last executing test programs:

21.335094026s ago: executing program 3 (id=128):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x800, 0x0)
ioctl$DVB_DVR_DMX_QUERYBUF(r1, 0xc0186f3d, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x3, 0x33c, 0x4, 0x5}) (async)
r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0)
preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x0, 0xfffffffe)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd07e}, [@map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)

21.265090662s ago: executing program 3 (id=130):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0)

21.263744484s ago: executing program 3 (id=132):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0xffff, 0x24040885, 0x0, {0x3}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000006c0)={'gre0\x00', &(0x7f00000005c0)={'ip_vti0\x00', <r5=>0x0, 0x700, 0x8000, 0x5, 0x9, {{0x29, 0x4, 0x2, 0x4, 0xa4, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0xa010102, @empty, {[@timestamp={0x44, 0xc, 0x6b, 0x0, 0xb, [0xa59, 0x5]}, @end, @rr={0x7, 0xb, 0x78, [@broadcast, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0xdd, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x7fffffff}, {@private=0xa010100}, {@multicast1, 0xffffff10}]}, @rr={0x7, 0x27, 0xbc, [@multicast1, @multicast2, @multicast2, @private=0xa010100, @local, @multicast2, @broadcast, @private=0xa010102, @broadcast]}, @generic={0x89, 0xf, "5757a8c725180776a733f21234"}, @ssrr={0x89, 0x23, 0x84, [@private=0xa010102, @multicast2, @multicast2, @multicast2, @rand_addr=0x64010100, @local, @rand_addr=0x64010101, @remote]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xa, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r7, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r7, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=""/61, 0x3d}, 0x8}], 0x1, 0x2, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet(r6, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x6c, 0x67, 0x0, 0xfc, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0x4, 0x6, 0x0, 0x0, {[@md5sig={0x13, 0x12, "582f14ad946483539d8c1c5ff19c826f"}, @exp_smc={0xfe, 0x6}, @eol, @timestamp={0x8, 0xa, 0xfffffff8, 0x7f}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0xed8b, 0x8}, @exp_fastopen={0xfe, 0x12, 0xf989, "bf137734c2c7576ce13bbc8c0200"}]}}}}}}}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r9, 0x1)
r10 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r10, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}], 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}})
r11 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r12=>0x0}, &(0x7f0000000200)=0x5)
setresuid(0x0, r12, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x4, &(0x7f0000000300))

21.136048403s ago: executing program 3 (id=133):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000008c0)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@grpjquota}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@nolazytime}]}, 0xfb, 0x47f, &(0x7f0000000300)="$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")
lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', &(0x7f0000000340)='^@-!#:,(&\x00', 0xa, 0x1)
syz_io_uring_setup(0x82e, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ac0fc5358000000060a0b0000000000000000020000002c00048028000180080001006e6174001c0002800800054000000003080002407ffffffe08000140000000010900010073797a30000000000900020073140000001100010000000000000000000000000a0000000000000000005238c6ccdac21f21e178b49b79"], 0x80}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

20.7311034s ago: executing program 3 (id=139):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmmsg(r0, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000003980)=[{0x0}, {&(0x7f0000003600)=""/220, 0xdc}], 0x2}, 0x9}], 0x1, 0x40002040, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010100}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="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", 0x26c}, {&(0x7f0000000780)="b0fef28adda62f55a0000000000000001abe0a88f674cacbad16b072c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb2894622", 0x6d}], 0x2}, 0x8000)
recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0)
close(r1)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000040)="1c066bcf69334b9cc80000003b9b301f00"/28, 0x1c)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0)
setns(0xc9, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000023c0)={'batadv0\x00', <r8=>0x0})
sendmmsg$inet(r7, &(0x7f0000002440)=[{{&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000000200)="6ddf61c4029e59b00e46fa87157d10fcf08971474696664e1aa1794783fafea0cbaff844ebed778af9788c6acdb9aba2fba6a32492b51b7a7ca5c34a9b40c250082ca65f1d5ac4548d33f20291917f2badd805bc478a329fe784c1c6c43cb116f9f61691bda80793580dc6b631c9c41453ffd2de95e381665380bbfc7b5f6a5a3c5a5123b3b703b793a3ae514deab77f26a0bdb7d26b97c1bea060760bf022ba65b4a9b17b50479ac28e40f4d80056fa6439a7124abe172dd9e6bcb4018ea52a6e21be1a853111684a064d970a8fb54726514f09454de70bcdc35bcacda3d6edca36d3b21def377ef0184c4d1f73", 0xee}, {&(0x7f0000000300)="5c5656e65e8aa5f5b013ed201d0d80595bd522fcb947cd125b717f2a9d9a1b7a9576c5c840afd18b4e4595e9e916d2277e1a62d15d0d18fc6f9cf701a1c08f4e5404c33276311da103c5cefefcc67884ecd0388233ab155494b94c9c2bc0479a", 0x60}, {&(0x7f0000000380)="9e133dc14bafada537372af06906aa5c4fda860aad4ae8a8dc4f7c3a4457eb23", 0x20}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="f0920930ef7da124cc3cbedfee9f46eda255f38ee4ecf3e2c82c7489c179293119e3c1c6e8dc1918c556b7ba66a23bc981cddc9036d5de801209659e78be87c7fb61e33a07c7530bda8908f22a", 0x4d}, {&(0x7f0000001dc0)="61ddbf21669a4447134794c99f8cdbb75857bfe62eb25df35c77690371d55f0656b1468931d21e94bddafcd1e34b776a784d0caf6270ac118ac03549c7daa9bbfe0a8de59ad6b2f25f74fb375d821696f6da71789c66a96185bf8e68a211cc4b40f037ce4ea382363f4be47531344e640e646c555f85ea79361a54c7280f", 0x7e}], 0x6, &(0x7f0000001ec0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}}, {{&(0x7f0000001f00)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002340)=[{&(0x7f0000001f40)="40c60b8711e9f9fb1a7be6b466947aff2474618d801bd632d5981ccda19999be64818356c78ae8d86db4c9f2eedac0bd7b5301afe982f19cf6d37328d0fcb86f01ef653988a9815271ce0176d2337644cef94400ac0b0093c785d04abbdee88f9400edb7f0cb0b015bd11053e60221a0db8c387fcff1b40aed2056256b95a923bf0065a7d91a622a1a8be96db546ac9777b0875ac341f5b836cb9602ee707e01593565270a", 0xa5}, {&(0x7f0000002000)="fa331b994640cebfa82290128a1143f14784041b6c7ec02812565c", 0x1b}, {&(0x7f0000002040)="57fd7b7a26e9dd9a70279b70c12abce4", 0x10}, {&(0x7f0000002080)="7e89e85f025ed61365581683811b28dbdf33de741505ecc4b14965990a70f0158131d8f67b6173aa4a2783beba0d802d86becf0ee636ea3640616e5c261d99a58898ec3c335f603e541fe460231901e0ae6d5b46877578bd321812c8d305dc0b6b87dfd9abb0c070d69248f61c5cd06ad79afaef30d9e1bc9ead248f3533a5dd0d7cffc215a6eb7b04698182b52221f2d0552470b86a77874659829e5490f56dce1f00e6f032101e7cb105bc8dd1a3aa340ef87b5e238e10b2e32ed34da324a444bc0251760d957490c84db07afc5b5b719518cfcb00b4d738b5783170c3", 0xde}, {&(0x7f0000002180)="fb16fb297ad586fc2d6a9b93036ef0070365f82ba026c3579e7064c1daf68957327e419d819fd9f8641ea126e7f7c23e85df9aa68b90a932f916f18053ff74524aac2b81c4675d71c2d325cf5338cbbe3d2fe28461fc495c3c86f8b9f26a03441cb4aa805fd351e0a1e62dea8fbfab71d4d8dd7301ae03c18a5e3045984a352f127b", 0x82}, {&(0x7f0000002240)="d4fea7ac4e2d1c9b2deb6a385be96a6dc9e1540a758a2dcca74f39ed2c36b8d51aa7c726bf0d88314d21c4c2e3943d14cb5fdc92e99d59e8f7ba0f9df7be0976cef90b9c200c862dfea936c00ddba7adae641f2c9b87ae2ac7761e5ddef533ce247d76ec6bd7549f15f3a5ba8f35c7bbdb8fb8907458b10ec3e02cbc50f6b85b95b4c4efa6433c721eaeead5e2191cca5562bf7cfd5b509df18f462c6efaa24f5f2728fe778ac7ebf58272c5e7c4ed34f84f6153285f97df1dc25940744f18a8e4c50e59043b569c4e328fec90ecf9416d89ed834de469c09bbcd0d9a9", 0xdd}], 0x6, &(0x7f0000002400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @loopback}}}], 0x20}}], 0x2, 0x10)
recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

20.016108758s ago: executing program 3 (id=148):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000400000090001280080001007674690084000280080006000400000008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0)
setsockopt$inet6_int(r0, 0x29, 0x74, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x8}}}}, ["", "", "", ""]}, 0x20}}, 0x8c0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x1}, 0x90)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x2, @pix={0x9, 0x2, 0x35303553, 0x1, 0xfffffffe, 0xfffffffd, 0x9, 0x43, 0x1, 0x2, 0x0, 0x5}})

19.972228137s ago: executing program 32 (id=148):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000400000090001280080001007674690084000280080006000400000008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0)
setsockopt$inet6_int(r0, 0x29, 0x74, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x8}}}}, ["", "", "", ""]}, 0x20}}, 0x8c0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x1}, 0x90)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x2, @pix={0x9, 0x2, 0x35303553, 0x1, 0xfffffffe, 0xfffffffd, 0x9, 0x43, 0x1, 0x2, 0x0, 0x5}})

7.870623586s ago: executing program 0 (id=275):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
umount2(&(0x7f0000000040)='.\x00', 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000000104050000000000009490e328a600000001000000278039e20465151bf17e54e4aca3b4025afa4599224b52f0beb6dd850933e393c86201f69f56ee9f408db33dd0cf519a95db5df1b92ed678e70129429be9b5984c6552fef25ffc2093bccc8382c88811951827a3df1ea1701ed71cd06e66"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
r6 = socket$inet6(0xa, 0x2, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x1d, 0x48, &(0x7f0000000040)="32cb744add822fff1e755ef1afcf30b3c99795503628aa3678fc540959", &(0x7f0000000080)=""/72, 0xc00, 0x0, 0xf4, 0x7c, &(0x7f00000001c0)="4b0ef553e524d0af2424f0e645c90fbb0b2e5c3b7dbacaf24d6fb07ea6994fd16219ebb4d2c3659758b03a1f2fc4521998dc093f2cd3f9aac1e8f5fb221ec94eaa49f71035fbd62342a0d441250f7cdebb60644f69e7cef75ed8a5f69e6e714f26f7151c752bd2f3b39adaa873320be2bcb7c4f722548cdc910f2840fd23c2fea1b0ba1b5a55e8326cfeff0cf6650e8e9242549c76f31fca484109cadab5f62e3dcf07afd51a6bf39fc78bc50dce83cecba5f6e01aca424205ae8d95594460d6e5c5d32919bfa1670d746edf799ab4fb2c57748c5501c3aede944ec55ad238d49fd726b1191ea17d938cf2cfe007a621cb104a35", &(0x7f0000000340)="d01d0d55b9ed1fe464a13c3d2b602a96c7efa2ba45f79c7732c23517a8f4923d94c017087aa43a44907938bcef13607682d87136aa5e9cfde70b98ebdd6c76b7fcc087fa1dcdae373a22d3f0a129b1e882962c6eef0c3bb1f6036cba68724178dcc8ec7c2717c52db4a72a9761268b0774fc240d690b29e37f369780", 0x2, 0x0, 0xffffff0e}, 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r8, @ANYBLOB="080004000001"], 0x4c}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140))
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001480)=ANY=[@ANYRESOCT=r3, @ANYBLOB="5c547a98b137a965ecf2fd432788727da205dea13c7de4cc2f2afd64fa7591892b4afb25257a61e93d348a", @ANYRES64=r2, @ANYRES32=r1, @ANYBLOB="04004600050800517404000080100051800c00008008e2a70004000000000000000000000000a3"], 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x20004800)

7.819455759s ago: executing program 0 (id=277):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000380)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
fallocate(r0, 0x0, 0x8, 0x8000)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000a255f2e4c466"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4000855}, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

6.768950446s ago: executing program 0 (id=283):
r0 = socket$inet(0x2, 0x801, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x10001, 0xc, 0x4c032, 0xffffffffffffffff, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00')
ioctl$KDSKBLED(r1, 0xc0686611, 0x20000081)
sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)
syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x46]}, 0x2b)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r4)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x0, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xd, 0xf, 0x4, 0xffff, 0x2, 0x3, 0x10007f, 0x20000026, 0x4d, 0x6, 0x3, 0x9, 0x2, 0x100, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffffa8, 0x7, 0x3, 0x9, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x201, 0x3e, 0x10000, 0x6, 0x6, 0x9, 0x5, 0x4, 0x8, 0xe, 0x80, 0x1, 0xd, 0x6, 0x8, 0x4, 0x1, 0x2], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e4, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0x4000ff, 0x7fff, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x3ff, 0xffff, 0x46, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x6, 0x103], [0x3, 0xa, 0x4, 0x5, 0xffffffff, 0x100, 0x8d2, 0x9, 0x7, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x1ff, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x6000, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9, 0x7, 0xa9, 0x5, 0x3, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0xff, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x10000, 0xfffffff7, 0x2, 0x5, 0x1, 0xfffff800, 0x7, 0xe0a7, 0x6, 0x96, 0x381f, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0x6, 0x10080, 0x3, 0x80, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x80, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008000000000000000600000873011c000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x21880, 0x2c, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r6, 0x0, 0x6, 0x6)

5.617253278s ago: executing program 0 (id=289):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0)
pread64(r2, &(0x7f0000000140)=""/110, 0x6e, 0x7)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010025bd010001000000000000000800040007000000"], 0x1c}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3ctvVNUfAPDvvX3S/n62EBPFhZAYA4nS0gKGGBPp3hB8/AOVFkIolLQ1sUDCkOjSuHFh4sqF+F8oiTvjwq0L94aEGMNCDJExd3qnTKcz0+c8mPl8kqH31Xu+t/Tbc+6Zc+4E0LOOZv+kEYcj4kYSMVaxrz/ynUfXjnv01+2L2SuJYvHDP5O4fScpVJ4ryb+O5t/871gkv6YRh/o2l7u8evPq7MLC/FK+Prly7cbk8urNE1euzV6evzx/ffqt6bNnTp85O3Vy79dX5btvniRT3/9+Polz8TSPLbuu6uOG9lRyVvbRKK55XLk9+7me3eO5O8XfY+Xfk2eS6g10rEt53g5ExEsxFn0V/5tj8fn7bQ0OaKpiEuU6Cug5SZ38/3mm0V+G4abFA7RKuR1QvrevdR+8WdrkVgnQCg9n1jqk1nJ/ICLK+d+f950Nl/oGRh4lG/p5kojYW8/cmqyMX346/1n2ijr9cEBzFO6We7mr6/+klJvjMVxaG3mUbsz/QrGY5i2BbPsHuyy/un9e/kPrFO5GxMt5/T8Y287/NM/dcv5/vMvy5T8AAAAAAADsn/szEfFmrfF/6fr4n8Ea439GI+LcPpS/9ft/6YN8Iak6dHAfioee9nAm4p2a43/Xx/iO9+Vr/y+NB7iVXLqyMH8yIl6IiOMxMJStT1Wdt3KE8IkvDn1dr/zK8X/ZKyu/PBYwP9OD/qqJuHOzK7N7vW4g4uHdiFdK43+P5Fs2jv/J6v+kRv2f5feNbZZx6PV7F+rt2zr/gWYpfhtxrGb9/6y5nTR+PsdkqT0wWW4VbPbqrS9/qFd+df434RKBOrL6f6Rx/g8llc/rWd7Z+bOb9FOr/cV6+3fb/h9MPuqLik6AT2dXVpamIgaT9zZvn95ZzNCt8nw4Enm+ZPl//LXG/X/r7f+KPDwQEYVtlDe8xX7tf2ifLP/nGtf/4xvr/50vTN8b/7Fe+Re2Vf+fLtXpx/Mt+v+g0ubncWw3QdsSLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA859KI+F8k6cT6cppOTESMRsSLMZIuLC6vvHFp8ZPrc9m+iPEYSMuf9Du2tp6UP/9/vGJ9umr9VEQcjIiv+g6U1icuLi7MtfviAQAAAAAAAAAAAAAAAAAAoEOMlub8F4eq5/9n/uhrd3RA0/XnX+U79J7+XX9ncWhfAwFabvf5DzzHsnv+HeT/QDNjAdqgfv4/flIsaWk4QAtp/0Pv2mX+e7sAuoD6H3rVNvv0hpsdB9AO6n8AAAAAAOgqB4/c/y2JiMLbB0qvzGC+z2B/6G5puwMA2sYYXuhd/YvtjgBoF/f4QLK+9E/Nyf71R/8nzQkIAAAAAAAAAAAAANjk2GHz/6FXNZ7/b2w/dLMG8/9rJb/HBUAXqf/RH+p+6Hbu8YGtanvz/wEAAAAAAAAAAACgAwzfvDq7sDC/tLz6/C282xlh7GyhMNsRYexgoXgnovExT5tT+kBEdMoPYWk5i6ZVZZUfwdHGS27z3yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDdfwEAAP//+sobJQ==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) (async)
getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x6, 0x6, 0x0, 0x3aa6, 0x8, 0x2, 0x9, 0x6}, &(0x7f0000000040)={0x1, 0x5368, 0x9, 0x0, 0x4, 0x5, 0x4, 0xc}, &(0x7f0000000080)={0xd, 0x3cae, 0xfefffffffffffffa, 0x7, 0x9, 0x9, 0x400, 0x1}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000000)={0x6, 0x6, 0x0, 0x3aa6, 0x8, 0x2, 0x9, 0x6}, &(0x7f0000000040)={0x1, 0x5368, 0x9, 0x0, 0x4, 0x5, 0x4, 0xc}, &(0x7f0000000080)={0xd, 0x3cae, 0xfefffffffffffffa, 0x7, 0x9, 0x9, 0x400, 0x1}, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
pipe2(&(0x7f0000001cc0), 0x800) (async)
pipe2(&(0x7f0000001cc0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x800)
gettid() (async)
r8 = gettid()
mq_notify(r7, &(0x7f0000000240)={0x0, 0x38, 0x1, @tid=r8})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c76f47792ad6215887d70323030302e752c63616368653d30"])
sendmmsg$unix(r5, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x511}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x511}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

5.393737083s ago: executing program 0 (id=294):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000380)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
fallocate(r0, 0x0, 0x8, 0x8000)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000a255f2e4c466"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4000855}, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

4.936631714s ago: executing program 0 (id=298):
r0 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20044010) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d"], 0x44}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40800}], 0x1, 0x20004000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2)

4.86831242s ago: executing program 33 (id=298):
r0 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20044010) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d"], 0x44}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40800}], 0x1, 0x20004000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2)

2.786157131s ago: executing program 4 (id=342):
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x29}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x0, 0x3, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xf}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f0000004180)=[{{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000740)=""/234, 0xea}, {&(0x7f0000000840)=""/165, 0xa5}, {&(0x7f0000000900)=""/129, 0x81}], 0x3}, 0xfffffff8}, {{&(0x7f0000000a00)=@alg, 0x80, &(0x7f0000003440)=[{&(0x7f0000000a80)=""/43, 0x2b}, {&(0x7f0000000ac0)=""/69, 0x45}, {&(0x7f0000000c00)=""/244, 0xf4}, {&(0x7f0000000dc0)=""/156, 0x9c}, {&(0x7f0000000e80)=""/152, 0x98}, {&(0x7f0000000f40)=""/34, 0x22}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/75, 0x4b}, {&(0x7f0000003340)=""/226, 0xe2}], 0x9}, 0x8000}, {{&(0x7f0000003500)=@ll, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003580)=""/11, 0xb}, {&(0x7f00000035c0)}, {&(0x7f0000003600)=""/204, 0xcc}, {&(0x7f0000003700)}, {&(0x7f0000003740)=""/95, 0x5f}], 0x5, &(0x7f0000003840)=""/7, 0x7}, 0x5}, {{&(0x7f0000003880)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000003980)=[{&(0x7f0000003900)=""/112, 0x70}], 0x1}, 0x7ff}, {{&(0x7f00000039c0)=@nfc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003a40)=""/150, 0x96}, {&(0x7f0000003b00)=""/227, 0xe3}, {&(0x7f0000003c00)}, {&(0x7f0000003c40)=""/245, 0xf5}, {&(0x7f0000003d40)=""/77, 0x4d}, {&(0x7f0000003dc0)=""/230, 0xe6}, {&(0x7f0000003ec0)=""/248, 0xf8}], 0x7, &(0x7f0000004040)=""/51, 0x33}, 0x8}, {{&(0x7f0000004080)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004100)=""/5, 0x5}], 0x1}, 0x2}], 0x6, 0x40000000, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
close(r4)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000300)="0207000902000000e4a17c45c8d260c9", 0x10}, {&(0x7f00000003c0)="ad", 0x1}], 0x2}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'ipvlan0\x00', @multicast})

2.159929631s ago: executing program 6 (id=351):
r0 = socket(0x2b, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
memfd_secret(0x80000)
close_range(r1, 0xffffffffffffffff, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x7ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x179b01, 0x100)
read$snapshot(r2, &(0x7f0000000280)=""/215, 0xd7)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r3, <r4=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000003c0)='%-5lx  \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8e, r4}, 0x38)

2.159565516s ago: executing program 6 (id=352):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NFC_CMD_ENABLE_SE(r0, 0x0, 0x20040080)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x804)

2.156424153s ago: executing program 6 (id=353):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0xc, 0x6, 0x5c}, 0x2c)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x48, r5, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f00000001c0)='syzkaller\x00', 0xc, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe9c}, 0x36)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0x9a, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0)

1.734640612s ago: executing program 2 (id=359):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
prctl$PR_MCE_KILL_GET(0x22)

1.734122044s ago: executing program 4 (id=360):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000006b0afcff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff8500000001000000150007000000000007000000cc0f0000bf01000000000000b702000004000000b703000000001000b704000000000000b705000000000000850000001c000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.676386066s ago: executing program 1 (id=361):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xba}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r4, @ANYBLOB="0c00990001000080730000000600f700040400000a000600"], 0x3c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='highspeed', 0x9)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
pwritev2(r6, 0x0, 0x0, 0x5c, 0x4, 0x2)
sendto$inet(r5, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0xffffffffffffffff, 0x0)

1.67582937s ago: executing program 2 (id=362):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480))
socket(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x141880, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x1f, 0x3e7ffffffc, 0x0, 0x10}])
socket$igmp(0x2, 0x3, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @remote}, @dest_unreach={0x3, 0xd, 0x0, 0x0, 0x2d, 0x0, {0x12, 0x4, 0x1, 0x8, 0x7fff, 0x64, 0x0, 0xa, 0xc, 0x1, @private=0xa010100, @broadcast, {[@generic={0x7, 0xf, "8c76348a16363cb90d478100f0"}, @cipso={0x86, 0x25, 0x1, [{0x1, 0x12, "e2010793e29d3806f3a15423b0d055fb"}, {0x6, 0xd, "901f5aade8e67c9f828f6c"}]}]}}, "c1df1d2ce86d292f"}}}}}, 0x0)

1.675220912s ago: executing program 4 (id=363):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NFC_CMD_ENABLE_SE(r0, 0x0, 0x20040080)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x804)

1.674831827s ago: executing program 5 (id=364):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00'], 0x48)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
clock_gettime(0x0, &(0x7f0000000100))
clock_settime(0x6, &(0x7f0000000440)={0x0, 0x3938700})
bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
r1 = fsopen(&(0x7f00000003c0)='aufs\x00', 0x1)
vmsplice(r1, &(0x7f00000005c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000340), r2)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r3 = socket(0x2, 0x805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000180)=0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e23, 0x81, @empty, 0x80000000}}}, 0x90)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0x0, 0x4, r5}, 0x10)
getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, &(0x7f00000000c0))
r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f00000001c0)={0xa, @raw_data="eb7ac6fbc0da1a972cb6989245993b6964144750c3a1932156f56a520e41e805a0c2633222afa588f78241f7ca369fef3635ef4c04b80db399fb831fa01015094ffef848cfbfc69ce20cda933880b9b2604576bf46e3887e9b477d012b681991f3bcf0325ccbaa661acb2045136193a0920c4d770f8b6ed79e0bc5a004324834e407db1215f160503c479f753750d7d906913b3f01e4c375424f324e43a40a69479ac2e203f29d1b9ef46005b837509900"})
read$FUSE(0xffffffffffffffff, &(0x7f00000028c0)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2002010}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x80c0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000220000000600000008000300", @ANYRES32=r8, @ANYBLOB="08001780040006001c00e70067322bae67c209749a9a1039414a07298b628220fb267be10800050006000000"], 0x48}, 0x1, 0x0, 0x0, 0x4040840}, 0x0)
write$P9_RSTATu(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="4c0000007d01000000360001000000000002020000000800000000f70000000000010000008004000000050000000000000001003a0000000002005d2f010028", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=r7], 0x4c)

1.637124652s ago: executing program 4 (id=365):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2}, 0x10)
socket(0x10, 0x803, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001340)=[0x0], 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0}}, 0x10) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x7101})
socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000480), 0xfffffe7e) (async, rerun: 64)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 64)
bind$inet6(r5, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async)
socket$inet6(0xa, 0x2, 0x3a)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x7b) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
pread64(r6, &(0x7f0000000280)=""/195, 0xc3, 0x100)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, 0x0)
mount(0x0, 0x0, &(0x7f00000001c0)='selinuxfs\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
chdir(0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
close_range(r3, 0xffffffffffffffff, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async)
sendto$inet(r2, &(0x7f00000004c0)="c7f14b3fd1b5ce0987c5ee4989530cf0c4194bf0a1a29ff4f8a4834ea11147bc01488245fb3cbd59fb6ada1858d06b8ab8f6ed7bf744b01c8fabad3202a317a1dfe3d6bc8e2379aaf424f8c8501f65ee486bbdec1488b42a1a05b809de63108324d27f0ea34f7255cf24ec016121d10e320c0d8dcae7f2d5575358be65be19e819a2180bde5c50b4ca449a348a02fb7d3652e0c7e6ef7e1f3e66ff3db71a40b1b77acdc3c39845c3519ceab132783754358a8ced0f3eb943fb3aa00d834950e131c65435f7274f4720574b1300377c073c16e07e9f51286dbe9db01795752b5fc25f67fc3507995c8b5819746a3a434961cc01c773f6192a57952a648ce993f1656e3d0b08813b4acf61d8a876f32f8dec29db96139011016aeaa89ece241a07f70819dd12d430bafc1735efd3c358271681d7bca415259564b00801a1de31e6d7d8accb8dfa2173728faccfb598f9fafcd20027438d9a92cfe94a24b315d0dca655f4eb", 0x164, 0x8045, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x5a) (async)
shutdown(r2, 0x0)

812.615149ms ago: executing program 6 (id=366):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000380)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
fallocate(r0, 0x0, 0x8, 0x8000)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000a255f2e4c466"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b16000000000000000002008008300026192c0001800c0001007061796c6f6164001c0002800800024000000000080004400000001f08000340000000140900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a304ef7158e8296d61c2cdff7d1d9669f64cb635fa1de30cc2e7b91fdfc2328e1dadcc5c16cfd2baad32fa7894e7fab36a082facb58f1e7cb62d639a08c481904002fe8cc3917b7c8ee1308ebe0839f95913aef719c56cb62daa4f250e6d8e3f9a0b84e0560c6e81f0ae3a22bbeeb1a0d67ff4eadcd6cc1b30d71622351a28206a520796163b32e9852758dcd520412ba646a9fdbdfd292c75c7eac078ab47feea1474f9f459209cb4b344407a916d86fc844dfcf063eb7bbed61f3c4765730d2d2a38e4090fd416307309c1e3a57354b31d30bfed0910bd09d12d89d68f221e90cb34768d2e9a2e92581ab76444be1797335dbdcf1a3be"], 0x84}, 0x1, 0x0, 0x0, 0x4000855}, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

748.038658ms ago: executing program 5 (id=367):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000c0500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @rand_addr=0x64010106, @multicast, @private=0xa010102}}}}, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x200000, 0x0, 0x0, 0xbf, 0x0, 0x0}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_LISTEN={0x39, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe7, 0x0, 0x1})
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r6, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7c}, @void, @val={0xc, 0x99, {0x0, 0x15}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x800)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x7ff9}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x8, 0x30, 0x0, 0x2, 0x20, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3bf, '\x00', r8, r1, 0x3, 0x1, 0x1}, 0x50)
syz_io_uring_setup(0x5e01, &(0x7f0000000240)={0x0, 0x6ed8, 0x40, 0x0, 0x203}, &(0x7f00000002c0)=<r9=>0x0, &(0x7f0000000300), &(0x7f0000000340))
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000800"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYBLOB, @ANYRES16=r9, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

747.396531ms ago: executing program 2 (id=368):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f00000003c0), 0x1, 0x7c2, &(0x7f00000011c0)="$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")
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x100)
ioctl$FE_READ_BER(r0, 0x80046f46, &(0x7f0000000040)) (async)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) (async)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi2\x00', 0x400, 0x0)
ioctl$COMEDI_CANCEL(r1, 0x6407) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0xb, 0x4) (async)
getsockopt$MRT(r2, 0x0, 0xd0, 0x0, &(0x7f0000001080)) (async)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

630.008034ms ago: executing program 2 (id=369):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3a, 0x0, 0x4}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x10002, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002800038024000080040002800400078004000180080003"], 0xe8}, 0x1, 0x0, 0x0, 0x404c005}, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x10, 0x2, 0x4, "11014b786075bd8c380d00000000004b208954a5a0d855a54216a4000022b800", 0x42474752})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff28bd5d00f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000200200100000000000000000000000000020500090029000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3a, 0x0, 0x4}, 0x28) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000180), 0x10002, 0x2) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002800038024000080040002800400078004000180080003"], 0xe8}, 0x1, 0x0, 0x0, 0x404c005}, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x10, 0x2, 0x4, "11014b786075bd8c380d00000000004b208954a5a0d855a54216a4000022b800", 0x42474752}) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff28bd5d00f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000200200100000000000000000000000000020500090029000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) (async)

585.626531ms ago: executing program 1 (id=370):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

556.042661ms ago: executing program 5 (id=371):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x7, 0x0, 0x32315559, 0x8, 0xc, [{0x9, 0x4000008}, {0x3, 0x7}, {0x6c02412a, 0xd}, {0x6, 0x10000007}, {0x3, 0x3}, {0x2, 0x5}, {0x406, 0xffffffff}, {0xd, 0x3}], 0xcb, 0x9, 0x6, 0x0, 0x1}})
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000120001000007b71723f305ed77dc"], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x40000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080))

555.118869ms ago: executing program 4 (id=372):
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x24, &(0x7f00000001c0)="114fdd49c76b7286cd3c9597dcab322282c1dfeb31d638bcbe6432fde42f083f6440675098eab4baa419f8770f87e305556a4048db9f00000000fc5f5cd4a88f02e384630519d2bf0926926ba136f5de864241dfb8cd22f47c2d1e1cfdac52d8531a31ee0aae5a79380815939deff54345c14297101b8b42c40df8480882633f32212a56af2939e1563513e2c882b87bb751fc0e7b3159296ce91cda4e2f2b4997f6cbeda738d9667d8adcee", 0xac)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0xfffffef2, 0x0, 0xfffffd70, 0x0, 0x0, 0x300}, 0x2000488c)
close(r0)

553.831944ms ago: executing program 6 (id=373):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
prctl$PR_MCE_KILL_GET(0x22)

484.253324ms ago: executing program 5 (id=374):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x7, 0x3000000, 0x32315559, 0x8, 0xc, [{0x9, 0x4000008}, {0x3, 0x7}, {0x6c02412a, 0xd}, {0x6, 0x10000007}, {0x3, 0x3}, {0x2, 0x5}, {0x406, 0xffffffff}, {0xd, 0x3}], 0xcb, 0x9, 0x6, 0x0, 0x1}})

483.824255ms ago: executing program 1 (id=375):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000006b0afcff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff8500000001000000150007000000000007000000cc0f0000bf01000000000000b702000004000000b703000000003000b704000000000000b705000000000000850000001c000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

481.986289ms ago: executing program 5 (id=376):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x1010, r0, 0x8bca1000)

481.640097ms ago: executing program 4 (id=377):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0xc, 0x6, 0x5c}, 0x2c)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x48, r5, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f00000001c0)='syzkaller\x00', 0xc, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe9c}, 0x36)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0x9a, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0)

461.225317ms ago: executing program 1 (id=378):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa0028010}) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa0028010})
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005dfc00000000000000"], 0x0, 0xfc5f}, 0x28)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000001040)={0x0, 0x53, "8938314ade41b81cbc3c43bcfef2260d8160854783fdfeb24481f9bd0100fb6ebfd096d026a0053ec702055a7f832a7e6fe3361504af1266e97c26bd5072d4dc1b3903c79684ce59df0bbfb1df19a8dfd97863"}, &(0x7f0000000200)=0x5b)

453.158442ms ago: executing program 5 (id=379):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20400, 0xb6)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd, 0x0, <r1=>0x0})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@delalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@noquota}, {@usrquota}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nodelalloc}]}, 0x1, 0x49d, &(0x7f00000001c0)="$eJzs3M9vFFUcAPDvTH+BCEXEHyBqlZg0GltaUDl4UKOJMRiNesBjbQtpWKihxQgSKcZ4MjEkeiYejf4F3owJUU8mXI0HT4aEKBfAU83MztBlu0uBbtnS/XySbd/Mvtl5333zZt68t7sBdKyBiJiLiHsj4o+I6I+IpD7DQPXflUsnx69eOjmexPz8u/8keb7Ll06Ol1nz7bojNhQLg2lE+nlS3bjOzPETh8YqlcmjxfLw7OEPh2eOn3j2o8NjBycPTh4Z3bt3z+6RF54ffa4lcWZxXd7+6fSOba+/f+bN8f1nPvj1h6SIO+riaJWBLPB/53P1zz3V6p212caadNLdxoJwS7qqTTZ68vbfH12xUHn98dpnbS0csKKya1Nf86fn5oE1LHnn3MKpAOgg5YU+u/8tH3ei37FaXHy5egOUxX2leFSf6Y60yNNTd3/bSgMRsX/uv7PZI1ZoHAIAoNaX49/s642IT65+/0bW9+iPiHI86MH871/5303FHMrmiLgvIrZExP0RsTUiHijyPhQRDy+zPIv7P+mFZb7kDWX9vxeLua3r+39l7y82dxVLG/P4e5IDU5XJXdGXvyeD0dOXLY/cYB8/vXr+q2bP1fb/ske2/7IvWJTjQnfdAN3E2OxY3iltgYunI7Z3N4o/uTYTkETEtojYfmsvvalMTD393Y5mmRrHf/nsTe2hBfNM899m4c1l8c9FXfylpHZ+cmrR/OTwuqhM7hquHhWN/Pb7F2832//S9b+yLk5W/9fUf32WzUntfO1Ma/d/m8d/2pu8l88z9xbrPh6bnT06EtGb7MuXr1s/urBtuVzmz47/wZ2N2/+WYpss/kciIjuIH42IxyLi8aLsT0TEkxGx8wYx/vLK0vFH2qb6Px0xkdd/rKuuWXT819X/rSe6Dp37sdn+b67+92SJ3sFiTX7+W0Kj4mSni/oC3v47BwAAAHePNP8MfJIOXUun6dBQ9TP8W+OetDI9M/vMgeljRybi/Kbq+GdajnT1F+OhlanK5EgyV7xidXx0tBgrLsdLdxfjxl93rc+Xh8anKxNtjh063YYm7T/zd1e7SwessPUN14723vGCAG1QP4+eLiT7IuLUW+FkAGuV72tD5yrbf5P7/drvwQBrjOs/dK5G7f9U3bK5AFibXP+hc2n/0KHSn5exsbsCuNu5/kNHWs73+lcmUX7UaLWU584n2lgpvUseEhFlIm2a58/ilxpWw5t5O4mXih/HXC3lWZw4tmHFG0g7z0oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACt838AAAD//9ti2BI=")

391.631761ms ago: executing program 2 (id=380):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='1\n', 0x2)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000280))
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0)
write(r3, &(0x7f0000000200)='0\n', 0x2)
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'})
syz_emit_ethernet(0x7fa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450007ec123440004011907801020304080808081234567807d89078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000097000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000058c93f5d49185c8f7be1c3257ec3b1aeded377714a1b002cfd6c404403ad063bbf2b9b80f26c6d52ce436f0a5177ac42ccfdfb1d45ac8e6e1c1879cdb328042209fa2ba1ef7f17d9c744e93eedb39ddeed7b9d878e3fe24d4d8055b26ba281db2cb3ce1a6904fa6b3d5cdc09cdaf31fba261029a479a75b80cb0a5b159ccf4380191e6038ce07f888212493b30427b"], 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000c00)={0x1, {{0xa, 0x4e21, 0x6fbc, @mcast2, 0x4}}}, 0x88)
syz_emit_ethernet(0xdb, &(0x7f0000000500)={@local, @remote, @void, {@mpls_mc={0x8848, {[], @ipv6=@tipc_packet={0x5, 0x6, "572b88", 0xa5, 0x6, 0xfd, @empty, @private2, {[@routing={0x0, 0xa, 0x1, 0x6, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @mcast2]}, @dstopts={0x8, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x3302}, @pad1]}, @routing={0x3a, 0x2, 0x0, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x26}]}], @payload_conn={{{0x1d, 0x0, 0x1, 0x0, 0x1, 0x6, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xaad, 0x4, 0x4e22, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000600)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x1236, 0x4000, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x6c, 0x0, @opaque='\x00'/100}}}}}, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000700)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x1237, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x6c, 0x0, @opaque='\x00'/100}}}}}, 0x0)

372.955401ms ago: executing program 1 (id=381):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x44, 0xfffffffe}]}, 0x10)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000010)
prlimit64(0x0, 0x6, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000000cc0)="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", 0xc33}], 0x1}}], 0x1, 0x800)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) (async)
sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0}) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r6=>0x0}) (rerun: 32)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2100, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2100000020000000200012800800010068737200530002808adb5345", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB], 0x40}}, 0x0) (async, rerun: 32)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async, rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e610061610061"], 0x0, 0x58, 0x0, 0x1, 0xffffffff}, 0xffffffffffffffba)

358.215862ms ago: executing program 2 (id=382):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xba}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r4, @ANYBLOB="0c00990001000080730000000600f700040400000a000600"], 0x3c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='highspeed', 0x9)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40)
pwritev2(r6, 0x0, 0x0, 0x5c, 0x4, 0x2)
sendto$inet(r5, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

59.897258ms ago: executing program 6 (id=383):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, 0x3, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}]}}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x300}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@inode_readahead_blks}, {@noinit_itable}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x460, &(0x7f0000000dc0)="$eJzs3UtvG0UcAPD/rpOWvkgo5dEHECiIiEfSpAV64AAIpF6QkOBQjiFNq9K0QU2QaFXRgFA5on4C4IjEJ+AEFwScQFzhjpAq1AuFA1q09m7rPBzs2I5D/ftJ28zsjj3/2fHYszu2GkDfGsn/SSJ2RsQvETFUyy4tMFL7c+P6pem/rl+aTiLLXv8jqZb78/ql6bJo+bgdRWY0jUg/SmL/KvXOX7h4Zmp2duZ8kR9fOPvO+PyFi0+fPjt1aubUzLnJo0ePHJ547tnJZzrSzl15rPvenzuw99ibV1+dPn71re+/zOPdWRyvb0fNcNt1jsRIcU6ybPmxx9p+9s1lV106GehhILSkEhF5dw1Wx/9QVOJW5w3FKx/2NDigq7Isy7au2FspE4sZcBtLotcRAL1RftDn17/ltoHTj5679mLtAihv941iqx0ZiLQoM7js+raTRiLi+OLfn+ZbrHofAgCgs77O5z9PLZ3/DVaPpHFvXbk7i7Wh4Yi4KyJ2R8TdEbEnIu6JqJa9LyLub7H+kWX5lfOfn7atr2XNyed/zxdrW0vnf+XsL4YrRW5Xtf2DycnTszOHinMyGoNb8/zEGnV88/LPnzQ6Vj//y7e8/nIuWMTx+8CyG3Qnpham2mlzvWsfROwbWK39yc31vPzv3ojYt47nz8/Z6Se+ONDo+H+3fw0dWGfKPo94vNb/i7Gs/aVk7fXJ8TtidubQePmqWOmHH6+81qj+ttrfAXn/b6+u2a3s/8JwUr9eO996HVd+/bjhNc16X/9bkjeq6S3FvvemFhbOT0RsSRZX7p+89dgyX5bP2z96cPXxvzvin8+Kx+2PiPxF/EBEPBgRDxWxPxwRj0TEwTXa/91Lj769/vZ3V97+E6u+/zXq/9YTlTPfftWo/ub6/0g1NVrsaeb9r9kA2zl3AAAA8H+RVr8Dn6RjN9NpOjZW+w7/ntiezs7NLzx5cu7dcydq35UfjsG0vNM1VHc/dKK4N1zmJ5flD1fvG2dZlm2r5sem52a7taYONGdHg/Gf+63S6+iArmtpHS3pXhzAxvN7Tehfxj/0r2L8v9DrOICN5/Mf+tdq4/9yxI0ehAJsMJ//0L+Mf+hfxj/0L+Mf+lI7v+tfK7H7WLee+XZLVDZHGC0nIt0UYawvkW6OMIr/AmM4otnCl2OjAuv1OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBn/BsAAP//WL7pRA==")
r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r2 = dup(r1)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20)
connect$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x4, 0x2}, 0x20)
connect$unix(r4, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
write$binfmt_register(r3, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r5, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

0s ago: executing program 1 (id=384):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000380)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
fallocate(r0, 0x0, 0x8, 0x8000)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000a255f2e4c466"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4000855}, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts.
[   29.473070][ T4699] cgroup: Unknown subsys name 'net'
[   29.662885][ T4699] cgroup: Unknown subsys name 'cpuset'
[   29.664950][ T4699] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   29.812202][ T4699] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   31.392532][ T4725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   31.392875][ T4725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   31.393109][ T4725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   31.393250][ T4725] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   31.393386][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   31.394081][ T4725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   31.394189][ T4725] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   31.394356][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   31.394563][ T4725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   31.394892][ T4725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   31.395105][ T4725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   31.395675][ T4725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   31.400936][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   31.401180][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   31.401574][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   31.401805][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   31.410131][ T4713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   31.410339][ T4713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   31.410880][ T4727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   31.412848][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   31.420272][ T4724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   31.421230][ T4713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   31.421605][ T4724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   31.421900][ T4713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   31.422164][ T4713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   31.729797][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.731472][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.731578][ T4711] bridge_slave_0: entered allmulticast mode
[   31.732166][ T4711] bridge_slave_0: entered promiscuous mode
[   31.733704][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.733725][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.733775][ T4711] bridge_slave_1: entered allmulticast mode
[   31.734172][ T4711] bridge_slave_1: entered promiscuous mode
[   31.753931][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.755315][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.756691][ T4715] bridge_slave_0: entered allmulticast mode
[   31.758210][ T4715] bridge_slave_0: entered promiscuous mode
[   31.768951][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.774116][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.774171][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.774253][ T4715] bridge_slave_1: entered allmulticast mode
[   31.774702][ T4715] bridge_slave_1: entered promiscuous mode
[   31.781979][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.783056][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.790560][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.798166][ T4711] team0: Port device team_slave_0 added
[   31.799283][ T4711] team0: Port device team_slave_1 added
[   31.808691][ T4715] team0: Port device team_slave_0 added
[   31.809517][ T4715] team0: Port device team_slave_1 added
[   31.816114][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.816139][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.816167][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.833255][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.833278][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.833306][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.842183][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.843411][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.848291][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.859108][ T4711] hsr_slave_0: entered promiscuous mode
[   31.859461][ T4711] hsr_slave_1: entered promiscuous mode
[   31.861284][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.861293][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.861309][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.896601][ T4715] hsr_slave_0: entered promiscuous mode
[   31.896918][ T4715] hsr_slave_1: entered promiscuous mode
[   31.897109][ T4715] debugfs: 'hsr0' already exists in 'hsr'
[   31.897140][ T4715] Cannot create hsr debugfs directory
[   31.944960][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.946321][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.947580][ T4718] bridge_slave_0: entered allmulticast mode
[   31.949032][ T4718] bridge_slave_0: entered promiscuous mode
[   31.957146][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.957191][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.957253][ T4712] bridge_slave_0: entered allmulticast mode
[   31.957662][ T4712] bridge_slave_0: entered promiscuous mode
[   31.958709][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.958735][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.958785][ T4712] bridge_slave_1: entered allmulticast mode
[   31.959204][ T4712] bridge_slave_1: entered promiscuous mode
[   31.966725][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.967600][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.975716][ T4712] team0: Port device team_slave_0 added
[   31.976937][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.977011][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.977074][ T4718] bridge_slave_1: entered allmulticast mode
[   31.977479][ T4718] bridge_slave_1: entered promiscuous mode
[   31.986763][ T4712] team0: Port device team_slave_1 added
[   31.995717][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.009954][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.011463][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.012833][ T4719] bridge_slave_0: entered allmulticast mode
[   32.014367][ T4719] bridge_slave_0: entered promiscuous mode
[   32.017678][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.018994][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.020369][ T4719] bridge_slave_1: entered allmulticast mode
[   32.022021][ T4719] bridge_slave_1: entered promiscuous mode
[   32.023477][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.029032][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.029051][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.029076][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.042684][ T4718] team0: Port device team_slave_0 added
[   32.044755][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.044776][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.044801][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.050664][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.052331][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.052979][ T4718] team0: Port device team_slave_1 added
[   32.062382][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.062414][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.062428][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.075553][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.075577][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.075593][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.093115][ T4719] team0: Port device team_slave_0 added
[   32.097716][ T4718] hsr_slave_0: entered promiscuous mode
[   32.099213][ T4718] hsr_slave_1: entered promiscuous mode
[   32.100450][ T4718] debugfs: 'hsr0' already exists in 'hsr'
[   32.101596][ T4718] Cannot create hsr debugfs directory
[   32.103062][ T4719] team0: Port device team_slave_1 added
[   32.110329][ T4712] hsr_slave_0: entered promiscuous mode
[   32.110659][ T4712] hsr_slave_1: entered promiscuous mode
[   32.110859][ T4712] debugfs: 'hsr0' already exists in 'hsr'
[   32.110868][ T4712] Cannot create hsr debugfs directory
[   32.118078][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.118100][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.118115][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.118946][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.118957][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.118969][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.163391][ T4719] hsr_slave_0: entered promiscuous mode
[   32.163730][ T4719] hsr_slave_1: entered promiscuous mode
[   32.163939][ T4719] debugfs: 'hsr0' already exists in 'hsr'
[   32.163949][ T4719] Cannot create hsr debugfs directory
[   32.181610][ T4711] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   32.184721][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.186036][ T4711] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   32.188562][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.196234][ T4711] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   32.198360][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.198690][ T4711] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   32.200641][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.239980][ T4715] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   32.242489][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.252789][ T4715] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   32.254955][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.255414][ T4715] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   32.257070][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.259081][ T4715] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   32.261115][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.270419][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.270479][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.270622][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.270650][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.288230][ T4718] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   32.292138][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.295350][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.295401][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.295475][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.295503][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.305089][ T4718] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   32.307157][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.309014][ T4718] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   32.311156][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.312256][ T4718] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   32.313640][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.331286][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.331327][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.331442][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.331489][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.334476][ T4719] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.336492][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.336794][ T4719] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.338638][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.344025][ T4719] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.346266][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.346850][ T4719] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.348437][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.376900][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.382445][ T4715] 8021q: adding VLAN 0 to HW filter on device team0
[   32.383239][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.386843][ T1550] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.388426][ T1550] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.389893][ T1550] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.392094][ T1550] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.396361][ T1550] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.397974][ T1550] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.405080][ T4712] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   32.407340][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.409356][ T4712] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   32.411635][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.413311][ T4712] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   32.415457][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.417487][ T4712] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   32.419992][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.425777][ T4711] 8021q: adding VLAN 0 to HW filter on device team0
[   32.432491][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.436362][ T3801] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.436410][ T3801] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.436814][ T3801] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.436832][ T3801] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.446965][ T3801] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.447007][ T3801] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.457191][ T3801] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.457227][ T3801] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.466311][ T4718] 8021q: adding VLAN 0 to HW filter on device team0
[   32.473621][ T3801] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.473674][ T3801] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.474013][ T3801] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.474031][ T3801] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.505095][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.527515][ T4719] 8021q: adding VLAN 0 to HW filter on device team0
[   32.529060][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.532625][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.545099][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.550452][ T4712] 8021q: adding VLAN 0 to HW filter on device team0
[   32.559310][ T3830] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.559365][ T3830] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.559695][ T3830] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.559720][ T3830] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.570846][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.570861][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.595837][ T3830] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.595887][ T3830] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.596554][ T3830] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.596573][ T3830] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.729407][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.733137][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.757487][ T4711] veth0_vlan: entered promiscuous mode
[   32.762600][ T4715] veth0_vlan: entered promiscuous mode
[   32.766686][ T4715] veth1_vlan: entered promiscuous mode
[   32.770552][ T4711] veth1_vlan: entered promiscuous mode
[   32.775106][ T4715] veth0_macvtap: entered promiscuous mode
[   32.777368][ T4715] veth1_macvtap: entered promiscuous mode
[   32.789577][ T4711] veth0_macvtap: entered promiscuous mode
[   32.793857][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.796565][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.801183][ T4711] veth1_macvtap: entered promiscuous mode
[   32.806035][ T1550] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.806254][ T1550] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.806273][ T1550] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.806289][ T1550] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.810483][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.813673][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.822344][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.825725][ T1550] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.825786][ T1550] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.825812][ T1550] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.825834][ T1550] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.869924][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.898723][ T3830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.898753][ T3830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.901043][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.916543][ T4719] veth0_vlan: entered promiscuous mode
[   32.917888][ T3830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.919827][ T3830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.929020][ T4719] veth1_vlan: entered promiscuous mode
[   32.934389][ T4718] veth0_vlan: entered promiscuous mode
[   32.947665][ T1550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.947772][ T1550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.954309][ T1550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.954341][ T1550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.956474][ T4718] veth1_vlan: entered promiscuous mode
[   32.968321][ T4718] veth0_macvtap: entered promiscuous mode
[   32.969433][ T4718] veth1_macvtap: entered promiscuous mode
[   32.979873][ T4719] veth0_macvtap: entered promiscuous mode
[   32.983888][ T4719] veth1_macvtap: entered promiscuous mode
[   32.988951][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.991558][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.994773][ T1550] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.995195][ T1550] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.995261][ T1550] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.995319][ T1550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.011369][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.019224][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.026582][   T92] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.026644][   T92] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.026684][   T92] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.026712][   T92] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.040154][ T4711] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.070454][ T4712] veth0_vlan: entered promiscuous mode
[   33.078447][ T4712] veth1_vlan: entered promiscuous mode
[   33.090640][ T4895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   33.117306][ T4895] team0: Port device team_slave_0 removed
[   33.126490][ T3801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.126512][ T3801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.145386][ T3801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.145418][ T3801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.156292][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.156321][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.166777][ T4712] veth0_macvtap: entered promiscuous mode
[   33.175660][ T4712] veth1_macvtap: entered promiscuous mode
[   33.178114][ T3830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.178383][ T3830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.182732][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.183768][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.189819][ T1550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.189867][ T1550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.189892][ T1550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.189911][ T1550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.223475][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.225371][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.226953][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.228727][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.254276][ T4904] =======================================================
[   33.254276][ T4904] WARNING: The mand mount option has been deprecated and
[   33.254276][ T4904]          and is ignored by this kernel. Remove the mand
[   33.254276][ T4904]          option from the mount to silence this warning.
[   33.254276][ T4904] =======================================================
[   33.400008][ T4907] FAULT_INJECTION: forcing a failure.
[   33.400008][ T4907] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   33.405303][ T4907] CPU: 1 UID: 0 PID: 4907 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT 
[   33.405330][ T4907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   33.405336][ T4907] Call trace:
[   33.405339][ T4907]  show_stack+0x2c/0x3c (C)
[   33.405361][ T4907]  __dump_stack+0x30/0x40
[   33.405373][ T4907]  dump_stack_lvl+0xd8/0x12c
[   33.405383][ T4907]  dump_stack+0x1c/0x28
[   33.405392][ T4907]  should_fail_ex+0x41c/0x590
[   33.405409][ T4907]  should_fail+0x14/0x24
[   33.405419][ T4907]  should_fail_usercopy+0x20/0x30
[   33.405430][ T4907]  simple_read_from_buffer+0xc4/0x238
[   33.405440][ T4907]  proc_fail_nth_read+0x1a8/0x248
[   33.405448][ T4907]  vfs_read+0x230/0x8c8
[   33.405459][ T4907]  ksys_read+0x12c/0x228
[   33.405465][ T4907]  __arm64_sys_read+0x84/0x98
[   33.405472][ T4907]  invoke_syscall+0x98/0x244
[   33.405482][ T4907]  el0_svc_common+0xec/0x23c
[   33.405491][ T4907]  do_el0_svc+0x4c/0x5c
[   33.405501][ T4907]  el0_svc+0x64/0x260
[   33.405511][ T4907]  el0t_64_sync_handler+0x48/0x148
[   33.405521][ T4907]  el0t_64_sync+0x198/0x19c
[   33.450297][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'.
[   33.450327][ T4911] tc_dump_action: action bad kind
[   33.452729][ T4724] Bluetooth: hci1: command tx timeout
[   33.461661][ T4724] Bluetooth: hci3: command tx timeout
[   33.461684][ T4721] Bluetooth: hci0: command tx timeout
[   33.461979][   T50] Bluetooth: hci4: command tx timeout
[   33.462083][   T50] Bluetooth: hci2: command tx timeout
[   33.476333][ T4913] netlink: 'syz.4.5': attribute type 83 has an invalid length.
[   33.567291][ T4921] loop3: detected capacity change from 0 to 8192
[   33.574001][ T4921] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   33.715805][ T4931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'.
[   33.718188][ T4931] team0: entered promiscuous mode
[   33.718230][ T4931] team_slave_0: entered promiscuous mode
[   33.718316][ T4931] team_slave_1: entered promiscuous mode
[   33.718366][ T4931] team0: entered allmulticast mode
[   33.718372][ T4931] team_slave_0: entered allmulticast mode
[   33.718380][ T4931] team_slave_1: entered allmulticast mode
[   33.720086][ T4931] team0: Cannot enslave team device to itself
[   34.156523][ T4937] FAULT_INJECTION: forcing a failure.
[   34.156523][ T4937] name failslab, interval 1, probability 0, space 0, times 1
[   34.156553][ T4937] CPU: 0 UID: 0 PID: 4937 Comm: syz.1.15 Not tainted syzkaller #0 PREEMPT 
[   34.156566][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   34.156571][ T4937] Call trace:
[   34.156575][ T4937]  show_stack+0x2c/0x3c (C)
[   34.156594][ T4937]  __dump_stack+0x30/0x40
[   34.156605][ T4937]  dump_stack_lvl+0xd8/0x12c
[   34.156614][ T4937]  dump_stack+0x1c/0x28
[   34.156624][ T4937]  should_fail_ex+0x41c/0x590
[   34.156635][ T4937]  should_failslab+0xc4/0x120
[   34.156643][ T4937]  __kmalloc_noprof+0x108/0x6b8
[   34.156652][ T4937]  tomoyo_encode2+0x10c/0x330
[   34.156661][ T4937]  tomoyo_encode+0x34/0x50
[   34.156668][ T4937]  tomoyo_realpath_from_path+0x488/0x4dc
[   34.156677][ T4937]  tomoyo_path_number_perm+0x1f0/0x500
[   34.156684][ T4937]  tomoyo_file_ioctl+0x2c/0x3c
[   34.156692][ T4937]  security_file_ioctl+0xdc/0x2b0
[   34.156700][ T4937]  __arm64_sys_ioctl+0xb0/0x1cc
[   34.156710][ T4937]  invoke_syscall+0x98/0x244
[   34.156720][ T4937]  el0_svc_common+0xec/0x23c
[   34.156730][ T4937]  do_el0_svc+0x4c/0x5c
[   34.156739][ T4937]  el0_svc+0x64/0x260
[   34.156749][ T4937]  el0t_64_sync_handler+0x48/0x148
[   34.156759][ T4937]  el0t_64_sync+0x198/0x19c
[   34.156774][ T4937] ERROR: Out of memory at tomoyo_realpath_from_path.
[   34.203084][ T4941] warning: `syz.1.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   34.233865][ T4941] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   34.233893][ T4941] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   34.345058][ T4955] loop2: detected capacity change from 0 to 512
[   34.348976][ T4955] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   34.349023][ T4955] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   34.358587][ T4955] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.21: bg 0: block 4: invalid block bitmap
[   34.361356][ T4955] loop2: lost filesystem error report for type 5 error -117
[   34.364905][ T4955] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   34.368265][ T4955] loop2: lost filesystem error report for type 5 error -117
[   34.369055][ T4955] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.21: invalid indirect mapped block 1 (level 1)
[   34.370493][ T4955] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   34.371450][    C1] EXT4-fs (loop2): error count since last fsck: 3
[   34.371464][    C1] EXT4-fs (loop2): initial error at time 34: ext4_validate_block_bitmap:432
[   34.371476][    C1] EXT4-fs (loop2): last error at time 34: ext4_free_branches:1023: inode 11
[   34.380507][ T4955] EXT4-fs (loop2): 1 truncate cleaned up
[   34.381177][ T4955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.452766][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.514962][ T4979] loop4: detected capacity change from 0 to 512
[   34.518716][ T4979] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   34.535177][ T4979] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.26: invalid indirect mapped block 4294967295 (level 0)
[   34.535212][ T4979] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   34.538776][ T4979] EXT4-fs (loop4): Remounting filesystem read-only
[   34.539012][ T4979] EXT4-fs (loop4): 1 orphan inode deleted
[   34.539040][ T4979] EXT4-fs (loop4): 1 truncate cleaned up
[   34.539512][ T4979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.544242][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'.
[   34.556684][ T4983] capability: warning: `syz.2.27' uses deprecated v2 capabilities in a way that may be insecure
[   34.558257][ T4983] capability: warning: `syz.2.27' uses 32-bit capabilities (legacy support in use)
[   34.564567][ T4983] loop2: detected capacity change from 0 to 512
[   34.564902][ T4983] EXT4-fs: Ignoring removed nobh option
[   34.564913][ T4983] ext4: Unknown parameter 'audit'
[   34.596255][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.615016][ T4994] FAULT_INJECTION: forcing a failure.
[   34.615016][ T4994] name failslab, interval 1, probability 0, space 0, times 0
[   34.615047][ T4994] CPU: 0 UID: 0 PID: 4994 Comm: syz.4.28 Not tainted syzkaller #0 PREEMPT 
[   34.615060][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   34.615066][ T4994] Call trace:
[   34.615070][ T4994]  show_stack+0x2c/0x3c (C)
[   34.615090][ T4994]  __dump_stack+0x30/0x40
[   34.615101][ T4994]  dump_stack_lvl+0xd8/0x12c
[   34.615111][ T4994]  dump_stack+0x1c/0x28
[   34.615120][ T4994]  should_fail_ex+0x41c/0x590
[   34.615131][ T4994]  should_failslab+0xc4/0x120
[   34.615140][ T4994]  __kmalloc_noprof+0x108/0x6b8
[   34.615148][ T4994]  video_usercopy+0x168/0xe88
[   34.615158][ T4994]  video_ioctl2+0x3c/0x50
[   34.615167][ T4994]  v4l2_ioctl+0x148/0x18c
[   34.615175][ T4994]  __arm64_sys_ioctl+0x154/0x1cc
[   34.615186][ T4994]  invoke_syscall+0x98/0x244
[   34.615196][ T4994]  el0_svc_common+0xec/0x23c
[   34.615205][ T4994]  do_el0_svc+0x4c/0x5c
[   34.615214][ T4994]  el0_svc+0x64/0x260
[   34.615225][ T4994]  el0t_64_sync_handler+0x48/0x148
[   34.615235][ T4994]  el0t_64_sync+0x198/0x19c
[   34.675437][ T4996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'.
[   34.697057][ T4996] tipc: Started in network mode
[   34.697115][ T4996] tipc: Node identity ac14140f, cluster identity 4711
[   34.697369][ T4996] tipc: New replicast peer: 255.255.255.255
[   34.697619][ T4996] tipc: Enabled bearer <udp:syz2>, priority 10
[   34.735968][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'.
[   34.741060][ T5009] netlink: 'syz.2.34': attribute type 3 has an invalid length.
[   34.741093][ T5009] netlink: 152 bytes leftover after parsing attributes in process `syz.2.34'.
[   34.741110][ T5009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34'.
[   34.768662][ T5005] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   34.821127][ T5016] loop2: detected capacity change from 0 to 8192
[   34.832349][ T5016] netlink: 'syz.2.37': attribute type 32 has an invalid length.
[   34.855309][ T5021] loop0: detected capacity change from 0 to 1024
[   34.878986][ T5027] FAULT_INJECTION: forcing a failure.
[   34.878986][ T5027] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   34.879020][ T5027] CPU: 1 UID: 0 PID: 5027 Comm: syz.3.40 Not tainted syzkaller #0 PREEMPT 
[   34.879032][ T5027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   34.879038][ T5027] Call trace:
[   34.879042][ T5027]  show_stack+0x2c/0x3c (C)
[   34.879063][ T5027]  __dump_stack+0x30/0x40
[   34.879074][ T5027]  dump_stack_lvl+0xd8/0x12c
[   34.879084][ T5027]  dump_stack+0x1c/0x28
[   34.879093][ T5027]  should_fail_ex+0x41c/0x590
[   34.879104][ T5027]  should_fail+0x14/0x24
[   34.879114][ T5027]  should_fail_usercopy+0x20/0x30
[   34.879124][ T5027]  _inline_copy_from_user+0x3c/0x188
[   34.879133][ T5027]  video_usercopy+0x2d0/0xe88
[   34.879141][ T5027]  video_ioctl2+0x3c/0x50
[   34.879150][ T5027]  v4l2_ioctl+0x148/0x18c
[   34.879158][ T5027]  __arm64_sys_ioctl+0x154/0x1cc
[   34.879169][ T5027]  invoke_syscall+0x98/0x244
[   34.879179][ T5027]  el0_svc_common+0xec/0x23c
[   34.879189][ T5027]  do_el0_svc+0x4c/0x5c
[   34.879198][ T5027]  el0_svc+0x64/0x260
[   34.879209][ T5027]  el0t_64_sync_handler+0x48/0x148
[   34.879218][ T5027]  el0t_64_sync+0x198/0x19c
[   34.885427][ T5021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.885980][ T5019] EXT4-fs warning (device loop0): ext4_empty_dir:3104: inode #11: comm syz.0.38: directory missing '..'
[   34.920002][ T5031] tipc: Invalid UDP bearer configuration
[   34.920163][ T5031] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   34.934363][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.950781][ T5039] loop4: detected capacity change from 0 to 128
[   34.985453][ T5039] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   35.028910][ T5049] devtmpfs: Too few inodes for current use
[   35.067566][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   35.138921][ T5061] loop2: detected capacity change from 0 to 2048
[   35.152633][ T5066] FAULT_INJECTION: forcing a failure.
[   35.152633][ T5066] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   35.155410][ T5066] CPU: 1 UID: 0 PID: 5066 Comm: syz.4.53 Not tainted syzkaller #0 PREEMPT 
[   35.155431][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   35.155437][ T5066] Call trace:
[   35.155441][ T5066]  show_stack+0x2c/0x3c (C)
[   35.155462][ T5066]  __dump_stack+0x30/0x40
[   35.155474][ T5066]  dump_stack_lvl+0xd8/0x12c
[   35.155484][ T5066]  dump_stack+0x1c/0x28
[   35.155493][ T5066]  should_fail_ex+0x41c/0x590
[   35.155505][ T5066]  should_fail+0x14/0x24
[   35.155515][ T5066]  should_fail_usercopy+0x20/0x30
[   35.155525][ T5066]  video_usercopy+0xacc/0xe88
[   35.155535][ T5066]  video_ioctl2+0x3c/0x50
[   35.155544][ T5066]  v4l2_ioctl+0x148/0x18c
[   35.155552][ T5066]  __arm64_sys_ioctl+0x154/0x1cc
[   35.155563][ T5066]  invoke_syscall+0x98/0x244
[   35.155573][ T5066]  el0_svc_common+0xec/0x23c
[   35.155583][ T5066]  do_el0_svc+0x4c/0x5c
[   35.155592][ T5066]  el0_svc+0x64/0x260
[   35.155603][ T5066]  el0t_64_sync_handler+0x48/0x148
[   35.155612][ T5066]  el0t_64_sync+0x198/0x19c
[   35.234776][ T5061]  loop2: AHDI p3
[   35.235550][ T5071] Zero length message leads to an empty skb
[   35.516483][ T5075] Injecting memory failure for pfn 0x136600 at process virtual address 0x20000000
[   35.531824][ T4721] Bluetooth: hci3: command tx timeout
[   35.533077][ T4721] Bluetooth: hci2: command tx timeout
[   35.534584][ T4721] Bluetooth: hci4: command tx timeout
[   35.534606][ T4721] Bluetooth: hci1: command tx timeout
[   35.534620][ T4721] Bluetooth: hci0: command tx timeout
[   35.582660][ T5075] Memory failure: 0x136600: recovery action for clean LRU page: Recovered
[   35.582796][ T5075] Injecting memory failure for pfn 0x134400 at process virtual address 0x20200000
[   35.590989][ T5075] Memory failure: 0x134400: unhandlable page.
[   35.591808][ T5075] Memory failure: 0x134400: recovery action for get hwpoison page: Ignored
[   35.606276][ T5081] loop0: detected capacity change from 0 to 2048
[   35.618475][ T5081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.675286][ T5088] netlink: 'syz.4.58': attribute type 7 has an invalid length.
[   35.802380][ T5098] FAULT_INJECTION: forcing a failure.
[   35.802380][ T5098] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   35.805113][ T5098] CPU: 1 UID: 0 PID: 5098 Comm: syz.2.64 Not tainted syzkaller #0 PREEMPT 
[   35.805135][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   35.805141][ T5098] Call trace:
[   35.805144][ T5098]  show_stack+0x2c/0x3c (C)
[   35.805168][ T5098]  __dump_stack+0x30/0x40
[   35.805180][ T5098]  dump_stack_lvl+0xd8/0x12c
[   35.805191][ T5098]  dump_stack+0x1c/0x28
[   35.805201][ T5098]  should_fail_ex+0x41c/0x590
[   35.805212][ T5098]  should_fail+0x14/0x24
[   35.805221][ T5098]  should_fail_usercopy+0x20/0x30
[   35.805232][ T5098]  simple_read_from_buffer+0xc4/0x238
[   35.805242][ T5098]  proc_fail_nth_read+0x1a8/0x248
[   35.805250][ T5098]  vfs_read+0x230/0x8c8
[   35.805261][ T5098]  ksys_read+0x12c/0x228
[   35.805267][ T5098]  __arm64_sys_read+0x84/0x98
[   35.805274][ T5098]  invoke_syscall+0x98/0x244
[   35.805284][ T5098]  el0_svc_common+0xec/0x23c
[   35.805293][ T5098]  do_el0_svc+0x4c/0x5c
[   35.805303][ T5098]  el0_svc+0x64/0x260
[   35.805313][ T5098]  el0t_64_sync_handler+0x48/0x148
[   35.805323][ T5098]  el0t_64_sync+0x198/0x19c
[   35.820074][   T26] tipc: Node number set to 2886997007
[   35.839848][ T5096] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   36.001367][ T5112] loop2: detected capacity change from 0 to 1024
[   36.050852][ T5112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.060373][ T5116] netlink: 44 bytes leftover after parsing attributes in process `syz.3.70'.
[   36.065584][ T5112] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   36.067654][ T5112] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   36.126090][ T5118] Injecting memory failure for pfn 0x11ec00 at process virtual address 0x20000000
[   36.136399][ T5118] Memory failure: 0x11ec00: recovery action for clean LRU page: Recovered
[   36.138452][ T5118] Injecting memory failure for pfn 0x134400 at process virtual address 0x20200000
[   36.138540][ T5118] Memory failure: 0x134400: Sending SIGBUS to syz.3.71:5118 due to hardware memory corruption
[   36.138593][ T5118] Memory failure: 0x134400: recovery action for already poisoned page: Failed
[   36.480805][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.520542][ T5134] ext4: Unknown parameter 'euid'
[   36.635711][   T30] audit: type=1400 audit(36.580:2): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=5140 comm="syz.3.79" key_serial=994949709 key_desc="_uid_ses.0"
[   36.931786][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   36.942064][   T10] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   36.980888][ T5153] Injecting memory failure for pfn 0x11f600 at process virtual address 0x20000000
[   36.986484][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.009553][ T5153] Memory failure: 0x11f600: recovery action for clean LRU page: Recovered
[   37.011807][ T5153] Injecting memory failure for pfn 0x134400 at process virtual address 0x20200000
[   37.013854][ T5153] Memory failure: 0x134400: Sending SIGBUS to syz.3.82:5153 due to hardware memory corruption
[   37.016151][ T5153] Memory failure: 0x134400: recovery action for already poisoned page: Failed
[   37.152353][ T5170] EXT4-fs (loop3): Test dummy encryption mode enabled
[   37.153656][ T5170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022]
[   37.153685][ T5170] System zones: 1-2, 4-12, 8-8
[   37.153925][ T5170] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.88: iget: bad i_size value: 38620345925642
[   37.153944][ T5170] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   37.154357][ T5170] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.88: couldn't read orphan inode 15 (err -117)
[   37.154372][ T5170] loop3: lost filesystem error report for type 5 error -117
[   37.155215][ T5170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.498462][ T5178] netlink: 'syz.4.89': attribute type 13 has an invalid length.
[   37.579733][ T5184] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   37.596188][ T5185] fuse: Unknown parameter '>%'
[   37.612258][ T4721] Bluetooth: hci1: command tx timeout
[   37.612295][ T4721] Bluetooth: hci4: command tx timeout
[   37.612322][ T4721] Bluetooth: hci2: command tx timeout
[   37.612342][ T4721] Bluetooth: hci3: command tx timeout
[   37.613563][ T4724] Bluetooth: hci0: command tx timeout
[   37.782232][ T5195] vfat: Unknown parameter 'shoctname'
[   37.982911][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.054646][ T5206] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   38.097982][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   38.120689][ T5211] overlayfs: failed lookup in lower (newroot/25, name='file0', err=-40): overlapping layers
[   38.123867][ T5211] overlayfs: failed lookup in lower (newroot/25, name='file0', err=-40): overlapping layers
[   38.233101][ T5216] Dev loop4: unable to read partition block 13217811397245
[   38.233712][ T5216]  loop4: RDSK (403375616) unable to read partition table
[   38.233790][ T5216] loop4: partition table beyond EOD, truncated
[   38.233807][ T5216] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[   38.526524][ T4800] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   38.532960][ T4800] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   38.551822][ T5227] openvswitch: netlink: Actions may not be safe on all matching packets
[   38.567428][   T30] audit: type=1326 audit(38.540:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5225 comm="syz.0.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a168 code=0x7ffc0000
[   38.569669][   T30] audit: type=1326 audit(38.540:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5225 comm="syz.0.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffbc97a168 code=0x7ffc0000
[   38.569893][   T30] audit: type=1326 audit(38.540:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5225 comm="syz.0.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a168 code=0x7ffc0000
[   38.574699][   T30] audit: type=1326 audit(38.550:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5225 comm="syz.0.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffbc97a168 code=0x7ffc0000
[   38.574726][   T30] audit: type=1326 audit(38.550:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5225 comm="syz.0.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a168 code=0x7ffc0000
[   38.574743][   T30] audit: type=1326 audit(38.550:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5225 comm="syz.0.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc97a168 code=0x7ffc0000
[   38.584704][   T30] audit: type=1326 audit(38.560:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5225 comm="syz.0.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a168 code=0x7ffc0000
[   38.585505][   T30] audit: type=1326 audit(38.560:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5225 comm="syz.0.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffffbc97a168 code=0x7ffc0000
[   38.585637][   T30] audit: type=1326 audit(38.560:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5225 comm="syz.0.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a168 code=0x7ffc0000
[   38.612388][ T5237] set_capacity_and_notify: 6 callbacks suppressed
[   38.613687][ T5237] loop4: detected capacity change from 0 to 1024
[   38.641037][ T5241] loop0: detected capacity change from 0 to 1024
[   38.650684][ T5237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   38.656559][ T5241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.730556][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.737311][ T5237] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.108: lblock 0 mapped to illegal pblock 0 (length 1)
[   38.751748][ T5237] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   38.751793][ T5237] EXT4-fs (loop4): This should not happen!! Data will be lost
[   38.751793][ T5237] 
[   38.752366][ T5237] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.108: lblock 0 mapped to illegal pblock 0 (length 1)
[   38.759914][ T5237] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   38.759956][ T5237] EXT4-fs (loop4): This should not happen!! Data will be lost
[   38.759956][ T5237] 
[   38.871224][   T26] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   38.902318][   T26] hid-generic 0000:0000:0000.0003: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   39.019332][ T5256] netlink: 36 bytes leftover after parsing attributes in process `syz.1.114'.
[   39.034022][ T5258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.115'.
[   39.034645][ T5258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.115'.
[   39.091862][ T5264] loop1: detected capacity change from 0 to 256
[   39.141719][ T4712] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[   39.142445][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   39.171023][ T5270] x_tables: duplicate underflow at hook 3
[   39.249368][ T5277] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.122'.
[   39.249963][ T5279] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.122'.
[   39.251775][ T5279] bridge_slave_0: left allmulticast mode
[   39.251790][ T5279] bridge_slave_0: left promiscuous mode
[   39.251870][ T5279] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.257740][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'.
[   39.266988][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.267566][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.290185][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'.
[   39.294913][ T5281] netlink: 'syz.4.123': attribute type 1 has an invalid length.
[   39.294940][ T5281] netlink: 'syz.4.123': attribute type 3 has an invalid length.
[   39.294949][ T5281] netlink: 224 bytes leftover after parsing attributes in process `syz.4.123'.
[   39.297700][ T5281] loop4: detected capacity change from 0 to 256
[   39.302171][ T5281] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   39.343812][ T5285] loop4: detected capacity change from 0 to 128
[   39.381082][ T5285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[   39.383918][ T5285] System zones: 1-3, 19-19, 35-36
[   39.386130][ T5285] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   39.395158][ T5285] EXT4-fs (loop4): shut down requested (1)
[   39.405484][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   39.691846][ T4724] Bluetooth: hci3: command tx timeout
[   39.692956][ T4721] Bluetooth: hci2: command tx timeout
[   39.692977][ T4721] Bluetooth: hci4: command tx timeout
[   39.692994][ T4721] Bluetooth: hci1: command tx timeout
[   39.693040][ T4720] Bluetooth: hci0: command tx timeout
[   39.736147][ T5299] loop4: detected capacity change from 0 to 128
[   39.739866][ T5299] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   39.766519][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   39.881828][ T5310] loop3: detected capacity change from 0 to 512
[   39.883688][ T5310] EXT4-fs: Ignoring removed mblk_io_submit option
[   39.890354][ T5310] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.133: corrupted in-inode xattr: e_value size too large
[   39.890399][ T5310] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   39.890588][ T5310] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.133: couldn't read orphan inode 15 (err -117)
[   39.890606][ T5310] loop3: lost filesystem error report for type 5 error -117
[   39.891222][ T5310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.145368][ T2003] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.174676][ T5310] overlayfs: upper fs needs to support d_type.
[   40.230413][ T5318] Injecting memory failure for pfn 0x136a00 at process virtual address 0x20000000
[   40.248116][ T5318] Memory failure: 0x136a00: recovery action for clean LRU page: Recovered
[   40.250245][ T5318] Injecting memory failure for pfn 0x134400 at process virtual address 0x20200000
[   40.253101][ T5318] Memory failure: 0x134400: Sending SIGBUS to syz.2.136:5318 due to hardware memory corruption
[   40.255220][ T5318] Memory failure: 0x134400: recovery action for already poisoned page: Failed
[   40.317572][ T4719] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[   40.323926][ T4719] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[   40.349863][ T5330] loop1: detected capacity change from 0 to 128
[   40.360505][ T5330] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   40.388870][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   40.446549][ T5335] loop2: detected capacity change from 0 to 512
[   40.488054][ T5341] loop1: detected capacity change from 0 to 512
[   40.491493][ T5341] EXT4-fs (loop1): Test dummy encryption mode enabled
[   40.494235][ T5341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022]
[   40.494280][ T5341] System zones: 1-2, 4-12, 8-8
[   40.496359][ T5341] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.144: iget: bad i_size value: 38620345925642
[   40.496402][ T5341] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   40.496842][ T5341] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.144: couldn't read orphan inode 15 (err -117)
[   40.496864][ T5341] loop1: lost filesystem error report for type 5 error -117
[   40.498571][ T5341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.627645][ T5345] x_tables: duplicate underflow at hook 3
[   40.959549][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.019197][   T15] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.271963][   T15] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.329645][ T4720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   41.332127][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   41.333707][ T4720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   41.335499][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   41.337317][ T4720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   41.345158][ T5357] EXT4-fs (loop0): Test dummy encryption mode enabled
[   41.347562][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.348783][ T5357] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.150: inode has both inline data and extents flags
[   41.348799][ T5357] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   41.349044][ T5357] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.150: couldn't read orphan inode 15 (err -117)
[   41.349061][ T5357] loop0: lost filesystem error report for type 5 error -117
[   41.349622][ T5357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.394520][ T5357] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   41.410776][   T15] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.431147][ T5357] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[   41.483557][   T15] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.764801][ T5387] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   41.895330][   T15] bridge_slave_1: left allmulticast mode
[   41.895372][   T15] bridge_slave_1: left promiscuous mode
[   41.895841][   T15] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.904285][   T15] bridge_slave_0: left allmulticast mode
[   41.904316][   T15] bridge_slave_0: left promiscuous mode
[   41.904393][   T15] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.005049][   T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   42.022025][ T5403]  loop1: p1 < > p4 < >
[   42.022051][ T5403] loop1: partition table partially beyond EOD, truncated
[   42.025970][ T5403] loop1: p4 start 42180 is beyond EOD, truncated
[   42.032730][   T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   42.034721][   T15] bond0 (unregistering): Released all slaves
[   42.046342][ T5400] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   42.046374][ T5400] EXT4-fs (loop4): Test dummy encryption mode enabled
[   42.048130][ T5400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.140480][ T5417] EXT4-fs: Ignoring removed i_version option
[   42.144957][ T5417] EXT4-fs: Ignoring removed oldalloc option
[   42.154988][ T5417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.192619][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.243996][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.246811][ T5417] bridge1: entered promiscuous mode
[   42.305534][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0
[   42.307658][ T5356] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.307741][ T5356] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.307824][ T5356] bridge_slave_0: entered allmulticast mode
[   42.309445][ T5356] bridge_slave_0: entered promiscuous mode
[   42.314664][ T5356] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.314736][ T5356] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.314821][ T5356] bridge_slave_1: entered allmulticast mode
[   42.316166][ T5356] bridge_slave_1: entered promiscuous mode
[   42.348366][ T5356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   42.351676][ T5356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   42.369666][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.399643][ T5430] x_tables: duplicate underflow at hook 3
[   42.414445][ T5436] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   42.422605][ T5442] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001
[   42.447050][ T5356] team0: Port device team_slave_0 added
[   42.450225][ T5356] team0: Port device team_slave_1 added
[   42.486789][ T5436] bond1: entered promiscuous mode
[   42.486960][ T5436] 8021q: adding VLAN 0 to HW filter on device bond1
[   42.538054][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.538083][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   42.538107][ T5356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.538716][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.538731][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   42.538751][ T5356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.552742][ T5356] hsr_slave_0: entered promiscuous mode
[   42.553040][ T5356] hsr_slave_1: entered promiscuous mode
[   42.553311][ T5356] debugfs: 'hsr0' already exists in 'hsr'
[   42.553321][ T5356] Cannot create hsr debugfs directory
[   42.565039][ T5449] vfat: Bad value for 'time_offset'
[   42.578373][ T5436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.164'.
[   42.616607][   T15] hsr_slave_0: left promiscuous mode
[   42.620398][   T15] hsr_slave_1: left promiscuous mode
[   42.620806][   T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.620827][   T15] batman_adv: batadv0: Removing interface: batadv_slave_0
[   42.626786][   T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.626819][   T15] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.631951][ T5461] EXT4-fs: Ignoring removed nomblk_io_submit option
[   42.648338][   T15] veth1_macvtap: left promiscuous mode
[   42.648398][   T15] veth0_macvtap: left promiscuous mode
[   42.648458][   T15] veth1_vlan: left promiscuous mode
[   42.648500][   T15] veth0_vlan: left promiscuous mode
[   42.659906][ T5461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.762557][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.845895][ T5474] netlink: 'syz.4.171': attribute type 15 has an invalid length.
[   42.897050][   T15] team_slave_1 (unregistering): left promiscuous mode
[   42.898730][   T15] team_slave_1 (unregistering): left allmulticast mode
[   42.900675][   T15] team0 (unregistering): Port device team_slave_1 removed
[   42.905854][   T15] team_slave_0 (unregistering): left promiscuous mode
[   42.907245][   T15] team_slave_0 (unregistering): left allmulticast mode
[   42.908943][   T15] team0 (unregistering): Port device team_slave_0 removed
[   42.918828][ T5476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.171'.
[   42.981339][ T5436] bond1: (slave bridge1): making interface the new active one
[   42.981513][ T5436] bridge1: entered promiscuous mode
[   42.982965][ T5436] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   42.983457][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1
[   43.076816][ T5356] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   43.094205][ T5356] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   43.094936][ T5356] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   43.099160][ T5356] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   43.099491][ T5356] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   43.101728][ T5356] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   43.102060][ T5356] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   43.104302][ T5356] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   43.173512][ T5502] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   43.180621][ T5356] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.194546][ T5356] 8021q: adding VLAN 0 to HW filter on device team0
[   43.198127][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.198173][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.204071][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.204116][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.234470][ T5356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   43.234954][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   43.372962][   T50] Bluetooth: hci3: command tx timeout
[   43.420304][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2
[   43.544250][ T5356] 8021q: adding VLAN 0 to HW filter on device batadv0
[   43.676064][ T5570] x_tables: duplicate underflow at hook 3
[   43.831590][ T5573] set_capacity_and_notify: 8 callbacks suppressed
[   43.833038][ T5573] loop0: detected capacity change from 0 to 128
[   43.840239][ T5573] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   43.882463][ T4715] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   43.886225][ T5356] veth0_vlan: entered promiscuous mode
[   43.893983][ T5356] veth1_vlan: entered promiscuous mode
[   43.918041][ T5356] veth0_macvtap: entered promiscuous mode
[   43.921155][ T5356] veth1_macvtap: entered promiscuous mode
[   43.933040][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_0
[   43.936310][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_1
[   43.945308][ T3801] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.945423][ T3801] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.945456][ T3801] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.945474][ T3801] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.994129][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3
[   43.995022][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.995034][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.011274][ T3830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.011300][ T3830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.357816][ T5608] loop1: detected capacity change from 0 to 256
[   44.366738][ T5608] netlink: 'syz.1.195': attribute type 5 has an invalid length.
[   44.369487][ T5608] ip6erspan0: entered promiscuous mode
[   44.482418][ T5617] loop1: detected capacity change from 0 to 512
[   44.484871][ T5617] EXT4-fs: Ignoring removed oldalloc option
[   44.488407][ T5617] EXT4-fs: journaled quota format not specified
[   44.526835][ T5624] netlink: 'syz.1.201': attribute type 26 has an invalid length.
[   44.579051][ T5628] team0: Port device syz_tun added
[   44.581269][ T5630] loop1: detected capacity change from 0 to 8192
[   44.584530][ T5630] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   44.588985][ T5630] process 'syz.1.203' launched './file1' with NULL argv: empty string added
[   44.682784][ T5635] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   44.682816][ T5635] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   45.174488][ T5645] syz.5.208 uses obsolete (PF_INET,SOCK_PACKET)
[   45.219080][ T5657] x_tables: duplicate underflow at hook 3
[   45.355189][ T5666] kernel kvm profiling enabled (shift: 0)
[   45.451710][   T50] Bluetooth: hci3: command tx timeout
[   45.488963][ T5670] __nla_validate_parse: 1 callbacks suppressed
[   45.488997][ T5670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.215'.
[   45.517602][ T5672] vivid-000: disconnect
[   45.939841][ T5648] vivid-000: reconnect
[   46.324767][ T5678] loop0: detected capacity change from 0 to 8192
[   46.339121][ T5678] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   46.537444][ T5685] loop2: detected capacity change from 0 to 512
[   46.539107][ T5685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'.
[   46.544052][ T5685] bond2: option arp_all_targets: invalid value (10)
[   46.546472][ T5685] bond2 (unregistering): Released all slaves
[   47.531631][   T50] Bluetooth: hci3: command tx timeout
[   47.698648][ T5709] x_tables: duplicate underflow at hook 3
[   47.980607][ T5715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'.
[   48.049720][ T5732] loop5: detected capacity change from 0 to 256
[   48.054211][ T5732] vfat: Unknown parameter 'nnonumtail'
[   48.130550][ T5736] loop5: detected capacity change from 0 to 4096
[   48.134247][ T5736] EXT4-fs: inline encryption not supported
[   48.140113][ T5736] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   48.140159][ T5736] EXT4-fs (loop5): Test dummy encryption mode enabled
[   48.145978][ T5736] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002]
[   48.146040][ T5736] System zones: 0-5
[   48.154262][ T5736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.224257][ T5736] overlayfs: upper fs does not support file handles, falling back to index=off.
[   48.227187][ T5736] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   48.236386][ T5736] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers
[   48.249448][ T5729] loop0: detected capacity change from 0 to 32768
[   48.251196][ T5736] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers
[   48.296379][ T5729]  loop0: [POWERTEC] p1 p2 p3
[   48.296515][ T5729] loop0: p1 start 1768846639 is beyond EOD, truncated
[   48.296528][ T5729] loop0: p2 start 1056964608 is beyond EOD, truncated
[   48.296538][ T5729] loop0: p3 start 3242065920 is beyond EOD, truncated
[   48.340607][ T5356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.435015][ T5743] 9p: Bad value for 'rfdno'
[   49.256473][ T5754] netlink: 'syz.4.240': attribute type 1 has an invalid length.
[   49.256507][ T5754] netlink: 224 bytes leftover after parsing attributes in process `syz.4.240'.
[   49.350834][ T5763] loop5: detected capacity change from 0 to 512
[   49.379556][ T5763] syz.5.243: attempt to access beyond end of device
[   49.379556][ T5763] loop5: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512
[   49.401093][ T5763] syz.5.243: attempt to access beyond end of device
[   49.401093][ T5763] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[   49.407546][ T5763] syz.5.243: attempt to access beyond end of device
[   49.407546][ T5763] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[   49.442567][ T5774] loop2: detected capacity change from 0 to 1024
[   49.444386][ T5777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'.
[   49.457268][ T5774] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   49.467909][ T5774] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   49.468053][ T5774] EXT4-fs (loop2): orphan cleanup on readonly fs
[   49.468487][ T5774] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.248: Freeing blocks not in datazone - block = 0, count = 4096
[   49.468507][ T5774] loop2: lost filesystem error report for type 5 error -117
[   49.471417][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   49.471431][    C0] EXT4-fs (loop2): initial error at time 49: ext4_free_blocks:6718
[   49.471443][    C0] EXT4-fs (loop2): last error at time 49: ext4_free_blocks:6718
[   49.471801][ T5774] EXT4-fs (loop2): 1 orphan inode deleted
[   49.482328][ T5774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   49.525717][ T5785] No memory to map
[   49.553753][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.612310][   T50] Bluetooth: hci3: command tx timeout
[   51.997666][ T5839] loop2: detected capacity change from 0 to 512
[   52.325252][ T5846] overlayfs: overlapping lowerdir path
[   52.363766][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'.
[   52.853123][ T5850] can0: slcan on ttyS3.
[   53.002785][ T5850] can0 (unregistered): slcan off ttyS3.
[   53.059324][ T5858] xt_cluster: you have exceeded the maximum number of cluster nodes (128 > 32)
[   53.166364][ T5863] loop2: detected capacity change from 0 to 8192
[   53.200501][ T5863]  loop2: AHDI p1 p2 p3 p4
[   53.200604][ T5863] loop2: p1 size 67109119 extends beyond EOD, truncated
[   53.206306][ T5863] loop2: p3 start 1671679 is beyond EOD, truncated
[   53.206353][ T5863] loop2: p4 start 16383999 is beyond EOD, truncated
[   53.257197][ T5880] loop0: detected capacity change from 0 to 4096
[   53.258772][ T5880] EXT4-fs: inline encryption not supported
[   53.275462][ T5880] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   53.275488][ T5880] EXT4-fs (loop0): Test dummy encryption mode enabled
[   53.285100][ T5880] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002]
[   53.285155][ T5880] System zones: 0-5
[   53.288796][ T5880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.296604][ T5885] netlink: 56 bytes leftover after parsing attributes in process `syz.1.278'.
[   53.299318][ T5885] nbd: socks must be embedded in a SOCK_ITEM attr
[   53.307073][ T5885] Bluetooth: MGMT ver 1.23
[   53.308395][ T5885] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[   53.330610][ T5890] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   53.658781][ T5890] overlayfs: failed to set xattr on upper
[   53.774212][ T5890] overlayfs: ...falling back to redirect_dir=nofollow.
[   53.803278][ T5890] overlayfs: ...falling back to index=off.
[   53.815154][ T5890] overlayfs: conflicting lowerdir path
[   54.181689][ T5880] overlayfs: upper fs does not support file handles, falling back to index=off.
[   54.181720][ T5880] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   54.210985][ T5894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.280'.
[   54.228360][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'.
[   54.231195][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.281'.
[   54.263588][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.281'.
[   54.397885][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   54.512605][ T5914] netlink: 52 bytes leftover after parsing attributes in process `syz.4.284'.
[   55.162584][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.165607][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   55.319944][ T5931] vhci_hcd vhci_hcd.0: remove, state 4
[   55.320020][ T5931] usb usb3: USB disconnect, device number 1
[   55.351686][ T1550] vhci_hcd vhci_hcd.0: stop threads
[   55.351717][ T1550] vhci_hcd vhci_hcd.0: release socket
[   55.351763][ T1550] vhci_hcd vhci_hcd.0: disconnect device
[   55.361947][   T12] vhci_hcd vhci_hcd.0: stop threads
[   55.361974][   T12] vhci_hcd vhci_hcd.0: release socket
[   55.362000][   T12] vhci_hcd vhci_hcd.0: disconnect device
[   55.365595][ T1550] vhci_hcd vhci_hcd.0: stop threads
[   55.365615][ T1550] vhci_hcd vhci_hcd.0: release socket
[   55.365633][ T1550] vhci_hcd vhci_hcd.0: disconnect device
[   55.369887][ T5930] binfmt_misc: register: failed to install interpreter file ./file2
[   55.373323][   T12] vhci_hcd vhci_hcd.0: stop threads
[   55.373349][   T12] vhci_hcd vhci_hcd.0: release socket
[   55.373375][   T12] vhci_hcd vhci_hcd.0: disconnect device
[   55.377211][   T12] vhci_hcd vhci_hcd.0: stop threads
[   55.377236][   T12] vhci_hcd vhci_hcd.0: release socket
[   55.377256][   T12] vhci_hcd vhci_hcd.0: disconnect device
[   55.380520][ T1550] vhci_hcd vhci_hcd.0: stop threads
[   55.380541][ T1550] vhci_hcd vhci_hcd.0: release socket
[   55.380562][ T1550] vhci_hcd vhci_hcd.0: disconnect device
[   55.384178][ T1550] vhci_hcd vhci_hcd.0: stop threads
[   55.384198][ T1550] vhci_hcd vhci_hcd.0: release socket
[   55.384223][ T1550] vhci_hcd vhci_hcd.0: disconnect device
[   55.387526][ T1550] vhci_hcd vhci_hcd.0: stop threads
[   55.387535][ T1550] vhci_hcd vhci_hcd.0: release socket
[   55.387546][ T1550] vhci_hcd vhci_hcd.0: disconnect device
[   55.387573][ T5931] vhci_hcd vhci_hcd.0: USB bus 3 deregistered
[   55.400745][ T5931] vhci_hcd vhci_hcd.0: remove, state 4
[   55.400789][ T5931] usb usb2: USB disconnect, device number 1
[   55.417497][ T1550] vhci_hcd vhci_hcd.0: stop threads
[   55.417524][ T1550] vhci_hcd vhci_hcd.0: release socket
[   55.417549][ T1550] vhci_hcd vhci_hcd.0: disconnect device
[   55.427994][ T1550] vhci_hcd vhci_hcd.0: stop threads
[   55.428021][ T1550] vhci_hcd vhci_hcd.0: release socket
[   55.428050][ T1550] vhci_hcd vhci_hcd.0: disconnect device
[   55.431738][   T40] vhci_hcd vhci_hcd.0: stop threads
[   55.431749][   T40] vhci_hcd vhci_hcd.0: release socket
[   55.431759][   T40] vhci_hcd vhci_hcd.0: disconnect device
[   55.432857][   T40] vhci_hcd vhci_hcd.0: stop threads
[   55.432867][   T40] vhci_hcd vhci_hcd.0: release socket
[   55.432879][   T40] vhci_hcd vhci_hcd.0: disconnect device
[   55.432923][   T40] vhci_hcd vhci_hcd.0: stop threads
[   55.432929][   T40] vhci_hcd vhci_hcd.0: release socket
[   55.432937][   T40] vhci_hcd vhci_hcd.0: disconnect device
[   55.432975][   T40] vhci_hcd vhci_hcd.0: stop threads
[   55.432980][   T40] vhci_hcd vhci_hcd.0: release socket
[   55.432988][   T40] vhci_hcd vhci_hcd.0: disconnect device
[   55.433023][   T40] vhci_hcd vhci_hcd.0: stop threads
[   55.433028][   T40] vhci_hcd vhci_hcd.0: release socket
[   55.433036][   T40] vhci_hcd vhci_hcd.0: disconnect device
[   55.433070][   T40] vhci_hcd vhci_hcd.0: stop threads
[   55.433075][   T40] vhci_hcd vhci_hcd.0: release socket
[   55.433083][   T40] vhci_hcd vhci_hcd.0: disconnect device
[   55.433105][ T5931] vhci_hcd vhci_hcd.0: USB bus 2 deregistered
[   55.479991][ T5940] loop0: detected capacity change from 0 to 1024
[   55.494811][ T5940] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   55.497919][ T5940] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   55.497998][ T5940] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   55.503841][ T5940] EXT4-fs error (device loop0): ext4_get_journal_inode:5900: inode #32: comm syz.0.289: iget: special inode unallocated
[   55.503882][ T5940] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[   55.504073][ T5940] EXT4-fs (loop0): no journal found
[   55.504082][ T5940] EXT4-fs (loop0): can't get journal size
[   55.506953][ T5940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   55.508047][ T5940] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   55.514351][ T5941] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1332: inode #12: block 16: comm syz.0.289: path /: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0
[   55.567615][ T5958] syzkaller0: entered promiscuous mode
[   55.568720][ T5958] syzkaller0: entered allmulticast mode
[   55.575320][ T5958] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.586595][ T5957] tipc: Resetting bearer <eth:syzkaller0>
[   55.597770][ T5957] tipc: Disabling bearer <eth:syzkaller0>
[   55.651042][ T4715] EXT4-fs error (device loop0): __ext4_iget:5533: inode #15: block 1803188595: comm syz-executor: invalid block
[   55.661910][ T4715] EXT4-fs error (device loop0): __ext4_iget:5533: inode #15: block 1803188595: comm syz-executor: invalid block
[   55.698343][ T5977] loop4: detected capacity change from 0 to 4096
[   55.701237][ T5977] EXT4-fs: Ignoring removed orlov option
[   55.703438][ T5977] EXT4-fs (loop4): Test dummy encryption mode enabled
[   55.706136][ T5977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.718432][ T5980] loop2: detected capacity change from 0 to 512
[   55.730187][ T5980] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   55.733053][ T5980] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   55.734644][ T5980] EXT4-fs (loop2): blocks per group (42) and clusters per group (32768) inconsistent
[   55.836007][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.918717][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'.
[   55.918874][ T5990] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   55.920970][ T5990] netlink: 392 bytes leftover after parsing attributes in process `syz.2.296'.
[   56.096909][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.130405][ T1550] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.205910][ T1550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.217699][ T6005] loop4: detected capacity change from 0 to 512
[   56.237263][ T6005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.260413][ T4720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.267717][ T4720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.269732][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.271837][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.274037][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.297216][ T1550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.355167][   T30] kauditd_printk_skb: 14 callbacks suppressed
[   56.355207][   T30] audit: type=1326 audit(56.330:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5949 comm="syz.1.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ef7a168 code=0x7fc00000
[   56.376537][ T1550] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.428974][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.302'.
[   56.526413][ T6044] fuse: Bad value for 'fd'
[   56.672203][ T6053] overlayfs: failed to resolve './file1': -2
[   56.814126][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.817559][ T1550] bridge_slave_1: left allmulticast mode
[   56.817604][ T1550] bridge_slave_1: left promiscuous mode
[   56.817694][ T1550] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.824773][ T1550] bridge_slave_0: left allmulticast mode
[   56.824797][ T1550] bridge_slave_0: left promiscuous mode
[   56.824876][ T1550] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.865494][ T6068] mmap: syz.1.313 (6068) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   56.882235][ T6070] loop4: detected capacity change from 0 to 4096
[   56.883831][ T6070] EXT4-fs: inline encryption not supported
[   56.886286][ T6070] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   56.888143][ T6070] EXT4-fs (loop4): Test dummy encryption mode enabled
[   56.891018][ T6070] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002]
[   56.893068][ T6070] System zones: 0-5
[   56.905971][ T6070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.930621][ T6070] overlayfs: upper fs does not support file handles, falling back to index=off.
[   56.930654][ T6070] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   56.972985][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.978209][ T1550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   57.006813][ T1550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   57.042441][ T1550] bond0 (unregistering): Released all slaves
[   57.143061][ T6097] netlink: 'syz.1.317': attribute type 1 has an invalid length.
[   57.183352][ T6097] bond1: option mode: invalid value (7)
[   57.186921][ T6097] bond1 (unregistering): Released all slaves
[   57.195335][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.195375][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.195484][ T6013] bridge_slave_0: entered allmulticast mode
[   57.197516][ T6013] bridge_slave_0: entered promiscuous mode
[   57.202608][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.204154][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.205755][ T6013] bridge_slave_1: entered allmulticast mode
[   57.207508][ T6013] bridge_slave_1: entered promiscuous mode
[   57.217607][ T6013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.220680][ T6013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.396605][ T6105] Injecting memory failure for pfn 0x121641 at process virtual address 0x20000000
[   57.399302][ T6105] Memory failure: 0x121641: Sending SIGBUS to syz.2.319:6105 due to hardware memory corruption
[   57.399403][ T6105] Memory failure: 0x121641: recovery action for dirty LRU page: Recovered
[   57.415099][ T6013] team0: Port device team_slave_0 added
[   57.461044][ T6013] team0: Port device team_slave_1 added
[   57.470458][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.476013][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.481747][ T6013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.482376][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.482384][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.482407][ T6013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.509596][ T6122] loop1: detected capacity change from 0 to 2048
[   57.526691][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4
[   57.536988][ T6122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.545331][ T1550] hsr_slave_0: left promiscuous mode
[   57.546623][ T1550] hsr_slave_1: left promiscuous mode
[   57.546996][ T1550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.547008][ T1550] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.553574][ T1550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.553600][ T1550] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.560135][ T1550] veth1_macvtap: left promiscuous mode
[   57.560191][ T1550] veth0_macvtap: left promiscuous mode
[   57.560248][ T1550] veth1_vlan: left promiscuous mode
[   57.560281][ T1550] veth0_vlan: left promiscuous mode
[   57.573372][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.643281][ T6132] loop1: detected capacity change from 0 to 256
[   57.714986][ T1550] team0 (unregistering): Port device team_slave_1 removed
[   57.805293][ T6013] hsr_slave_0: entered promiscuous mode
[   57.805828][ T6013] hsr_slave_1: entered promiscuous mode
[   57.807826][ T6013] debugfs: 'hsr0' already exists in 'hsr'
[   57.807877][ T6013] Cannot create hsr debugfs directory
[   57.959637][ T6013] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   57.988843][ T6013] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   57.990428][ T6013] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   57.991345][ T6013] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   57.994066][ T6013] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   58.007722][ T6172] __nla_validate_parse: 6 callbacks suppressed
[   58.009744][ T6013] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.010083][ T6013] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   58.010814][ T6173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.332'.
[   58.012395][ T6013] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.017012][ T6172] netlink: 16 bytes leftover after parsing attributes in process `syz.5.333'.
[   58.042309][ T6172] netlink: 16 bytes leftover after parsing attributes in process `syz.5.333'.
[   58.042329][ T6172] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22)
[   58.042337][ T6172] iwpm_hello_cb: Unable to parse nlmsg
[   58.084172][ T6013] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.102213][ T6013] 8021q: adding VLAN 0 to HW filter on device team0
[   58.123460][ T6189] loop2: detected capacity change from 0 to 128
[   58.123812][ T6189] ext3: Unknown parameter 'mask'
[   58.136670][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.136726][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.140324][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.140363][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.187128][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5
[   58.214002][ T6202] macvlan2: entered promiscuous mode
[   58.215163][ T6202] macvlan2: entered allmulticast mode
[   58.216851][ T6202] team0: Device macvlan2 is already an upper device of the team interface
[   58.331665][ T4720] Bluetooth: hci2: command tx timeout
[   58.379749][ T6013] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.395473][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'.
[   58.449250][ T6250] ipvlan0: entered promiscuous mode
[   58.449289][ T6250] ipvlan0: entered allmulticast mode
[   58.449298][ T6250] veth0_vlan: entered allmulticast mode
[   58.534252][ T6013] veth0_vlan: entered promiscuous mode
[   58.539514][ T6013] veth1_vlan: entered promiscuous mode
[   58.550819][ T6013] veth0_macvtap: entered promiscuous mode
[   58.554303][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6
[   58.556665][ T6013] veth1_macvtap: entered promiscuous mode
[   58.564549][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.569327][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.576110][ T1550] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.576155][ T1550] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.576205][ T1550] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.576231][ T1550] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.633359][ T1550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.636830][ T1550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.648631][ T1550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.650466][ T1550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.675007][ T6271] loop1: detected capacity change from 0 to 128
[   58.688018][ T6271] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   58.704378][ T6271] EXT4-fs warning (device loop1): verify_group_input:156: Last group not full
[   58.726620][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   58.905968][ T4828] IPVS: starting estimator thread 0...
[   58.968158][ T4400] 8021q: adding VLAN 0 to HW filter on device eth7
[   58.994857][ T6303] loop2: detected capacity change from 0 to 512
[   58.995214][ T6303] EXT4-fs: Invalid want_extra_isize 15
[   59.181507][ T6297] IPVS: using max 60 ests per chain, 144000 per kthread
[   59.468437][ T6334] syz_tun: entered allmulticast mode
[   60.317372][ T6346] EXT4-fs: inline encryption not supported
[   60.326656][ T6346] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   60.326692][ T6346] EXT4-fs (loop6): Test dummy encryption mode enabled
[   60.346463][ T6349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.350326][ T6346] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002]
[   60.350476][ T6346] System zones: 0-5
[   60.354729][ T6346] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.362001][ T6349] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.368: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   60.412054][ T4720] Bluetooth: hci2: command tx timeout
[   60.416683][ T6346] overlay: filesystem on ./file0 not supported as upperdir
[   60.440631][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.527790][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'.
[   60.527829][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'.
[   60.569129][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.376'.
[   60.571249][ T6373] netlink: 'syz.5.376': attribute type 3 has an invalid length.
[   60.579813][ T6013] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.589205][ T4365] IPVS: starting estimator thread 0...
[   60.664017][ T6384] overlayfs: refusing to follow metacopy origin for (/file2)
[   60.666201][ T6384] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[   60.683013][ T6379] IPVS: using max 60 ests per chain, 144000 per kthread
[   60.975022][ T6399] set_capacity_and_notify: 2 callbacks suppressed
[   60.975938][ T6399] loop6: detected capacity change from 0 to 512
[   60.976310][ T6399] EXT4-fs: Ignoring removed mblk_io_submit option
[   61.040755][ T6403] loop5: detected capacity change from 0 to 512
[   61.042079][ T6399] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[   61.047697][ T6403] ------------[ cut here ]------------
[   61.047725][ T6403] EA inode 11 i_nlink=0
[   61.049726][ T6403] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x480/0x488, CPU#0: syz.5.379/6403
[   61.051617][ T6399] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.383: attempt to clear invalid blocks 2 len 1
[   61.051665][ T6399] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   61.054709][ T6403] Modules linked in:
[   61.057129][ T6403] CPU: 0 UID: 0 PID: 6403 Comm: syz.5.379 Tainted: G             L      syzkaller #0 PREEMPT 
[   61.059075][ T6403] Tainted: [L]=SOFTLOCKUP
[   61.059852][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   61.061708][ T6403] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[   61.063118][ T6403] pc : ext4_xattr_inode_update_ref+0x480/0x488
[   61.064233][ T6403] lr : ext4_xattr_inode_update_ref+0x480/0x488
[   61.065366][ T6403] sp : ffff8000931f6f40
[   61.066090][ T6403] x29: ffff8000931f6fe0 x28: 0000000000000000 x27: 1fffe0001e59478d
[   61.067497][ T6403] x26: ffff0000f2ca3ac0 x25: dfff800000000000 x24: ffff8000931f6f60
[   61.068957][ T6403] x23: ffff70001263edec x22: ffff80008a158000 x21: 0000000000000000
[   61.070417][ T6403] x20: 0000000000000001 x19: ffff0000f2ca3a80 x18: 1fffe00035bc5428
[   61.071201][ T6407] loop1: detected capacity change from 0 to 4096
[   61.072977][ T6403] x17: 0000000000000003 x16: ffff800088b07000 x15: 0000000000000000
[   61.074191][ T6407] EXT4-fs: inline encryption not supported
[   61.075155][ T6399] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   61.075796][ T6399] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.383: invalid indirect mapped block 1819239214 (level 0)
[   61.075827][ T6399] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   61.080341][ T6403] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000
[   61.083257][ T6403] x11: ffff80008a590e28 x10: 0000000000000003 x9 : 94d718b18170df00
[   61.084714][ T6403] x8 : 94d718b18170df00 x7 : 0000000000000000 x6 : 0000000000000000
[   61.086054][ T6403] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000801571a8
[   61.087391][ T6403] x2 : 0000000000000006 x1 : ffff0000c69557c0 x0 : 0000000000000001
[   61.088788][ T6403] Call trace:
[   61.089354][ T6403]  ext4_xattr_inode_update_ref+0x480/0x488 (P)
[   61.090489][ T6403]  ext4_xattr_inode_dec_ref_all+0x7f0/0xb84
[   61.091565][ T6403]  ext4_xattr_delete_inode+0x778/0x900
[   61.092499][ T6403]  ext4_evict_inode+0xa0c/0xfb8
[   61.093371][ T6403]  evict+0x4c0/0x74c
[   61.094054][ T6403]  iput+0x8f0/0xc2c
[   61.094701][ T6403]  ext4_process_orphan+0x24c/0x2c0
[   61.095588][ T6399] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.383: invalid indirect mapped block 1819239214 (level 1)
[   61.095598][ T6403]  ext4_orphan_cleanup+0x7d4/0xd20
[   61.095630][ T6399] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   61.097645][ T6399] EXT4-fs (loop6): 1 truncate cleaned up
[   61.101394][ T6403]  ext4_fill_super+0x4628/0x4e14
[   61.102238][ T6403]  get_tree_bdev_flags+0x388/0x43c
[   61.103129][ T6403]  get_tree_bdev+0x2c/0x3c
[   61.103879][ T6403]  ext4_get_tree+0x28/0x38
[   61.104666][ T6403]  vfs_get_tree+0x90/0x28c
[   61.105492][ T6403]  fc_mount+0x24/0xac
[   61.106225][ T6403]  do_new_mount+0x2a4/0x538
[   61.107072][ T6403]  path_mount+0x5f0/0xa88
[   61.107880][ T6403]  do_mount+0xe8/0x148
[   61.108598][ T6403]  __arm64_sys_mount+0x33c/0x388
[   61.109508][ T6403]  invoke_syscall+0x98/0x244
[   61.110360][ T6403]  el0_svc_common+0xec/0x23c
[   61.111191][ T6403]  do_el0_svc+0x4c/0x5c
[   61.111932][ T6403]  el0_svc+0x64/0x260
[   61.112617][ T6403]  el0t_64_sync_handler+0x48/0x148
[   61.113527][ T6403]  el0t_64_sync+0x198/0x19c
[   61.114336][ T6403] irq event stamp: 2062
[   61.115078][ T6403] hardirqs last  enabled at (2061): [<ffff8000803b8b90>] finish_task_switch+0x234/0x858
[   61.116745][ T6403] hardirqs last disabled at (2062): [<ffff8000868e6198>] el1_brk64+0x20/0x54
[   61.118279][ T6403] softirqs last  enabled at (1518): [<ffff80008030ff44>] handle_softirqs+0xc28/0xd98
[   61.119887][ T6403] softirqs last disabled at (1455): [<ffff8000800204c0>] __do_softirq+0x14/0x20
[   61.121337][ T6403] ---[ end trace 0000000000000000 ]---
[   61.213171][ T6403] EXT4-fs (loop5): 1 orphan inode deleted
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   61.894372][ T6407] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   61.894422][ T6407] EXT4-fs (loop1): Test dummy encryption mode enabled
[   61.898705][ T6407] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002]
[   61.900254][ T6407] System zones: 0-5
[   61.937129][ T6407] overlay: filesystem on ./file0 not supported as upperdir
[   62.369141][ T4712] syz_tun (unregistering): left allmulticast mode
[   62.381113][ T6404] team0: Port device syz_tun removed
[   62.448878][ T3830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.598986][ T3830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.666339][ T3830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.785972][ T3830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.893063][ T3830] bridge_slave_1: left allmulticast mode
[   62.893097][ T3830] bridge_slave_1: left promiscuous mode
[   62.893189][ T3830] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.951107][ T3830] bond1 (unregistering): (slave bridge1): Releasing backup interface
[   62.951139][ T3830] bridge1 (unregistering): left promiscuous mode
[   62.974770][ T3830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.982911][ T3830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.992441][ T3830] bond0 (unregistering): Released all slaves
[   62.994835][ T3830] bond1 (unregistering): Released all slaves
[   63.005113][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8
[   63.015374][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10
[   63.024167][ T4400] 8021q: adding VLAN 0 to HW filter on device eth9
[   63.032995][ T4400] 8021q: adding VLAN 0 to HW filter on device eth11
[   63.396835][ T3830] hsr_slave_0: left promiscuous mode
[   63.397985][ T3830] hsr_slave_1: left promiscuous mode
[   63.398437][ T3830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.398448][ T3830] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.399302][ T3830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.399313][ T3830] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.406157][ T3830] veth1_macvtap: left promiscuous mode
[   63.406200][ T3830] veth0_macvtap: left promiscuous mode
[   63.406310][ T3830] veth1_vlan: left promiscuous mode
[   63.406344][ T3830] veth0_vlan: left promiscuous mode
[   63.498688][ T3830] team0 (unregistering): Port device team_slave_1 removed
[   63.510834][ T3830] team0 (unregistering): Port device team_slave_0 removed
[   63.899704][ T3830] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.936395][ T3830] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.996490][ T3830] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.096450][ T3830] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.259761][ T4400] 8021q: adding VLAN 0 to HW filter on device eth12
[   64.270153][ T4400] 8021q: adding VLAN 0 to HW filter on device eth13
[   64.279889][ T3830] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.291217][ T4400] 8021q: adding VLAN 0 to HW filter on device eth14
[   64.300854][ T4400] 8021q: adding VLAN 0 to HW filter on device eth15
[   64.325986][ T3830] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.405795][ T3830] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.493094][ T1595] ieee802154 phy0 wpan0: encryption failed: -22
[   64.493148][ T1595] ieee802154 phy1 wpan1: encryption failed: -22
[   64.504202][  T867] cfg80211: failed to load regulatory.db
[   64.633847][ T4400] 8021q: adding VLAN 0 to HW filter on device eth16
[   64.650126][ T3830] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.661841][ T4400] 8021q: adding VLAN 0 to HW filter on device eth17
[   64.685535][ T4400] 8021q: adding VLAN 0 to HW filter on device eth18
[   64.696673][ T4400] 8021q: adding VLAN 0 to HW filter on device eth19
[   64.733524][ T3830] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.807179][ T3830] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.885890][ T3830] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.051099][ T4400] 8021q: adding VLAN 0 to HW filter on device eth20
[   65.063311][ T3830] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.074096][ T4400] 8021q: adding VLAN 0 to HW filter on device eth21
[   65.084383][ T4400] 8021q: adding VLAN 0 to HW filter on device eth22
[   65.093520][ T4400] 8021q: adding VLAN 0 to HW filter on device eth23
[   65.137254][ T3830] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.209334][ T3830] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.297450][ T3830] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.393610][ T3830] bridge_slave_1: left allmulticast mode
[   65.393647][ T3830] bridge_slave_1: left promiscuous mode
[   65.393734][ T3830] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.396451][ T3830] bridge_slave_0: left allmulticast mode
[   65.396466][ T3830] bridge_slave_0: left promiscuous mode
[   65.396537][ T3830] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.401160][ T3830] bridge_slave_1: left allmulticast mode
[   65.401184][ T3830] bridge_slave_1: left promiscuous mode
[   65.401249][ T3830] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.405964][ T3830] bridge_slave_0: left allmulticast mode
[   65.405987][ T3830] bridge_slave_0: left promiscuous mode
[   65.406044][ T3830] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.410912][ T3830] bridge_slave_1: left allmulticast mode
[   65.410935][ T3830] bridge_slave_1: left promiscuous mode
[   65.410994][ T3830] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.416550][ T3830] bridge_slave_0: left allmulticast mode
[   65.416574][ T3830] bridge_slave_0: left promiscuous mode
[   65.416632][ T3830] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.423392][ T3830] bridge_slave_1: left allmulticast mode
[   65.423418][ T3830] bridge_slave_1: left promiscuous mode
[   65.423483][ T3830] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.427242][ T3830] bridge_slave_0: left allmulticast mode
[   65.427263][ T3830] bridge_slave_0: left promiscuous mode
[   65.427324][ T3830] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.521895][ T3830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.534271][ T3830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.536829][ T3830] bond0 (unregistering): Released all slaves
[   65.572243][ T3830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.602608][ T3830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.612338][ T3830] bond0 (unregistering): Released all slaves
[   65.647672][ T3830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.653296][ T3830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.692241][ T3830] bond0 (unregistering): Released all slaves
[   65.740109][ T3830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.772528][ T3830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.792562][ T3830] bond0 (unregistering): Released all slaves
[   65.799110][ T4400] 8021q: adding VLAN 0 to HW filter on device eth24
[   65.822218][ T4400] 8021q: adding VLAN 0 to HW filter on device eth25
[   65.835002][ T4400] 8021q: adding VLAN 0 to HW filter on device eth26
[   65.848883][ T4400] 8021q: adding VLAN 0 to HW filter on device eth27
[   65.882707][ T3830] tipc: Disabling bearer <udp:syz2>
[   65.883558][ T3830] tipc: Left network mode
[   66.986461][ T3830] hsr_slave_0: left promiscuous mode
[   66.987672][ T3830] hsr_slave_1: left promiscuous mode
[   66.988093][ T3830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.988106][ T3830] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.991827][ T3830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.991847][ T3830] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.995768][ T3830] hsr_slave_0: left promiscuous mode
[   66.996844][ T3830] hsr_slave_1: left promiscuous mode
[   66.997589][ T3830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.997600][ T3830] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.000723][ T3830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.000915][ T3830] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.004693][ T3830] hsr_slave_0: left promiscuous mode
[   67.005804][ T3830] hsr_slave_1: left promiscuous mode
[   67.006011][ T3830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.006022][ T3830] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.009694][ T3830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.009713][ T3830] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.014455][ T3830] hsr_slave_0: left promiscuous mode
[   67.015582][ T3830] hsr_slave_1: left promiscuous mode
[   67.016014][ T3830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.016026][ T3830] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.016870][ T3830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.016880][ T3830] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.030318][ T3830] veth1_macvtap: left promiscuous mode
[   67.030361][ T3830] veth0_macvtap: left promiscuous mode
[   67.030419][ T3830] veth1_vlan: left promiscuous mode
[   67.030456][ T3830] veth0_vlan: left promiscuous mode
[   67.034987][ T3830] veth1_macvtap: left promiscuous mode
[   67.035014][ T3830] veth0_macvtap: left promiscuous mode
[   67.035077][ T3830] veth1_vlan: left promiscuous mode
[   67.035107][ T3830] veth0_vlan: left promiscuous mode
[   67.038725][ T3830] veth1_macvtap: left promiscuous mode
[   67.038761][ T3830] veth0_macvtap: left promiscuous mode
[   67.038807][ T3830] veth1_vlan: left promiscuous mode
[   67.038847][ T3830] veth0_vlan: left promiscuous mode
[   67.043452][ T3830] veth1_macvtap: left promiscuous mode
[   67.043489][ T3830] veth0_macvtap: left promiscuous mode
[   67.043531][ T3830] veth1_vlan: left promiscuous mode
[   67.043562][ T3830] veth0_vlan: left promiscuous mode
[   67.230500][ T3830] team0 (unregistering): Port device team_slave_1 removed
[   67.234615][ T3830] team0 (unregistering): Port device team_slave_0 removed
[   67.336768][ T3830] team0 (unregistering): Port device team_slave_1 removed
[   67.340391][ T3830] team0 (unregistering): Port device team_slave_0 removed
[   67.454722][ T3830] team0 (unregistering): Port device team_slave_1 removed
[   67.459908][ T3830] team0 (unregistering): Port device team_slave_0 removed
[   67.557245][ T3830] team0 (unregistering): Port device team_slave_1 removed
[   67.560811][ T3830] team0 (unregistering): Port device team_slave_0 removed
[   68.608673][ T3830] IPVS: stop unused estimator thread 0...
[   68.610011][ T3830] IPVS: stop unused estimator thread 0...