last executing test programs:

1m12.139783744s ago: executing program 1 (id=219):
unshare(0x6a040000)
io_setup(0x8, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = memfd_secret(0x0)
fanotify_mark(r1, 0x80, 0x800100b, r2, &(0x7f0000000000)='./file0\x00')
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01020000000000000000010000000900030073797a32000000000900010073797a3100000000080007006e617400140004800800014000000003080002"], 0xb8}}, 0x0)
unshare(0x6a040000) (async)
io_setup(0x8, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
memfd_secret(0x0) (async)
fanotify_mark(r1, 0x80, 0x800100b, r2, &(0x7f0000000000)='./file0\x00') (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01020000000000000000010000000900030073797a32000000000900010073797a3100000000080007006e617400140004800800014000000003080002"], 0xb8}}, 0x0) (async)

1m12.083459746s ago: executing program 1 (id=221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r4=>0x0})
sendto$packet(r3, 0x0, 0x0, 0x50, &(0x7f0000000080)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
r5 = socket(0x2d, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r7 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0)
writev(r7, &(0x7f0000003e40)=[{&(0x7f0000003a80)='Ji%', 0x3}, {0x0}, {0x0}], 0x3)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
sendmmsg(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000000000000100100000500000010000000800000001a010000070000acdc568a814d08b800"], 0x20}}], 0x1, 0xc040)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf253b00000008000300", @ANYRES16=r5, @ANYBLOB="32003300d077117ef9ffffffffff080211000001ffffffffffff020004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x44050)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) (async)
sendto$packet(r3, 0x0, 0x0, 0x50, &(0x7f0000000080)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
socket(0x2d, 0x2, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0) (async)
writev(r7, &(0x7f0000003e40)=[{&(0x7f0000003a80)='Ji%', 0x3}, {0x0}, {0x0}], 0x3) (async)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async)
sendmmsg(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000000000000100100000500000010000000800000001a010000070000acdc568a814d08b800"], 0x20}}], 0x1, 0xc040) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf253b00000008000300", @ANYRES16=r5, @ANYBLOB="32003300d077117ef9ffffffffff080211000001ffffffffffff020004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x44050) (async)

1m11.654493661s ago: executing program 1 (id=227):
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x36, 0x31, 0x36, 0x0, 0x66, 0x0, 0x64, 0x60, 0x35, 0x30, 0x63, 0x35, 0x64, 0x37, 0x62, 0x31]}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
keyctl$restrict_keyring(0x1d, r0, &(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)='$-\\}-.@[X^)\x00')
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10000, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (rerun: 64)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff03000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000635bb5ec32d067eee11000000000000000000000000ffffffff00"/192])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") (async, rerun: 64)
write$uinput_user_dev(r1, &(0x7f0000000e40)={'syz1\x00', {0x4, 0x5, 0x57d6, 0x9406}, 0x17, [0x7, 0xaff, 0x2, 0x8, 0x9, 0xfffffff9, 0x4, 0x2, 0xc, 0x1, 0x680, 0x1, 0x8, 0x40, 0x4, 0x9, 0x8000, 0x3, 0x9, 0xb, 0x5, 0x1, 0x5, 0x4, 0x9, 0x3, 0x9, 0xb8af, 0x80000000, 0x67, 0xb9, 0x40000000, 0x2, 0x10001, 0x3, 0x6, 0x6, 0x3, 0x3, 0x6244, 0x7, 0xb, 0x8491, 0x2, 0x1ff, 0x1, 0x1, 0x5, 0x3, 0x7, 0x0, 0x800, 0x4, 0x9, 0x0, 0x5d, 0xe, 0x5, 0x55, 0x6, 0xd, 0xe55, 0x0, 0x1], [0x3, 0x1, 0x0, 0xffff7fff, 0x8000, 0x6, 0x7fffffff, 0x7fffffff, 0x57, 0xa, 0x30904b0b, 0x7fff, 0x8, 0x3c0a, 0xfa, 0x3, 0x7, 0x6, 0x8, 0x344, 0x6, 0x2, 0x0, 0x1, 0x6, 0xa, 0x40, 0x400, 0x4, 0x80, 0xcb5b, 0x401, 0x4, 0x7, 0x0, 0x40, 0x9, 0x8, 0x58ffbfa, 0x40, 0x0, 0x972, 0x0, 0x6, 0x7a9, 0x2, 0x7, 0x3, 0x4, 0xe, 0x4, 0x4, 0x6, 0x1, 0x6, 0x3, 0x8, 0xffff, 0x80, 0x1, 0x2, 0x11, 0xc5ac, 0x8001], [0xffff, 0xffffffff, 0x1, 0x7, 0x37fe, 0x4, 0x83, 0xd, 0x101, 0x2, 0x1000, 0x1ff, 0x80000000, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x2, 0x2, 0xfc000000, 0x2, 0x1000, 0x2, 0x5, 0xfffffffd, 0x14c00, 0x800, 0x2, 0x8, 0x4, 0x3, 0x2, 0x5, 0xfffffc00, 0x82eb, 0x9, 0x0, 0x7f, 0x80000001, 0x9, 0x3800, 0x8, 0x2, 0x7, 0x1, 0x7, 0xe96, 0x498, 0x100, 0x7, 0x200, 0x2, 0x1ff, 0x8, 0xc, 0x0, 0x5, 0x40, 0x1, 0x1, 0x8000, 0x5c1, 0x7], [0x3, 0xe11, 0xfffffffc, 0x7dd, 0x8000, 0x3, 0x9, 0xf, 0x8, 0x2, 0xffff, 0x40, 0x1ff, 0x4, 0x0, 0x753, 0x400, 0x5, 0xfffffffe, 0x0, 0x4, 0x4, 0xfffeffff, 0xfffffe8f, 0xff, 0x6, 0x9, 0x7f, 0x3, 0x4, 0xa7, 0x8, 0x1c0000, 0x200, 0x7, 0xfffffff7, 0x3, 0x8f, 0xfff, 0x7, 0x6, 0x5, 0x0, 0x1, 0x9, 0x534, 0x1ff, 0x9, 0x81, 0x7, 0x1, 0x8, 0x63b4, 0x2, 0x80000001, 0x0, 0x4a1f, 0xc, 0x7, 0xd, 0x80000000, 0xfffffffd, 0xe000000, 0x3]}, 0x45c) (rerun: 64)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0)
fstat(r3, &(0x7f0000000380))
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) (async)
truncate(&(0x7f0000000100)='./file0/file0\x00', 0x73) (async)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c9002000600000003000100"/34]) (async)
keyctl$link(0x8, 0x0, r0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

1m11.53367256s ago: executing program 1 (id=232):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={<r3=>0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) (async)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@quota}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@quota}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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")
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000100)={0x2, 0x6, 0x31, &(0x7f0000000000)=""/49}) (async)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000100)={0x2, 0x6, 0x31, &(0x7f0000000000)=""/49})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)

1m11.263685572s ago: executing program 1 (id=239):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$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")
r0 = gettid()
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0)
readv(r1, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2)
tkill(r0, 0x8)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3bd", 0x2}], 0x1}, 0x20000000}], 0x1, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
socket$inet6(0xa, 0x4, 0x7fffffff)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000000)={0x3, @sliced={0x3, [0xf, 0x100, 0x7, 0x9, 0x5, 0x8, 0xf01b, 0x9, 0x3, 0x8, 0x4, 0x1000, 0x3, 0x49bd, 0xffff, 0x5, 0x6, 0xf711, 0xff82, 0x0, 0x7092, 0x2, 0x0, 0x1, 0x5, 0x7ff, 0x78c6, 0x9, 0x9, 0xfff9, 0x8, 0x8, 0x1, 0x7ff, 0x9, 0x0, 0x2, 0x6, 0x8001, 0x7ff, 0x400, 0x2, 0x2, 0x4, 0x0, 0x3, 0x9, 0x4], 0x7}})

1m10.867956658s ago: executing program 1 (id=246):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xfffffffe}, 0x6e)
getpeername(r1, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4010)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
connect$qrtr(r2, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xc)

1m10.854133082s ago: executing program 32 (id=246):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xfffffffe}, 0x6e)
getpeername(r1, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4010)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
connect$qrtr(r2, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xc)

58.079876896s ago: executing program 0 (id=437):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000240)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0, 0x2}], 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x4, @mcast2, 0x6}], 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000bd9df315271eea774dfda9b67fb9fa000000000000000061"], &(0x7f0000000080)='GPL\x00'}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)

58.078869272s ago: executing program 0 (id=439):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r2=>0x0)
sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4)
remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0xc8f8, 0x3) (async)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc14668d4ff3eca9f}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xff}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'rose0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) (async)
r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='blkio.throttle.read_iops_device\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000480)=0x9, 0x12) (async)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x210000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r5=>r3, {<r6=>r3}}, './file0\x00'})
recvmsg$kcm(r5, &(0x7f0000000800)={&(0x7f0000000540)=@can, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/47, 0x2f}, {&(0x7f0000000600)=""/11, 0xb}, {&(0x7f0000000640)=""/236, 0xec}], 0x3, &(0x7f0000000780)=""/106, 0x6a}, 0x10000) (async)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x596f21f6cc5480f6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4054) (async)
ioctl$RNDZAPENTCNT(r6, 0x5204, &(0x7f0000000940)=0xf9) (async)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000a40)={0x5, 0x14, 0x8, 0x0, 0x96, 0x8, &(0x7f0000000980)="8cc3ce9f546d7843c75a848c4cfb7b663d88aa1c048ff7d495452f6c046cea9a959ac5cd6bba2cb6c8942b91b6ae4d894e5fe76880b5f30fd0f251669ff0c304fac86c0120eefee42cb3f3facc6b3250c4793a7586dc8150a49884d5fb57cff0bab2b986f3ec1eb65ca41a09180499d78254168f11f2c7514e9b829cad6da49548a1dd98466abf4e4c8ef5734f5f5bbdce20a4ca78df"})
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r5)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)
mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000bc0), 0x4) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000c00)={{0x1, 0x1, 0x18, <r8=>r6, {0x1}}, './file0\x00'}) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d00)={{r5, <r9=>0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)='%pK    \x00'}, 0x20)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000d40)=@generic={&(0x7f0000000c40)='\x00', r9}, 0x18) (async)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0)
read$FUSE(r10, &(0x7f0000000dc0)={0x2020}, 0x2020) (async)
sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x20, 0x3fa, 0x10, 0x70bd2d, 0x25dfdbfe, {0x1, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async)
bind$inet(r5, &(0x7f0000002f00)={0x2, 0x4e20, @empty}, 0x10) (async)
sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000003080), r5)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x1c, r11, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4040080) (async)
setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000003180), 0x4)

58.077306265s ago: executing program 0 (id=441):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r4=>0x0}) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r5=>0x0}) (rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@mpls_getnetconf={0x64, 0x52, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffe}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1000}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xc}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffff3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @NETCONFA_IFINDEX={0x8, 0x1, r5}]}, 0x64}}, 0x0) (async)
r6 = socket$kcm(0xa, 0x5, 0x0)
r7 = socket$kcm(0xa, 0x5, 0x0) (async)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0xadbe}, 0x1c) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) (async)
r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x0)
ioctl$VIDIOC_LOG_STATUS(r8, 0x5646, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) (async, rerun: 32)
r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newaddrlabel={0x54, 0x48, 0xb09, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x4, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x0, 0x1, @private0}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040055}, 0x0) (async)
r10 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x8916, &(0x7f0000000000)={r10}) (async, rerun: 32)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7}) (rerun: 32)

58.077155616s ago: executing program 0 (id=442):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

57.428048251s ago: executing program 0 (id=449):
socket$xdp(0x2c, 0x3, 0x0)
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f0000002700)=[{0x0, 0x0, 0x0, @broadcast}]})

56.097102827s ago: executing program 0 (id=462):
r0 = io_uring_setup(0x7272, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x1, 0x117}) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, &(0x7f0000000680)) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r2, r0], 0x2) (async, rerun: 64)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) (rerun: 64)
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f0000000100)={0x97c, 0x38, "bb7502766a86f4160816bdbbe3f59d06e25b2811449b1e91c9feceac357b2e4114641a309567b764b7db1ec3eeccb0b047459172ae90ffb4"}) (async)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8b20, &(0x7f0000000080)={'bond_slave_1\x00', @local}) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001100)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async)
syz_emit_ethernet(0x56, &(0x7f0000001200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0x7fffffff}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000000c0)={0x2, 'team_slave_1\x00', {0x5}, 0xdb}) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
r7 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNGETOBJECT(r7, 0x89e0, 0xffffffffffffffff) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000540)=ANY=[]) (async)
ioctl$sock_bt_hci(r5, 0x400448dc, &(0x7f0000000140)="e30bf68dc89031bb91126dddcc6aae6bb2c1bbbef48e83cc4445532a33ff")

55.987569771s ago: executing program 33 (id=462):
r0 = io_uring_setup(0x7272, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x1, 0x117}) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, &(0x7f0000000680)) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r2, r0], 0x2) (async, rerun: 64)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) (rerun: 64)
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f0000000100)={0x97c, 0x38, "bb7502766a86f4160816bdbbe3f59d06e25b2811449b1e91c9feceac357b2e4114641a309567b764b7db1ec3eeccb0b047459172ae90ffb4"}) (async)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8b20, &(0x7f0000000080)={'bond_slave_1\x00', @local}) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001100)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async)
syz_emit_ethernet(0x56, &(0x7f0000001200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0x7fffffff}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000000c0)={0x2, 'team_slave_1\x00', {0x5}, 0xdb}) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
r7 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNGETOBJECT(r7, 0x89e0, 0xffffffffffffffff) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000540)=ANY=[]) (async)
ioctl$sock_bt_hci(r5, 0x400448dc, &(0x7f0000000140)="e30bf68dc89031bb91126dddcc6aae6bb2c1bbbef48e83cc4445532a33ff")

4.556239107s ago: executing program 4 (id=1159):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=', @ANYRESOCT, @ANYRESDEC], 0x0, 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x4, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x8}, @dev}}}}}}, 0x0)

4.500383527s ago: executing program 4 (id=1161):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x643}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=cp864,iocharset=ate=1,iocharset=cp857,dos1xfloppy,utf8=1,utf8=0,uni_xlate=1,uni_xlate=0,uni_xlate=1,shortname=winnt,codepage=1251,utf8=0,shortname=lower,utf8=0,check=strict,iocharset=cp936,\x00'/212], 0x1, 0x36e, &(0x7f0000000a80)="$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")
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000880)={[{@jqfmt_vfsold}, {@noblock_validity}, {}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsold}, {@oldalloc}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@norecovery}], [], 0x2c}, 0x0, 0x51a, &(0x7f0000001300)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000200), &(0x7f00000006c0), &(0x7f0000000380)=[<r6=>0x0, 0x0], &(0x7f0000000980), 0x0, 0x2}) (async)
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000980)={&(0x7f0000000940), &(0x7f0000000880)=[{}, {}], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x400000000000016d, 0x0, 0x0, r8}) (async)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000a40)={0xfffffffffffffffe, r6, r8})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)

4.222786164s ago: executing program 4 (id=1168):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}, {&(0x7f0000003440)={0x136c, 0x15, 0x400, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x6}, @nested={0x1087, 0x161, 0x0, 0x1, [@generic="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", @typed={0x8, 0x31, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x9}, @generic="f53754f6ff21d51145efcad4c0ef18899a61bc0d99f1c4237f074dcade0dcb81bdf87f8b6017f9ea058df8579c40d9939ee2011cbb387031ec7c552a88cbd077b266f4173b38f78d0a0921a3de0a677d593a205ecc4a00b140f24b47c24bbaec03ec98247caf49d6359911a8f9906f9eaaac630d8c6302"]}, @nested={0x4, 0x156}, @nested={0x4, 0xf6}, @nested={0x241, 0x143, 0x0, 0x1, [@typed={0x14, 0xb9, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x28}, @nested={0x4, 0xac}, @nested={0x4, 0x1a}, @generic="e96e8208631cb94c5507fb9ae252859b42533c8b7f64f49a3f7cbd9a8fe78bf008be3aa48af6b95e9923f00fcee758cad7cf5a1507951ad33975a1adf88e598361799ce7f08979bcdbe51d6da8dd13ea4c59e7fa6cae90b0e1899cf5ae360a9d8ad601389f1d370a428847814d1d56677613bc2fb59b2491cf638966b3c4a1ab2fd743e99e4325e18a5a6c6f79edb9eadc3ad7092667685f83d1c100e9ba796879167bf0ba2f19b3fce170037674f38d4d9273ce6365902280ec268924c510d025103cdfe53c60c81386320ed7aa885ade026fde2b7883b05fa123ca", @generic="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", @generic="e0d133bf179dd3a2a04e2aca2f641cd4db516ca149c6081cd55009aff0ebe4e65b6e34d1dc14", @nested={0x4, 0x10e}, @typed={0x8, 0x67, 0x0, 0x0, @ipv4=@local}]}, @generic="8fac6f27081431fff07aac45b585b40c805b3497cccad6ded6bca6103f849e37a0bb5949e35ab589b27f6529eaf08d30bc75151f2bf8e14a5e0042d0d7c95c0d09307d721b5bb0c229a0adc107ff06c094b5da8be78201720139cadbbe4b0987449c609d1a0c4f3b79de726396f73d9891bd2b9d9fc07d0cef297c7eee"]}, 0x136c}], 0x2}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
fcntl$setpipe(r2, 0x407, 0x4)
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000200)='c', 0x1}, {&(0x7f0000001300)="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", 0xd01}], 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000085000000a000000018110000", @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r10 = socket(0x840000000002, 0x3, 0x5)
setsockopt$inet_int(r10, 0x0, 0x13, &(0x7f0000000000)=0xd, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005d090100000000007b0000000000000018010000646c6c2500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @private0, 0x1}, 0x1c)

3.287782155s ago: executing program 4 (id=1185):
syz_clone3(&(0x7f0000001280)={0x99000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4076, 0xfec, 0x0, 0x0}, 0x58)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001040), 0x101201, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)

3.223818249s ago: executing program 4 (id=1186):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
setreuid(0xee01, 0xee00)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000400)={0x20, 0x240, 0x0, 0x0, 0x0, 0x0, 0x4f49d087ff5dd623})
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_cache\x00')
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f0000000580))
syz_genetlink_get_family_id$tipc2(0x0, r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setrlimit(0xb, &(0x7f0000000100)={0x1, 0x9})
r4 = accept$inet(r1, 0x0, &(0x7f0000000180))
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={<r5=>0x0, @private, @broadcast}, &(0x7f0000000240)=0xc)
getresuid(&(0x7f0000000280), &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000340))
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000380)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010101, 0x4e23, 0x8, 0x4e24, 0x9, 0x2, 0x80, 0x80, 0x3c, r5, r6}, {0x3, 0x0, 0xa, 0x7, 0x400, 0x8000, 0x0, 0x1}, {0x3, 0x7, 0x2, 0x6}, 0xffef, 0x6e6bc0, 0x2, 0x0, 0x2, 0x3}, {{@in=@broadcast, 0x4d5, 0x33}, 0x2, @in=@loopback, 0x3502, 0x0, 0x3, 0x35, 0x8, 0x1a, 0xb}}, 0xe8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000016c0)=@newtaction={0xf24, 0x30, 0xb, 0x0, 0x0, {}, [{0xf10, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xec4, 0x2, 0x0, 0x0, {{0xa}, {0xe98, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x4001, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x7, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x8, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x3, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x8, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x7, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0xe72}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0x3, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f43, 0x7, 0x1}, {0x3ff, 0xc, 0xc52, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x474, 0x8, 0x1, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x400, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x280, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x3, 0x3, 0x9}, {0x3, 0x6, 0x80000000, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0x7}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x5, 0x800}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92c4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x7, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x74, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf24}}, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)

2.315562125s ago: executing program 4 (id=1208):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80080}, [@call={0x85, 0x0, 0x0, 0xa0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x24}, 0x94)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2)
close(0xffffffffffffffff)
r1 = userfaultfd(0x80801)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_clone3(&(0x7f0000002340)={0x80000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pselect6(0x40, &(0x7f0000000000)={0x3, 0xffff, 0xb06, 0xa36, 0x41e2, 0x6, 0xa, 0x8}, &(0x7f0000000040)={0x9, 0xac8, 0x7, 0x2, 0x316, 0x200000, 0x9, 0xfffffffffffffffa}, 0x0, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6e, 0x6e, 0xc, [@datasec={0x8, 0x8, 0x0, 0xf, 0x2, [{0x2, 0xffff, 0x111d}, {0x4, 0x0, 0x8}, {0x1, 0x4, 0x1}, {0x1, 0x9, 0x2}, {0x1, 0x2, 0x7ff}, {0x5, 0x4, 0xf}, {0x4, 0x2, 0xffff8000}, {0x2, 0x1ff, 0xffff8000}], "af24"}]}, {0x0, [0x2e, 0x2e, 0x30, 0x5f, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30]}}, &(0x7f00000005c0)=""/102, 0x94, 0x66, 0x1, 0x3, 0x10000}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000f80))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r4}, &(0x7f0000000940), &(0x7f00000009c0)=r3}, 0x20)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x9, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0x1, 0x0, 0x4, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x76}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbf}], &(0x7f0000000440)='syzkaller\x00', 0x2, 0x5, &(0x7f00000004c0)=""/5, 0x41000, 0x40, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000700)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x16af9, r3, 0x1, &(0x7f00000007c0)=[r7], &(0x7f0000000800)=[{0x0, 0x3, 0xd, 0xb}], 0x10, 0x80}, 0x94)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0xfffffffc, 0x40002, 0x2, {0xd, @win={{0x8, 0x0, 0xfffffffd, 0xa}, 0x6, 0x6, 0x0, 0xfffff801, 0x0, 0xee}}, 0x3})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x23)
r9 = socket$alg(0x26, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}})
mq_timedsend(r8, &(0x7f0000000300)="001dd3905edcadfec327cdcd93df4bf40300238421f766b3e3d63180c1d621ee39124aef15e67cd22883afba06716cc5b20441bca6ded342f53d68ade0620756c26ca67e46aa32eee44d35c65e886409edaea8fbdf0390b1b87b390d06ef719da12beb08bf05f6f55d85cccf076b39a32f81c6eb61651083790d875afda3eac45ec414e3965e66d049cd2e4330b3dd5f7eb7451b2d20fa93131e238231a674c81ccb2891dc4234e539941994a9d64f04eb7f6e163effed2f45e8f43725736f6aa45511c74220453d4f2f6f897717af5de310789a", 0xd4, 0x8000000000000000, &(0x7f0000000400)={0x0, 0x989680})

1.131976118s ago: executing program 3 (id=1236):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x1b7a81)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0xe, @pix={0x0, 0x43, 0x31303453, 0x0, 0x603a, 0x0, 0x9, 0xfeedcafe, 0x3, 0x8, 0x0, 0x1}})
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x20008830)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4], 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e26, 0xfffffffe, @empty, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) (async)
getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f00000020c0)=""/171, &(0x7f0000000000)=0xab)
r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x33}}) (async)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000500)='hfsplus\x00', 0x1000, &(0x7f0000000740)='\x8e\xf7\xb0\x8a,\xbd\xb3\xcb\t\x00\x00\x00\x8c\x03\x00\x00\x00\x00\x00\x00\x00\xaf\xce|\xa8\xbaa\\q\x97\x0f\xec^\x9c\x8e\xde\xd5\x9f\xac\xa0g\xd8}u\xf2\x12\xd1m\xbbU\xe1\x03\x85\x82\x130#U\xcd#0\xf5]Pt\x1b\xa0\xd3eu\xd1\xab\xa6\xca\xe3:AL~\xa7\"\x12\xadN1&y7K\xe5\xe8\xc6\xac\x9b\xfa\xea\x95ak\f\x00\xca\x8e\x0fn\xe0\xa9\xfd\xb9B\x03\x15\x05)\x1a\xb4Y\x8e1\xaf\xc09S\xcfX\xc0\x18\xf9\x19O1\xa0]\xbf_2\xe1\xc4T\xd0\\\x9aX\xf6\x1a\x06\x03\xdc+\xd8*\xf6k,]\xcc\x01\xf9\x94\x1bt\xa3\x89\xf7\xd83\xc7\xf3DDy\x06\xa3\xf0~\xc2\x8f\x16\xb8\br\x91\xb3/\x9a(\xe4\xd3K')
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$unix(r7, &(0x7f0000000080)={&(0x7f0000000180)=@abs={0x2, 0x0, 0x4e24}, 0x6e, &(0x7f0000000300), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYBLOB="860d64efbf8308d1bbbaf593e1233a6cd4d7e707f3040391d1c81f8f71c00dd9f265b537f0dcc07b1e30a4561d65866257550d40d25b1d0444264329fb0e43e72ac17a02a2cf4b7c49840ee204ff3fb9bd52a59b25b9a4ab42a62fad40bbb0cf60e2db925261d620146938b1a081039f051a01532557f6e61f633338bd7cb8226148965c1be7ce9ee64e83109de1eda880439cd8debefcae07ef77f35194d55ba275c7703299e5d7ddf33c01357a6ad1c3bdde7aa299525177d193671149fc0b67f1ff2dd0b98305bd402a79b8b2803d720506aad58c9171aed3896bfe75f7db699ce027f76fd2597fe49e458390c75667f79c04abe0", @ANYRESHEX], 0x18, 0x10}, 0x0) (async)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x6e)
sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xd}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}}, 0x1) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c00000e", @ANYRES16=r9, @ANYBLOB="0700000000000000000002000000480001800600010002000000150000000000000000010108000700000000000000000000c144cf0e7bf99510745253dbc36c922510b1757ce226d0e82fec6a6032156f2b956f60854e5a405b12d6abb1a476a835c6a323e615de18e7b3c465cac523ed283692bc301c4b5087b4f9ac77cbf86e5740ad50c3d2f45ba65b383b902378a359dfa083278cec0371c51b8ed2b7ddb7ff20", @ANYRES32=r11, @ANYBLOB="050002000c0000000800060008000000060005004e2000000500020030000000"], 0x5c}}, 0x0) (async)
openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20100, 0x0)

1.130318528s ago: executing program 3 (id=1237):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=0x4)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x5, [@float={0x1, 0x0, 0x0, 0x10, 0x10}, @var={0x10, 0x0, 0x0, 0xe, 0x4, 0x3}, @fwd={0xb}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x6}}, @float={0xa, 0x0, 0x0, 0x10, 0xc}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x1c, 0x0, 0x39, 0x2}, @enum64={0xc, 0x7, 0x0, 0x13, 0x1, 0x3, [{0x10, 0x0, 0x10001}, {0xe, 0x7, 0x1ff}, {0xd, 0x8, 0x5}, {0xa, 0x81, 0xfffffffe}, {0x7, 0x1, 0x2}, {0x6, 0x401, 0x9}, {0xb, 0xf, 0xbfaf}]}]}, {0x0, [0x0, 0x5f, 0x0]}}, &(0x7f00000003c0)=""/153, 0xd9, 0x99, 0x0, 0x8}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r1, r2, 0x2, 0x3, 0x4}, 0x50)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r3, 0x26579000)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r4, r0, 0x0, 0x23b)

1.119960281s ago: executing program 3 (id=1238):
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x10240, 0x132, 0x1}, 0x18)
close(0x3)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) (async)
unshare(0x22020400) (async)
umount2(&(0x7f0000000180)='./file0\x00', 0xb)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000240)={0x34, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x200000d1) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10810}, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) (async)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) (async)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x1000040, &(0x7f0000000540)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}], [{@hash}]}}, 0x0, 0x0, &(0x7f0000000600)="fb732301ff2f8d17417180b81c57b330fa6466815218619f2abcb27e33e8c8c52f4aeefda87084ffda8ab731a3c689800751cd547cdfe0c831cd67a6a3877c59de077058c0326734574f8d80d56e675bed0f687d430287e97e0b9dbbdade375aa826a5804bea4913d463c67ac056749ab65022c6e1ecba24f2514aefa5dc6ebeec66d6d3bbf7f8605a1731903b87feff949e1de13d51a87a092b1fbee88137e882dda6c3b97a45263e9657c839878020ea247dc72a394c") (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
sendmmsg(r8, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)="1973a642291c3ce405f6b0e5f53d798391e303ccd15d57e44a7e0ecc69baa205c485dec9e5e5185be5125682d3e3be88439786bd31e97de729b6efbf15b77cd5e6a4ac94fa71a40fd7e1db7c968dbfbd618c2716077d9ffc7871bf31ad2577e4b8094cc2ef1a8f882e485f315ab7d6adf2b15944032bd7cfed9a2e9dcea1fd70bdbb176e15fbe69de9b294e2a9ec4627e5b4059ca9ab6f85259f0d274708e8c0e0d6a8c89883fca148a03540f4a21650985111f711", 0xb5}, {&(0x7f0000000780)="45e1360b13825fbe2283a207eb373e7cb138b23441861a2e486e041addd40cb7feec96f6675f5f888839be6705169320f3de7d39f08915d9f8c246c8c2d2d80f3a02c71940beef181bc5071b26c47c4833d8122e9e1145", 0x57}, {&(0x7f0000000800)="778bb245fa7229deb848a69c1c430a9e2cb63f86ea55b0dc8ce3fdcf14d447b528828edda647950cf1442268c2a975632e2e1f7d7fdbc061bec024ec01b970de37b8827047c4aaf060f290f916a61be2e0a3500a03389359bb625efbe82a51278912d7898f81b476b3f9d78d820fa801d5c46f656d13caceb97100859c7094bebb47fc2d3c581ea1ceec95d9e7aa8e66", 0x90}], 0x3, &(0x7f0000000900)=[{0x48, 0x3a, 0x5, "33aedd7e184d985e86587a44fcc975aa681deccdf1d8d990cabeeb85be886d60662e7a43d46e208e8d09310e219c9d742996c6b206a2c6"}, {0x98, 0x0, 0x3, "2d0984a9b019eaf7e66d9fd4ad8b4066fcbfa43383e6c52a5a29a7a388feaa56efef81fe14861f9479c3139a2c9da5e439c5cdc9332c4e2691e7c6397f8e1ffaeace57a7fc66c480ac781614631dba38510fdf62cfcf99e74f0357a33e341c652fa1579f4359f1f822cae42f18f3a21a2d172060d4bf554cbb5bd55630097ca88a1faeb200a7"}], 0xe0}}, {{&(0x7f0000000a00)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a80)="c5a62fbe06aeed4d97cab98ecf287d5b83144153b5", 0x15}], 0x1, &(0x7f0000000b00)}}], 0x2, 0x40080)

1.071946932s ago: executing program 3 (id=1239):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001fb40)={0x4c, r4, 0xb97534d5fe9704cf, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1000}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x4c}}, 0x0) (async)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2810002}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x60, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x7}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@generic="156140b5ed"]}, 0x1c}}, 0x0) (async)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f00000002c0)={0x83ad, 0xa, 0xb78, 0x5, 0xc, "b15c933095a5b821784e2c16a09b4fcaba3f75"})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x6, 0x5}, {0x0, 0x2}, {0x7, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x68, 0x2, [@TCA_FLOW_EMATCHES={0x5c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x579}, {0xb, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x9f, 0x9, 0xfff7}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xedab, 0x1, 0x3}, {0x8, 0x9, 0x4, 0x4, 0xd, 0x0, 0x1}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x39}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x0)

981.254301ms ago: executing program 3 (id=1241):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x8}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfff8}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xdad, 0x8007d, 0x2, 0x10, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ad, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x4, 0x9, 0x1, 0x1f461e2c, 0x7, 0x0, 0x7fff, 0xb, 0x6, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x7, 0x1, 0x20000004, 0x82, 0x0, 0x44a, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff7, 0x129432e6, 0xfffffffe, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x5, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0x7f, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x5, 0xfb, 0x5, 0x800, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20006, 0x4, 0x9, 0x8, 0xb, 0x6, 0x0, 0xa, 0x3, 0x9, 0x2009, 0x2, 0x7f, 0x9, 0x101, 0x3, 0x9, 0xffffffff, 0x17, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x3, 0x80000000, 0x20000402, 0x7f, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x9, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0xffffffff, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xb4a, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffef9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x20003, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x9, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7ffb, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x4, 0x15c, 0x60ab, 0xfbd, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2a, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x1fc, 0xffff3441, 0xfff]}, 0x45c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)

902.621671ms ago: executing program 2 (id=1242):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@delsa={0x70, 0x11, 0x400, 0x70bd2b, 0x25dfdbfe, {@in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x4d5, 0xa, 0x32}, [@replay_esn_val={0x38, 0x17, {0x7, 0x70bd2b, 0x70bd27, 0x70bd27, 0x70bd29, 0x4, [0xffff, 0x2, 0x40, 0x1, 0x0, 0x9, 0xc4]}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0)

825.958288ms ago: executing program 2 (id=1244):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0)

825.124516ms ago: executing program 3 (id=1245):
recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000000)=""/155, 0x9b, 0x40000000, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x2, @broadcast, 'ip6erspan0\x00'}}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpid()
clock_gettime(0x0, &(0x7f0000000e00)={<r2=>0x0, <r3=>0x0})
recvmmsg(r0, &(0x7f0000000d00)=[{{&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/254, 0xfe}], 0x1}, 0x380000}, {{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/57, 0x39}, {&(0x7f0000000400)=""/66, 0x42}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000000540)=""/20, 0x14}, {&(0x7f0000000580)=""/187, 0xbb}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/182, 0xb6}], 0x7, &(0x7f00000007c0)=""/228, 0xe4}, 0x7}, {{&(0x7f00000008c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000940)}, {&(0x7f0000000980)=""/7, 0x7}, {&(0x7f00000009c0)=""/221, 0xdd}], 0x3}, 0x408000}, {{&(0x7f0000000b00)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/210, 0xd2}], 0x1, &(0x7f0000000cc0)=""/48, 0x30}, 0x40}], 0x4, 0x2, &(0x7f0000000e40)={r2, r3+60000000})
r5 = accept4$tipc(r4, &(0x7f0000000e80)=@name, &(0x7f0000000ec0)=0x10, 0x800)
setsockopt(r5, 0x4a, 0x2d5, &(0x7f0000000f00), 0x0)
ioctl$XFS_IOC_DIOINFO(r4, 0x800c581e, &(0x7f0000000f40))
r6 = epoll_create1(0x80000)
epoll_pwait2(r6, &(0x7f0000000f80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000001000)={0x77359400}, &(0x7f0000001040)={[0x8]}, 0x8)
r7 = syz_open_dev$usbmon(&(0x7f0000001080), 0x4, 0x1)
ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x62a73)
ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000010c0))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000001100)={'batadv_slave_0\x00', {0x2, 0x4e24, @loopback}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000001180), r4)
sendmsg$FOU_CMD_GET(r8, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x84, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008090}, 0x4000000)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000001340))
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$bt_hci(r8, 0x0, 0x3, &(0x7f0000001380)=""/198, &(0x7f0000001480)=0xc6)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r4)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r11, &(0x7f0000001740)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f0000001540)={0x1a4, r12, 0x4, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[{^/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'fou\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xa0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$\xc3\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/usbmon#\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfa06}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x68b7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x994}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/virtual_nci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40}, 0x80)
clock_gettime(0x3, &(0x7f0000001780))
socket$nl_generic(0x10, 0x3, 0x10)
r13 = semget$private(0x0, 0x2, 0x74)
semtimedop(r13, &(0x7f00000017c0)=[{0x4, 0x359d, 0x1000}, {0x1, 0x0, 0x1000}, {0x0, 0x800, 0x800}, {0x4, 0xfd, 0x1000}, {0x5, 0x5, 0xc00}, {0x4, 0x1, 0x800}, {0x4, 0x9, 0x2800}], 0x7, &(0x7f0000001800))
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r14, &(0x7f0000001a80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000018c0)={0x15c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfe9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9, 0x3, "61c8530257"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x271}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x140}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x4011)

729.149781ms ago: executing program 2 (id=1246):
socket$packet(0x11, 0x2, 0x300) (async)
socket$packet(0x11, 0x2, 0x300)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
listen(r0, 0x210200)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0x48028)
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000002780)={0x1ff, 0x826, 0x0, 0x6}) (async)
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000002780)={0x1ff, 0x826, 0x0, 0x6})

563.378927ms ago: executing program 6 (id=1247):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x70bd29, 0x25dfdbfc, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_ENCAP_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000430001002dbd7000ffdbdf25e4ffffff04000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000002c0)={0xfffffffa, 0x6, 0x6785, 0xe0, 0x9, "e18bce5f0c41739cf68f54ab41bf0b7a54ec3d"})
ioctl$TCFLSH(r0, 0x540b, 0x1)

508.21372ms ago: executing program 2 (id=1248):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x400f)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x400000, 0x35c)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='veth1_vlan\x00', 0x3, 0xfffffffffffffff4, 0x7ff})

507.07645ms ago: executing program 6 (id=1249):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="01010000100013c260f3122aabe0216608df4a466e3081067beffa7c09d36f0767d5ad4600529344ad734808a5f3ba38f34cf34471a29e652c80bf1451023b22ff99403969e91b87623a42a9f25e8c8a65a9becb8f49d17332759b487456b6566eb0977a4b525fc8b9b921996e4d91b026682a58affd73cb67d2dbec12fdf91ba3b154f1fe3a2c555ffc397eb58f3d11862f0c18fc34f164ab1b05d1f2ea8dad3b1dda8add7b202854"])
io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x6506, 0x0, 0x3}) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000010000d0401000000fcdbdf25000000008355344d60b87ca961fb2db697f6a4eacc351c9cfd79700cbcfa3e79b02a204ad7207346f430c2c05bb01d6a4a83592b26ae967419daf77ceae9f9bc78ecf757098e0adb441f9167aac0d4c1c27806f083ae5fb582ed82d845039587548e1fd1802cf9f129cb1689dfe5bead24a722", @ANYRES32=r6, @ANYBLOB="00000000022501000a000100aaaaaaaaaa0c0000"], 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0xc000) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) (async)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
getsockopt$inet_opts(r10, 0x84, 0x8, 0xfffffffffffffffe, &(0x7f0000000280)=0x4b) (async)
r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) (async)
r12 = fsmount(r11, 0x0, 0x0)
r13 = openat$cgroup_pressure(r12, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r13, &(0x7f0000000300)={'full', 0x25, 0x1ff, 0x20, 0x5}, 0x1d) (async)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)

506.698234ms ago: executing program 2 (id=1250):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="10080400220002001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB="08000800a9"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
unshare(0x28000600)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="726f6469722c726f6469722c696f636861727365743d63703433372c696f636861727365743d63703733372c726f6469722c636f6465706167653d313235312c73686f72746e616d653d77696e39352c726f6469722c757466383d312c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d312c757466383d302c726f6469722c696f636861727365743d63703836332c00de9784e4d49a8900bd2595c7467be73cb2", @ANYBLOB="3c447410f135ee9f8ba815574354d29ac3806f756ccf451754c64fa77420bbca294a8cc39a6a5b7cfcf86636f6a7e11d1676be702b7019430b6fdb9c92715d1393caeaf6b9d713ba8f56ade5aa0f1050a954b7"], 0x1, 0x2e8, &(0x7f0000000640)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={0x0, r2}, 0x18)
syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x808, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1, 0x1c2, &(0x7f0000000280)="$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")

458.164088ms ago: executing program 2 (id=1251):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b1596d35e", 0xc9}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223f5739e45", 0xc9}, {&(0x7f00000002c0)="fad33ead642df7e37283a252c0d69a227ea9f9912d02b8d41286420f041d9cb6b60721727253b3d4e4dbe2a72badc82629048bd1097cead73e38088ed1072d83b6e3f58b32697943faa33ca17781db28bfa7b61d853bd799b7e018234bf43637696cd26f30a28c556b304733b011225a9ee0b214f92a45438b6bcc83d200069ec7cad1d5e0", 0x85}], 0x3}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x550}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

276.509326ms ago: executing program 5 (id=1254):
r0 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c20000000000950000120000000079c1221a5629f87281ed8dd57a36c4bf2acc4811c8ac0ea254f2"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de)
fsetxattr$security_evm(r0, &(0x7f00000001c0), &(0x7f0000000200)=@md5={0x1, "788ab2e5d05496237826050a6cb1e69a"}, 0x11, 0x2)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000140)={0x1, 0x0, 0x3d, 0x2ad944f6, 0x912c, 0xef})
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c20000000000950000120000000079c1221a5629f87281ed8dd57a36c4bf2acc4811c8ac0ea254f2"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) (async)
fsetxattr$security_evm(r0, &(0x7f00000001c0), &(0x7f0000000200)=@md5={0x1, "788ab2e5d05496237826050a6cb1e69a"}, 0x11, 0x2) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000140)={0x1, 0x0, 0x3d, 0x2ad944f6, 0x912c, 0xef}) (async)

263.839437ms ago: executing program 6 (id=1255):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x90}}, 0x40044)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x28f, 0x1001, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f00000001c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r2, 0xfffffffa, 0x1fc, 0xb, 0x1fd, 0x1})
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1406, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x4000010)

258.026095ms ago: executing program 5 (id=1256):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4008800)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}]})

187.916432ms ago: executing program 5 (id=1257):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind(r0, &(0x7f0000000040)=@can={0x1d, r1}, 0x80)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))
r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10)
recvfrom$phonet(r2, &(0x7f0000000180)=""/108, 0x6c, 0x10060, &(0x7f0000000200)={0x23, 0xe, 0x7f, 0x7d}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={<r4=>0x0, 0xce}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000002c0)={<r5=>r4, 0x7fff}, &(0x7f0000000300)=0x8)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x98, 0x464, 0x400, 0x70bd2d, 0x25dfdbff, "110253a731f074264638599a3efaade024870c9ae061407d015ea9c816b834f1ddb3aac8c63f7b46fe308b55c47b97921521d12a7299f49364cd162219078688d380921214b114e56960a427a27597652e8ad8307da83eea7a3f1a1f074ee55aa83245cc96e6a340ce32e58825da5806534e38f5783970cac586c7737c39b8824ae2954d8e59d056", [""]}, 0x98}, 0x1, 0x0, 0x0, 0x229fcca54b268ae2}, 0x8000)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa55}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}]}, 0x54}}, 0x20000800)
write(r6, &(0x7f0000000640)="9de83de139c9c5daeda3d2fd1c8c31f46f6d59a47d726f37cedbb18e292c3c1cfa3be5a1e3a2fe278dc40e98565ffec3504df67d4017e2374e9207b6e8f8f18797", 0x41)
ioprio_get$uid(0x0, 0x0)
r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x20000, 0x0)
recvmmsg$unix(r8, &(0x7f0000000f40)=[{{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=[@rights={{0x20, 0x1, 0x1, [<r9=>0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/78, 0x4e}, {&(0x7f0000000900)=""/135, 0x87}], 0x2, &(0x7f0000000a00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/136, 0x88}, {&(0x7f0000000c40)=""/204, 0xcc}, {&(0x7f0000000d40)=""/201, 0xc9}, {&(0x7f0000000e40)=""/23, 0x17}, {&(0x7f0000000e80)}], 0x6}}], 0x3, 0x6c0c7888448d0e63, &(0x7f0000001000)={0x77359400})
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000001040)={<r13=>r5, 0x1}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={r13, 0x4}, 0x8)
socket$netlink(0x10, 0x3, 0x1)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000001100), &(0x7f0000001140)=0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r9, 0x8982, &(0x7f0000001180)={0x8, 'wg1\x00', {'nicvf0\x00'}, 0xc})
syz_open_dev$usbfs(&(0x7f00000011c0), 0x200, 0x101000)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001200)=0x4)
getpid()
waitid$P_PIDFD(0x3, r11, &(0x7f0000001240), 0x20000000, &(0x7f00000012c0))
recvmsg$can_raw(r8, &(0x7f0000001980)={&(0x7f0000001380)=@nl=@unspec, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/216, 0xd8}, {&(0x7f0000001500)=""/36, 0x24}, {&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/119, 0x77}, {&(0x7f0000001680)=""/160, 0xa0}, {&(0x7f0000001740)=""/196, 0xc4}], 0x6, &(0x7f00000018c0)=""/133, 0x85}, 0x0)
setsockopt$sock_void(r0, 0x1, 0x48, 0x0, 0x0)
ioctl$HDIO_GETGEO(r10, 0x301, &(0x7f00000019c0))

187.528232ms ago: executing program 6 (id=1258):
r0 = socket(0x18, 0x1, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x15, r1, 0x1, 0x7, 0x6, @random="5761fff322f2"}, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xd8, 0x6a, &(0x7f00000000c0)="8d91c7c65d869840c6d0b1de62c6040e1d7ae17419389af8c0a008d6befa6d2221cf30e4409b61ff241c8f68455abbf9600d468bcf281caf0a57a6f6b3af236eb2584c6e5f41ed31ce6aaccf858c5d7bf4b73f3d4e42514dc63824dc7252732e1c44168a7c604d7faeae88cf17a3c1f985ad827fdbf45b087a06205f5f2fa12ec65397cf2bd5ec9fd37d39dac27e773239451ddc32ce5795c317b439ba6fd7ffc40524e3e168a475618ee2e7406b8f6a08a56e18662ab8ab9aa6ac9a378fd249f17ec57a2c848be2df089526aabebc0c06741eeeeb335e8d", &(0x7f00000001c0)=""/106, 0xfffffff9, 0x0, 0xd9, 0x97, &(0x7f0000000240)="6e740125982193f34912503ec66da394bdc4215f92fede5ce32ef03b6815c8b243c17342561a46c870f8004ca7cc9fdca4a6816892af931248659650ee50338eea6f4ee8b274ce7325bad3f56aac53e8ac99f14bf283644006d9dc21b2018beeb47b86327493a3835cab5f1b30421951772b95a4ca589245ee31ae8622f6d8d4237f9255e0f0fb924be1ae63d336f357b008adc0e0518e8fde46c4fa0bf8bf6d0c6cdd1c7cb4c8f4012a78a514c50f01e62277768a2b3ceb05b296d0604de3ab90a4854e3e248392b0efdaef5f931d836d20f703e369eb39a5", &(0x7f0000000340)="9d8132fccb4d2f6369a2cf7750321b5afe913a870b2c0f8b7d6784abe2d1dc0fd99f5e137d2b3ea1ef2690015b616b4470e2f1acc579b2aa366b287c636119dde604daa0bf03cf6030730824c558f1ceac4c1ddc6a37db6c9fb607dc47c859ff3fcabf98c2541b84a9405c557d85ec6bb14f4fc7422821e19bac044735a88f68c86f99f48de7e92d261625b6b96d544b222e4322b7ecce", 0x4, 0x0, 0x5}, 0x50)
readv(r2, &(0x7f0000000540)=[{&(0x7f0000000480)=""/112, 0x70}, {&(0x7f0000000500)=""/54, 0x36}], 0x2)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000580)={{r0}, 0x4, 0x9a, 0xec2})
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000005c0)={'filter\x00', 0x1000, "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"}, &(0x7f0000001600)=0x1024)
r3 = syz_open_dev$vim2m(&(0x7f0000001640), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000001680)={0x5, 0xff})
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000016c0)=0x2, 0x4)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001740)={&(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, <r5=>0xffffffffffffffff})
ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000001780)=0x8)
ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, &(0x7f00000017c0))
r6 = syz_open_dev$mouse(&(0x7f0000001800), 0x7803df64, 0x2001c2)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000001840)={0x0, 'virt_wifi0\x00', {0x2}, 0x8001})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000018c0), r5)
sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000001b00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40090}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001900)={0x188, r8, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x99}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf2, 0xa9, @random="acf32267585a7fd8d27580a46bc70272bc36c786944f3066ab43de9d2c1ac4e20c40dcf29981165696125fbdcb0a6c1d0e5f0e2d376f8afd42d42ee642f971c6ec3ede4ee0c0c123fd052350bd23a247526892d3d813a3e4753682481ea49c950afb699dc9711d316fdcafbfe31816b65792d6f90de7fce42979cb37991de272f8ebb42d5230b2ac8b4b262aa28a194fdbdcea618aab5bf03341b73b7a02cad4085381aa9e9055020c04d2826bf883ddb1648958e23afa00b473af60f919d66d409c4743e3fd1c49f8d23736350739e5b6d9dd32172dfbb9f6d574529cf1a53ed35fb2f924b00bc8a78580e37677"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x200}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x10, 0xa9, @random="5917f65be44e0c58069f13af"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x188}, 0x1, 0x0, 0x0, 0x40050}, 0xc885)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001b80)={0x4, &(0x7f0000001b40)=[{0x400, 0x4, 0x3, 0x53d5}, {0x100, 0x1, 0x9, 0x7f}, {0x1000, 0xa, 0x8}, {0x81, 0x9, 0xa, 0xe18}]})
r9 = socket(0xc, 0x800, 0x4)
r10 = accept$inet6(r0, 0x0, &(0x7f0000001bc0))
accept$inet6(r10, 0x0, &(0x7f0000001c00))
bind$can_j1939(r5, &(0x7f0000001c40)={0x1d, r1, 0x3, {0x1}, 0xfe}, 0x18)
recvfrom$inet6(r5, &(0x7f0000001c80)=""/160, 0xa0, 0x40020121, &(0x7f0000001d40)={0xa, 0x4e22, 0x10001, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000001d80)={0x10, 0xa3, 0x8, 0x46e}, 0x8)
bind$vsock_stream(r9, &(0x7f0000001dc0)={0x28, 0x0, 0x2711}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48100}, 0x10)

185.412384ms ago: executing program 6 (id=1259):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000500))
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r4, 0x4)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001f"], 0x5c}}, 0x40)

172.930215ms ago: executing program 5 (id=1260):
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r0 = userfaultfd(0x80801)
r1 = add_key$user(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x3}, &(0x7f0000001000)="28fe", 0x2, 0xfffffffffffffffe)
keyctl$read(0xb, r1, &(0x7f0000001200)=""/236, 0xec)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) (async)
userfaultfd(0x80801) (async)
add_key$user(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x3}, &(0x7f0000001000)="28fe", 0x2, 0xfffffffffffffffe) (async)
keyctl$read(0xb, r1, &(0x7f0000001200)=""/236, 0xec) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) (async)

155.470081ms ago: executing program 6 (id=1261):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @multicast2}}}, 0x108)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0)
unshare(0x26020480)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x1, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108)

143.605791ms ago: executing program 5 (id=1262):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00')
socket$l2tp(0x2, 0x2, 0x73) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) (async)
mount$9p_rdma(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff)
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r5=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000000340)=0x4c)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, <r8=>0x0}, &(0x7f00000006c0)=0xc)
setresuid(r6, r7, r8) (async)
bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async)
recvmmsg(r4, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0x46}], 0x1, 0x40, 0x0)

0s ago: executing program 5 (id=1263):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000730138000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x580c6000)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
setxattr$incfs_metadata(&(0x7f0000000300)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000080)="4fc16727844282ac6ab6e42886659b587040ce593a015caecb76aa54f2014d28c42e8d5cd5bf733e767f24acb37c904d2cee3385f92016762587a0f516eddb0f8896d6b807de3e2e360317cb581cd4381b", 0x51, 0x1)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x8}}, 0xb8}}, 0x0)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000010001fff000000000000000000020000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b0001006272696467650000340002800800320001"], 0x64}}, 0x0)

kernel console output (not intermixed with test programs):

iled
[   47.118668][ T5949] FAT-fs (loop5): Directory bread(block 69) failed
[   47.118689][ T5949] FAT-fs (loop5): Directory bread(block 70) failed
[   47.118699][ T5949] FAT-fs (loop5): Directory bread(block 71) failed
[   47.118719][ T5949] FAT-fs (loop5): Directory bread(block 72) failed
[   47.118729][ T5949] FAT-fs (loop5): Directory bread(block 73) failed
[   47.173656][ T5955] netlink: 68 bytes leftover after parsing attributes in process `syz.5.285'.
[   47.275832][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.288'.
[   47.279547][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.288'.
[   47.419507][ T5989] loop2: detected capacity change from 0 to 512
[   47.437164][ T5995] netlink: 24 bytes leftover after parsing attributes in process `syz.5.296'.
[   47.472250][ T4686] Bluetooth: hci0: command tx timeout
[   47.491542][ T6000] loop5: detected capacity change from 0 to 512
[   47.494968][ T6000] EXT4-fs: Ignoring removed nobh option
[   47.498165][ T6000] EXT4-fs (loop5): orphan cleanup on readonly fs
[   47.499825][ T6000] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.298: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[   47.503810][ T6000] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   47.505101][ T6000] EXT4-fs (loop5): Remounting filesystem read-only
[   47.506390][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'.
[   47.510283][ T6000] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.5.298: ea_inode dec ref err=-117
[   47.510396][ T6000] EXT4-fs (loop5): 1 orphan inode deleted
[   47.510869][ T6000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   47.532803][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.583205][ T6012] loop5: detected capacity change from 0 to 512
[   47.598364][ T6012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.608142][ T6012] EXT4-fs error (device loop5): ext4_resize_begin:60: comm syz.5.302: resize_inode disabled but reserved GDT blocks non-zero
[   47.627768][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.661668][ T5909] syz_tun: left allmulticast mode
[   47.712212][ T6028] netlink: 'syz.5.306': attribute type 2 has an invalid length.
[   47.718176][ T6027] loop5: detected capacity change from 0 to 128
[   47.744229][ T6033] loop2: detected capacity change from 0 to 512
[   47.749626][ T6033] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   47.749663][ T6033] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[   47.749676][ T6033] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.308: Corrupt directory, running e2fsck is recommended
[   47.750604][ T6033] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   47.750735][ T6033] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.308: corrupted in-inode xattr: e_name out of bounds
[   47.750750][ T6033] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   47.750915][ T6033] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.308: couldn't read orphan inode 15 (err -117)
[   47.750928][ T6033] loop2: lost filesystem error report for type 5 error -117
[   47.751496][ T6033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.753545][ T6033] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   47.753564][ T6033] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[   47.753573][ T6033] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.308: Corrupt directory, running e2fsck is recommended
[   47.756398][ T6033] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   47.756412][ T6033] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[   47.756422][ T6033] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.308: Corrupt directory, running e2fsck is recommended
[   47.764921][ T6033] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   47.764936][ T6033] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[   47.764945][ T6033] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.308: Corrupt directory, running e2fsck is recommended
[   47.768933][ T6033] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   47.769508][ T6033] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.308: path /51/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[   47.771300][ T6033] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 8: comm syz.2.308: path /51/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[   47.792455][    C1] vxcan1: j1939_tp_rxtimer: 0x00000000f2166a41: rx timeout, send abort
[   47.806854][ T4679] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.825406][ T6039] ������: renamed from vlan0 (while UP)
[   47.910689][ T6050] pimreg: tun_chr_ioctl cmd 1074812118
[   47.911751][ T6050] syzkaller0: entered promiscuous mode
[   47.911762][ T6050] syzkaller0: entered allmulticast mode
[   48.080054][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'.
[   48.082808][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.322'.
[   48.088880][ T6076] team1: entered promiscuous mode
[   48.088930][ T6076] team1: entered allmulticast mode
[   48.089076][ T6076] 8021q: adding VLAN 0 to HW filter on device team1
[   48.093392][ T6076] team2: entered promiscuous mode
[   48.093455][ T6076] team2: entered allmulticast mode
[   48.093943][ T6076] 8021q: adding VLAN 0 to HW filter on device team2
[   48.304731][ T6086] loop5: detected capacity change from 0 to 7
[   48.308827][    C1] vxcan1: j1939_tp_rxtimer: 0x00000000f2166a41: abort rx timeout. Force session deactivation
[   48.513767][    C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[   48.513842][    C1] Buffer I/O error on dev loop5, logical block 0, lost async page write
[   48.598930][ T6103] loop4: detected capacity change from 0 to 8
[   48.760344][   T30] audit: type=1400 audit(48.676:4): lsm=SMACK fn=smack_file_fcntl action=denied subject="y" object="_" requested=w pid=6114 comm="syz.4.337" path="/proc/225/task/226/attr/current" dev="proc" ino=11954
[   48.802818][ T6117] loop0: detected capacity change from 0 to 8192
[   48.808456][ T6117] syz.0.336: attempt to access beyond end of device
[   48.808456][ T6117] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   48.811439][ T6117] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   48.811487][ T6117] FAT-fs (loop0): Filesystem has been set read-only
[   48.817867][ T6117] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   48.819766][ T6117] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   49.294301][ T6153] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   49.300290][ T6153] fscrypt (loop0, inode 12): Unsupported encryption flags (0x10)
[   49.332746][ T6163] binder: 6149:6163 IncRefs 0 refcount change on invalid ref 0 ret -22
[   49.372217][ T6166] netlink: 'syz.4.350': attribute type 7 has an invalid length.
[   49.382285][ T1292] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   49.382403][ T1292] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   49.382453][ T1292] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   49.382474][ T1292] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   49.390505][ T6166] netlink: 'syz.4.350': attribute type 7 has an invalid length.
[   49.390608][ T6166] netlink: 'syz.4.350': attribute type 7 has an invalid length.
[   49.397574][ T4670] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   49.556469][ T6178] EXT4-fs: Ignoring removed orlov option
[   49.558592][ T6178] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent
[   49.587256][ T4686] Bluetooth: hci4: hcon 00000000bcb6727f sent 1 < count 255
[   49.589524][ T4686] Bluetooth: hci4: hcon 000000003c408052 sent 2 < count 3
[   49.637141][ T6174] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   49.659899][ T6172] __nla_validate_parse: 2 callbacks suppressed
[   49.665005][ T6172] netlink: 36 bytes leftover after parsing attributes in process `syz.0.352'.
[   49.686787][ T6172] netlink: 48 bytes leftover after parsing attributes in process `syz.0.352'.
[   49.729043][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.358'.
[   49.759528][ T6194] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[   49.791619][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'.
[   49.801787][ T6199] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   49.804438][ T6196] FAT-fs (loop0): Directory bread(block 64) failed
[   49.804473][ T6196] FAT-fs (loop0): Directory bread(block 65) failed
[   49.805492][ T6196] FAT-fs (loop0): Directory bread(block 66) failed
[   49.805523][ T6196] FAT-fs (loop0): Directory bread(block 67) failed
[   49.805549][ T6196] FAT-fs (loop0): Directory bread(block 68) failed
[   49.805560][ T6196] FAT-fs (loop0): Directory bread(block 69) failed
[   49.805584][ T6196] FAT-fs (loop0): Directory bread(block 70) failed
[   49.805595][ T6196] FAT-fs (loop0): Directory bread(block 71) failed
[   49.805616][ T6196] FAT-fs (loop0): Directory bread(block 72) failed
[   49.805627][ T6196] FAT-fs (loop0): Directory bread(block 73) failed
[   49.820387][ T6199] EXT4-fs (loop2): 1 truncate cleaned up
[   49.820872][ T6199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.844519][ T6198] fuse: Bad value for 'fd'
[   49.876140][ T4679] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.898371][ T6205] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4679] was attempted by ""[6205]
[   50.152920][ T6223] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (4096), stripe is disabled
[   50.171745][ T6223] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.364: lblock 2 mapped to illegal pblock 2 (length 1)
[   50.171779][ T6223] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   50.171872][ T6223] Quota error (device loop2): qtree_write_dquot: dquota write failed
[   50.171891][ T6223] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.364: lblock 0 mapped to illegal pblock 48 (length 1)
[   50.171907][ T6223] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   50.171980][ T6223] Quota error (device loop2): v2_write_file_info: Can't write info structure
[   50.171991][ T6223] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.364: Failed to acquire dquot type 0
[   50.172004][ T6223] loop2: lost filesystem error report for type 5 error -117
[   50.172163][ T6223] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem
[   50.172176][ T6223] loop2: lost filesystem error report for type 5 error -117
[   50.174725][ T6223] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.364: mark_inode_dirty error
[   50.174756][ T6223] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   50.174861][ T6223] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[   50.174893][ T6223] EXT4-fs (loop2): 1 orphan inode deleted
[   50.175317][ T6223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.200362][ T6227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.368'.
[   50.273427][   T30] audit: type=1400 audit(50.127:5): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6232 comm="syz.0.371" src=1 netif=wpan0
[   50.387195][ T4686] Bluetooth: hci0: command tx timeout
[   50.407813][ T4682] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   50.452347][ T4679] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.457054][ T5792] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1)
[   50.457084][ T5792] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   50.458018][ T5792] Quota error (device loop2): remove_tree: Can't read quota data block 1
[   50.458068][ T5792] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:11: Failed to release dquot type 0
[   50.458079][ T5792] loop2: lost filesystem error report for type 5 error -117
[   50.459814][ T4679] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0
[   50.459832][ T4679] loop2: lost filesystem error report for type 5 error -117
[   50.460440][ T4679] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem
[   50.460460][ T4679] loop2: lost filesystem error report for type 5 error -117
[   50.460547][ T4679] EXT4-fs error (device loop2): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error
[   50.460558][ T4679] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   50.474347][ T6237] EXT4-fs: Ignoring removed mblk_io_submit option
[   50.506011][ T6237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.605267][ T6237] syzkaller0: entered promiscuous mode
[   50.605303][ T6237] syzkaller0: entered allmulticast mode
[   50.616692][ T6237] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.372: bg 0: block 234: padding at end of block bitmap is not set
[   50.622438][ T6237] EXT4-fs (loop3): Remounting filesystem read-only
[   50.622579][ T6237] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.3.372: cleanup dec ref error -28
[   50.999367][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.504577][ T6258] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   51.518124][ T6258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.628442][ T6266] mmap: syz.0.381 (6266) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   51.667009][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'.
[   51.667055][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'.
[   51.737111][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.781332][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.387'.
[   51.848697][   T30] audit: type=1400 audit(51.607:6): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6301 comm="syz.5.391" src=1 netif=wpan0
[   51.904944][ T6296] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[   51.951054][ T6307] xt_connbytes: Forcing CT accounting to be enabled
[   51.964278][ T6300] FAT-fs (loop0): Directory bread(block 64) failed
[   51.964316][ T6300] FAT-fs (loop0): Directory bread(block 65) failed
[   51.964338][ T6300] FAT-fs (loop0): Directory bread(block 66) failed
[   51.964348][ T6300] FAT-fs (loop0): Directory bread(block 67) failed
[   51.964368][ T6300] FAT-fs (loop0): Directory bread(block 68) failed
[   51.964378][ T6300] FAT-fs (loop0): Directory bread(block 69) failed
[   51.964397][ T6300] FAT-fs (loop0): Directory bread(block 70) failed
[   51.964407][ T6300] FAT-fs (loop0): Directory bread(block 71) failed
[   51.964427][ T6300] FAT-fs (loop0): Directory bread(block 72) failed
[   51.964436][ T6300] FAT-fs (loop0): Directory bread(block 73) failed
[   51.979739][   T30] audit: type=1326 audit(51.730:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.4.395" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d977a28 code=0x0
[   52.078836][ T6320] set_capacity_and_notify: 12 callbacks suppressed
[   52.079077][ T6320] loop3: detected capacity change from 0 to 1024
[   52.083259][ T6320] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   52.083462][ T6320] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   52.083474][ T6320] EXT4-fs (loop3): group descriptors corrupted!
[   52.099099][ T6320] netlink: 64 bytes leftover after parsing attributes in process `syz.3.397'.
[   52.894733][ T6349] loop5: detected capacity change from 0 to 512
[   52.908624][ T6348] team0: Port device bond0 removed
[   52.912834][ T6348] bridge_slave_0: left allmulticast mode
[   52.912867][ T6348] bridge_slave_0: left promiscuous mode
[   52.912952][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.914239][ T6349] EXT4-fs (loop5): corrupt root inode, run e2fsck
[   52.914279][ T6349] EXT4-fs (loop5): mount failed
[   52.926123][ T6348] bridge_slave_1: left allmulticast mode
[   52.926156][ T6348] bridge_slave_1: left promiscuous mode
[   52.926225][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.940839][ T6348] bond0: (slave bond_slave_0): Releasing backup interface
[   52.979048][ T6348] bond0: (slave bond_slave_1): Releasing backup interface
[   53.031579][ T6348] team0: Port device team_slave_0 removed
[   53.034129][ T6348] team0: Port device team_slave_1 removed
[   53.034507][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.034520][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.036139][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.036149][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.037677][ T6348] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   53.038967][ T6352] team0: No ports can be present during mode change
[   53.043891][ T6348] tipc: Enabled bearer <eth:team0>, priority 0
[   53.065970][ T6361] loop4: detected capacity change from 0 to 256
[   53.403533][ T6367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.410'.
[   53.409098][ T6367] veth1_to_team: entered promiscuous mode
[   53.412012][ T6367] gretap0: entered promiscuous mode
[   53.413572][ T6367] hsr1: entered promiscuous mode
[   53.453810][ T6373] loop0: detected capacity change from 0 to 512
[   53.472493][ T6361] Cannot find add_set index 0 as target
[   53.477199][ T6373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   53.599816][ T4670] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   53.629313][ T6380] loop0: detected capacity change from 0 to 256
[   53.629731][ T6380] vfat: Unknown parameter 'non���il'
[   53.751498][ T6388] loop3: detected capacity change from 0 to 512
[   53.852764][ T6399] syzkaller0: entered promiscuous mode
[   53.852792][ T6399] syzkaller0: entered allmulticast mode
[   54.069262][ T6413] capability: warning: `syz.0.420' uses 32-bit capabilities (legacy support in use)
[   54.069849][ T6413] UHID_CREATE from different security context by process 282 (syz.0.420), this is not allowed.
[   54.291118][ T6414] loop2: detected capacity change from 0 to 512
[   54.303895][ T4834] tipc: Node number set to 523433954
[   54.384748][ T6414] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.421: inode has both inline data and extents flags
[   54.384779][ T6414] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   54.392829][ T6414] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.421: couldn't read orphan inode 15 (err -117)
[   54.392894][ T6414] loop2: lost filesystem error report for type 5 error -117
[   54.395706][    C1] EXT4-fs (loop2): error count since last fsck: 2
[   54.395719][    C1] EXT4-fs (loop2): initial error at time 53: ext4_orphan_get:1397: inode 15
[   54.395738][    C1] EXT4-fs (loop2): last error at time 53: ext4_orphan_get:1402
[   54.410094][ T6414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.447774][ T6414] overlayfs: missing 'lowerdir'
[   54.936273][ T6423] loop5: detected capacity change from 0 to 256
[   54.954344][ T6420] loop4: detected capacity change from 0 to 4096
[   54.958722][ T6420] EXT4-fs: Ignoring removed nomblk_io_submit option
[   54.972836][ T6420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.123528][ T6420] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   55.256682][ T6433] __nla_validate_parse: 2 callbacks suppressed
[   55.259237][ T6433] netlink: 40 bytes leftover after parsing attributes in process `syz.0.428'.
[   55.305153][ T4679] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.329869][ T4673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.386347][ T6447] loop0: detected capacity change from 0 to 1024
[   55.410817][ T6447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.558499][ T4670] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.840476][ T6484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   56.622748][ T6594] tmpfs: Bad value for 'mpol'
[   56.667517][ T6598] input: syz1 as /devices/virtual/input/input5
[   56.707070][ T4670] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[   56.707150][ T4670] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   56.707171][ T4670] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz-executor: Failed to acquire dquot type 0
[   56.790987][ T6614] EXT4-fs (loop2): can't mount with both data=journal and dax
[   56.841044][ T6618] EXT4-fs: Ignoring removed oldalloc option
[   56.852960][ T6618] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.455: Parent and EA inode have the same ino 15
[   56.852997][ T6618] loop5: lost filesystem error report for type 5 error -117
[   56.857700][ T6618] EXT4-fs (loop5): 1 orphan inode deleted
[   56.952423][ T6624] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.457: inode has both inline data and extents flags
[   56.952460][ T6624] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   56.955541][ T6624] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.457: couldn't read orphan inode 15 (err -117)
[   56.955570][ T6624] loop4: lost filesystem error report for type 5 error -117
[   56.957533][    C1] EXT4-fs (loop4): error count since last fsck: 2
[   56.957550][    C1] EXT4-fs (loop4): initial error at time 56: ext4_orphan_get:1397: inode 15
[   56.957566][    C1] EXT4-fs (loop4): last error at time 56: ext4_orphan_get:1402
[   57.873689][ T6629] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.459: lblock 3 mapped to illegal pblock 3 (length 3)
[   57.880539][ T6629] EXT4-fs (loop5): Remounting filesystem read-only
[   57.919219][ T1193] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.967902][ T6629] tc_dump_action: action bad kind
[   57.975345][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.459'.
[   57.977115][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.5.459'.
[   58.062168][ T6646] set_capacity_and_notify: 8 callbacks suppressed
[   58.062227][ T6646] loop3: detected capacity change from 0 to 256
[   58.134469][ T1193] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.193370][ T6668] loop2: detected capacity change from 0 to 128
[   58.236185][ T6673] loop5: detected capacity change from 0 to 128
[   58.244810][ T6673] FAT-fs (loop5): Directory bread(block 414) failed
[   58.244839][ T6673] FAT-fs (loop5): Directory bread(block 415) failed
[   58.244864][ T6673] FAT-fs (loop5): Directory bread(block 416) failed
[   58.244881][ T6673] FAT-fs (loop5): Directory bread(block 417) failed
[   58.244897][ T6673] FAT-fs (loop5): Directory bread(block 418) failed
[   58.244912][ T6673] FAT-fs (loop5): Directory bread(block 419) failed
[   58.244926][ T6673] FAT-fs (loop5): Directory bread(block 420) failed
[   58.244941][ T6673] FAT-fs (loop5): Directory bread(block 421) failed
[   58.256091][ T4681] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.258424][ T4681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.259974][ T4681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.264281][ T4681] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.266912][ T4681] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.281208][ T6679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.469'.
[   58.311806][ T6673] FAT-fs (loop5): Directory bread(block 414) failed
[   58.311841][ T6673] FAT-fs (loop5): Directory bread(block 415) failed
[   58.326209][ T1193] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.402887][ T6685] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[   58.730641][ T1193] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.819922][ T6711] fuse: Bad value for 'fd'
[   58.872376][ T1193] vlan2: left allmulticast mode
[   58.872407][ T1193] vlan0: left allmulticast mode
[   58.872430][ T1193] veth0_vlan: left allmulticast mode
[   58.873213][ T1193] vlan2: left promiscuous mode
[   58.873236][ T1193] vlan0: left promiscuous mode
[   58.873798][ T1193] bridge0: port 3(vlan2) entered disabled state
[   58.875148][ T1193] bridge_slave_1: left allmulticast mode
[   58.875159][ T1193] bridge_slave_1: left promiscuous mode
[   58.875227][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.877042][ T1193] bridge_slave_0: left allmulticast mode
[   58.877054][ T1193] bridge_slave_0: left promiscuous mode
[   58.877112][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.898495][ T6717] devpts: Bad value for 'max'
[   59.057374][ T1193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   59.059225][ T1193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   59.060761][ T1193] bond0 (unregistering): Released all slaves
[   59.276471][ T1193] tipc: Left network mode
[   59.293201][ T4357] 8021q: adding VLAN 0 to HW filter on device eth6
[   59.432840][ T1193] hsr_slave_0: left promiscuous mode
[   59.434429][ T1193] hsr_slave_1: left promiscuous mode
[   59.434714][ T1193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.434731][ T1193] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.441579][ T1193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.444396][ T1193] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.458132][ T1193] veth1_macvtap: left promiscuous mode
[   59.460680][ T1193] veth0_macvtap: left promiscuous mode
[   59.460771][ T1193] veth1_vlan: left promiscuous mode
[   59.460811][ T1193] veth0_vlan: left promiscuous mode
[   59.644100][ T6698] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   59.644213][ T6698] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   59.665702][   T30] audit: type=1400 audit(58.871:8): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6748 comm="syz.4.480" src=1 netif=wpan0
[   59.679204][ T6751] loop2: detected capacity change from 0 to 512
[   59.680858][ T6751] EXT4-fs: Ignoring removed nomblk_io_submit option
[   59.683149][ T6698] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   59.696964][ T6698] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   59.697022][ T6698] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   59.708374][ T6698] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   59.712756][ T6751] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   59.712780][ T6751] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002]
[   59.712804][ T6751] System zones: 0-1, 15-15, 18-18, 34-34
[   59.712911][ T6751] EXT4-fs (loop2): orphan cleanup on readonly fs
[   59.712946][ T6751] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[   59.712982][ T6751] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   59.712994][ T6751] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   59.714064][ T6751] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.481: bg 0: block 40: padding at end of block bitmap is not set
[   59.714081][ T6751] loop2: lost filesystem error report for type 5 error -117
[   59.714639][ T6751] EXT4-fs (loop2): Remounting filesystem read-only
[   59.714687][ T6751] EXT4-fs (loop2): 1 truncate cleaned up
[   59.721586][ T6698] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   59.721641][ T6698] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   59.738789][ T6698] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   59.750523][ T6698] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   59.750567][ T6698] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   59.759775][ T6698] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   59.817398][ T6754] loop2: detected capacity change from 0 to 8
[   59.818430][ T6754] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   59.818445][ T6754] unable to read xattr id index table
[   59.837815][ T1193] team0 (unregistering): Port device team_slave_1 removed
[   59.852796][ T1193] team0 (unregistering): Port device team_slave_0 removed
[   59.857005][ T6759] loop3: detected capacity change from 0 to 512
[   59.858404][ T6759] ext4: Unknown parameter 'obj_user'
[   60.130096][ T6676] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.131645][ T6676] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.131896][ T6676] bridge_slave_0: entered allmulticast mode
[   60.132398][ T6676] bridge_slave_0: entered promiscuous mode
[   60.134789][ T6676] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.134837][ T6676] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.134896][ T6676] bridge_slave_1: entered allmulticast mode
[   60.135418][ T6676] bridge_slave_1: entered promiscuous mode
[   60.152234][ T6676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.153206][ T6676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.163810][ T6676] team0: Port device team_slave_0 added
[   60.164683][ T6676] team0: Port device team_slave_1 added
[   60.171103][ T6676] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.171126][ T6676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.171138][ T6676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.171775][ T6676] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.171783][ T6676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.171799][ T6676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.185371][ T6676] hsr_slave_0: entered promiscuous mode
[   60.185672][ T6676] hsr_slave_1: entered promiscuous mode
[   60.185945][ T6676] debugfs: 'hsr0' already exists in 'hsr'
[   60.185955][ T6676] Cannot create hsr debugfs directory
[   60.378604][ T6676] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   60.384320][ T6676] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   60.384649][ T6676] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   60.387992][ T6676] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   60.393162][ T6676] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   60.395987][ T6676] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   60.396379][ T6676] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   60.398186][ T6676] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   60.462611][ T6676] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.481166][ T6676] 8021q: adding VLAN 0 to HW filter on device team0
[   60.488478][ T3753] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.488527][ T3753] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.501000][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.501045][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.559363][ T4357] 8021q: adding VLAN 0 to HW filter on device eth4
[   60.579075][ T6817] loop5: detected capacity change from 0 to 512
[   60.587139][ T6815] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[   60.719066][ T6831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.489'.
[   60.721069][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'.
[   60.774574][ T6848] loop5: detected capacity change from 0 to 512
[   60.776487][ T6848] ext4: Unknown parameter 'func'
[   60.777443][ T6841] xt_hashlimit: size too large, truncated to 1048576
[   60.822610][ T6676] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.843165][ T6859] loop5: detected capacity change from 0 to 512
[   60.910822][ T6859] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.496: inode has both inline data and extents flags
[   60.910859][ T6859] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   60.911031][    C0] EXT4-fs (loop5): error count since last fsck: 1
[   60.911048][    C0] EXT4-fs (loop5): initial error at time 60: ext4_orphan_get:1397: inode 15
[   60.911078][    C0] EXT4-fs (loop5): last error at time 60: ext4_orphan_get:1397: inode 15
[   60.911977][ T6859] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.496: couldn't read orphan inode 15 (err -117)
[   60.911993][ T6859] loop5: lost filesystem error report for type 5 error -117
[   60.957045][ T4686] Bluetooth: hci3: command 0x0c1a tx timeout
[   61.069460][   T30] audit: type=1400 audit(60.175:9): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6886 comm="syz.3.499" src=1 netif=wpan0
[   61.169678][ T6676] veth0_vlan: entered promiscuous mode
[   61.186070][ T6676] veth1_vlan: entered promiscuous mode
[   61.191151][ T6898] loop5: detected capacity change from 0 to 8
[   61.230412][ T6676] veth0_macvtap: entered promiscuous mode
[   61.231664][ T6676] veth1_macvtap: entered promiscuous mode
[   61.256679][ T6676] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.260191][ T6676] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.280928][   T39] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.280998][   T39] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.281056][   T39] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.281071][   T39] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.294168][ T4357] 8021q: adding VLAN 0 to HW filter on device eth7
[   61.316835][ T3753] Bluetooth: hci5: Frame reassembly failed (-84)
[   61.317135][ T6913] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[   61.352908][ T3753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.352937][ T3753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.390111][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.390147][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.536955][ T6921]  loop6: p1 p2 p3
[   61.594765][ T4357] 8021q: adding VLAN 0 to HW filter on device eth5
[   61.770827][ T4661] udevd[4661]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[   61.771968][ T4663] udevd[4663]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[   61.773816][ T4659] udevd[4659]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[   61.790412][ T4661] udevd[4661]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[   61.795228][ T4663] udevd[4663]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[   61.906990][ T4681] Bluetooth: hci0: command 0x0c1a tx timeout
[   61.907049][ T4681] Bluetooth: hci4: command 0x0c1a tx timeout
[   61.921952][ T6953] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   61.927199][ T6953] EXT4-fs (loop2): 1 truncate cleaned up
[   61.995839][ T4674] Bluetooth: hci1: command 0x041b tx timeout
[   62.128840][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'.
[   62.233297][ T6983] bridge_slave_0: default FDB implementation only supports local addresses
[   62.479965][ T7005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'.
[   62.525373][ T7008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.519'.
[   62.580549][ T7015] xt_hashlimit: max too large, truncated to 1048576
[   62.585003][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.515'.
[   62.586016][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.515'.
[   62.603299][   T30] audit: type=1400 audit(61.598:10): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7017 comm="syz.4.522" src=1 netif=wpan0
[   62.615959][ T6993]  loop3: p1 p3 < >
[   62.808238][ T4663] udevd[4663]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   62.811873][ T4661] udevd[4661]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   62.870555][ T7042] binder: 7041:7042 ioctl 400c620e 20000a40 returned -22
[   63.184528][ T7077] 9p: Bad value for 'wfdno'
[   63.204960][ T4674] Bluetooth: hci3: command 0x0c1a tx timeout
[   63.334055][ T7084] could not allocate digest TFM handle digest_null-generic
[   63.336765][ T7084] netlink: 'syz.3.534': attribute type 11 has an invalid length.
[   63.551858][ T4674] Bluetooth: hci5: command 0x1003 tx timeout
[   63.551919][ T4686] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   63.656633][ T7113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.663038][ T7113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.177849][ T4674] Bluetooth: hci0: command 0x0c1a tx timeout
[   64.177923][ T4686] Bluetooth: hci4: command 0x0c1a tx timeout
[   64.297232][ T7130] netlink: 48 bytes leftover after parsing attributes in process `syz.4.540'.
[   64.309133][ T4686] Bluetooth: hci1: command 0x041b tx timeout
[   64.466768][ T7132] netlink: 36 bytes leftover after parsing attributes in process `syz.5.542'.
[   64.503508][ T7136] xt_CT: No such helper "snmp_trap"
[   64.633978][   T30] audit: type=1326 audit(63.465:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7152 comm="syz.3.547" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7f77a28 code=0x7ffc0000
[   64.636509][   T30] audit: type=1326 audit(63.474:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7152 comm="syz.3.547" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7f77a28 code=0x7ffc0000
[   64.636595][   T30] audit: type=1326 audit(63.474:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7152 comm="syz.3.547" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffb7f77a28 code=0x7ffc0000
[   64.638983][   T30] audit: type=1326 audit(63.474:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7152 comm="syz.3.547" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7f77a28 code=0x7ffc0000
[   64.639001][   T30] audit: type=1326 audit(63.474:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7152 comm="syz.3.547" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7f77a28 code=0x7ffc0000
[   64.639017][   T30] audit: type=1326 audit(63.474:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7152 comm="syz.3.547" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=148 compat=0 ip=0xffffb7f77a28 code=0x7ffc0000
[   64.639032][   T30] audit: type=1326 audit(63.474:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7152 comm="syz.3.547" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7f77a28 code=0x7ffc0000
[   64.639047][   T30] audit: type=1326 audit(63.474:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7152 comm="syz.3.547" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7f77a28 code=0x7ffc0000
[   64.639157][   T30] audit: type=1326 audit(63.474:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7152 comm="syz.3.547" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb7f77a28 code=0x7ffc0000
[   64.787266][ T7163] set_capacity_and_notify: 4 callbacks suppressed
[   64.787313][ T7163] loop3: detected capacity change from 0 to 256
[   65.173598][ T7175] netlink: 32 bytes leftover after parsing attributes in process `syz.5.552'.
[   65.608027][ T4686] Bluetooth: hci3: command 0x0c1a tx timeout
[   65.757163][ T1575] ieee802154 phy0 wpan0: encryption failed: -22
[   65.758702][ T1575] ieee802154 phy1 wpan1: encryption failed: -22
[   65.950209][  T856] cfg80211: failed to load regulatory.db
[   66.029413][ T7187] netlink: 'syz.5.556': attribute type 1 has an invalid length.
[   66.117990][ T7190] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   66.375137][ T7196] loop6: detected capacity change from 0 to 8192
[   66.410273][ T4674] Bluetooth: hci0: command 0x0c1a tx timeout
[   66.413665][ T4686] Bluetooth: hci4: command 0x0c1a tx timeout
[   66.426105][ T7196]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   66.427990][ T7196] loop6: partition table partially beyond EOD, truncated
[   66.453684][ T7200] loop4: detected capacity change from 0 to 128
[   66.478632][ T7200] PKCS8: Unsupported PKCS#8 version
[   66.482512][ T7200] netlink: 'syz.4.558': attribute type 10 has an invalid length.
[   66.482562][ T7200] netlink: 'syz.4.558': attribute type 4 has an invalid length.
[   66.482596][ T7200] netlink: 'syz.4.558': attribute type 4 has an invalid length.
[   66.482629][ T7200] netlink: 'syz.4.558': attribute type 4 has an invalid length.
[   66.482662][ T7200] netlink: 'syz.4.558': attribute type 4 has an invalid length.
[   66.526268][ T7200] loop4: detected capacity change from 0 to 8
[   66.532380][ T4686] Bluetooth: hci1: command 0x041b tx timeout
[   66.532551][ T7196] loop6: p1 start 100663296 is beyond EOD, truncated
[   66.532564][ T7196] loop6: p2 size 134217732 extends beyond EOD, truncated
[   66.551198][ T7200] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   66.551236][ T7200] unable to read xattr id index table
[   67.206812][ T7196] loop6: p4 size 14876672 extends beyond EOD, truncated
[   67.210985][ T7196] loop6: p5 size 134217732 extends beyond EOD, truncated
[   67.215563][ T7196] loop6: p6 size 14876672 extends beyond EOD, truncated
[   67.396391][ T7208] netlink: 'syz.3.562': attribute type 1 has an invalid length.
[   67.420234][ T7208] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.435527][ T7208] __nla_validate_parse: 1 callbacks suppressed
[   67.437275][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'.
[   67.527195][ T7214] netlink: 'syz.5.564': attribute type 4 has an invalid length.
[   67.574516][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   67.575796][ T4302] loop6: partition table partially beyond EOD, truncated
[   67.577847][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   67.580225][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   67.583604][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   67.585829][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   67.589881][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   67.706991][ T7230] syzkaller0: entered promiscuous mode
[   67.707029][ T7230] syzkaller0: entered allmulticast mode
[   67.863618][ T7237] loop4: detected capacity change from 0 to 1024
[   67.867570][ T7244] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   67.867594][ T7244] overlayfs: missing 'lowerdir'
[   67.876515][ T7237] EXT4-fs: Ignoring removed bh option
[   67.884583][ T7247] [U] �ބ#=���c
[   67.885312][ T7247] [U] �ބ#=���c
[   67.886253][ T7247] [U] �ބ#=���c
[   67.887021][ T7247] [U] �ބ#=���c
[   67.887821][ T7247] [U] �ބ#=���c
[   67.888559][ T7247] [U] �ބ#=���c
[   67.889487][ T7247] [U] �ބ#=���c
[   67.890247][ T7247] [U] �ބ#=���c
[   67.890858][ T7247] [U] �ބ#=���c
[   67.891480][ T7247] [U] �ބ#=���c
[   67.892095][ T7247] [U] �ބ#=���c
[   67.892805][ T7247] [U] �ބ#=���c
[   67.893548][ T7247] [U] �ބ#=���c
[   67.894206][ T7247] [U] �ބ#=���c
[   67.895022][ T7247] [U] �ބ#=���c
[   67.895745][ T7247] [U] �ބ#=���c
[   67.896522][ T7247] [U] �ބ#=���c
[   67.897317][ T7247] [U] �ބ#=���c
[   67.898090][ T7247] [U] �ބ#=���c
[   67.898967][ T7247] [U] �ބ#=���c
[   67.899794][ T7247] [U] �ބ#=���c
[   67.900627][ T7247] [U] �ބ#=���c
[   67.901280][ T7247] [U] �ބ#=���c
[   67.901902][ T7247] [U] �ބ#=���c
[   67.902579][ T7247] [U] �ބ#=���c
[   67.903252][ T7247] [U] �ބ#=���c
[   67.904022][ T7247] [U] �ބ#=���c
[   67.904653][ T7247] [U] �ބ#=���c
[   67.905281][ T7247] [U] �ބ#=���c
[   67.906090][ T7247] [U] �ބ#=���c
[   67.906838][ T7247] [U] �ބ#=���c
[   67.907604][ T7247] [U] �ބ#=���c
[   67.908348][ T7247] [U] �ބ#=���c
[   67.913589][ T7237] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   67.953822][ T7237] EXT4-fs mount: 19 callbacks suppressed
[   67.953862][ T7237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.976068][ T7235] loop2: detected capacity change from 0 to 1024
[   67.976882][ T7235] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   67.989781][ T7250] x_tables: ip6_tables: dccp match: only valid for protocol 33
[   68.006774][ T7235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.132873][ T4679] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.242399][    C1] vcan0: j1939_tp_rxtimer: 0x000000002d5393b4: rx timeout, send abort
[   68.759076][ T4686] Bluetooth: hci1: command 0x041b tx timeout
[   68.783927][    C1] vcan0: j1939_tp_rxtimer: 0x000000000e4997e8: rx timeout, send abort
[   68.783985][    C1] vcan0: j1939_tp_rxtimer: 0x000000002d5393b4: abort rx timeout. Force session deactivation
[   68.838133][ T4673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.896345][ T7285] loop4: detected capacity change from 0 to 512
[   68.911814][ T7285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.047261][ T7285] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   69.125908][ T4673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.191833][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   69.191862][ T4302] loop6: partition table partially beyond EOD, truncated
[   69.191941][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   69.191958][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   69.194433][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   69.194782][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   69.203660][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   69.247506][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   69.248583][ T4302] loop6: partition table partially beyond EOD, truncated
[   69.250061][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   69.251355][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   69.253379][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.588'.
[   69.255456][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   69.259262][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   69.261001][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   69.293276][ T7314] loop2: detected capacity change from 0 to 512
[   69.307776][ T7314] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[   69.307890][ T7314] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #13: comm syz.2.594: iget: bad i_size value: 12154757448730
[   69.307904][ T7314] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   69.308057][ T7314] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.594: couldn't read orphan inode 13 (err -117)
[   69.308069][ T7314] loop2: lost filesystem error report for type 5 error -117
[   69.308618][ T7314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.325470][    C1] vcan0: j1939_tp_rxtimer: 0x000000000e4997e8: abort rx timeout. Force session deactivation
[   69.339931][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.595'.
[   69.361268][ T4679] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.463397][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.595'.
[   69.534077][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   69.535507][ T4302] loop6: partition table partially beyond EOD, 
[   69.535527][ T7329] Injecting memory failure for pfn 0x21d0b2 at process virtual address 0x20fff000
[   69.538687][ T4302] truncated
[   69.539618][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   69.540753][ T7329] Memory failure: 0x21d0b2: unhandlable page.
[   69.540767][ T7329] Memory failure: 0x21d0b2: recovery action for get hwpoison page: Ignored
[   69.544802][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   69.547438][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   69.550449][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   69.552550][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   69.611418][ T4765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.613431][ T4765] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   69.618772][ T7347] loop3: detected capacity change from 0 to 512
[   69.747936][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.748128][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.780448][ T7347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.011471][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.037950][ T7345] loop5: detected capacity change from 0 to 8
[   70.042241][ T7345] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   70.042266][ T7345] unable to read xattr id index table
[   70.197382][ T7385] macvtap1: entered allmulticast mode
[   70.197519][ T7385] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[   70.200310][ T7385] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[   70.201604][ T7385] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   70.214618][ T7385] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[   70.231704][ T7387] loop3: detected capacity change from 0 to 512
[   70.247408][ T7387] syz.3.615 (7387): /proc/7386/oom_adj is deprecated, please use /proc/7386/oom_score_adj instead.
[   70.264342][ T4757] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[   70.318261][ T7393] netlink: 'syz.2.617': attribute type 1 has an invalid length.
[   70.318292][ T7393] netlink: 240 bytes leftover after parsing attributes in process `syz.2.617'.
[   70.323981][ T7392] netlink: 'syz.2.617': attribute type 1 has an invalid length.
[   70.324001][ T7392] netlink: 240 bytes leftover after parsing attributes in process `syz.2.617'.
[   70.349625][ T7395] loop3: detected capacity change from 0 to 512
[   70.379784][ T7395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.407819][ T7410] syz_tun: entered allmulticast mode
[   70.412096][ T5792] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   70.422392][ T5792] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28
[   70.422424][ T5792] EXT4-fs (loop3): This should not happen!! Data will be lost
[   70.422424][ T5792] 
[   70.422451][ T5792] EXT4-fs (loop3): Total free blocks count 0
[   70.422463][ T5792] EXT4-fs (loop3): Free/Dirty block details
[   70.422485][ T5792] EXT4-fs (loop3): free_blocks=65280
[   70.422506][ T5792] EXT4-fs (loop3): dirty_blocks=33
[   70.422516][ T5792] EXT4-fs (loop3): Block reservation details
[   70.422525][ T5792] EXT4-fs (loop3): i_reserved_data_blocks=33
[   70.440815][ T4682] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[   70.441615][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.579978][ T4686] Bluetooth: hci1: command 0x041b tx timeout
[   71.936521][ T7431] Invalid ELF header type: 3 != 1
[   71.936616][ T7431] Invalid ELF header type: 3 != 1
[   72.020825][ T7430] netlink: 'syz.2.624': attribute type 10 has an invalid length.
[   72.020985][ T7430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.624'.
[   72.614426][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.629'.
[   72.640849][ T7430] dummy0: entered promiscuous mode
[   72.640881][ T7430] dummy0: entered allmulticast mode
[   72.642097][ T7430] bridge0: port 3(dummy0) entered blocking state
[   72.642142][ T7430] bridge0: port 3(dummy0) entered disabled state
[   72.642990][ T7430] bridge0: port 3(dummy0) entered blocking state
[   72.643035][ T7430] bridge0: port 3(dummy0) entered forwarding state
[   72.781201][   T30] kauditd_printk_skb: 180 callbacks suppressed
[   72.781236][   T30] audit: type=1326 audit(70.991:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7455 comm="syz.4.631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d977a28 code=0x0
[   72.795451][ T7463] loop5: detected capacity change from 0 to 1024
[   72.796903][ T7463] EXT4-fs: Ignoring removed bh option
[   72.847496][ T7463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.931051][ T7480] netlink: 'syz.6.639': attribute type 1 has an invalid length.
[   73.007670][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.064534][   T30] audit: type=1400 audit(71.258:201): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7491 comm="syz.5.642" src=1 netif=wpan0
[   73.105612][ T7494] input: syz0 as /devices/virtual/input/input6
[   73.247714][ T7508] binder: 7507:7508 IncRefs 0 refcount change on invalid ref 0 ret -22
[   73.248422][ T7508] binder: 7507:7508 ioctl 0 0 returned -22
[   73.404142][ T7517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.429771][ T7515] binder: 7507:7515 Acquire 1 refcount change on invalid ref 0 ret -22
[   73.429901][ T7515] binder: 7507:7515 got transaction to invalid handle, 1
[   73.429969][ T7515] binder: 7507:7515 cannot find target node
[   73.429988][ T7515] binder: 7507:7515 transaction call to 0:0 failed 5/29201/-22, code 0 size 96-24 line 3236
[   73.774069][ T4686] Bluetooth: hci1: command 0x041b tx timeout
[   73.890186][ T7524] xt_CT: You must specify a L4 protocol and not use inversions on it
[   74.029712][ T7526] loop5: detected capacity change from 0 to 1024
[   74.047147][ T7526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.052578][ T7526] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   74.088122][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.150142][   T26] binder: undelivered TRANSACTION_ERROR: 29201
[   74.365814][   T30] audit: type=1400 audit(72.459:202): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7558 comm="syz.2.662" src=1 netif=wpan0
[   74.610314][ T7570] loop5: detected capacity change from 0 to 512
[   74.622723][ T7570] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.665: missing EA_INODE flag
[   74.622766][ T7570] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   74.624267][ T7570] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.665: error while reading EA inode 12 err=-117
[   74.624287][ T7570] loop5: lost filesystem error report for type 5 error -117
[   74.624527][ T7570] EXT4-fs (loop5): 1 orphan inode deleted
[   74.624977][ T7570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.825998][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.879192][ T7574] loop3: detected capacity change from 0 to 512
[   75.083431][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   75.083468][ T4302] loop6: partition table partially beyond EOD, truncated
[   75.083556][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   75.083577][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   75.092052][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   75.095321][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   75.099575][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   75.115462][ T7583] loop5: detected capacity change from 0 to 256
[   75.440070][ T7574] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.666: corrupted in-inode xattr: e_value size too large
[   75.440106][ T7574] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   75.443094][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   75.443109][    C1] EXT4-fs (loop3): initial error at time 73: ext4_iget_extra_inode:5128: inode 15
[   75.443129][    C1] EXT4-fs (loop3): last error at time 73: ext4_iget_extra_inode:5128: inode 15
[   75.448186][ T7574] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.666: couldn't read orphan inode 15 (err -117)
[   75.448201][ T7574] loop3: lost filesystem error report for type 5 error -117
[   75.448784][ T7574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.468029][ T7590] 9p: Bad value for 'rfdno'
[   75.469121][ T7590] netlink: 56 bytes leftover after parsing attributes in process `syz.5.670'.
[   75.508811][ T7595] loop2: detected capacity change from 0 to 512
[   75.509205][ T7595] EXT4-fs: Ignoring removed bh option
[   75.512581][ T7595] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   75.512615][ T7595] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   75.517046][ T7595] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   75.517619][ T7595] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[   75.518391][ T7595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.530573][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.594103][ T7598] netlink: 44 bytes leftover after parsing attributes in process `syz.3.672'.
[   75.594139][ T7598] netlink: 84 bytes leftover after parsing attributes in process `syz.3.672'.
[   75.612237][ T7600] netlink: 'syz.5.673': attribute type 2 has an invalid length.
[   75.674413][ T4679] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.777436][ T7602] loop3: detected capacity change from 0 to 512
[   75.787164][ T7614] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   75.789362][ T7602] EXT4-fs: Ignoring removed mblk_io_submit option
[   75.789378][ T7602] ext4: Unknown parameter 'appraise_type'
[   75.794825][ T7614] overlayfs: failed to set xattr on upper
[   75.795884][ T7614] overlayfs: ...falling back to redirect_dir=nofollow.
[   75.797096][ T7614] overlayfs: ...falling back to uuid=null.
[   75.807392][ T7616] loop5: detected capacity change from 0 to 512
[   75.838971][   T30] audit: type=1400 audit(73.816:203): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7624 comm="syz.2.682" src=1 netif=wpan0
[   75.841174][ T7616] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.677: iget: bad extra_isize 90 (inode size 256)
[   75.841196][ T7616] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   75.842471][    C0] EXT4-fs (loop5): error count since last fsck: 1
[   75.842484][    C0] EXT4-fs (loop5): initial error at time 73: ext4_xattr_inode_iget:441: inode 11
[   75.842505][    C0] EXT4-fs (loop5): last error at time 73: ext4_xattr_inode_iget:441: inode 11
[   75.843869][ T7616] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.677: error while reading EA inode 11 err=-117
[   75.843885][ T7616] loop5: lost filesystem error report for type 5 error -117
[   75.844085][ T7616] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.677: iget: bad extra_isize 90 (inode size 256)
[   75.844099][ T7616] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   75.844239][ T7616] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.677: error while reading EA inode 11 err=-117
[   75.844250][ T7616] loop5: lost filesystem error report for type 5 error -117
[   75.844378][ T7616] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.677: iget: bad extra_isize 90 (inode size 256)
[   75.844390][ T7616] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[   75.844535][ T7616] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.677: error while reading EA inode 18 err=-117
[   75.844552][ T7616] loop5: lost filesystem error report for type 5 error -117
[   75.844686][ T7616] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.677: iget: bad extra_isize 90 (inode size 256)
[   75.844698][ T7616] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[   75.844825][ T7616] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.677: error while reading EA inode 18 err=-117
[   75.844836][ T7616] loop5: lost filesystem error report for type 5 error -117
[   75.845148][ T7616] EXT4-fs (loop5): 1 orphan inode deleted
[   75.869830][ T7616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.876695][ T7616] netlink: 20 bytes leftover after parsing attributes in process `syz.5.677'.
[   75.876715][ T7616] netlink: 36 bytes leftover after parsing attributes in process `syz.5.677'.
[   75.882828][ T7627] loop3: detected capacity change from 0 to 2048
[   75.896528][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.901665][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   75.902737][ T4302] loop6: partition table partially beyond EOD, truncated
[   75.904223][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   75.905422][ T7631] netlink: 9 bytes leftover after parsing attributes in process `syz.6.680'.
[   75.905519][ T7631] 0�: renamed from hsr0 (while UP)
[   75.908308][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   75.908894][ T7631] 0�: entered allmulticast mode
[   75.908906][ T7631] hsr_slave_0: entered allmulticast mode
[   75.908917][ T7631] hsr_slave_1: entered allmulticast mode
[   75.909154][ T7631] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[   75.912168][ T7627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.922423][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   75.925688][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   75.927480][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   75.940528][ T7631] netlink: 'syz.6.680': attribute type 11 has an invalid length.
[   75.955753][ T7633] loop5: detected capacity change from 0 to 1024
[   75.963518][ T7634] syzkaller1: entered promiscuous mode
[   75.964531][ T7634] syzkaller1: entered allmulticast mode
[   75.991644][ T7640] loop4: detected capacity change from 0 to 512
[   75.998649][ T7640] EXT4-fs: Ignoring removed bh option
[   76.012002][ T7640] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.686: corrupted in-inode xattr: e_value size too large
[   76.012032][ T7640] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   76.015774][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   76.015803][    C1] EXT4-fs (loop4): initial error at time 73: ext4_iget_extra_inode:5128: inode 15
[   76.015841][    C1] EXT4-fs (loop4): last error at time 73: ext4_iget_extra_inode:5128: inode 15
[   76.029061][ T7640] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.686: couldn't read orphan inode 15 (err -117)
[   76.029113][ T7640] loop4: lost filesystem error report for type 5 error -117
[   76.037673][ T7640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.060319][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.101457][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   76.101488][ T4302] loop6: partition table partially beyond EOD, truncated
[   76.101599][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   76.101621][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   76.109539][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   76.115807][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   76.116238][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   76.122841][ T7660] loop3: detected capacity change from 0 to 512
[   76.190961][ T7660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.205915][ T7660] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present
[   76.205966][ T7660] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[   76.205985][ T7660] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.687: Failed to acquire dquot type 1
[   76.273958][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.311861][ T4673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.341251][ T7682] loop3: detected capacity change from 0 to 512
[   76.341654][ T7682] EXT4-fs: Ignoring removed nobh option
[   76.341944][ T7682] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   76.348989][ T7682] EXT4-fs (loop3): 1 truncate cleaned up
[   76.349477][ T7682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.367051][ T7682] overlay: Unknown parameter 'dont_appraise'
[   76.485248][ T7693] loop4: detected capacity change from 0 to 1024
[   76.511211][ T7693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   76.524804][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.528447][ T1292] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set
[   76.537512][ T1292] EXT4-fs (loop4): Remounting filesystem read-only
[   76.539117][ T1292] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5075: inode #15: block 7: len 1: ext4_ext_map_blocks returned -117
[   76.627555][   T15] Bluetooth: hci5: Frame reassembly failed (-84)
[   76.705811][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   76.705938][ T4302] loop6: partition table partially beyond EOD, truncated
[   76.706595][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   76.706699][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   76.948479][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   76.950965][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   76.953972][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   77.086562][ T7715] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.139231][ T7715] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.254096][ T7729] loop2: detected capacity change from 0 to 256
[   77.255893][ T7729] vfat: Unknown parameter 'utf:'
[   77.279025][ T7720] erspan0: entered promiscuous mode
[   77.281538][ T7728] loop2: detected capacity change from 0 to 2048
[   77.287403][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'.
[   77.314361][ T7728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.381850][ T4679] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.516805][ T7738] netlink: 96 bytes leftover after parsing attributes in process `syz.2.703'.
[   77.607952][ T7738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.608229][ T7738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.947891][   T30] audit: type=1400 audit(75.764:204): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7782 comm="syz.6.712" src=1 netif=wpan0
[   77.991621][ T7787] syzkaller0: entered promiscuous mode
[   77.991656][ T7787] syzkaller0: entered allmulticast mode
[   78.000507][ T7787] netlink: 76 bytes leftover after parsing attributes in process `syz.3.713'.
[   78.011567][ T7787] SQUASHFS error: Unable to read inode 0x127
[   78.306223][ T7820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.311500][ T7818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.314170][ T7818] tmpfs: Unknown parameter 'fowner>00000000000000000000'
[   78.357563][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.490578][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.571000][ T7833] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   78.574524][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.722'.
[   78.613754][ T7833] unable to read xattr id index table
[   78.628248][ T7833] SQUASHFS error: Unable to read inode 0x127
[   78.799939][ T4674] Bluetooth: hci5: command 0x1003 tx timeout
[   78.843382][ T4686] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   79.054902][ T7840] bridge1: entered promiscuous mode
[   79.054951][ T7840] bridge1: entered allmulticast mode
[   79.114454][ T7841] Soft offlining pfn 0x12029f at process virtual address 0x201c0000
[   79.118019][ T7841] Soft offlining pfn 0x1226d0 at process virtual address 0x201c1000
[   79.128231][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   79.128258][ T4302] loop6: partition table partially beyond EOD, truncated
[   79.128361][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   79.128370][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   79.129242][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   79.129556][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   79.131648][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   79.184683][ T7841] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[   79.209268][   T26] hid (null): unknown global tag 0xd
[   79.209667][   T26] hid (null): invalid report_size 6286
[   79.209675][   T26] hid (null): report_id 274131005 is invalid
[   79.211071][   T26] hid-generic 0100:06E6:0001.0003: unknown global tag 0xd
[   79.215922][   T26] hid-generic 0100:06E6:0001.0003: item 0 4 1 13 parsing failed
[   79.216094][   T26] hid-generic 0100:06E6:0001.0003: probe with driver hid-generic failed with error -22
[   80.199775][ T7849] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   80.199803][ T7849] unable to read xattr id index table
[   80.201574][ T7849] SQUASHFS error: zlib decompression failed, data probably corrupt
[   80.201599][ T7849] SQUASHFS error: Failed to read block 0x9b: -5
[   80.201618][ T7849] SQUASHFS error: Unable to read metadata cache entry [99]
[   80.201631][ T7849] SQUASHFS error: Unable to read inode 0x127
[   80.212701][ T7849] overlayfs: workdir and upperdir must be separate subtrees
[   80.351581][ T7856] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   80.351610][ T7856] FAT-fs (loop3): Filesystem has been set read-only
[   80.351659][ T7856] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   80.351694][ T7856] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   80.526861][ T4673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   80.664005][ T7888] netlink: 'syz.2.741': attribute type 11 has an invalid length.
[   80.972968][ T7892] xt_time: invalid argument - start or stop time greater than 23:59:59
[   81.033022][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   81.034320][ T4302] loop6: partition table partially beyond EOD, truncated
[   81.036016][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   81.037512][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   81.040597][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   81.048365][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   81.050035][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   81.127745][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.127952][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.142676][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   81.142707][ T4302] loop6: partition table partially beyond EOD, truncated
[   81.144374][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   81.144389][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   81.147902][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   81.151979][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   81.154981][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   81.168892][ T7911] ip6erspan0: entered allmulticast mode
[   81.420519][ T7935] set_capacity_and_notify: 9 callbacks suppressed
[   81.420733][ T7935] loop5: detected capacity change from 0 to 512
[   81.422028][ T7935] EXT4-fs: Ignoring removed orlov option
[   81.431154][ T7935] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   81.498039][ T7935] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.755: corrupted in-inode xattr: e_value size too large
[   81.498097][ T7935] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   81.500241][ T7935] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.755: couldn't read orphan inode 15 (err -117)
[   81.500270][ T7935] loop5: lost filesystem error report for type 5 error -117
[   81.502086][ T7935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.521861][ T7935] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   81.870169][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.946672][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   81.946700][ T4302] loop6: partition table partially beyond EOD, truncated
[   81.946765][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   81.946774][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   81.947588][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   81.948615][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   81.948958][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   81.967233][ T7970] loop4: detected capacity change from 0 to 128
[   81.976156][ T7970] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[   81.976219][ T7970] EXT4-fs: failed to create workqueue
[   81.976237][ T7970] EXT4-fs (loop4): mount failed
[   82.005221][ T7980] loop5: detected capacity change from 0 to 256
[   82.031918][ T7980] FAT-fs (loop5): Directory bread(block 64) failed
[   82.031959][ T7980] FAT-fs (loop5): Directory bread(block 65) failed
[   82.031986][ T7980] FAT-fs (loop5): Directory bread(block 66) failed
[   82.031998][ T7980] FAT-fs (loop5): Directory bread(block 67) failed
[   82.032020][ T7980] FAT-fs (loop5): Directory bread(block 68) failed
[   82.032031][ T7980] FAT-fs (loop5): Directory bread(block 69) failed
[   82.032055][ T7980] FAT-fs (loop5): Directory bread(block 70) failed
[   82.032065][ T7980] FAT-fs (loop5): Directory bread(block 71) failed
[   82.032087][ T7980] FAT-fs (loop5): Directory bread(block 72) failed
[   82.032097][ T7980] FAT-fs (loop5): Directory bread(block 73) failed
[   82.068852][ T7982] xt_time: invalid argument - start or stop time greater than 23:59:59
[   82.262876][ T7997] netlink: 'syz.4.772': attribute type 1 has an invalid length.
[   82.262911][ T7997] __nla_validate_parse: 5 callbacks suppressed
[   82.262937][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'.
[   82.303069][ T7997] bridge2: entered allmulticast mode
[   82.398982][ T8010] 9p: Bad value for 'rfdno'
[   82.412354][ T8010] tipc: Started in network mode
[   82.413560][ T8010] tipc: Node identity 4, cluster identity 4711
[   82.416020][ T8010] tipc: Node number set to 4
[   82.543797][   T11] IPVS: starting estimator thread 0...
[   82.550008][ T8020] netlink: 16 bytes leftover after parsing attributes in process `syz.6.780'.
[   82.607993][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   82.608028][ T4302] loop6: partition table partially beyond EOD, truncated
[   82.608129][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   82.608139][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   82.609222][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   82.609548][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   82.610395][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   82.635457][ T8026] IPVS: using max 47 ests per chain, 112800 per kthread
[   82.695832][ T8030] xt_time: invalid argument - start or stop time greater than 23:59:59
[   82.837269][ T8046] netlink: 68 bytes leftover after parsing attributes in process `syz.4.789'.
[   83.375179][ T8072] netlink: 20 bytes leftover after parsing attributes in process `syz.6.799'.
[   84.027294][ T8106] netlink: 'syz.2.808': attribute type 1 has an invalid length.
[   84.027332][ T8106] netlink: 'syz.2.808': attribute type 4 has an invalid length.
[   84.027632][ T8106] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.808'.
[   84.028564][ T8106] netlink: 'syz.2.808': attribute type 1 has an invalid length.
[   84.028573][ T8106] netlink: 'syz.2.808': attribute type 4 has an invalid length.
[   84.028580][ T8106] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.808'.
[   84.028979][ T8106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.808'.
[   84.394856][ T8139] loop4: detected capacity change from 0 to 128
[   84.395536][ T8139] EXT4-fs (loop4): Test dummy encryption mode enabled
[   84.412879][ T8139] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.655315][ T8148] loop5: detected capacity change from 0 to 2048
[   84.705226][ T8148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.749424][ T8159] netlink: 'syz.2.821': attribute type 5 has an invalid length.
[   84.778858][ T8162] sctp: [Deprecated]: syz.3.822 (pid 8162) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.778858][ T8162] Use struct sctp_sack_info instead
[   84.873965][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.873997][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.907248][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.825'.
[   84.945345][ T8148] batadv_slave_1: entered promiscuous mode
[   85.341583][ T4673] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.471383][ T8191] fuse: fd is not a fuse device
[   85.473670][ T8191] Injecting memory failure for pfn 0x1341ac at process virtual address 0x20000000
[   85.487034][ T8191] Memory failure: 0x1341ac: Sending SIGBUS to syz.2.832:8191 due to hardware memory corruption
[   85.487105][ T8191] Memory failure: 0x1341ac: recovery action for dirty LRU page: Recovered
[   85.487120][ T8191] Injecting memory failure for pfn 0x13f9fe at process virtual address 0x20001000
[   85.489333][ T8191] Memory failure: 0x13f9fe: Sending SIGBUS to syz.2.832:8191 due to hardware memory corruption
[   85.489363][ T8191] Memory failure: 0x13f9fe: recovery action for dirty LRU page: Recovered
[   85.489378][ T8191] Injecting memory failure for pfn 0x13e5d4 at process virtual address 0x20002000
[   85.489584][ T8191] Memory failure: 0x13e5d4: Sending SIGBUS to syz.2.832:8191 due to hardware memory corruption
[   85.489603][ T8191] Memory failure: 0x13e5d4: recovery action for dirty LRU page: Recovered
[   85.489611][ T8191] Injecting memory failure for pfn 0x13d952 at process virtual address 0x20003000
[   85.489644][ T8191] Memory failure: 0x13d952: Sending SIGBUS to syz.2.832:8191 due to hardware memory corruption
[   85.489661][ T8191] Memory failure: 0x13d952: recovery action for dirty LRU page: Recovered
[   85.489669][ T8191] Injecting memory failure for pfn 0x13f5e2 at process virtual address 0x20004000
[   85.489697][ T8191] Memory failure: 0x13f5e2: Sending SIGBUS to syz.2.832:8191 due to hardware memory corruption
[   85.489712][ T8191] Memory failure: 0x13f5e2: recovery action for dirty LRU page: Recovered
[   85.489720][ T8191] Injecting memory failure for pfn 0x1341ec at process virtual address 0x20005000
[   85.489745][ T8191] Memory failure: 0x1341ec: Sending SIGBUS to syz.2.832:8191 due to hardware memory corruption
[   85.489761][ T8191] Memory failure: 0x1341ec: recovery action for dirty LRU page: Recovered
[   85.489769][ T8191] Injecting memory failure for pfn 0x13d908 at process virtual address 0x20006000
[   85.489793][ T8191] Memory failure: 0x13d908: Sending SIGBUS to syz.2.832:8191 due to hardware memory corruption
[   85.489809][ T8191] Memory failure: 0x13d908: recovery action for dirty LRU page: Recovered
[   85.489816][ T8191] Injecting memory failure for pfn 0x13653c at process virtual address 0x20007000
[   85.489841][ T8191] Memory failure: 0x13653c: Sending SIGBUS to syz.2.832:8191 due to hardware memory corruption
[   85.489856][ T8191] Memory failure: 0x13653c: recovery action for dirty LRU page: Recovered
[   85.489864][ T8191] Injecting memory failure for pfn 0x13d93e at process virtual address 0x20008000
[   85.489888][ T8191] Memory failure: 0x13d93e: Sending SIGBUS to syz.2.832:8191 due to hardware memory corruption
[   85.489904][ T8191] Memory failure: 0x13d93e: recovery action for dirty LRU page: Recovered
[   85.489922][ T8191] Injecting memory failure for pfn 0x21d0b2 at process virtual address 0x20009000
[   85.490144][ T8191] Memory failure: 0x21d0b2: Sending SIGBUS to syz.2.832:8191 due to hardware memory corruption
[   85.490171][ T8191] Memory failure: 0x21d0b2: recovery action for already poisoned page: Failed
[   85.537262][ T8147] batadv_slave_1: left promiscuous mode
[   85.646131][ T8157] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[   85.779635][ T8195] netlink: 948 bytes leftover after parsing attributes in process `syz.2.833'.
[   85.780394][ T4674] Bluetooth: hci3: ACL packet for unknown connection handle 201
[   85.814227][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.899622][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   85.899650][ T4302] loop6: partition table partially beyond EOD, truncated
[   85.899785][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   85.899804][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   85.903186][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   85.904033][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   85.907044][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   86.448924][ T8223] loop4: detected capacity change from 0 to 512
[   86.468571][ T8223] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.844: corrupted in-inode xattr: invalid ea_ino
[   86.468616][ T8223] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   86.471807][ T8223] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.844: couldn't read orphan inode 15 (err -117)
[   86.471835][ T8223] loop4: lost filesystem error report for type 5 error -117
[   86.476684][ T8223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.482738][ T8223] netlink: 'syz.4.844': attribute type 2 has an invalid length.
[   86.505950][ T8223] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.844: deleted inode referenced: 15
[   86.510084][ T8223] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.844: deleted inode referenced: 15
[   86.516305][ T8223] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.844: deleted inode referenced: 15
[   86.519169][ T8223] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.844: deleted inode referenced: 15
[   86.526095][ T8223] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.844: deleted inode referenced: 15
[   86.528555][ T8232] xt_ecn: cannot match TCP bits for non-tcp packets
[   86.625497][ T8243] sch_tbf: burst 32852 is lower than device lo mtu (65550) !
[   86.658764][ T4673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.815376][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   86.815407][ T4302] loop6: partition table partially beyond EOD, truncated
[   86.815490][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   86.815499][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   86.824367][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   86.826529][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   86.828195][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   86.869239][ T8268] tmpfs: Bad value for 'mpol'
[   87.203513][ T8299] syz_tun: entered allmulticast mode
[   87.207459][ T8299] netlink: 'syz.5.865': attribute type 39 has an invalid length.
[   87.245601][ T8299] syz_tun (unregistering): left allmulticast mode
[   87.538852][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   87.540044][ T4302] loop6: partition table partially beyond EOD, truncated
[   87.540157][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   87.540180][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   87.549186][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   87.551245][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   87.554365][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   87.586741][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   87.588084][ T4302] loop6: partition table partially beyond EOD, truncated
[   87.589695][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   87.591296][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   87.594448][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   87.597275][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   87.600041][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   87.635727][ T8322] netlink: 'syz.6.873': attribute type 2 has an invalid length.
[   87.639261][ T8322] overlayfs: conflicting options: nfs_export=on,index=off
[   87.743708][   T30] audit: type=1400 audit(84.802:205): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8327 comm="syz.2.874" src=1 netif=wpan0
[   87.759324][ T8330] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001
[   88.060543][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   88.060573][ T4302] loop6: partition table partially beyond EOD, truncated
[   88.060673][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   88.060741][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   88.069731][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   88.073473][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   88.075656][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   88.235223][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   88.235256][ T4302] loop6: partition table partially beyond EOD, truncated
[   88.235344][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   88.235363][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   88.237157][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   88.237538][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   88.237885][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   88.420279][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   88.420313][ T4302] loop6: partition table partially beyond EOD, truncated
[   88.420427][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   88.420453][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   88.428671][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   88.432398][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   88.434436][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   88.798380][ T8378] netlink: 32 bytes leftover after parsing attributes in process `syz.6.888'.
[   88.798419][ T8378] netlink: 32 bytes leftover after parsing attributes in process `syz.6.888'.
[   88.921169][ T8383] fuse: Bad value for 'fd'
[   88.927863][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   88.927887][ T4302] loop6: partition table partially beyond EOD, truncated
[   88.927959][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   88.927969][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   88.942147][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   88.947306][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   89.203569][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   89.254990][ T8387] overlayfs: failed to decode file handle (len=13, type=251, flags=0, err=-22)
[   89.722541][ T8395] netlink: 'syz.6.893': attribute type 10 has an invalid length.
[   89.756676][ T8395] team0: Port device dummy0 added
[   89.983303][ T8424] netlink: 'syz.3.904': attribute type 2 has an invalid length.
[   89.985601][ T8424] netlink: 'syz.3.904': attribute type 2 has an invalid length.
[   90.119675][ T8427] sctp: [Deprecated]: syz.3.905 (pid 8427) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.119675][ T8427] Use struct sctp_sack_info instead
[   90.362095][ T8434] xt_TCPMSS: Only works on TCP SYN packets
[   90.808838][ T4686] Bluetooth: hci1: unexpected event for opcode 0x080d
[   90.893011][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   90.893041][ T4302] loop6: partition table partially beyond EOD, truncated
[   90.893106][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   90.893116][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   90.899590][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   90.901359][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   90.903185][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   91.096438][ T8449] bond0: entered promiscuous mode
[   91.096474][ T8449] bond_slave_0: entered promiscuous mode
[   91.096574][ T8449] bond_slave_1: entered promiscuous mode
[   91.126709][ T8462] sock: sock_set_timeout: `syz.3.914' (pid 8462) tries to set negative timeout
[   91.138346][ T8449] bond1: option tlb_dynamic_lb: invalid value (7)
[   91.154644][ T8449] bond1 (unregistering): Released all slaves
[   91.255230][ T8448] bond0: left promiscuous mode
[   91.256288][ T8467] netlink: 76 bytes leftover after parsing attributes in process `syz.5.916'.
[   91.263875][ T8448] bond_slave_0: left promiscuous mode
[   91.264005][ T8448] bond_slave_1: left promiscuous mode
[   91.338139][ T8474] x_tables: duplicate underflow at hook 1
[   91.367384][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   91.367419][ T4302] loop6: partition table partially beyond EOD, truncated
[   91.367500][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   91.367511][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   91.380116][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   91.381934][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   91.388596][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   91.422835][   T30] audit: type=1400 audit(88.228:206): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8489 comm="syz.3.926" src=1 netif=wpan0
[   91.686435][ T8507] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   91.686983][ T8507] overlayfs: failed to set xattr on upper
[   91.686995][ T8507] overlayfs: ...falling back to redirect_dir=nofollow.
[   91.687005][ T8507] overlayfs: ...falling back to metacopy=off.
[   91.687014][ T8507] overlayfs: ...falling back to uuid=null.
[   91.713774][ T8512] loop5: detected capacity change from 0 to 1024
[   91.730188][ T8512] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   91.732186][ T8512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.740639][ T8512] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.931: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   91.781165][ T8512] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.931: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   91.829881][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   91.829912][ T4302] loop6: partition table partially beyond EOD, truncated
[   91.830009][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   91.830028][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   91.836042][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   91.840614][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   91.842628][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   91.849827][ T8512] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.931: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   91.900864][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.954110][ T8532] netlink: 16 bytes leftover after parsing attributes in process `syz.5.935'.
[   92.075503][ T8539] input: syz1 as /devices/virtual/input/input7
[   92.326200][ T8544] netlink: 48 bytes leftover after parsing attributes in process `syz.5.939'.
[   92.386528][ T8548] netlink: 'syz.5.941': attribute type 1 has an invalid length.
[   92.386575][ T8548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.540604][ T8569] loop5: detected capacity change from 0 to 128
[   92.591079][ T8571] netlink: 'syz.2.947': attribute type 10 has an invalid length.
[   92.591315][ T8571] bridge0: port 3(dummy0) entered disabled state
[   93.012039][ T8582] fuse: fd is not a fuse device
[   93.668989][ T8592] loop5: detected capacity change from 0 to 512
[   93.678043][ T8592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.690917][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.731075][ T8596] loop5: detected capacity change from 0 to 256
[   93.733173][ T8596] vfat: Unknown parameter 'uni_xl� 9�^cyate'
[   93.736622][ T8596] netlink: 'syz.5.955': attribute type 1 has an invalid length.
[   93.748022][ T8596] 8021q: adding VLAN 0 to HW filter on device bond3
[   93.755453][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.955'.
[   93.755711][ T8596] 9p: Bad value for 'dfltuid'
[   93.755719][ T8596] 9p: Bad value for 'dfltuid'
[   93.776424][ T8599] loop5: detected capacity change from 0 to 1024
[   93.777048][ T8599] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   93.777168][ T8599] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   93.778816][ T8599] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   93.778929][ T8599] EXT4-fs (loop5): orphan cleanup on readonly fs
[   93.779913][ T8599] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 3: comm syz.5.956: lblock 3 mapped to illegal pblock 3 (length 1)
[   93.779931][ T8599] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   93.780009][ T8599] Quota error (device loop5): write_blk: dquota write failed
[   93.780018][ T8599] Quota error (device loop5): find_free_dqentry: Can't write quota data block 3
[   93.780056][ T8599] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[   93.780075][ T8599] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.956: Failed to acquire dquot type 0
[   93.780085][ T8599] loop5: lost filesystem error report for type 5 error -117
[   93.780216][ T8599] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 3: comm syz.5.956: lblock 3 mapped to illegal pblock 3 (length 1)
[   93.780229][ T8599] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   93.780328][ T8599] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[   93.780344][ T8599] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.956: Failed to acquire dquot type 0
[   93.780353][ T8599] loop5: lost filesystem error report for type 5 error -117
[   93.780464][ T8599] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.956: Freeing blocks not in datazone - block = 0, count = 4096
[   93.780476][ T8599] loop5: lost filesystem error report for type 5 error -117
[   93.780897][ T8599] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 3: comm syz.5.956: lblock 3 mapped to illegal pblock 3 (length 1)
[   93.780910][ T8599] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   93.781077][    C1] EXT4-fs (loop5): error count since last fsck: 5
[   93.781086][    C1] EXT4-fs (loop5): initial error at time 90: ext4_map_blocks:833: inode 3: block 3
[   93.781109][    C1] EXT4-fs (loop5): last error at time 90: ext4_free_blocks:6718
[   93.787493][ T8599] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[   93.787517][ T8599] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.956: Failed to acquire dquot type 0
[   93.787528][ T8599] loop5: lost filesystem error report for type 5 error -117
[   93.787669][ T8599] EXT4-fs (loop5): 1 orphan inode deleted
[   93.829512][ T8599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   93.836644][ T8599] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 16: comm syz.5.956: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   93.841341][ T8599] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.956: iget: bad extended attribute block 6
[   93.850925][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.950267][ T8608] dvmrp6: entered allmulticast mode
[   93.954574][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.954760][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.967253][ T8608] pimreg: entered allmulticast mode
[   94.562985][ T8608] pimreg: left allmulticast mode
[   95.076137][ T8523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   95.106147][ T4686] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   95.106220][ T4686] Bluetooth: hci1: Injecting HCI hardware error event
[   95.107107][ T4686] Bluetooth: hci1: hardware error 0x00
[   95.116197][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[   95.118138][ T4302] loop6: partition table partially beyond EOD, truncated
[   95.120074][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[   95.121521][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[   95.123652][   T30] audit: type=1400 audit(91.681:207): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8616 comm="syz.2.963" src=1 netif=wpan0
[   95.129256][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[   95.138017][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[   95.139918][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[   95.174863][ T8623] macvtap1: entered promiscuous mode
[   95.177039][ T8623] dummy0: entered promiscuous mode
[   95.179662][ T8623] team0: Device macvtap1 failed to register rx_handler
[   95.215166][  T856] dummy0: left promiscuous mode
[   95.266790][ T8631] tipc: Started in network mode
[   95.266976][ T8631] tipc: Node identity 4, cluster identity 4711
[   95.266984][ T8631] tipc: Node number set to 4
[   95.348263][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.968'.
[   95.432552][ T8657] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[   95.437201][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'.
[   95.485030][ T8662] netlink: 40 bytes leftover after parsing attributes in process `syz.6.974'.
[   95.489467][ T8662] bridge2: entered promiscuous mode
[   95.491877][ T8662] bridge2: entered allmulticast mode
[   96.115281][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.115483][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.285656][ T8736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.993'.
[   97.328869][ T4686] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   97.543244][ T8741] PKCS8: Unsupported PKCS#8 version
[   97.547775][ T8741] netlink: 'syz.2.994': attribute type 10 has an invalid length.
[   97.547822][ T8741] netlink: 'syz.2.994': attribute type 4 has an invalid length.
[   97.547859][ T8741] netlink: 'syz.2.994': attribute type 4 has an invalid length.
[   97.547894][ T8741] netlink: 'syz.2.994': attribute type 4 has an invalid length.
[   97.547927][ T8741] netlink: 'syz.2.994': attribute type 4 has an invalid length.
[   98.545637][ T8751] syz.2.997(8751): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[   98.982562][ T8785] Bluetooth: MGMT ver 1.23
[   98.984071][ T8785] Bluetooth: hci1: too big key_count value 36871
[   99.104100][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1008'.
[  100.441582][ T8810] loop5: detected capacity change from 0 to 1024
[  100.444640][ T8810] EXT4-fs error (device loop5): __ext4_fill_super:5596: comm syz.5.1012: inode #2: comm syz.5.1012: iget: illegal inode #
[  100.444682][ T8810] loop5: lost filesystem error report for type 5 error -117
[  100.448423][ T8810] EXT4-fs (loop5): Remounting filesystem read-only
[  100.448468][ T8810] EXT4-fs (loop5): get root inode failed
[  100.448489][ T8810] EXT4-fs (loop5): mount failed
[  100.450059][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  100.450071][    C1] EXT4-fs (loop5): initial error at time 96: __ext4_fill_super:5596
[  100.450083][    C1] EXT4-fs (loop5): last error at time 96: __ext4_fill_super:5596
[  100.454128][ T8823] x_tables: duplicate underflow at hook 1
[  100.456159][ T8823] IPVS: set_ctl: invalid protocol: 47 172.30.1.3:20003
[  100.558126][ T4677] IPVS: starting estimator thread 0...
[  100.583453][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'.
[  100.583486][ T8829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1018'.
[  100.583599][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'.
[  100.583609][ T8829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1018'.
[  100.663909][ T8831] IPVS: using max 48 ests per chain, 115200 per kthread
[  100.700839][   T30] audit: type=1400 audit(96.903:208): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8839 comm="syz.2.1020" src=1 netif=wpan0
[  100.834899][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1022'.
[  101.706292][ T8872] loop4: detected capacity change from 0 to 1024
[  101.706798][ T8872] EXT4-fs: Ignoring removed orlov option
[  101.707370][ T8872] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  101.715658][ T8872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.061889][ T4673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.232064][ T8889] loop5: detected capacity change from 0 to 256
[  102.249959][ T8889] FAT-fs (loop5): Directory bread(block 64) failed
[  102.251693][ T8889] FAT-fs (loop5): Directory bread(block 65) failed
[  102.252989][ T8889] FAT-fs (loop5): Directory bread(block 66) failed
[  102.254392][ T8889] FAT-fs (loop5): Directory bread(block 67) failed
[  102.257000][ T8889] FAT-fs (loop5): Directory bread(block 68) failed
[  102.258321][ T8889] FAT-fs (loop5): Directory bread(block 69) failed
[  102.263363][ T8889] FAT-fs (loop5): Directory bread(block 70) failed
[  102.263400][ T8889] FAT-fs (loop5): Directory bread(block 71) failed
[  102.263431][ T8889] FAT-fs (loop5): Directory bread(block 72) failed
[  102.263452][ T8889] FAT-fs (loop5): Directory bread(block 73) failed
[  102.772444][ T8924] 
: renamed from bond0 (while UP)
[  102.887480][ T8941] bridge3: entered promiscuous mode
[  102.887545][ T8941] bridge3: entered allmulticast mode
[  102.901931][ T8944] 8021q: VLANs not supported on ip6gre0
[  103.384517][ T8957] macvlan0: entered promiscuous mode
[  103.576402][ T8971] loop7: detected capacity change from 0 to 7
[  103.626880][ T8971] Dev loop7: unable to read RDB block 7
[  103.628306][ T8971]  loop7: unable to read partition table
[  103.629615][ T8971] loop7: partition table beyond EOD, truncated
[  103.632491][ T8971] loop_reread_partitions: partition scan of loop7 (���������S�j��	���%��`��ր����5) failed (rc=-5)
[  103.683928][    C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  103.683972][    C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  103.695364][ T8971] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  103.695401][ T8971] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  103.748222][ T8978] netlink: 'syz.4.1057': attribute type 16 has an invalid length.
[  103.748256][ T8978] netlink: 'syz.4.1057': attribute type 17 has an invalid length.
[  103.815641][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1057'.
[  103.819845][ T8978] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.825371][ T8978] tipc: Resetting bearer <eth:team0>
[  103.828090][ T8978] tipc: Resetting bearer <eth:team0>
[  104.011971][ T8978] macvlan1: left allmulticast mode
[  104.013725][ T8978] veth1_vlan: left allmulticast mode
[  104.036018][ T8978] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.039416][ T8978] bridge2: left allmulticast mode
[  104.287496][ T8984] syz_tun (unregistering): left allmulticast mode
[  104.295331][ T8986] geneve2: entered promiscuous mode
[  104.370334][ T1313] tipc: Resetting bearer <eth:team0>
[  104.372491][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'.
[  104.375096][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'.
[  104.535209][ T9016] loop4: detected capacity change from 0 to 1024
[  104.535631][ T9016] EXT4-fs: Ignoring removed bh option
[  104.536537][ T9016] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  104.544436][ T9016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.638342][ T4673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.668830][ T9025] loop4: detected capacity change from 0 to 1024
[  104.711939][ T9025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  104.725973][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1068'.
[  104.801967][ T9025] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.1068: Freeing blocks not in datazone - block = 0, count = 16
[  104.868429][   T39] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set
[  104.876443][   T39] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  104.879472][   T39] EXT4-fs (loop4): This should not happen!! Data will be lost
[  104.879472][   T39] 
[  104.881496][   T39] EXT4-fs (loop4): Total free blocks count 0
[  104.883384][   T39] EXT4-fs (loop4): Free/Dirty block details
[  104.889052][   T39] EXT4-fs (loop4): free_blocks=16
[  104.889078][   T39] EXT4-fs (loop4): dirty_blocks=16
[  104.889093][   T39] EXT4-fs (loop4): Block reservation details
[  104.889107][   T39] EXT4-fs (loop4): i_reserved_data_blocks=1
[  104.913722][ T4673] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  104.914460][ T4673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  105.061519][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'.
[  105.070935][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1070'.
[  105.070967][ T9043] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1070'.
[  105.201807][ T9055] loop4: detected capacity change from 0 to 1024
[  105.241400][ T9055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.253189][ T9055] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 623: comm syz.4.1076: Attempting to read directory block (623) that is past i_size (638464)
[  105.265703][ T9058] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 623: comm syz.4.1076: Attempting to read directory block (623) that is past i_size (638464)
[  105.290704][ T9055] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 16: comm syz.4.1076: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1
[  105.291677][ T9058] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 16: comm syz.4.1076: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1
[  105.325879][ T9065] overlayfs: null uuid in non-single lower fs '/syz5', falling back to xino=off,index=off,nfs_export=off.
[  105.362398][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[  105.363829][ T4302] loop6: partition table partially beyond EOD, truncated
[  105.369801][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[  105.371237][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[  105.372522][ T4673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.375101][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[  105.376910][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[  105.378671][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[  105.384997][ T9075] netlink: 'syz.3.1082': attribute type 4 has an invalid length.
[  105.516701][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'.
[  105.519005][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'.
[  105.646499][ T9094] netlink: 'syz.3.1091': attribute type 24 has an invalid length.
[  105.704975][ T4302]  loop6: p1 < > p2 p3 < p5 p6 > p4
[  105.705009][ T4302] loop6: partition table partially beyond EOD, truncated
[  105.705109][ T4302] loop6: p1 start 100663296 is beyond EOD, truncated
[  105.705118][ T4302] loop6: p2 size 134217732 extends beyond EOD, truncated
[  105.716156][ T4302] loop6: p4 size 14876672 extends beyond EOD, truncated
[  105.723700][ T4302] loop6: p5 size 134217732 extends beyond EOD, truncated
[  105.725642][ T4302] loop6: p6 size 14876672 extends beyond EOD, truncated
[  105.946622][ T9139] loop4: detected capacity change from 0 to 256
[  106.767154][ T4686] Bluetooth: hci0: ACL packet for unknown connection handle 2249
[  106.767203][ T4686] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  106.925682][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'.
[  106.939427][ T9157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1110'.
[  106.976678][ T9153] loop5: detected capacity change from 0 to 512
[  106.983515][ T9153] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  106.994710][ T9153] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1111: bad orphan inode 131083
[  106.994752][ T9153] loop5: lost filesystem error report for type 5 error -117
[  107.070532][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1117'.
[  107.095383][ T9168] team0: Port device dummy0 removed
[  107.099661][ T9168] bridge_slave_0: left allmulticast mode
[  107.099712][ T9168] bridge_slave_0: left promiscuous mode
[  107.099824][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.105391][ T9153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.112739][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1111'.
[  107.119766][ T9168] bridge_slave_1: left allmulticast mode
[  107.119794][ T9168] bridge_slave_1: left promiscuous mode
[  107.119883][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.144032][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.146222][ T9168] bond0: (slave bond_slave_0): Releasing backup interface
[  107.166787][   T30] audit: type=1400 audit(102.957:209): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9185 comm="syz.2.1121" src=1 netif=wpan0
[  107.188328][ T9168] bond0: (slave bond_slave_1): Releasing backup interface
[  107.266601][ T9168] team0: Port device team_slave_0 removed
[  107.278488][ T9168] team0: Port device team_slave_1 removed
[  107.278812][ T9168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.278830][ T9168] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.283391][ T9168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.283413][ T9168] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.289824][ T9168] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  107.308619][ T9189] syzkaller1: entered promiscuous mode
[  107.308646][ T9189] syzkaller1: entered allmulticast mode
[  107.332786][ T4686] Bluetooth: hci0: command 0x0c1a tx timeout
[  107.529631][ T9213] loop4: detected capacity change from 0 to 512
[  107.534995][ T9213] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  107.535032][ T9213] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  107.683911][ T9218] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1128'.
[  107.922818][ T9245] loop4: detected capacity change from 0 to 512
[  107.936002][ T9245] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  107.946048][ T9245] EXT4-fs (loop4): 1 truncate cleaned up
[  107.953718][ T9245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.096706][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1136'.
[  109.044559][   T30] audit: type=1400 audit(104.717:210): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9289 comm="syz.3.1149" src=1 netif=wpan0
[  109.179121][ T9296] binder: 9294:9296 ioctl 400c620e ffffffffffffffff returned -14
[  109.181356][ T9296] binder: 9294:9296 ioctl 400c620e ffffffffffffffff returned -14
[  109.183098][ T9296] binder: 9294:9296 ioctl 400c620e ffffffffffffffff returned -14
[  109.185039][ T9296] binder: 9294:9296 ioctl 400c620e ffffffffffffffff returned -14
[  109.186847][ T9296] binder: 9294:9296 ioctl 400c620e ffffffffffffffff returned -14
[  109.189996][ T9296] binder: 9294:9296 ioctl 400c620e ffffffffffffffff returned -14
[  109.475804][ T4686] Bluetooth: hci0: unexpected event for opcode 0x2002
[  109.563070][ T4673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.605137][ T9320] fuse: Bad value for 'rootmode'
[  109.657100][ T9327] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1162'.
[  109.657515][ T9327] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1162'.
[  109.657962][ T9327] overlayfs: failed to clone upperpath
[  109.685702][ T9328] loop4: detected capacity change from 0 to 256
[  109.705287][ T9328] FAT-fs (loop4): Directory bread(block 64) failed
[  109.705320][ T9328] FAT-fs (loop4): Directory bread(block 65) failed
[  109.705351][ T9328] FAT-fs (loop4): Directory bread(block 66) failed
[  109.705364][ T9328] FAT-fs (loop4): Directory bread(block 67) failed
[  109.705387][ T9328] FAT-fs (loop4): Directory bread(block 68) failed
[  109.705398][ T9328] FAT-fs (loop4): Directory bread(block 69) failed
[  109.705418][ T9328] FAT-fs (loop4): Directory bread(block 70) failed
[  109.705429][ T9328] FAT-fs (loop4): Directory bread(block 71) failed
[  109.705462][ T9328] FAT-fs (loop4): Directory bread(block 72) failed
[  109.705474][ T9328] FAT-fs (loop4): Directory bread(block 73) failed
[  109.750266][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1164'.
[  109.759058][ T9333] overlayfs: failed to clone lowerpath
[  109.764202][ T9333] overlayfs: failed to clone lowerpath
[  109.861688][ T4686] Bluetooth: hci3: unexpected event for opcode 0x0419
[  109.894097][ T9346] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1168'.
[  109.948150][ T9356] autofs: Unknown parameter 'ns'
[  110.194238][ T9374] macvlan1: entered promiscuous mode
[  110.196291][ T9374] bond0: (slave macvlan1): Error -98 calling set_mac_address
[  110.439528][ T4686] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  110.460357][   T30] audit: type=1400 audit(106.036:211): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9389 comm="syz.3.1182" src=1 netif=wpan0
[  110.579294][ T9393] loop5: detected capacity change from 0 to 8192
[  110.587134][ T9393] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  110.778885][ T9399] loop5: detected capacity change from 0 to 256
[  110.796912][ T9399] FAT-fs (loop5): Directory bread(block 64) failed
[  110.796948][ T9399] FAT-fs (loop5): Directory bread(block 65) failed
[  110.796991][ T9399] FAT-fs (loop5): Directory bread(block 66) failed
[  110.797005][ T9399] FAT-fs (loop5): Directory bread(block 67) failed
[  110.797029][ T9399] FAT-fs (loop5): Directory bread(block 68) failed
[  110.797040][ T9399] FAT-fs (loop5): Directory bread(block 69) failed
[  110.797089][ T9399] FAT-fs (loop5): Directory bread(block 70) failed
[  110.797100][ T9399] FAT-fs (loop5): Directory bread(block 71) failed
[  110.797124][ T9399] FAT-fs (loop5): Directory bread(block 72) failed
[  110.797135][ T9399] FAT-fs (loop5): Directory bread(block 73) failed
[  111.009203][ T9415] bridge0: port 1(vlan2) entered blocking state
[  111.009291][ T9415] bridge0: port 1(vlan2) entered disabled state
[  111.009360][ T9415] vlan2: entered allmulticast mode
[  111.009369][ T9415] bridge0: entered allmulticast mode
[  111.014947][ T9415] vlan2: left allmulticast mode
[  111.016069][ T9415] bridge0: left allmulticast mode
[  111.188134][ T9427] overlayfs: failed to clone upperpath
[  111.308501][ T9433] Injecting memory failure for pfn 0x121083 at process virtual address 0x20000000
[  111.312690][ T9433] Memory failure: 0x121083: Sending SIGBUS to syz.6.1196:9433 due to hardware memory corruption
[  111.313045][ T9433] Memory failure: 0x121083: recovery action for dirty LRU page: Recovered
[  111.313075][ T9433] Injecting memory failure for pfn 0x21d0b2 at process virtual address 0x20001000
[  111.313093][ T9433] Memory failure: 0x21d0b2: Sending SIGBUS to syz.6.1196:9433 due to hardware memory corruption
[  111.313103][ T9433] Memory failure: 0x21d0b2: recovery action for already poisoned page: Failed
[  111.440470][ T9450] overlayfs: failed to clone upperpath
[  111.501724][ T9457] could not allocate digest TFM handle sha512-arm64
[  111.541737][ T9464] x_tables: duplicate underflow at hook 1
[  111.727473][ T9469] loop5: detected capacity change from 0 to 1024
[  111.857139][   T30] audit: type=1400 audit(107.346:212): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9482 comm="syz.2.1210" src=1 netif=wpan0
[  111.879177][ T4686] Bluetooth: hci3: unexpected event for opcode 0x0411
[  111.891466][ T9485] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20003
[  112.485079][ T9504] fuse: fd is not a fuse device
[  112.541717][   T30] audit: type=1400 audit(107.983:213): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9515 comm="syz.2.1221" src=1 netif=wpan0
[  112.561679][ T9520] hugetlbfs: syz.2.1222 (9520): Using mlock ulimits for SHM_HUGETLB is obsolete
[  112.668452][ T9542] overlayfs: failed to clone upperpath
[  112.705493][ T9546] Injecting memory failure for pfn 0x161a00 at process virtual address 0x20000000
[  112.707656][ T9546] Memory failure: 0x161a00: Sending SIGBUS to syz.6.1224:9546 due to hardware memory corruption
[  112.707692][ T9546] Memory failure: 0x161a00: recovery action for unsplit thp: Failed
[  112.794998][ T9555] tipc: Can't bind to reserved service type 1
[  112.896374][   T30] audit: type=1326 audit(108.319:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9557 comm="syz.5.1235" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e777a28 code=0x0
[  112.972401][ T9563] __nla_validate_parse: 7 callbacks suppressed
[  112.972444][ T9563] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1236'.
[  113.088941][ T9583] loop5: detected capacity change from 0 to 512
[  113.116221][ T9583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.211898][ T9583] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  113.220514][ T9583] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  113.224222][ T9583] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  113.312931][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.601480][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1249'.
[  113.603788][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1249'.
[  113.715509][ T9622] loop5: detected capacity change from 0 to 512
[  113.720163][ T9622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  113.733817][ T9622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  113.743369][ T9622] overlayfs: upper fs does not support tmpfile.
[  113.778831][ T5727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  113.820319][ T9643] block nbd5: NBD_DISCONNECT
[  113.850382][ T9645] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  113.853726][ T9645] overlayfs: conflicting lowerdir path
[  113.952791][ T9660] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1259'.
[  114.104259][ T9685] loop5: detected capacity change from 0 to 128
[  114.115313][ T9685] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  114.145607][ T9685] 
[  114.146161][ T9685] ======================================================
[  114.147442][ T9685] WARNING: possible circular locking dependency detected
[  114.148759][ T9685] syzkaller #0 Tainted: G             L     
[  114.149944][ T9685] ------------------------------------------------------
[  114.151253][ T9685] syz.5.1263/9685 is trying to acquire lock:
[  114.152361][ T9685] ffff0000f3892640 (&ei->xattr_sem){++++}-{4:4}, at: ext4_xattr_set_handle+0x138/0xe00
[  114.154141][ T9685] 
[  114.154141][ T9685] but task is already holding lock:
[  114.155484][ T9685] ffff0000d718ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc58
[  114.157530][ T9685] 
[  114.157530][ T9685] which lock already depends on the new lock.
[  114.157530][ T9685] 
[  114.159638][ T9685] 
[  114.159638][ T9685] the existing dependency chain (in reverse order) is:
[  114.161442][ T9685] 
[  114.161442][ T9685] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  114.163105][ T9685]        percpu_down_read_internal+0x5c/0x294
[  114.164223][ T9685]        ext4_writepages+0x16c/0x2d8
[  114.165247][ T9685]        do_writepages+0x270/0x468
[  114.166244][ T9685]        __writeback_single_inode+0x144/0x1808
[  114.167400][ T9685]        writeback_single_inode+0x3b8/0xaa0
[  114.168558][ T9685]        write_inode_now+0x170/0x208
[  114.169585][ T9685]        iput+0x6bc/0xb90
[  114.170425][ T9685]        ext4_xattr_block_set+0x12dc/0x2188
[  114.171502][ T9685]        ext4_expand_extra_isize_ea+0xb18/0x13a0
[  114.172667][ T9685]        __ext4_expand_extra_isize+0x29c/0x370
[  114.173742][ T9685]        __ext4_mark_inode_dirty+0x3a4/0x810
[  114.174883][ T9685]        ext4_evict_inode+0x7a0/0xfc4
[  114.175908][ T9685]        evict+0x4b8/0x740
[  114.176728][ T9685]        iput+0x858/0xb90
[  114.177594][ T9685]        ext4_process_orphan+0x240/0x2b4
[  114.178637][ T9685]        ext4_orphan_cleanup+0x7b8/0xd30
[  114.179751][ T9685]        ext4_fill_super+0x45a4/0x4d60
[  114.180744][ T9685]        get_tree_bdev_flags+0x380/0x434
[  114.181883][ T9685]        get_tree_bdev+0x2c/0x3c
[  114.182857][ T9685]        ext4_get_tree+0x28/0x38
[  114.183780][ T9685]        vfs_get_tree+0x90/0x28c
[  114.184697][ T9685]        fc_mount+0x24/0xac
[  114.185592][ T9685]        do_new_mount+0x2a4/0x540
[  114.186620][ T9685]        path_mount+0x5d0/0xa68
[  114.187580][ T9685]        do_mount+0xe8/0x148
[  114.188463][ T9685]        __arm64_sys_mount+0x334/0x380
[  114.189544][ T9685]        invoke_syscall+0x98/0x244
[  114.190502][ T9685]        el0_svc_common+0xe8/0x23c
[  114.191428][ T9685]        do_el0_svc+0x48/0x58
[  114.192303][ T9685]        el0_svc+0x64/0x260
[  114.193152][ T9685]        el0t_64_sync_handler+0x48/0x148
[  114.194198][ T9685]        el0t_64_sync+0x198/0x19c
[  114.195113][ T9685] 
[  114.195113][ T9685] -> #0 (&ei->xattr_sem){++++}-{4:4}:
[  114.196533][ T9685]        __lock_acquire+0x1780/0x2f44
[  114.197517][ T9685]        lock_acquire+0x140/0x368
[  114.198482][ T9685]        down_write+0x50/0xc0
[  114.199400][ T9685]        ext4_xattr_set_handle+0x138/0xe00
[  114.200554][ T9685]        ext4_initxattrs+0xa4/0x118
[  114.201475][ T9685]        security_inode_init_security+0x24c/0x378
[  114.202753][ T9685]        ext4_init_security+0x44/0x58
[  114.203756][ T9685]        __ext4_new_inode+0x28dc/0x3390
[  114.204817][ T9685]        ext4_ext_migrate+0x56c/0xc58
[  114.205881][ T9685]        ext4_ioctl+0x1cd4/0x4234
[  114.206874][ T9685]        __arm64_sys_ioctl+0x14c/0x1c4
[  114.207944][ T9685]        invoke_syscall+0x98/0x244
[  114.208914][ T9685]        el0_svc_common+0xe8/0x23c
[  114.209870][ T9685]        do_el0_svc+0x48/0x58
[  114.210721][ T9685]        el0_svc+0x64/0x260
[  114.211560][ T9685]        el0t_64_sync_handler+0x48/0x148
[  114.212788][ T9685]        el0t_64_sync+0x198/0x19c
[  114.213736][ T9685] 
[  114.213736][ T9685] other info that might help us debug this:
[  114.213736][ T9685] 
[  114.215655][ T9685]  Possible unsafe locking scenario:
[  114.215655][ T9685] 
[  114.217108][ T9685]        CPU0                    CPU1
[  114.218133][ T9685]        ----                    ----
[  114.219126][ T9685]   lock(&sbi->s_writepages_rwsem);
[  114.220140][ T9685]                                lock(&ei->xattr_sem);
[  114.221365][ T9685]                                lock(&sbi->s_writepages_rwsem);
[  114.222877][ T9685]   lock(&ei->xattr_sem);
[  114.223746][ T9685] 
[  114.223746][ T9685]  *** DEADLOCK ***
[  114.223746][ T9685] 
[  114.225309][ T9685] 3 locks held by syz.5.1263/9685:
[  114.226267][ T9685]  #0: ffff0000f6f98410 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0xdc
[  114.228159][ T9685]  #1: ffff0000f38973f8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: ext4_ioctl+0x1ccc/0x4234
[  114.230136][ T9685]  #2: ffff0000d718ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc58
[  114.232166][ T9685] 
[  114.232166][ T9685] stack backtrace:
[  114.233349][ T9685] CPU: 0 UID: 0 PID: 9685 Comm: syz.5.1263 Tainted: G             L      syzkaller #0 PREEMPT 
[  114.235421][ T9685] Tainted: [L]=SOFTLOCKUP
[  114.236294][ T9685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  114.238245][ T9685] Call trace:
[  114.238899][ T9685]  show_stack+0x2c/0x3c (C)
[  114.239790][ T9685]  __dump_stack+0x30/0x40
[  114.240663][ T9685]  dump_stack_lvl+0xd8/0x12c
[  114.241539][ T9685]  dump_stack+0x1c/0x28
[  114.242318][ T9685]  print_circular_bug+0x328/0x330
[  114.243280][ T9685]  check_noncircular+0x158/0x174
[  114.244164][ T9685]  __lock_acquire+0x1780/0x2f44
[  114.244585][ T9698] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  114.244641][ T9698] vhci_hcd vhci_hcd.2: invalid port number 96
[  114.244687][ T9698] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[  114.248938][ T9685]  lock_acquire+0x140/0x368
[  114.249813][ T9685]  down_write+0x50/0xc0
[  114.250574][ T9685]  ext4_xattr_set_handle+0x138/0xe00
[  114.251594][ T9685]  ext4_initxattrs+0xa4/0x118
[  114.252487][ T9685]  security_inode_init_security+0x24c/0x378
[  114.253547][ T9685]  ext4_init_security+0x44/0x58
[  114.254447][ T9685]  __ext4_new_inode+0x28dc/0x3390
[  114.255402][ T9685]  ext4_ext_migrate+0x56c/0xc58
[  114.256427][ T9685]  ext4_ioctl+0x1cd4/0x4234
[  114.257241][ T9685]  __arm64_sys_ioctl+0x14c/0x1c4
[  114.258153][ T9685]  invoke_syscall+0x98/0x244
[  114.258977][ T9685]  el0_svc_common+0xe8/0x23c
[  114.259943][ T9685]  do_el0_svc+0x48/0x58
[  114.260814][ T9685]  el0_svc+0x64/0x260
[  114.261601][ T9685]  el0t_64_sync_handler+0x48/0x148
[  114.262587][ T9685]  el0t_64_sync+0x198/0x19c
[  114.279617][ T5727] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  115.366609][ T4686] Bluetooth: hci0: command 0x0c1a tx timeout
[  115.366622][ T4674] Bluetooth: hci4: command 0x0c1a tx timeout
[  115.366634][ T4681] Bluetooth: hci3: command 0x0c1a tx timeout