62.430709][ T6421] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.395: invalid indirect mapped block 9 (level 0)
[   62.430742][ T6421] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   62.431104][ T6421] EXT4-fs (loop1): 1 truncate cleaned up
[   62.472563][ T4705] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   62.524015][ T5480] bond0: (slave syz_tun): Releasing backup interface
[   62.589877][ T6435] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[   62.604599][   T15] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.610552][ T6435] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.401: checksumming directory block 0
[   62.690950][ T4709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.691886][ T4709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.692189][ T4709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.692945][ T4709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.693161][ T4709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.764173][   T15] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.874932][ T4722] Bluetooth: hci4: command 0x0c1a tx timeout
[   63.023887][ T6445] EXT4-fs: Ignoring removed bh option
[   63.038574][ T6445] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.405: corrupted in-inode xattr: e_value size too large
[   63.038608][ T6445] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   63.041977][ T6445] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.405: couldn't read orphan inode 15 (err -117)
[   63.042011][ T6445] loop4: lost filesystem error report for type 5 error -117
[   63.045854][    C0] EXT4-fs (loop4): error count since last fsck: 2
[   63.045867][    C0] EXT4-fs (loop4): initial error at time 63: ext4_iget_extra_inode:5128: inode 15
[   63.045887][    C0] EXT4-fs (loop4): last error at time 63: ext4_orphan_get:1402
[   63.106168][ T6445] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.405: Unrecognised inode hash code 4
[   63.106206][ T6445] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.405: Corrupt directory, running e2fsck is recommended
[   63.107632][ T6459] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   63.112886][   T15] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.193081][ T6463] syz.4.408 (pid 6463) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   63.272052][   T15] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.683758][ T6482] xt_hashlimit: size too large, truncated to 1048576
[   63.693213][ T6439] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.695856][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.697901][ T6439] bridge_slave_0: entered allmulticast mode
[   63.701297][ T6439] bridge_slave_0: entered promiscuous mode
[   63.705843][ T6439] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.707945][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.708053][ T6439] bridge_slave_1: entered allmulticast mode
[   63.711964][ T6439] bridge_slave_1: entered promiscuous mode
[   63.845829][   T15] bridge_slave_1: left allmulticast mode
[   63.845866][   T15] bridge_slave_1: left promiscuous mode
[   63.845965][   T15] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.848988][   T15] bridge_slave_0: left allmulticast mode
[   63.849001][   T15] bridge_slave_0: left promiscuous mode
[   63.849063][   T15] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.018146][   T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.026002][ T6512] set_capacity_and_notify: 5 callbacks suppressed
[   64.026026][ T6512] loop3: detected capacity change from 0 to 128
[   64.059954][   T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.070626][   T15] bond0 (unregistering): Released all slaves
[   64.078008][   T15] bond1 (unregistering): Released all slaves
[   64.087318][   T15] bond2 (unregistering): Released all slaves
[   64.109596][ T4393] 8021q: adding VLAN 0 to HW filter on device eth4
[   64.127990][ T6439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.128996][ T6439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.149071][ T6439] team0: Port device team_slave_0 added
[   64.150298][ T6514] netlink: 'syz.4.416': attribute type 16 has an invalid length.
[   64.150311][ T6514] netlink: 'syz.4.416': attribute type 17 has an invalid length.
[   64.193069][ T6514] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[   64.194639][ T6514] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.200144][ T6514] 8021q: adding VLAN 0 to HW filter on device batadv1
[   64.200896][ T6514] bridge1: left promiscuous mode
[   64.201764][ T6514] bridge2: left promiscuous mode
[   64.202514][ T6514] bridge3: left promiscuous mode
[   64.203219][ T6514] bridge4: left promiscuous mode
[   64.203915][ T6514] bridge5: left promiscuous mode
[   64.204594][ T6514] bridge6: left promiscuous mode
[   64.206834][ T6514] bridge7: left promiscuous mode
[   64.207530][ T6514] bridge8: left promiscuous mode
[   64.208240][ T6514] bridge9: left promiscuous mode
[   64.209195][ T6514] bridge10: left promiscuous mode
[   64.210464][ T6514] bridge11: left promiscuous mode
[   64.211159][ T6514] bridge12: left promiscuous mode
[   64.211904][ T6514] bridge13: left promiscuous mode
[   64.212569][ T6514] bridge14: left promiscuous mode
[   64.213246][ T6514] bridge15: left promiscuous mode
[   64.213923][ T6514] bridge16: left promiscuous mode
[   64.214592][ T6514] bridge17: left promiscuous mode
[   64.219375][ T6514] bridge18: left promiscuous mode
[   64.220085][ T6514] bridge19: left promiscuous mode
[   64.220787][ T6514] bridge20: left promiscuous mode
[   64.221484][ T6514] bridge21: left promiscuous mode
[   64.222176][ T6514] bridge22: left promiscuous mode
[   64.222871][ T6514] bridge23: left promiscuous mode
[   64.223551][ T6514] bridge24: left promiscuous mode
[   64.224238][ T6514] bridge25: left promiscuous mode
[   64.229642][ T6514] bridge26: left promiscuous mode
[   64.231671][ T6514] bridge27: left promiscuous mode
[   64.233604][ T6514] bridge28: left promiscuous mode
[   64.235591][ T6514] bridge29: left promiscuous mode
[   64.236292][ T6514] bridge30: left promiscuous mode
[   64.236951][ T6514] bridge31: left promiscuous mode
[   64.237600][ T6514] bridge32: left promiscuous mode
[   64.238242][ T6514] bridge33: left promiscuous mode
[   64.239629][ T6514] bond1: left promiscuous mode
[   64.239643][ T6514] bond1: left allmulticast mode
[   64.239735][ T6514] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.240064][ T6514] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[   64.240877][ T6439] team0: Port device team_slave_1 added
[   64.316648][  T513] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   64.316709][  T513] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   64.316731][  T513] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   64.316747][  T513] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   64.317465][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.317473][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.317488][ T6439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.318895][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.318903][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.318919][ T6439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.329668][ T6439] hsr_slave_0: entered promiscuous mode
[   64.329977][ T6439] hsr_slave_1: entered promiscuous mode
[   64.330194][ T6439] debugfs: 'hsr0' already exists in 'hsr'
[   64.330204][ T6439] Cannot create hsr debugfs directory
[   64.470011][ T6544] loop5: detected capacity change from 0 to 512
[   64.472496][ T6544] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   64.477226][ T1595] ieee802154 phy0 wpan0: encryption failed: -22
[   64.477273][ T1595] ieee802154 phy1 wpan1: encryption failed: -22
[   64.483787][ T6542] loop4: detected capacity change from 0 to 512
[   64.486565][ T6544] EXT4-fs (loop5): orphan cleanup on readonly fs
[   64.487426][ T6544] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.423: Allocating blocks 41-42 which overlap fs metadata
[   64.487442][ T6544] loop5: lost filesystem error report for type 5 error -117
[   64.488788][ T6544] Quota error (device loop5): write_blk: dquota write failed
[   64.488828][ T6544] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[   64.488841][ T6544] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.423: Failed to acquire dquot type 0
[   64.488851][ T6544] loop5: lost filesystem error report for type 5 error -117
[   64.489190][ T6544] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   64.489870][ T6544] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.423: corrupted inode contents
[   64.489888][ T6544] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   64.490914][ T1503] cfg80211: failed to load regulatory.db
[   64.493416][ T6544] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #12: comm syz.5.423: mark_inode_dirty error
[   64.493443][ T6544] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   64.498702][ T6544] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.423: corrupted inode contents
[   64.498720][ T6544] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   64.498854][ T6544] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.423: mark_inode_dirty error
[   64.498867][ T6544] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   64.498963][ T6544] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.423: corrupted inode contents
[   64.498974][ T6544] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   64.499082][ T6544] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[   64.499090][ T6544] loop5: lost filesystem error report for type 5 error -117
[   64.499160][ T6544] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.423: corrupted inode contents
[   64.499170][ T6544] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   64.499238][ T6544] EXT4-fs error (device loop5): ext4_truncate:4690: inode #12: comm syz.5.423: mark_inode_dirty error
[   64.499248][ T6544] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   64.499312][ T6544] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[   64.499320][ T6544] loop5: lost filesystem error report for type 5 error -117
[   64.500979][ T6544] EXT4-fs (loop5): 1 truncate cleaned up
[   64.504723][    C1] EXT4-fs (loop5): error count since last fsck: 12
[   64.504740][    C1] EXT4-fs (loop5): initial error at time 64: ext4_mb_mark_diskspace_used:4222
[   64.504753][    C1] EXT4-fs (loop5): last error at time 64: ext4_process_orphan:345
[   64.505879][ T6544] EXT4-fs (loop5): pa 0000000070f1e10a: logic 1, phys. 41, len 23
[   64.505892][ T6544] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23
[   64.582102][   T15] hsr_slave_0: left promiscuous mode
[   64.589601][ T4706] overlayfs: failed lookup in lower (newroot/77, name='bus', err=-40): overlapping layers
[   64.589765][ T4706] overlayfs: failed lookup in lower (newroot/77, name='bus', err=-40): overlapping layers
[   64.591778][   T15] hsr_slave_1: left promiscuous mode
[   64.592101][   T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.592112][   T15] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.620498][   T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.620529][   T15] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.640374][ T6392] EXT4-fs unmount: 51 callbacks suppressed
[   64.640407][ T6392] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.645581][   T15] veth1_macvtap: left promiscuous mode
[   64.645624][   T15] veth0_macvtap: left promiscuous mode
[   64.645662][   T15] veth1_vlan: left promiscuous mode
[   64.645689][   T15] veth0_vlan: left promiscuous mode
[   64.670711][ T6546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.424'.
[   64.714902][ T4722] Bluetooth: hci0: command tx timeout
[   64.764602][   T15] team0 (unregistering): Port device team_slave_1 removed
[   64.768678][   T15] team0 (unregistering): Port device team_slave_0 removed
[   64.822805][ T4393] 8021q: adding VLAN 0 to HW filter on device eth5
[   64.827481][ T6554] netlink: 'syz.5.425': attribute type 2 has an invalid length.
[   64.865718][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.427'.
[   64.868970][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.427'.
[   64.906442][ T6439] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   64.908910][ T6439] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.923056][ T6563] loop3: detected capacity change from 0 to 512
[   64.923373][ T6563] EXT4-fs: Ignoring removed nomblk_io_submit option
[   64.937578][ T6439] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   64.944352][ T6439] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.946269][ T6439] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   64.954891][ T6439] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.955344][ T4722] Bluetooth: hci4: command 0x0c1a tx timeout
[   64.956228][ T6563] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.428: iget: bad extra_isize 90 (inode size 256)
[   64.956245][ T6563] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   64.956381][ T6563] EXT4-fs (loop3): Remounting filesystem read-only
[   64.956785][ T6563] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[   64.956826][ T6563] EXT4-fs (loop3): 1 orphan inode deleted
[   64.957312][ T6563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.965944][ T6439] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   64.971086][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.973036][ T6439] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.809243][ T6579] netlink: 36 bytes leftover after parsing attributes in process `syz.3.429'.
[   65.929483][ T4709] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.933475][ T4709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.939816][ T4709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.944429][ T4709] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.946805][ T4709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.003414][ T6600] loop5: detected capacity change from 0 to 512
[   66.004145][ T6600] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   66.023522][ T4393] 8021q: adding VLAN 0 to HW filter on device eth6
[   66.028358][ T6600] EXT4-fs (loop5): 1 truncate cleaned up
[   66.028881][ T6600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.056481][ T6439] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.066207][ T6610] input: syz0 as /devices/virtual/input/input3
[   66.079336][ T6439] 8021q: adding VLAN 0 to HW filter on device team0
[   66.085267][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.085307][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.112546][  T513] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.112592][  T513] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.128585][ T5284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.137688][ T6439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.201688][ T6631] loop2: detected capacity change from 0 to 256
[   66.211505][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.438'.
[   66.261443][ T6631] FAT-fs (loop2): Directory bread(block 64) failed
[   66.261486][ T6631] FAT-fs (loop2): Directory bread(block 65) failed
[   66.261513][ T6631] FAT-fs (loop2): Directory bread(block 66) failed
[   66.261526][ T6631] FAT-fs (loop2): Directory bread(block 67) failed
[   66.261548][ T6631] FAT-fs (loop2): Directory bread(block 68) failed
[   66.261559][ T6631] FAT-fs (loop2): Directory bread(block 69) failed
[   66.261581][ T6631] FAT-fs (loop2): Directory bread(block 70) failed
[   66.261592][ T6631] FAT-fs (loop2): Directory bread(block 71) failed
[   66.261613][ T6631] FAT-fs (loop2): Directory bread(block 72) failed
[   66.261623][ T6631] FAT-fs (loop2): Directory bread(block 73) failed
[   66.385004][ T6652] loop2: detected capacity change from 0 to 512
[   66.407793][ T6652] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   66.407817][ T6652] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   66.407851][ T6652] System zones: 0-1, 15-15, 18-18, 34-34
[   66.407976][ T6652] EXT4-fs (loop2): orphan cleanup on readonly fs
[   66.408007][ T6652] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[   66.408042][ T6652] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   66.408056][ T6652] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   66.420275][ T6652] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.441: bad orphan inode 16
[   66.420303][ T6652] loop2: lost filesystem error report for type 5 error -117
[   66.422959][ T6652] ext4_test_bit(bit=15, block=18) = 1
[   66.423004][ T6652] is_bad_inode(inode)=0
[   66.423027][ T6652] NEXT_ORPHAN(inode)=0
[   66.423037][ T6652] max_ino=32
[   66.423045][ T6652] i_nlink=2
[   66.423488][ T6652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   66.433530][ T6652] fscrypt (loop2, inode 16): Error -61 getting encryption context
[   66.437489][  T513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   66.437535][  T513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.439553][ T6660] fscrypt (loop2, inode 16): Error -61 getting encryption context
[   66.443780][ T4393] 8021q: adding VLAN 0 to HW filter on device eth7
[   66.463047][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.527274][ T6670] loop2: detected capacity change from 0 to 128
[   66.547277][  T513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   66.547324][  T513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.561537][ T6439] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.678281][  T513] bond0: (slave netdevsim1): Releasing backup interface
[   66.758073][  T513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   66.758114][  T513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.772665][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.774355][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.776146][ T6588] bridge_slave_0: entered allmulticast mode
[   66.780446][ T6588] bridge_slave_0: entered promiscuous mode
[   66.783618][ T6588] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.788512][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.791155][ T6588] bridge_slave_1: entered allmulticast mode
[   66.791616][ T6588] bridge_slave_1: entered promiscuous mode
[   66.795043][ T4722] Bluetooth: hci0: command tx timeout
[   66.822330][ T6694] loop2: detected capacity change from 0 to 512
[   66.842287][ T6588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.843354][ T6588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.854278][ T6694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   66.888932][ T6588] team0: Port device team_slave_0 added
[   66.903313][ T6588] team0: Port device team_slave_1 added
[   66.916524][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.916551][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.916562][ T6588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.917080][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.917086][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.917101][ T6588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.927133][ T6588] hsr_slave_0: entered promiscuous mode
[   66.927428][ T6588] hsr_slave_1: entered promiscuous mode
[   66.927614][ T6588] debugfs: 'hsr0' already exists in 'hsr'
[   66.927623][ T6588] Cannot create hsr debugfs directory
[   66.943132][ T6694] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[   66.943205][ T6694] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   66.943235][ T6694] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.445: Failed to acquire dquot type 0
[   66.952744][ T6694] overlayfs: failed to set uuid (/file0, err=-117); falling back to uuid=null.
[   66.982026][  T513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   66.989326][  T513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.123587][ T6439] veth0_vlan: entered promiscuous mode
[   67.127074][ T6439] veth1_vlan: entered promiscuous mode
[   67.139478][ T6439] veth0_macvtap: entered promiscuous mode
[   67.141183][ T6588] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   67.143734][ T6588] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   67.145540][ T6588] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   67.153211][ T6588] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   67.153541][ T6588] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   67.157160][ T6588] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   67.167042][ T6439] veth1_macvtap: entered promiscuous mode
[   67.172592][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.174931][ T6588] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   67.199622][ T6588] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   67.206459][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.230390][   T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.230840][   T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.230866][   T40] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.230885][   T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.362686][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   67.474345][ T4709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.475922][ T4709] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.476320][ T4709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.477327][ T4709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.477606][ T4709] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.486128][  T513] bridge_slave_1: left allmulticast mode
[   67.486159][  T513] bridge_slave_1: left promiscuous mode
[   67.486257][  T513] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.487978][  T513] bridge_slave_0: left allmulticast mode
[   67.488000][  T513] bridge_slave_0: left promiscuous mode
[   67.488070][  T513] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.994755][ T4722] Bluetooth: hci1: command tx timeout
[   68.874818][ T4722] Bluetooth: hci0: command tx timeout
[   69.147348][  T513] team0: Port device bond0 removed
[   69.148974][  T513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.175925][  T513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.217693][  T513] bond0 (unregistering): Released all slaves
[   69.220181][  T513] bond1 (unregistering): Released all slaves
[   69.274208][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.456'.
[   69.383808][ T5336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.383835][ T5336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.387762][ T6588] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.481874][ T6588] 8021q: adding VLAN 0 to HW filter on device team0
[   69.515024][ T4722] Bluetooth: hci2: command tx timeout
[   69.542502][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.542555][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.548722][ T4393] 8021q: adding VLAN 0 to HW filter on device eth8
[   69.575751][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.575799][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.587542][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.587569][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.662690][ T6588] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   69.662731][ T6588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.736131][  T513] hsr_slave_0: left promiscuous mode
[   69.737756][  T513] hsr_slave_1: left promiscuous mode
[   69.738581][  T513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.738595][  T513] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.745308][  T513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.746694][  T513] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.756047][  T513] veth1_macvtap: left promiscuous mode
[   69.757084][  T513] veth0_macvtap: left promiscuous mode
[   69.758201][  T513] veth1_vlan: left promiscuous mode
[   69.759239][  T513] veth0_vlan: left promiscuous mode
[   69.936265][  T513] team0 (unregistering): Port device team_slave_1 removed
[   69.944877][  T513] team0 (unregistering): Port device team_slave_0 removed
[   70.075883][ T4722] Bluetooth: hci1: command tx timeout
[   70.105790][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.6.403'.
[   70.317702][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.317898][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.317959][ T6726] bridge_slave_0: entered allmulticast mode
[   70.318629][ T6726] bridge_slave_0: entered promiscuous mode
[   70.326979][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.327063][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.327170][ T6726] bridge_slave_1: entered allmulticast mode
[   70.329217][ T6726] bridge_slave_1: entered promiscuous mode
[   70.344445][ T6588] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.352113][ T6726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.362372][ T6726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.369176][ T6884] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[   70.388959][ T6726] team0: Port device team_slave_0 added
[   70.389728][ T6726] team0: Port device team_slave_1 added
[   70.407906][ T6726] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.409262][ T6726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.414586][ T6726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.423257][ T6726] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.427078][ T6726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.427144][ T6726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.472076][ T6726] hsr_slave_0: entered promiscuous mode
[   70.473673][ T6726] hsr_slave_1: entered promiscuous mode
[   70.475457][ T6726] debugfs: 'hsr0' already exists in 'hsr'
[   70.476553][ T6726] Cannot create hsr debugfs directory
[   70.527882][ T4393] 8021q: adding VLAN 0 to HW filter on device eth9
[   70.556333][  T513] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.556705][  T513] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.590436][ T6918] netlink: 16 bytes leftover after parsing attributes in process `syz.5.470'.
[   70.627890][  T513] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.630126][  T513] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.636416][ T6588] veth0_vlan: entered promiscuous mode
[   70.663391][ T6588] veth1_vlan: entered promiscuous mode
[   70.694030][ T6726] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   70.696810][ T6726] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.706687][  T513] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.706726][  T513] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.712272][ T6588] veth0_macvtap: entered promiscuous mode
[   70.714559][ T6726] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   70.723526][ T6726] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.723853][ T6726] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   70.728631][ T6726] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.731252][ T6588] veth1_macvtap: entered promiscuous mode
[   70.733571][ T6726] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   70.736714][ T6726] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.754331][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.759560][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.779964][   T15] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.780021][   T15] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.780051][   T15] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.780078][   T15] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.783679][ T6951] loop5: detected capacity change from 0 to 1024
[   70.807458][  T513] netdevsim netdevsim2 ªªªªª» (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.807498][  T513] netdevsim netdevsim2 ªªªªª» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.839095][ T6951] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[   70.839142][ T6951] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[   70.839164][ T6951] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.472: Failed to acquire dquot type 0
[   70.839182][ T6951] loop5: lost filesystem error report for type 5 error -5
[   70.845221][    C1] EXT4-fs (loop5): error count since last fsck: 1
[   70.845234][    C1] EXT4-fs (loop5): initial error at time 70: ext4_acquire_dquot:7034
[   70.845250][    C1] EXT4-fs (loop5): last error at time 70: ext4_acquire_dquot:7034
[   70.853418][ T6951] EXT4-fs (loop5): 1 truncate cleaned up
[   70.853916][ T6951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.954863][ T4722] Bluetooth: hci0: command tx timeout
[   71.081436][ T6975] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[   71.081722][ T6975] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[   71.081781][ T6975] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.472: Failed to acquire dquot type 0
[   71.093464][ T6975] No such timeout policy "syz1"
[   71.197696][   T11] IPVS: starting estimator thread 0...
[   71.284901][ T6976] IPVS: using max 58 ests per chain, 139200 per kthread
[   71.304603][ T6985] loop6: detected capacity change from 0 to 512
[   71.306341][ T6985] EXT4-fs: Ignoring removed i_version option
[   71.310562][ T6985] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   71.319825][  T513] bridge_slave_1: left allmulticast mode
[   71.319858][  T513] bridge_slave_1: left promiscuous mode
[   71.319963][  T513] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.326470][ T6985] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.474: bg 0: block 384: padding at end of block bitmap is not set
[   71.329526][ T6985] loop6: lost filesystem error report for type 5 error -117
[   71.330051][  T513] bridge_slave_0: left allmulticast mode
[   71.330076][  T513] bridge_slave_0: left promiscuous mode
[   71.330156][  T513] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.335644][    C0] EXT4-fs (loop6): error count since last fsck: 1
[   71.335654][    C0] EXT4-fs (loop6): initial error at time 71: ext4_validate_block_bitmap:441
[   71.335666][    C0] EXT4-fs (loop6): last error at time 71: ext4_validate_block_bitmap:441
[   71.340562][ T6985] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   71.340576][ T6985] loop6: lost filesystem error report for type 5 error -117
[   71.341617][ T6985] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.474: attempt to clear invalid blocks 983260 len 1
[   71.341637][ T6985] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   71.342134][ T6985] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.474: Invalid inode table block 0 in block_group 0
[   71.342150][ T6985] loop6: lost filesystem error report for type 5 error -117
[   71.342370][ T6985] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem
[   71.342386][ T6985] loop6: lost filesystem error report for type 5 error -117
[   71.342513][ T6985] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[   71.342521][ T6985] loop6: lost filesystem error report for type 5 error -117
[   71.342635][ T6985] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.474: Invalid inode table block 0 in block_group 0
[   71.342646][ T6985] loop6: lost filesystem error report for type 5 error -117
[   71.342756][ T6985] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem
[   71.342764][ T6985] loop6: lost filesystem error report for type 5 error -117
[   71.342883][ T6985] EXT4-fs error (device loop6): ext4_truncate:4690: inode #11: comm syz.6.474: mark_inode_dirty error
[   71.342894][ T6985] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   71.343037][ T6985] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[   71.343045][ T6985] loop6: lost filesystem error report for type 5 error -117
[   71.343183][ T6985] EXT4-fs (loop6): 1 truncate cleaned up
[   71.343643][ T6985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.346014][ T6985] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.474: Invalid inode bitmap blk 0 in block_group 0
[   71.520130][  T513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.546033][  T513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.555996][  T513] bond0 (unregistering): Released all slaves
[   71.558763][ T6726] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.562415][ T4393] 8021q: adding VLAN 0 to HW filter on device eth10
[   71.563831][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.565609][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.585853][ T6439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.588634][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.588661][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.595317][ T6726] 8021q: adding VLAN 0 to HW filter on device team0
[   71.596144][ T4722] Bluetooth: hci2: command tx timeout
[   71.606451][   T15] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.606505][   T15] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.612604][   T15] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.612643][   T15] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.621921][ T6726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   71.621945][ T6726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.657872][ T5284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.721925][ T6998] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   71.721966][ T6998] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   71.780638][ T7010] loop6: detected capacity change from 0 to 256
[   71.863408][   T30] audit: type=1400 audit(71.850:97): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=7022 comm="syz.5.480" path="pipe:[8658]" dev="pipefs" ino=8658
[   71.903232][ T7026] loop7: detected capacity change from 0 to 2048
[   71.908726][ T7026] EXT4-fs (loop7): cluster size (2048) smaller than block size (4096)
[   71.993494][  T513] hsr_slave_0: left promiscuous mode
[   71.997330][  T513] hsr_slave_1: left promiscuous mode
[   71.998741][  T513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.000504][  T513] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.004456][  T513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.004491][  T513] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.008897][  T513] batman_adv: batadv0: Removing interface: vlan2
[   72.015216][  T513] veth1_macvtap: left promiscuous mode
[   72.017127][  T513] veth0_macvtap: left promiscuous mode
[   72.018517][  T513] veth1_vlan: left promiscuous mode
[   72.019603][  T513] veth0_vlan: left promiscuous mode
[   72.139537][  T513] team0 (unregistering): Port device team_slave_1 removed
[   72.204817][ T4393] 8021q: adding VLAN 0 to HW filter on device eth11
[   72.207787][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'.
[   72.251409][ T6726] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.371130][ T7070] overlayfs: conflicting options: userxattr,redirect_dir=on
[   72.374083][ T7070] netlink: 120 bytes leftover after parsing attributes in process `syz.6.491'.
[   72.376743][ T7070] netlink: 'syz.6.491': attribute type 30 has an invalid length.
[   72.411014][ T7080] 9p: Bad value for 'rfdno'
[   72.467609][ T7081] x_tables: duplicate underflow at hook 2
[   72.699517][ T7070] netlink: 'syz.6.491': attribute type 30 has an invalid length.
[   72.706227][ T7088] loop7: detected capacity change from 0 to 2048
[   72.739496][ T7088]  loop7: p1 p2 p3 p4
[   72.739496][ T7088]  p1: <netbsd: (ignored 55 more) >
[   72.739882][ T7088] loop7: p1 size 16779263 extends beyond EOD, truncated
[   72.749436][ T7088] loop7: p2 size 458752 extends beyond EOD, truncated
[   72.751984][ T7088] loop7: p3 start 3036676096 is beyond EOD, truncated
[   72.754665][ T7088] loop7: p4 start 100663296 is beyond EOD, truncated
[   72.767489][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.494'.
[   72.783089][ T6726] veth0_vlan: entered promiscuous mode
[   72.797343][ T6726] veth1_vlan: entered promiscuous mode
[   72.821203][ T4393] 8021q: adding VLAN 0 to HW filter on device eth12
[   72.829566][ T6726] veth0_macvtap: entered promiscuous mode
[   72.838923][ T6726] veth1_macvtap: entered promiscuous mode
[   72.856201][ T6726] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.860540][ T6726] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.865954][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.893156][   T15] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.893215][   T15] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.893236][   T15] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.953295][  T783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.953329][  T783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.984641][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.984676][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.000733][ T5117] udevd[5117]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[   73.002084][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[   73.053003][ T4393] 8021q: adding VLAN 0 to HW filter on device eth14
[   73.086508][ T7130] loop8: detected capacity change from 0 to 512
[   73.214211][ T7151] syz_tun: entered allmulticast mode
[   73.256083][ T7159] tmpfs: Bad value for 'mpol'
[   73.286987][ T7163] netlink: 32 bytes leftover after parsing attributes in process `syz.3.505'.
[   73.291571][   T11] IPVS: starting estimator thread 0...
[   73.298615][ T7163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.314237][ T7170] loop8: detected capacity change from 0 to 128
[   73.319119][ T7170] EXT4-fs (loop8): Test dummy encryption mode enabled
[   73.331092][ T7170] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   73.374921][ T7166] IPVS: using max 56 ests per chain, 134400 per kthread
[   73.420942][ T4393] 8021q: adding VLAN 0 to HW filter on device eth13
[   73.433593][ T7180] loop6: detected capacity change from 0 to 4096
[   73.458660][ T7180] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[   73.726154][ T4722] Bluetooth: hci2: command tx timeout
[   73.824993][ T7200] netlink: 92 bytes leftover after parsing attributes in process `syz.5.513'.
[   73.826902][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.5.513'.
[   73.829607][ T7200] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   73.833753][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.511'.
[   73.842821][ T7200] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   73.907901][ T7213] vhci_hcd vhci_hcd.0: invalid port number 36
[   73.907935][ T7213] vhci_hcd vhci_hcd.0: GetPortErrorCount req not supported for USB 2.0 roothub
[   73.913934][ T7213] loop5: detected capacity change from 0 to 128
[   73.920707][ T7213] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[   73.958497][ T7218] random: crng reseeded on system resumption
[   73.988964][ T4393] 8021q: adding VLAN 0 to HW filter on device eth15
[   74.004990][ T4722] Bluetooth: hci1: command tx timeout
[   74.097289][ T7229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.098186][ T7229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.180709][ T6726] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   74.201066][ T7216] 9p: Bad value for 'rfdno'
[   74.203269][ T7241] loop5: detected capacity change from 0 to 1024
[   74.465157][ T7241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.467695][ T7241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.691375][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.7.525'.
[   74.874080][ T7274] EXT4-fs: Ignoring removed bh option
[   74.877111][ T7274] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.532: corrupted in-inode xattr: e_value size too large
[   74.880207][ T7274] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   74.880530][ T7274] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.532: couldn't read orphan inode 15 (err -117)
[   74.884772][    C1] EXT4-fs (loop7): error count since last fsck: 1
[   74.884787][    C1] EXT4-fs (loop7): initial error at time 74: ext4_iget_extra_inode:5128: inode 15
[   74.884809][    C1] EXT4-fs (loop7): last error at time 74: ext4_iget_extra_inode:5128: inode 15
[   74.889753][ T7274] loop7: lost filesystem error report for type 5 error -117
[   74.890856][ T7274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.900741][ T7274] Bluetooth: MGMT ver 1.23
[   74.910660][ T6588] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.027896][ T7280] lo speed is unknown, defaulting to 1000
[   75.027965][ T7280] lo speed is unknown, defaulting to 1000
[   75.028655][ T7280] lo speed is unknown, defaulting to 1000
[   75.029611][ T7280] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   75.031109][ T7280] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   75.040350][ T7280] lo speed is unknown, defaulting to 1000
[   75.040717][ T7280] lo speed is unknown, defaulting to 1000
[   75.041084][ T7280] lo speed is unknown, defaulting to 1000
[   75.041415][ T7280] lo speed is unknown, defaulting to 1000
[   75.041729][ T7280] lo speed is unknown, defaulting to 1000
[   75.134642][ T7290] RGB/YUV Input: =================  START STATUS  =================
[   75.134669][ T7290] RGB/YUV Input: Test Pattern: 75% Colorbar
[   75.136893][ T7290] RGB/YUV Input: Show Information: All
[   75.136908][ T7290] RGB/YUV Input: Vertical Flip: false
[   75.136919][ T7290] RGB/YUV Input: Horizontal Flip: false
[   75.136929][ T7290] RGB/YUV Input: Brightness: 128
[   75.136938][ T7290] RGB/YUV Input: Contrast: 128
[   75.136947][ T7290] RGB/YUV Input: Hue: 0
[   75.136955][ T7290] RGB/YUV Input: Saturation: 128
[   75.136964][ T7290] RGB/YUV Input: Pixel Rate: 160000000
[   75.136973][ T7290] RGB/YUV Input: Horizontal Blanking: 800
[   75.136982][ T7290] RGB/YUV Input: Vertical Blanking: 3223
[   75.136990][ T7290] RGB/YUV Input: ==================  END STATUS  ==================
[   75.643039][ T7307] EXT4-fs (loop8): Test dummy encryption mode enabled
[   75.679669][ T7307] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.692018][ T7307] netlink: 72 bytes leftover after parsing attributes in process `syz.8.538'.
[   75.756632][ T4722] Bluetooth: hci2: command tx timeout
[   76.187075][ T7319] set_capacity_and_notify: 3 callbacks suppressed
[   76.188809][ T7319] loop3: detected capacity change from 0 to 512
[   76.194496][ T7319] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   76.218202][ T7319] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.543: invalid indirect mapped block 4294967295 (level 0)
[   76.218240][ T7319] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   76.224348][ T7319] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.543: invalid indirect mapped block 4294967295 (level 1)
[   76.224747][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   76.224767][    C0] EXT4-fs (loop3): initial error at time 76: ext4_free_branches:1023: inode 16
[   76.224808][    C0] EXT4-fs (loop3): last error at time 76: ext4_free_branches:1023: inode 16
[   76.237615][ T7319] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   76.239437][ T7319] EXT4-fs (loop3): 1 orphan inode deleted
[   76.243511][ T7319] EXT4-fs (loop3): 1 truncate cleaned up
[   76.244046][ T7319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.306566][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.496178][ T7333] syz_tun: left allmulticast mode
[   76.520101][ T6726] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.720611][ T7361] netlink: 248 bytes leftover after parsing attributes in process `syz.3.551'.
[   77.109336][ T7394] loop3: detected capacity change from 0 to 1024
[   77.131536][ T7394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   77.139049][ T7396] loop7: detected capacity change from 0 to 256
[   77.145321][ T7396] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   77.156383][ T7394] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.559: lblock 0 mapped to illegal pblock 0 (length 1)
[   77.159515][ T7394] EXT4-fs (loop3): Remounting filesystem read-only
[   77.173577][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   77.329564][ T7396] overlay: filesystem on ./bus not supported
[   77.606170][ T4722] Bluetooth: hci4: unexpected event for opcode 0x0411
[   77.845544][ T7419] loop5: detected capacity change from 0 to 512
[   77.851262][ T7419] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   77.860458][ T7419] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.565: corrupted xattr entries
[   77.860487][ T7419] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   77.864708][    C1] EXT4-fs (loop5): error count since last fsck: 1
[   77.864732][    C1] EXT4-fs (loop5): initial error at time 77: xattr_find_entry:337: inode 15
[   77.864768][    C1] EXT4-fs (loop5): last error at time 77: xattr_find_entry:337: inode 15
[   77.875224][ T7419] EXT4-fs (loop5): Remounting filesystem read-only
[   77.875312][ T7419] EXT4-fs (loop5): 1 truncate cleaned up
[   77.875794][ T7419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.034217][ T7440] loop6: detected capacity change from 0 to 512
[   78.053219][ T7440] loop6: detected capacity change from 0 to 512
[   78.130927][ T7440] loop6: detected capacity change from 0 to 2048
[   78.185568][ T5698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.126019][ T7460] loop7: detected capacity change from 0 to 128
[   79.149447][ T7460] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   79.332963][ T7481] bridge1: entered promiscuous mode
[   79.342746][ T7481] bridge1: entered allmulticast mode
[   79.348793][ T6588] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   79.355365][ T7481] team0: Port device bridge1 added
[   79.398410][ T7500] loop7: detected capacity change from 0 to 128
[   79.544389][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.547771][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.707239][ T4709] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   79.708626][ T4709] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   79.710205][ T4709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   79.710577][ T4709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   79.710974][ T4709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   79.763200][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.763240][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.873486][ T7552] input: syz1 as /devices/virtual/input/input4
[   79.958167][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.960413][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.072402][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.072444][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.156026][ T7582] loop3: detected capacity change from 0 to 128
[   80.176838][ T7582] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   80.242140][ T4712] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   80.436650][   T12] bridge_slave_1: left allmulticast mode
[   80.436684][   T12] bridge_slave_1: left promiscuous mode
[   80.436789][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.443498][   T12] bridge_slave_0: left allmulticast mode
[   80.443521][   T12] bridge_slave_0: left promiscuous mode
[   80.443595][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.712545][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.760409][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.786083][   T12] bond0 (unregistering): Released all slaves
[   80.813171][ T7620] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   80.918074][ T6726] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   80.938047][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.938229][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.005078][ T7644] netlink: 'syz.7.609': attribute type 29 has an invalid length.
[   81.005774][ T7644] netlink: 'syz.7.609': attribute type 29 has an invalid length.
[   81.011859][ T7644] netlink: 'syz.7.609': attribute type 32 has an invalid length.
[   81.011884][ T7644] netlink: 500 bytes leftover after parsing attributes in process `syz.7.609'.
[   81.093681][ T7657] vfat: Unknown parameter 'uni_'
[   81.097604][ T7658] x_tables: duplicate underflow at hook 1
[   81.178919][ T7667] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.198151][ T7673] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000
[   81.237153][ T7535] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.238876][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.242303][ T7535] bridge_slave_0: entered allmulticast mode
[   81.242819][ T7535] bridge_slave_0: entered promiscuous mode
[   81.243517][ T7535] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.243545][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.243615][ T7535] bridge_slave_1: entered allmulticast mode
[   81.244048][ T7535] bridge_slave_1: entered promiscuous mode
[   81.313586][ T7684] set_capacity_and_notify: 5 callbacks suppressed
[   81.313624][ T7684] loop3: detected capacity change from 0 to 1024
[   81.320045][   T12] hsr_slave_0: left promiscuous mode
[   81.321152][   T12] hsr_slave_1: left promiscuous mode
[   81.321401][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.321412][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.322728][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.322738][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.327722][ T7684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.334076][   T12] veth1_macvtap: left promiscuous mode
[   81.334119][   T12] veth0_macvtap: left promiscuous mode
[   81.334149][   T12] veth1_vlan: left promiscuous mode
[   81.334209][   T12] veth0_vlan: left promiscuous mode
[   81.444635][   T12] team0 (unregistering): Port device team_slave_1 removed
[   81.450333][   T12] team0 (unregistering): Port device team_slave_0 removed
[   81.578031][ T4393] 8021q: adding VLAN 0 to HW filter on device eth16
[   81.581959][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.582347][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.592748][ T7535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.604180][ T7535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.625608][ T7535] team0: Port device team_slave_0 added
[   81.626434][ T7535] team0: Port device team_slave_1 added
[   81.632049][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.634671][ T6726] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.634778][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.634814][ T7535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.643299][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.643308][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.643319][ T7535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.667508][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.672411][ T7535] hsr_slave_0: entered promiscuous mode
[   81.674100][ T7535] hsr_slave_1: entered promiscuous mode
[   81.745116][ T7696] loop3: detected capacity change from 0 to 512
[   81.755670][ T4709] Bluetooth: hci4: command tx timeout
[   81.951856][ T7716] loop3: detected capacity change from 0 to 8192
[   82.029273][ T7535] netdevsim netdevsim9 netdevsim0: renamed from eth0
[   82.041960][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   82.047812][ T7535] netdevsim netdevsim9 netdevsim1: renamed from eth1
[   82.051425][   T12] IPVS: stop unused estimator thread 0...
[   82.067953][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   82.077746][ T7535] netdevsim netdevsim9 netdevsim2: renamed from eth2
[   82.087491][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   82.093612][ T7535] netdevsim netdevsim9 netdevsim3: renamed from eth3
[   82.099603][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   82.163665][ T7724] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   82.163697][ T7724] FAT-fs (loop3): Filesystem has been set read-only
[   82.169673][ T4393] 8021q: adding VLAN 0 to HW filter on device eth17
[   82.182550][ T7535] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.199257][ T7535] 8021q: adding VLAN 0 to HW filter on device team0
[   82.204581][  T513] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.204622][  T513] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.214305][  T513] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.214349][  T513] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.238585][ T7535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   82.240912][ T7535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.325286][ T7749] netlink: 1 bytes leftover after parsing attributes in process `syz.3.629'.
[   82.328791][ T7749] usb usb6: usbfs: process 7749 (syz.3.629) did not claim interface 0 before use
[   82.377328][ T7755] loop3: detected capacity change from 0 to 512
[   82.377728][ T7755] EXT4-fs: Ignoring removed oldalloc option
[   82.388554][ T7755] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   82.391930][ T7755] EXT4-fs (loop3): 1 truncate cleaned up
[   82.393673][ T7755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.429112][ T7755] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[   82.442125][ T7755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.446000][ T7755] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.448045][ T7535] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.496251][ T4393] 8021q: adding VLAN 0 to HW filter on device eth18
[   82.530159][ T7535] veth0_vlan: entered promiscuous mode
[   82.534008][ T7535] veth1_vlan: entered promiscuous mode
[   82.549428][ T7535] veth0_macvtap: entered promiscuous mode
[   82.550967][ T7535] veth1_macvtap: entered promiscuous mode
[   82.558479][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.562122][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.570949][  T513] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.572829][  T513] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.575217][  T513] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.577745][  T513] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.615812][ T1247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.617485][ T1247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.638814][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.638841][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.755578][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.9.634'.
[   82.762091][ T4393] 8021q: adding VLAN 0 to HW filter on device eth19
[   82.781113][ T7806] netlink: 20 bytes leftover after parsing attributes in process `syz.7.633'.
[   82.870298][ T7813] loop7: detected capacity change from 0 to 256
[   82.947883][ T7818] netlink: 76 bytes leftover after parsing attributes in process `syz.9.635'.
[   83.143835][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.151539][ T7813] netlink: 28 bytes leftover after parsing attributes in process `syz.7.636'.
[   83.276383][ T7851] netlink: 16 bytes leftover after parsing attributes in process `syz.8.642'.
[   83.318412][ T7854] loop8: detected capacity change from 0 to 128
[   83.372242][ T7858] loop3: detected capacity change from 0 to 2048
[   83.379374][ T7858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.404183][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.436149][ T7866] loop3: detected capacity change from 0 to 128
[   83.498692][ T7869] loop3: detected capacity change from 0 to 512
[   83.499024][ T7869] EXT4-fs: Ignoring removed oldalloc option
[   83.501581][ T7869] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   83.506283][ T7869] EXT4-fs (loop3): 1 truncate cleaned up
[   83.507942][ T7869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.523019][ T7869] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[   83.533169][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.535732][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.762776][ T7883] overlayfs: failed lookup in lower (newroot/33, name='file0', err=-40): overlapping layers
[   83.808769][ T7888] netlink: 28 bytes leftover after parsing attributes in process `syz.9.652'.
[   83.834871][ T4709] Bluetooth: hci4: command tx timeout
[   84.075852][ T7909] netlink: 'syz.9.657': attribute type 1 has an invalid length.
[   84.207490][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.289265][ T7920] tipc: Started in network mode
[   84.289303][ T7920] tipc: Node identity 0a1ef25277b5, cluster identity 4711
[   84.289419][ T7920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.298079][ T7920] syzkaller0: entered promiscuous mode
[   84.298112][ T7920] syzkaller0: entered allmulticast mode
[   84.324669][ T7920] tipc: Resetting bearer <eth:syzkaller0>
[   84.351071][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.9.663'.
[   84.375249][ T7918] tipc: Resetting bearer <eth:syzkaller0>
[   84.393557][ T7918] tipc: Disabling bearer <eth:syzkaller0>
[   84.417161][ T7932] loop6: detected capacity change from 0 to 128
[   84.482073][ T7936] binder: 7935:7936 tried to acquire reference to desc 0, got 1 instead
[   84.482762][ T7936] binder: 7935:7936 got transaction with invalid handle, 3
[   84.482774][ T7936] binder: 7936:7935 translate handle failed
[   84.482820][ T7936] binder: 7935:7936 transaction async to 7935:0 failed 19/29201/-22, code 0 size 72-24 line 3556
[   84.545461][ T7938] EXT4-fs: Ignoring removed oldalloc option
[   84.549048][ T7938] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   84.553271][ T7938] EXT4-fs (loop3): 1 truncate cleaned up
[   84.553726][ T7938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.562485][ T7940] Invalid/unusable pipe
[   84.577049][ T7938] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[   84.591619][ T7938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.591810][ T7938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.591982][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[   84.623389][ T7946] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   84.647547][ T7946] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.725706][ T6588] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.754130][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.8.674'.
[   85.760778][ T5336] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.760835][ T5336] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.760869][ T5336] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.760891][ T5336] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.773399][ T7972] syzkaller0: entered promiscuous mode
[   85.773428][ T7972] syzkaller0: entered allmulticast mode
[   85.913150][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.914756][ T4709] Bluetooth: hci4: command tx timeout
[   86.307363][ T8009] Bluetooth: MGMT ver 1.23
[   86.314517][ T8009] __nla_validate_parse: 7 callbacks suppressed
[   86.314919][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.680'.
[   86.366791][ T8018] netlink: 32 bytes leftover after parsing attributes in process `syz.6.682'.
[   86.373163][ T8027] syzkaller0: entered promiscuous mode
[   86.373205][ T8027] syzkaller0: entered allmulticast mode
[   86.477982][ T8047] set_capacity_and_notify: 2 callbacks suppressed
[   86.478013][ T8047] loop6: detected capacity change from 0 to 512
[   86.478339][ T8047] EXT4-fs: Ignoring removed oldalloc option
[   86.493419][ T8047] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   86.498451][ T8047] EXT4-fs (loop6): 1 truncate cleaned up
[   86.498939][ T8047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.518276][ T8047] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[   86.530159][ T8047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.533304][ T8047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.602766][ T8066] loop7: detected capacity change from 0 to 1024
[   86.604657][ T8066] EXT4-fs: Ignoring removed bh option
[   86.607753][ T8066] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   86.640578][ T8066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.180629][ T8107] loop3: detected capacity change from 0 to 256
[   87.185534][ T8107] vfat: Unknown parameter 'nnonumtail'
[   87.202112][ T8110] overlayfs: failed to get uuid (17/file0, err=-13); falling back to uuid=null.
[   87.204180][   T30] audit: type=1400 audit(87.190:98): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lowerdir" requested=r pid=8109 comm="syz.9.695" name="file0" dev="tmpfs" ino=105
[   87.208598][   T30] audit: type=1400 audit(87.200:99): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lowerdir" requested=r pid=8109 comm="syz.9.695" name="file0" dev="tmpfs" ino=105
[   87.264283][ T6439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.477268][ T6588] EXT4-fs error (device loop7): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /55/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   87.490416][ T6588] EXT4-fs (loop7): Remounting filesystem read-only
[   87.537215][ T6588] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.610369][ T8164] loop7: detected capacity change from 0 to 128
[   87.613021][ T8164] EXT4-fs (loop7): Test dummy encryption mode enabled
[   87.623793][ T8164] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   87.748954][ T8179] loop9: detected capacity change from 0 to 512
[   87.753395][ T8179] EXT4-fs: Ignoring removed i_version option
[   87.844858][ T8179] EXT4-fs: Ignoring removed nobh option
[   87.844902][ T8179] EXT4-fs: inline encryption not supported
[   87.992955][ T8179] EXT4-fs (loop9): Test dummy encryption mode enabled
[   87.995497][ T4709] Bluetooth: hci4: command tx timeout
[   88.001641][ T8179] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.706: lblock 0 mapped to illegal pblock 3 (length 1)
[   88.001678][ T8179] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[   88.004582][ T8179] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.706: error -117 reading directory block
[   88.005344][ T8179] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[   88.007563][ T8179] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.009162][ T8179] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.706: lblock 0 mapped to illegal pblock 3 (length 1)
[   88.011243][ T8179] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.706: error -117 reading directory block
[   88.012036][ T8179] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.706: lblock 0 mapped to illegal pblock 3 (length 1)
[   88.012358][ T8179] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.706: error -117 reading directory block
[   88.012691][ T8179] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.706: lblock 0 mapped to illegal pblock 3 (length 1)
[   88.012942][ T8179] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.706: error -117 reading directory block
[   88.013278][ T8179] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.706: lblock 0 mapped to illegal pblock 3 (length 1)
[   88.013555][ T8179] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.706: error -117 reading directory block
[   88.013924][ T8179] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.706: lblock 0 mapped to illegal pblock 3 (length 1)
[   88.014098][ T8179] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.706: error -117 reading directory block
[   88.014605][ T8179] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.706: lblock 0 mapped to illegal pblock 3 (length 1)
[   88.015226][ T8179] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.706: error -117 reading directory block
[   88.015351][ T8179] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.706: lblock 0 mapped to illegal pblock 3 (length 1)
[   88.015737][ T8179] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.706: error -117 reading directory block
[   88.016305][ T8179] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.706: lblock 0 mapped to illegal pblock 3 (length 1)
[   88.016671][ T8179] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.706: error -117 reading directory block
[   88.016926][ T8179] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.706: lblock 0 mapped to illegal pblock 3 (length 1)
[   88.019417][ T8179] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.706: error -117 reading directory block
[   88.019558][ T8179] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.706: lblock 0 mapped to illegal pblock 3 (length 1)
[   88.022427][ T8179] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.706: error -117 reading directory block
[   88.062830][ T7535] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.123788][ T8192] loop9: detected capacity change from 0 to 8192
[   88.180334][ T8192]  loop9: p2 p3 p4
[   88.180361][ T8192] loop9: partition table partially beyond EOD, truncated
[   88.180465][ T8192] loop9: p2 size 588341 extends beyond EOD, truncated
[   88.181969][ T8192] loop9: p3 start 65280 is beyond EOD, truncated
[   88.181981][ T8192] loop9: p4 start 219873280 is beyond EOD, truncated
[   88.188350][ T8196] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.708'.
[   88.223588][ T8198] loop3: detected capacity change from 0 to 512
[   88.225442][ T8198] EXT4-fs: Ignoring removed oldalloc option
[   88.235345][ T8198] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   88.250981][ T8198] EXT4-fs (loop3): 1 truncate cleaned up
[   88.251435][ T8198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.263393][ T8198] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[   88.275807][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.281319][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.301087][ T8192] Injecting memory failure for pfn 0x13c0ae at process virtual address 0x20000000
[   88.301157][ T8200] Injecting memory failure for pfn 0x13c0ae at process virtual address 0x20000000
[   88.313925][ T8192] Memory failure: 0x13c0ae: clean LRU page still referenced by 1 users
[   88.313966][ T8192] Memory failure: 0x13c0ae: recovery action for clean LRU page: Failed
[   88.314102][ T8200] Memory failure: 0x13c0ae: Sending SIGBUS to syz.9.707:8200 due to hardware memory corruption
[   88.314164][ T8200] Memory failure: 0x13c0ae: recovery action for already poisoned page: Failed
[   88.353172][ T8202] netlink: 48 bytes leftover after parsing attributes in process `syz.6.710'.
[   88.395764][ T8206] veth1_macvtap: left promiscuous mode
[   88.395802][ T8206] macsec0: entered allmulticast mode
[   88.500725][ T6588] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   88.575988][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.7.716'.
[   88.778078][ T8233] netlink: 32 bytes leftover after parsing attributes in process `syz.7.719'.
[   88.819089][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.903881][ T8233] loop7: detected capacity change from 0 to 8192
[   88.981296][   T30] audit: type=1326 audit(88.970:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8242 comm="syz.3.722" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d77aa8 code=0x0
[   89.137719][ T8244] loop6: detected capacity change from 0 to 32768
[   89.179999][ T8244]  loop6: p3 < p5 p6 > p4 < p7 >
[   89.180033][ T8244] loop6: partition table partially beyond EOD, truncated
[   89.182242][ T8244] loop6: p6 size 33554432 extends beyond EOD, truncated
[   89.208437][ T8260] loop3: detected capacity change from 0 to 1024
[   89.210335][ T8260] EXT4-fs: Ignoring removed bh option
[   89.213760][ T8260] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   89.231827][ T8260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.241373][ T8260] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.728: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[   89.248537][ T8260] EXT4-fs (loop3): Remounting filesystem read-only
[   89.258480][ T8264] Injecting memory failure for pfn 0x123200 at process virtual address 0x20000000
[   89.269042][ T8264] Memory failure: 0x123200: recovery action for dirty LRU page: Recovered
[   89.269075][ T8264] Injecting memory failure for pfn 0x141a00 at process virtual address 0x20200000
[   89.275833][ T8264] Memory failure: 0x141a00: recovery action for clean LRU page: Recovered
[   89.278661][ T8264] Injecting memory failure for pfn 0x140600 at process virtual address 0x20400000
[   89.284491][ T8264] Memory failure: 0x140600: recovery action for clean LRU page: Recovered
[   89.286431][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'.
[   89.288794][ T8264] Injecting memory failure for pfn 0x21cf58 at process virtual address 0x20600000
[   89.288843][ T8264] Memory failure: 0x21cf58: Sending SIGBUS to syz.8.726:8264 due to hardware memory corruption
[   89.288880][ T8264] Memory failure: 0x21cf58: recovery action for already poisoned page: Failed
[   89.342397][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.412956][ T8269] EXT4-fs: Ignoring removed oldalloc option
[   89.417368][ T8269] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[   89.422269][ T8269] EXT4-fs (loop9): 1 truncate cleaned up
[   89.424098][ T8269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.438570][ T8269] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[   89.449807][ T8269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.452106][ T8269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.467490][ T8272] netlink: 'syz.3.729': attribute type 3 has an invalid length.
[   89.472176][ T8272] netlink: 'syz.3.729': attribute type 3 has an invalid length.
[   89.998316][ T7535] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.017001][ T8297] EXT4-fs (loop9): orphan cleanup on readonly fs
[   90.018381][ T8297] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.738: corrupted in-inode xattr: invalid size in ea xattr
[   90.021365][ T8297] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   90.021715][ T8297] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.738: couldn't read orphan inode 15 (err -117)
[   90.025855][    C0] EXT4-fs (loop9): error count since last fsck: 1
[   90.025869][    C0] EXT4-fs (loop9): initial error at time 90: ext4_iget_extra_inode:5128: inode 15
[   90.025898][    C0] EXT4-fs (loop9): last error at time 90: ext4_iget_extra_inode:5128: inode 15
[   90.032156][ T8297] loop9: lost filesystem error report for type 5 error -117
[   90.033408][ T8297] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   90.045843][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.049478][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.560754][ T7535] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.617976][ T8312] mmap: syz.9.742 (8312) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   90.704186][ T8326] EXT4-fs: Ignoring removed nobh option
[   90.706180][ T8326] EXT4-fs: Ignoring removed nomblk_io_submit option
[   90.706193][ T8326] EXT4-fs: Ignoring removed bh option
[   90.711176][ T8326] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[   90.713089][ T8326] EXT4-fs (loop3): 1 orphan inode deleted
[   90.713513][ T8326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.733862][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.752663][ T8331] EXT4-fs: Ignoring removed oldalloc option
[   90.752944][ T8331] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   90.759471][ T8331] EXT4-fs (loop3): 1 truncate cleaned up
[   90.760082][ T8331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.769784][ T8331] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[   90.774400][ T8331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.774617][ T8331] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.943934][ T8337] vlan2: entered promiscuous mode
[   90.943969][ T8337] veth1_virt_wifi: entered promiscuous mode
[   91.002480][ T8341] netem: change failed
[   91.039696][ T8343] evm: overlay not supported
[   91.095728][ T8351] dlm: non-version read from control device 62
[   91.349321][ T8363] FAT-fs (loop3): Directory bread(block 64) failed
[   91.350728][ T8363] FAT-fs (loop3): Directory bread(block 65) failed
[   91.352209][ T8363] FAT-fs (loop3): Directory bread(block 66) failed
[   91.353678][ T8363] FAT-fs (loop3): Directory bread(block 67) failed
[   91.355924][ T8363] FAT-fs (loop3): Directory bread(block 68) failed
[   91.357382][ T8363] FAT-fs (loop3): Directory bread(block 69) failed
[   91.359138][ T8363] FAT-fs (loop3): Directory bread(block 70) failed
[   91.360525][ T8363] FAT-fs (loop3): Directory bread(block 71) failed
[   91.361989][ T8363] FAT-fs (loop3): Directory bread(block 72) failed
[   91.363477][ T8363] FAT-fs (loop3): Directory bread(block 73) failed
[   91.383421][ T8364] sctp: [Deprecated]: syz.8.756 (pid 8364) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.383421][ T8364] Use struct sctp_sack_info instead
[   91.619671][ T8378] set_capacity_and_notify: 6 callbacks suppressed
[   91.620189][ T8378] loop3: detected capacity change from 0 to 2048
[   91.620792][ T8378] EXT4-fs: Ignoring removed i_version option
[   91.671456][ T8383] loop3: detected capacity change from 0 to 128
[   91.828856][ T8388] loop3: detected capacity change from 0 to 2048
[   91.829426][ T8388] ext4: Unknown parameter 'fowner<18446744073709551615'
[   92.222566][ T8392] loop6: detected capacity change from 0 to 256
[   92.244092][ T8394] loop8: detected capacity change from 0 to 1024
[   92.244475][ T8394] EXT4-fs: Ignoring removed i_version option
[   92.249085][ T8394] EXT4-fs: inline encryption not supported
[   92.262405][ T8394] EXT4-fs (loop8): Test dummy encryption mode enabled
[   92.266001][ T8394] EXT4-fs (loop8): stripe (8) is not aligned with cluster size (16), stripe is disabled
[   92.275578][ T8394] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.766: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   92.279596][ T8394] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[   92.279966][ T8394] EXT4-fs error (device loop8): ext4_quota_enable:7228: comm syz.8.766: Bad quota inode: 4, type: 1
[   92.279993][ T8394] loop8: lost filesystem error report for type 5 error -117
[   92.284724][    C1] EXT4-fs (loop8): error count since last fsck: 2
[   92.284748][    C1] EXT4-fs (loop8): initial error at time 92: ext4_ext_check_inode:521: inode 4
[   92.284785][    C1] EXT4-fs (loop8): last error at time 92: ext4_quota_enable:7228
[   92.294580][ T8394] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   92.294960][ T8394] EXT4-fs (loop8): mount failed
[   92.304498][ T8394] netlink: 32 bytes leftover after parsing attributes in process `syz.8.766'.
[   92.330741][ T8400] loop6: detected capacity change from 0 to 512
[   92.332402][ T8400] EXT4-fs: Ignoring removed oldalloc option
[   92.340677][ T8400] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   92.341997][ T8400] EXT4-fs (loop6): 1 truncate cleaned up
[   92.358287][ T8403] loop8: detected capacity change from 0 to 128
[   92.362421][ T8400] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[   92.374166][ T8400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.377186][ T8400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.701276][ T8413] loop3: detected capacity change from 0 to 1024
[   92.701562][ T8413] ext2: Unknown parameter 'appraise_type'
[   93.079219][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'.
[   93.098269][ T8452] Option 'x˜ \%¦Ò' to dns_resolver key: bad/missing value
[   93.162745][ T8452] netlink: 48 bytes leftover after parsing attributes in process `syz.6.779'.
[   93.327941][ T8472] netlink: 'syz.7.784': attribute type 13 has an invalid length.
[   93.334921][ T8473] netlink: 'syz.7.784': attribute type 13 has an invalid length.
[   93.405807][ T8484] loop8: detected capacity change from 0 to 512
[   93.424659][ T8484] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[   93.425836][ T8484] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[   93.433903][ T8484] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[   93.438969][ T8484] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   93.439040][ T8484] System zones: 0-2, 18-18, 34-35
[   93.485485][ T8484] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   93.487689][ T8484] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[   93.487903][ T8484] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   93.488066][ T8484] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   93.500129][ T8484] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.789: bg 0: block 353: padding at end of block bitmap is not set
[   93.505728][ T8484] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   93.604467][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.7.794'.
[   93.619002][ T8511] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.633012][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.633219][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.638838][ T8511] macvlan3: entered promiscuous mode
[   93.648658][ T8511] macvlan3: entered allmulticast mode
[   93.654173][ T8511] bond1: (slave vti0): refused to change device type
[   93.723945][ T4709] Bluetooth: hci2: Malformed Event: 0x02
[   93.724000][ T4709] Bluetooth: hci2: Malformed Event: 0x02
[   93.773919][ T8534] overlay: Unknown parameter 'permit_directio'
[   93.808027][ T8546] loop3: detected capacity change from 0 to 128
[   93.900336][ T8560] netlink: 'syz.7.801': attribute type 4 has an invalid length.
[   93.909638][ T8559] fscrypt (loop3, inode 12): Mutually exclusive encryption flags (0x17)
[   93.915945][ T8558] Injecting memory failure for pfn 0x13c2d8 at process virtual address 0x20000000
[   93.919200][ T8558] Memory failure: 0x13c2d8: Sending SIGBUS to syz.3.803:8558 due to hardware memory corruption
[   93.919237][ T8558] Memory failure: 0x13c2d8: recovery action for dirty LRU page: Recovered
[   93.919249][ T8558] Injecting memory failure for pfn 0x13abee at process virtual address 0x20001000
[   93.919323][ T8558] Memory failure: 0x13abee: Sending SIGBUS to syz.3.803:8558 due to hardware memory corruption
[   93.919341][ T8558] Memory failure: 0x13abee: recovery action for dirty LRU page: Recovered
[   93.919358][ T8558] Injecting memory failure for pfn 0x21cf58 at process virtual address 0x20002000
[   93.919373][ T8558] Memory failure: 0x21cf58: Sending SIGBUS to syz.3.803:8558 due to hardware memory corruption
[   93.919381][ T8558] Memory failure: 0x21cf58: recovery action for already poisoned page: Failed
[   93.965454][ T8566] vcan0: Caught tx_queue_len zero misconfig
[   93.965490][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.7.801'.
[   94.004294][ T8570] EXT4-fs: Ignoring removed nomblk_io_submit option
[   94.020048][ T8570] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102]
[   94.020115][ T8570] System zones: 0-1, 3-12
[   94.029399][ T8570] EXT4-fs error (device loop3): __ext4_remount:6837: comm syz.3.805: Abort forced by user
[   94.032326][ T8570] EXT4-fs (loop3): Remounting filesystem read-only
[   94.033731][ T8570] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[   94.088467][ T8570] 9pnet: p9_errstr2errno: server reported unknown error 
[   94.165949][   T30] audit: type=1326 audit(94.160:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8579 comm="syz.3.808" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d77aa8 code=0x7fc00000
[   94.201305][ T8585] EXT4-fs: inline encryption not supported
[   94.203599][ T8585] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   94.205470][ T8585] EXT4-fs (loop3): Test dummy encryption mode enabled
[   94.208712][ T8585] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[   94.208781][ T8585] System zones: 0-5
[   94.218911][ T8585] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   94.227647][ T8585] overlayfs: conflicting lowerdir path
[   94.612214][ T8521] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   95.060836][ T8521] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   95.060882][ T8521] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   95.086069][ T8521] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   95.094209][ T8521] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   95.094250][ T8521] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   95.101880][ T8521] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   95.114420][ T8521] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   95.114480][ T8521] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   95.405969][ T8521] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   95.409990][ T4712] EXT4-fs unmount: 16 callbacks suppressed
[   95.410020][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.420950][ T8521] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   95.420984][ T8521] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   95.423859][ T8521] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   95.461606][ T8612] netlink: 104 bytes leftover after parsing attributes in process `syz.9.814'.
[   95.472289][ T8612] binder: tried to use weak ref as strong ref
[   95.473555][ T8612] binder: 8610:8612 Acquire 1 refcount change on invalid ref 0 ret -22
[   95.478639][ T8612] binder: 8610:8612 got transaction to invalid handle, 1
[   95.478673][ T8612] binder: 8610:8612 cannot find target node
[   95.478696][ T8612] binder: 8610:8612 transaction call to 0:0 failed 24/29201/-22, code 0 size 72-24 line 3236
[   95.484053][ T8612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.493145][ T8612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.601082][ T4470] binder: undelivered TRANSACTION_ERROR: 29201
[   95.864900][ T4709] Bluetooth: hci3: command 0x0c1a tx timeout
[   95.910344][ T8637] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   95.910369][ T8637] unable to read xattr id index table
[   95.910869][ T8637] SQUASHFS error: zlib decompression failed, data probably corrupt
[   95.910883][ T8637] SQUASHFS error: Failed to read block 0x9b: -5
[   95.910891][ T8637] SQUASHFS error: Unable to read metadata cache entry [99]
[   95.910898][ T8637] SQUASHFS error: Unable to read inode 0x127
[   95.988387][ T8649] netlink: 'syz.6.822': attribute type 40 has an invalid length.
[   96.029002][ T8649] overlayfs: failed to resolve './file0/file1': -2
[   96.086364][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.6.823'.
[   96.195414][ T8672] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   96.680584][ T4709] Bluetooth: hci3: unexpected event for opcode 0x0c5a
[   96.722926][ T8706] set_capacity_and_notify: 6 callbacks suppressed
[   96.724569][ T8706] loop3: detected capacity change from 0 to 1024
[   96.731934][ T8706] syzkaller1: entered promiscuous mode
[   96.734240][ T8706] syzkaller1: entered allmulticast mode
[   96.785845][ T8706] loop3: detected capacity change from 0 to 8192
[   96.831528][ T8706]  loop3: p1 < > p3[EZD]
[   96.832902][ T8706] loop3: p3 start 3238002688 is beyond EOD, truncated
[   96.989000][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.834'.
[   97.028849][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.045417][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.067876][ T8737] macvlan3: left promiscuous mode
[   97.092666][ T7535] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   97.168705][ T4709] Bluetooth: hci2: command 0x0c1a tx timeout
[   97.170045][ T4709] Bluetooth: hci1: command 0x0c1a tx timeout
[   97.171253][ T4709] Bluetooth: hci0: command 0x0c1a tx timeout
[   97.264363][ T8750] CUSE: unknown device info ""
[   97.264426][ T8750] CUSE: unknown device info ""
[   97.264467][ T8750] CUSE: unknown device info "
"
[   97.264498][ T8750] CUSE: zero length info key specified
[   97.452364][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   97.461738][ T8752] loop6: detected capacity change from 0 to 512
[   97.475388][ T8749] netlink: 96 bytes leftover after parsing attributes in process `syz.9.839'.
[   97.475419][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.9.839'.
[   97.475515][ T8749] 8021q: VLANs not supported on ip6tnl0
[   97.491830][ T8752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.514889][ T4709] Bluetooth: hci4: command 0x0c1a tx timeout
[   97.577532][ T8765] loop9: detected capacity change from 0 to 8
[   97.583608][ T8765] squashfs: Bad value for 'errors'
[   97.695412][ T8773] ip6erspan0: entered allmulticast mode
[   97.701178][ T8775] loop8: detected capacity change from 0 to 512
[   97.704103][ T8775] EXT4-fs: Ignoring removed oldalloc option
[   97.706040][ T8775] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   97.710363][ T8775] EXT4-fs (loop8): 1 truncate cleaned up
[   97.712392][ T8775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.724550][ T8775] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[   97.733670][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.733872][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.121425][ T8787] ==================================================================
[   98.121440][ T8787] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x374/0x414
[   98.121465][ T8787] Read of size 4 at addr ffff0000cc5eb83c by task syz.3.853/8787
[   98.121474][ T8787] 
[   98.121480][ T8787] CPU: 1 UID: 0 PID: 8787 Comm: syz.3.853 Tainted: G             L      syzkaller #0 PREEMPT 
[   98.121491][ T8787] Tainted: [L]=SOFTLOCKUP
[   98.121495][ T8787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   98.121499][ T8787] Call trace:
[   98.121502][ T8787]  show_stack+0x2c/0x3c (C)
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[   98.121515][ T8787]  __dump_stack+0x30/0x40
[   98.121525][ T8787]  dump_stack_lvl+0xd8/0x12c
[   98.121535][ T8787]  print_address_description+0xb0/0x238
[   98.121543][ T8787]  print_report+0x68/0x84
[   98.121550][ T8787]  kasan_report+0x8c/0xc4
[   98.121560][ T8787]  __asan_report_load4_noabort+0x20/0x2c
[   98.121570][ T8787]  dvb_frontend_release+0x374/0x414
[   98.121578][ T8787]  __fput+0x340/0x744
[   98.121586][ T8787]  ____fput+0x20/0x30
[   98.121593][ T8787]  task_work_run+0x1c4/0x254
[   98.121603][ T8787]  get_signal+0xf30/0x1094
[   98.121610][ T8787]  arch_do_signal_or_restart+0x290/0x43a0
[   98.121620][ T8787]  exit_to_user_mode_loop+0x70/0x17c
[   98.121628][ T8787]  el0_svc+0x18c/0x260
[   98.121636][ T8787]  el0t_64_sync_handler+0x48/0x148
[   98.121643][ T8787]  el0t_64_sync+0x198/0x19c
[   98.121651][ T8787] 
[   98.121653][ T8787] Allocated by task 1:
[   98.121657][ T8787]  kasan_save_track+0x40/0x78
[   98.121665][ T8787]  kasan_save_alloc_info+0x44/0x54
[   98.121673][ T8787]  __kasan_kmalloc+0x9c/0xb4
[   98.121680][ T8787]  __kmalloc_cache_noprof+0x2d4/0x624
[   98.121688][ T8787]  dvb_register_device+0x1ac/0x16ec
[   98.121697][ T8787]  dvb_register_frontend+0x464/0x698
[   98.121703][ T8787]  vidtv_bridge_probe+0x57c/0xa24
[   98.121711][ T8787]  platform_probe+0xfc/0x198
[   98.121719][ T8787]  really_probe+0x2a8/0x7e8
[   98.121725][ T8787]  __driver_probe_device+0x1e0/0x33c
[   98.121730][ T8787]  driver_probe_device+0x6c/0x19c
[   98.121736][ T8787]  __driver_attach+0x164/0x374
[   98.121741][ T8787]  bus_for_each_dev+0x128/0x1b4
[   98.121749][ T8787]  driver_attach+0x4c/0x5c
[   98.121754][ T8787]  bus_add_driver+0x208/0x4fc
[   98.121762][ T8787]  driver_register+0x220/0x30c
[   98.121767][ T8787]  __platform_driver_register+0x6c/0x80
[   98.121774][ T8787]  vidtv_bridge_init+0x34/0x5c
[   98.121783][ T8787]  do_one_initcall+0x274/0xc20
[   98.121792][ T8787]  do_initcall_level+0x128/0x1c4
[   98.121802][ T8787]  do_initcalls+0x70/0xd0
[   98.121809][ T8787]  do_basic_setup+0x7c/0x90
[   98.121815][ T8787]  kernel_init_freeable+0x268/0x3a8
[   98.121822][ T8787]  kernel_init+0x24/0x1dc
[   98.121829][ T8787]  ret_from_fork+0x10/0x20
[   98.121835][ T8787] 
[   98.121837][ T8787] Freed by task 8787:
[   98.121841][ T8787]  kasan_save_track+0x40/0x78
[   98.121848][ T8787]  kasan_save_free_info+0x58/0x70
[   98.121856][ T8787]  __kasan_slab_free+0x74/0xa4
[   98.121863][ T8787]  kfree+0x188/0x690
[   98.121869][ T8787]  dvb_device_put+0x64/0xd0
[   98.121877][ T8787]  dvb_generic_release+0xec/0x154
[   98.121885][ T8787]  dvb_frontend_release+0x114/0x414
[   98.121892][ T8787]  __fput+0x340/0x744
[   98.121897][ T8787]  ____fput+0x20/0x30
[   98.121903][ T8787]  task_work_run+0x1c4/0x254
[   98.121910][ T8787]  get_signal+0xf30/0x1094
[   98.121916][ T8787]  arch_do_signal_or_restart+0x290/0x43a0
[   98.121924][ T8787]  exit_to_user_mode_loop+0x70/0x17c
[   98.121930][ T8787]  el0_svc+0x18c/0x260
[   98.121936][ T8787]  el0t_64_sync_handler+0x48/0x148
[   98.121941][ T8787]  el0t_64_sync+0x198/0x19c
[   98.121949][ T8787] 
[   98.121950][ T8787] The buggy address belongs to the object at ffff0000cc5eb800
[   98.121950][ T8787]  which belongs to the cache kmalloc-256 of size 256
[   98.121956][ T8787] The buggy address is located 60 bytes inside of
[   98.121956][ T8787]  freed 256-byte region [ffff0000cc5eb800, ffff0000cc5eb900)
[   98.121964][ T8787] 
[   98.121965][ T8787] The buggy address belongs to the physical page:
[   98.121969][ T8787] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c5ea
[   98.121977][ T8787] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   98.121983][ T8787] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[   98.121991][ T8787] page_type: f5(slab)
[   98.121997][ T8787] raw: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122
[   98.122003][ T8787] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[   98.122009][ T8787] head: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122
[   98.122015][ T8787] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[   98.122020][ T8787] head: 05ffc00000000001 fffffdffc3317a81 00000000ffffffff 00000000ffffffff
[   98.122026][ T8787] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[   98.122029][ T8787] page dumped because: kasan: bad access detected
[   98.122032][ T8787] 
[   98.122034][ T8787] Memory state around the buggy address:
[   98.122038][ T8787]  ffff0000cc5eb700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   98.122042][ T8787]  ffff0000cc5eb780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   98.122047][ T8787] >ffff0000cc5eb800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   98.122050][ T8787]                                         ^
[   98.122054][ T8787]  ffff0000cc5eb880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   98.122058][ T8787]  ffff0000cc5eb900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   98.122061][ T8787] ==================================================================
[   98.124810][ T8787] Disabling lock debugging due to kernel taint
[   98.354016][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.7.854'.
[   98.468355][ T8793] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   98.470032][ T8794] gretap1: entered allmulticast mode
[   98.498700][ T8774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.520118][ T7443] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.846566][ T7838] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.846602][ T7838] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.926488][ T7838] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.926525][ T7838] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.016898][ T7838] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.016931][ T7838] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.086434][ T7838] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.086471][ T7838] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.233128][ T7838] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.270389][ T7838] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.279820][ T4393] 8021q: adding VLAN 0 to HW filter on device eth20
[   99.342034][ T7838] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.369395][ T4393] 8021q: adding VLAN 0 to HW filter on device eth21
[   99.400099][ T7838] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.564863][ T7838] bridge_slave_1: left allmulticast mode
[   99.564895][ T7838] bridge_slave_1: left promiscuous mode
[   99.564979][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.567392][ T7838] bridge_slave_0: left allmulticast mode
[   99.567402][ T7838] bridge_slave_0: left promiscuous mode
[   99.567453][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.744820][ T7838] bridge_slave_1: left allmulticast mode
[   99.744849][ T7838] bridge_slave_1: left promiscuous mode
[   99.744917][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.747318][ T7838] bridge_slave_0: left allmulticast mode
[   99.747328][ T7838] bridge_slave_0: left promiscuous mode
[   99.747378][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.026156][ T7838] team0: Port device bridge1 removed
[  100.067875][ T7838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.085984][ T7838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.125484][ T7838] bond0 (unregistering): Released all slaves
[  100.236748][ T7838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.285894][ T7838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.295999][ T7838] bond0 (unregistering): Released all slaves
[  100.298936][ T7838] bond1 (unregistering): Released all slaves
[  100.301149][ T4393] 8021q: adding VLAN 0 to HW filter on device eth22
[  100.409018][ T4393] 8021q: adding VLAN 0 to HW filter on device eth23
[  100.549816][ T4393] 8021q: adding VLAN 0 to HW filter on device eth24
[  100.642218][ T4393] 8021q: adding VLAN 0 to HW filter on device eth25
[  100.752517][ T4393] 8021q: adding VLAN 0 to HW filter on device eth26
[  100.809398][ T7838] hsr_slave_0: left promiscuous mode
[  100.810671][ T7838] hsr_slave_1: left promiscuous mode
[  100.812018][ T7838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.813476][ T7838] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.815135][ T7838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.816553][ T7838] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.819701][ T7838] hsr_slave_0: left promiscuous mode
[  100.820885][ T7838] hsr_slave_1: left promiscuous mode
[  100.822041][ T7838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.823441][ T7838] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.825428][ T7838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.826887][ T7838] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.832521][ T7838] veth1_macvtap: left promiscuous mode
[  100.833540][ T7838] veth0_macvtap: left promiscuous mode
[  100.834582][ T7838] veth1_vlan: left promiscuous mode
[  100.839714][ T7838] veth0_vlan: left promiscuous mode
[  100.841136][ T7838] veth1_macvtap: left promiscuous mode
[  100.842208][ T7838] veth0_macvtap: left promiscuous mode
[  100.843240][ T7838] veth1_vlan: left promiscuous mode
[  100.844255][ T7838] veth0_vlan: left promiscuous mode
[  100.940251][ T7838] team0 (unregistering): Port device team_slave_1 removed
[  100.942948][ T7838] team0 (unregistering): Port device team_slave_0 removed
[  101.028601][ T7838] team0 (unregistering): Port device team_slave_1 removed
[  101.030983][ T7838] team0 (unregistering): Port device team_slave_0 removed
[  101.069062][ T4393] 8021q: adding VLAN 0 to HW filter on device eth27
[  101.726633][ T7838] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.796691][ T7838] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.866355][ T7838] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.936505][ T7838] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.254829][ T7838] bridge_slave_1: left allmulticast mode
[  102.254858][ T7838] bridge_slave_1: left promiscuous mode
[  102.254932][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.257293][ T7838] bridge_slave_0: left allmulticast mode
[  102.257303][ T7838] bridge_slave_0: left promiscuous mode
[  102.257360][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.407086][ T7838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.426407][ T7838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.465487][ T7838] bond0 (unregistering): Released all slaves
[  102.554504][ T4393] 8021q: adding VLAN 0 to HW filter on device eth28
[  102.710120][ T4393] 8021q: adding VLAN 0 to HW filter on device eth30
[  102.778488][ T7838] hsr_slave_0: left promiscuous mode
[  102.779745][ T7838] hsr_slave_1: left promiscuous mode
[  102.779947][ T7838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.779958][ T7838] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.781082][ T7838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.781093][ T7838] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.786916][ T7838] veth1_macvtap: left promiscuous mode
[  102.786942][ T7838] veth0_macvtap: left promiscuous mode
[  102.786969][ T7838] veth1_vlan: left promiscuous mode
[  102.786989][ T7838] veth0_vlan: left promiscuous mode
[  102.864446][ T7838] team0 (unregistering): Port device team_slave_1 removed
[  102.867477][ T7838] team0 (unregistering): Port device team_slave_0 removed
[  102.904821][ T4393] 8021q: adding VLAN 0 to HW filter on device eth29
[  103.002286][ T4393] 8021q: adding VLAN 0 to HW filter on device eth31