last executing test programs:

18.02830957s ago: executing program 3 (id=628):
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4e5, &(0x7f0000000a40)="$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")
io_setup(0x9, &(0x7f00000001c0)=<r0=>0x0)
r1 = timerfd_create(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
clock_adjtime(0x0, &(0x7f00000003c0)={0x3fd, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x80, 0x0, 0x0, 0xe, 0x4, 0x805, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000000000000000})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000001c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00'}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0x438e}}, 0x18)

16.17061261s ago: executing program 3 (id=632):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffffffffffe9c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000007f00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
listen(r5, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_int(r6, 0x29, 0x5, &(0x7f0000000100)=0x3c, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmsg$inet6(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)

11.47747711s ago: executing program 4 (id=641):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x451, &(0x7f0000000d80)="$eJzs3M1vG0UbAPDHdpw2bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k2dxE6cxIlL/ftJm8zsjDXz7O7Y41nbAXSsweRPLuJQRPwaEX3V7OoKg9V/t5fnJ/5enp/IRbn8xp+5Sr2/lucnsqrZ4w5WM+XyBu0uvh0xXipNXUvzI3NX3huZvX7juekr45emLk1dHTt37vSp491nx860JM7epK8DH84cO/rKWzdfm7hw850fv076eygtr42jVQarR7euJ1vdWJv11qRzXW3sCFtSiIjkdBUr478vCtGzUtYXL3/S1s4Bu6pczpf3NS5eKAP3sGSiDnSi7IU+ef+bbXs09bgrLJ2PlXWM2+lWLemKfFqnmL5H2g2DEXFh4Z8vki12aR0CAKDWrfMR8Wy9+V8+Hqip97/03lB/RPw/Ig5HxH0RcSQi7o+o1H0wIh7aYvtr75Csn/+U+7YVWJOS+d8L6b2t1fO/bPYX/YU011uJv5i7OF2aOpkek6Eo7kvyoxu08d1Lv3zWqKx2/pdsSfvZXDDtxx9daxboJsfnxncSc62ljyMGuurFn1uZ8ybz46MRMbDNNqaf/upYo7LN499ACybl5S8jnqqe/4VYE38m1/D+5OjzZ8fOjOyP0tTJkeyqWO+nnxdfb9T+juJvgaVb5ThQ9/pfib8/tz9i9vqNy5X7tbNbb2Pxt08bvqfZ7vXfnXuzku5O930wPjd3bTSiO/fq+v1jdx6b5bP6yfU/dKL++D8cd47EwxGRXMTHI+KRiHg07ftjEfF4RJzYIP4fXnzi3VU79jcT/war8i2UxD+52fmP2vO/9UTh8vffNGq/ufN/upIaSvc08/zXbAd3cuwAAADgvyJf+Qx8Lj+8ks7nh4ern+E/EgfypZnZuWcuzrx/dbL6Wfn+KOazla6+mvXQ0XRtOMuPrcmfSteNPy/0VPLDEzOlyXYHDx3uYIPxn/i90O7eAbvO97Wgcxn/0LmMf+hcxj90LuMfOle98f9RG/oB7L1NXv979qofwN4z/4fOZfxD5zL+oSM1/G58fkdf+ZdoU+Lb7p39VkPzicjfJSHfM4li1C3qavrHLLaZ2Fe3qN3PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xbwAAAP//dcfjHA==")
r2 = fanotify_init(0x10, 0x80000)
fanotify_mark(r2, 0x8, 0x8000000, r1, &(0x7f00000000c0)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00'}, 0x90)
r3 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d68b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e6d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd"], 0x0}, 0x90)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0xcc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000880}, 0x40001)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="08871f0000000000472df8250000000000000000000000004000000000000000"])
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x301)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue1\x00'})
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), 0x33)
write$binfmt_elf64(r6, &(0x7f0000000080)=ANY=[], 0x685)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000000c0)={0x0, 0x7a120, 0x60})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r7, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
ioctl$SIOCGSTAMP(r3, 0x8906, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvfrom(r3, 0x0, 0x0, 0x10002, 0x0, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', r9, 0x29, 0x2, 0x2, 0x6, 0x34, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x80, 0x40, 0xffff, 0x2}})
getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000000240))

11.410207326s ago: executing program 3 (id=642):
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4e5, &(0x7f0000000a40)="$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")
io_setup(0x9, &(0x7f00000001c0)=<r0=>0x0)
r1 = timerfd_create(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
clock_adjtime(0x0, &(0x7f00000003c0)={0x3fd, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x80, 0x0, 0x0, 0xe, 0x4, 0x805, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000000000000000})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000001c0))
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c706eeb61f3d48cdd4b14c854c378360022948f32e39e6c4c2a42b5b46bb85724911c5b8492f9cd140b37db67275aab82bf384a0b50e6ff2c72571392188586983062b36e316f31fd8302e03eeb55988d4628ccac1d797d63f05ddb58a7eda61695ed5c7131ad691b198548e05166ff59eb36b7fad00b154250fc3b7450908f0f4de63461d76074b0847cd74c272755feab76987faabd01069e821fe6c36084962e2818f69d299c269bb70dfd90df77365637ea089baba17147ca178e1161694ca143f728b8c7d9c586b47adf7f95b6fc4ac6cdca2be93a9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r6}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0x438e}}, 0x18)

10.24464124s ago: executing program 3 (id=645):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c000200102047a6cf"], 0x3c}}, 0x0)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
r4 = socket(0x11, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x107, 0x12, 0x0, 0x4)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000007c0)=0x6, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b00)=@gettaction={0x118, 0x32, 0x100, 0x70bd26, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8d7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff6b34}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20004010}, 0x4080)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x123681, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="a3", 0x1}], 0x1)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000100)="cc", 0xfdef}], 0x1)
sendmsg$nl_route(r5, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000002200080029bd7000fedbdf2500000000b01087a7d44dd651c53fbc9f697c8aa40e6b3aa79a5228769d61b6bc3c525ace541160ba88598d1b4864a57f4d7d1c97fd873be2e3fa25bee004892b8ee26d"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
getsockname$packet(r7, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000700)={&(0x7f0000000540)=[0x0, 0x0], 0x2, 0x800})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x2c, r10, 0xf74107ef873d54cd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8001)
getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
r13 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r14}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

10.184772265s ago: executing program 4 (id=646):
socket(0x0, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000040)=@data_frame={@a_msdu=@type11={{}, {}, @device_a, @device_a, @random="fec988780198", {}, @device_b}}, 0x1e)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x20000005)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001800a00010071756575650000001c00028006000140000000000600034000000000060002"], 0x84}}, 0x0)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)

9.291713977s ago: executing program 3 (id=647):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000c00)=@raw=[@ldst={0x3, 0x1, 0x6, 0x0, 0xb, 0xfffffffffffffff8, 0x10}, @generic={0x2, 0x1, 0x3, 0x3, 0x3}, @tail_call, @ringbuf_query, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x5}}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x40300, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pi6   \x00'}, 0x20)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000005480), 0x640002, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x109001, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000032c0), 0x2c}}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f0000000440)=0x82, 0x4)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r8, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef)
write$P9_RREADDIR(r6, &(0x7f00000001c0)={0x2a, 0x29, 0x1, {0x7, [{{0x2, 0x0, 0x5}, 0x81, 0x80, 0x7, './file0'}]}}, 0x2a)
recvmsg(r8, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120)
r9 = getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009140)=[{{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003580)="a0f53821ec31dbdcb8ec8307c8a73aa76455e89c3a921ed5ca8e46c083c9550a3f7c08e2190a3004e40e862ba2cd983b81eee7e6f53e68fd2ceb336267f3ed76a5c917", 0x43}, {&(0x7f0000003600)="8a232d3551792cd1b706533b0acedcc5ebdf7d65b168d4cb0dafffa919d1bfa19cf24b13e4c20a607cb2508d490284018c06d5cd48e5d1e4886057261e30de7cc4e93d1f18a1b9ec6228dd0e894e", 0x4e}, {&(0x7f0000003680)="a84e68f077e7a9e0c4841eea57659c11389fc3f1f39a57c4bd64b5cfd562b6e8d0938047283eb071", 0x28}], 0x3, &(0x7f00000037c0)=[@cred={{0x1c}}], 0x20, 0x20004010}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006580)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000eeffffff0000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x40080}}, {{0x0, 0x0, &(0x7f00000067c0)=[{&(0x7f0000003b80)="61c3fd4abe96ae0b63346a9ed104ae2511e68eed0b687d648176a75440a24f52ef1359d86fc3b1bd99215758bd7aca4c00de2a883682f1c4b6c818", 0x3b}, {&(0x7f0000006680)="b4db0158f70b5f1681bfeb04547e2944cf786076a3cd99442d3219198ee38e78f5e6dc0ac5ebfb9e1b1170f1d6b37d15c1fe9c31cc6a15baf7bba5b3f98cbdc59c53b76700", 0x45}, {&(0x7f0000007a80)="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", 0x1000}, {&(0x7f0000006700)="b8675f2bd86d9824b5f5c77f7227cc70f4d57aea755fd230299c6c85b298ca49c6d9a2d9cbcb619fbafdf5a3e1002eb0d486c06addb8db332bf1fed19641f22ccd8373264c13fd3034e558b98911d56e4a58a548fc6445546d9d1904ee70bbd087b3b24eab28d1bc71574a1979f15ce57c69811fc6ae44cc8e78046613ecba6607d4db9630129efa4fbca005cf755b6db3dac0549f1b01510d94c6094dc0af690bc67d2760fd23192e76dc2e2572518de23a55241f7d", 0xb6}], 0x4, &(0x7f0000003400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16=r5, @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000ef4a560107f20e52686457eda73acbf5ce38a921460bee60", @ANYRES32, @ANYRES32, @ANYBLOB="1c00003bf200000000000101000000000000000e85d8eb35dfea312681db7cec94d3f56b764ff36e33b81397d214230d35117d8af13c83104770ae54a57b5e", @ANYRES32=r6, @ANYRES32=r6, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x40000}}, {{&(0x7f0000008c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009000)=[{&(0x7f0000008cc0)="fa0bbcb20a1dbceb9cd61ab2dadd670acb0b32e260a77b6b42a69ffa2274dde47c71147576d3882077192a3193bea0c57bef20cdd61d536280c1b15d5803d55d2e18110693198aef1ed8fea0f8adc7e224a249ed252c9faf181c2a05b9f0c370d4ec972beea41662ed6e8177f5a52b922bdd3e162cf4286327d7528861b5551d1c0ae00b8dae6c16697bd4baf0a51e828aa1cb231c92a47329ac7e4c6b0ac5aadcafc8a0dfc1609bba4be08f21c0e56c3ac03a5b08", 0xb5}, {&(0x7f0000008d80)="62a43d460da42e1bc3594358dbd7bbb344fef1410e2959063c6a1ab3a82793e318299600483a7cd1ea782975145eff94464642ee0487260f5d2db419ecc3c42b1fb766a1eb82c24b8c50fc23c583c0bfa8d4c1f07301987f63d2295448f9", 0x5e}, {&(0x7f0000008e00)="5bbec5009386d8ea6dd7fce8cacec96f0257ad3694ec9e472df1b67fc3db7b55b07339acd165e6422cde4dda07b8813a03ebf09963f6e1b1e1aecd97de0ee432a098c35df71fbee65d305cbef7f66bc6f85d32db7a493f02bfb7a7672119c1d2f84405e55faf34d84ff46a2eb84b896fccf0237b6160c62654aa8a3b4545380b07548e7eae02857cc1018bd23a9299fa765da40dfb83673a403ac3811e046b792fe6e466680b70e9da836e820ba912f45603c712ff4755fb29", 0xb9}, {&(0x7f0000008ec0)="0f329b155cf5ae76c7076cb7627ff71b63aace923f31cfc176c8ea373ee4ec65563c0c875272", 0x26}, {&(0x7f0000008f00)="e26af3b89f48040ef30d94a28a1dbbce35db970b791b9cf1089ab9ccac63ecfe59f98bbd4704a5c45d328916adbe712049b1fc0636c9a18d29754e0ffcc5ee76436cbb3c792c080fcca4ed90f8d95364e61fae42d179609d932a750b49e8e3f109a8c096d3a27ea90b02bb0c18f1ed6d93b9eb53caaabb4c52c2d861efd37b12a58ce7a668158e72a0c501eac9193f00"/153, 0x99}, {&(0x7f0000008fc0)="2a482650be8ede375b3ea4c534641109a74d3b46912728c6ae26b872ea", 0x1d}, {&(0x7f00000096c0)="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", 0xcec}], 0x7, &(0x7f0000000a40)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000004fed432a1b9ce108cbbda1ef6e0f20f6b6cac3cfb7b3304cf2ac5287e8316418ccf220d1fb0694ec19686236d91268bba06de9490d6c7ddb3d453b399cb6d297f41b484ad2204f5bfc94cadc5129cfb4c2cce6fa3be4e88f45ebcd1a720e4b064718260a664fa744d7b8a95295ba8988cdce29e336b0da4abc1ff4eb0a994f8b67648b8b98e1f21f0883d662744a93c35d92bcff99d11c8eb019d4a396cea174fbd2101829344dcad1ba5fd6c3c848517294ae0f40e6eefc3e669134de47344e8b999c8a92d3a2c12e0926f7a6ea38380b58f914ca468522ca51c601c3b69c37168dfc7d5338b0593d1b3184550276ccbc165c1ea6d785dea80b9e3ea66d1e9c3f8eab2fc55a18ec1a7f0b70508f1189a548980a2bb026b5986196e6f969493b2330dfc374d36f1db3f6b76ec9e1ba61e8e6"], 0x48, 0x10}}], 0x4, 0x8)
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x4001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x16, &(0x7f0000000380)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffc}], &(0x7f00000001c0)='syzkaller\x00', 0x100, 0x55, &(0x7f0000000440)=""/85, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0xc, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0xffffffffffffffff, r1, r2, r3, r6, r10, 0x1], &(0x7f0000000680)=[{0x2, 0x6, 0x3, 0x9}, {0x1, 0x4, 0x3, 0x2}, {0x5, 0x3, 0x7, 0x7}, {0x3, 0x2, 0xa, 0x9}], 0x10, 0x3}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r11, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)

9.196146555s ago: executing program 1 (id=648):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRESOCT], 0x1, 0x5518, &(0x7f0000002480)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
pipe2$9p(0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote, @in=@loopback}}]}, 0x50}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_procfs(0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000050020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r7)

8.977441013s ago: executing program 0 (id=651):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f0000000200)='GPL\x00'}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1}, @l2cap_cid_le_signaling={{}, @l2cap_cmd_rej_unk={{0x1, 0xe}, {0xff}}}}, 0x4)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0x8001}, {0x20, 0x0, 0x0, 0x1f}, {0xff, 0x0, 0x0, 0x2}]}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000740)="ceb9adac", 0xb9ce}], 0x1}}], 0x1, 0x0)
r5 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x8)
mknodat(r6, &(0x7f0000000400)='./file0\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
execveat(r6, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000100)={0x3, 'bond0\x00', {0x6}, 0x1})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010400000000000000009200000008000300", @ANYRES32=r8], 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0x2, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x4, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x3, @vbi}})
socket$inet6_udplite(0xa, 0x2, 0x88)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3d, 0x0, 0x3, 0x24, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x6, 0x7}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0x5}, 0x48)

8.76129054s ago: executing program 0 (id=652):
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_pidfd_open(r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
unshare(0xfb4873df2c4acf5e)
syz_open_procfs$namespace(0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x10}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x33}, 0x0, @in6=@empty, 0x0, 0x2, 0x0, 0x7}}, 0xe8)
socket$pppl2tp(0x18, 0x1, 0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = inotify_init1(0x80000)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc0185879, &(0x7f0000000180)={@id={0x3fffffff, 0x0, @auto="ffee8e00001900"}})
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)

7.763909671s ago: executing program 4 (id=653):
syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRESOCT], 0x0, 0x2, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0x0, 0x8000, 0x0, r3}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ff"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
socket(0x28, 0x800, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
r6 = io_uring_setup(0x3eae, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13)

7.738921623s ago: executing program 0 (id=655):
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4e5, &(0x7f0000000a40)="$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")
io_setup(0x9, &(0x7f00000001c0)=<r0=>0x0)
r1 = timerfd_create(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
clock_adjtime(0x0, &(0x7f00000003c0)={0x3fd, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x80, 0x0, 0x0, 0xe, 0x4, 0x805, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000000000000000})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c706eeb61f3d48cdd4b14c854c378360022948f32e39e6c4c2a42b5b46bb85724911c5b8492f9cd140b37db67275aab82bf384a0b50e6ff2c72571392188586983062b36e316f31fd8302e03eeb55988d4628ccac1d797d63f05ddb58a7eda61695ed5c7131ad691b198548e05166ff59eb36b7fad00b154250fc3b7450908f0f4de63461d76074b0847cd74c272755feab76987faabd01069e821fe6c36084962e2818f69d299c269bb70dfd90df77365637ea089baba17147ca178e1161694ca143f728b8c7d9c586b47adf7f95b6fc4ac6cdca2be93a9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r6}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0x438e}}, 0x18)

6.588483636s ago: executing program 3 (id=657):
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000ec0), 0x1, 0x7b1, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000e40)='./file1\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
mkdirat(0xffffffffffffffff, &(0x7f0000000e80)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000480)=[{{&(0x7f0000000280)=@pptp, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000d40)=""/82, 0x52}, {&(0x7f0000000dc0)=""/125, 0x7d}, {&(0x7f0000001fc0)=""/4099, 0x1003}, {&(0x7f0000001e40)=""/116, 0x74}, {&(0x7f0000001ec0)=""/87, 0x57}, {&(0x7f0000000300)=""/33, 0x21}], 0x7}, 0x5}], 0x1, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x2)
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
fcntl$getownex(r2, 0x10, &(0x7f0000000140))
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x6611, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3})
quotactl$Q_GETINFO(0x0, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

6.393567262s ago: executing program 1 (id=658):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x20, 0x0, 0x0, 0x8000, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x0, 0xfffffffd}, 0x48)
r2 = memfd_create(&(0x7f00000006c0)='ws\xed\xaa5\xadz\x06\xc1\xe3\x8f\v', 0x8)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r0], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r4}, 0x10)
rt_sigaction(0x14, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, {[0x8000001ff]}}, 0x0, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x6, 0x5, 0x2, 0x1000}, 0xfffffffffffffe77)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000400)=@req3={0x3, 0x2, 0x9, 0x8000, 0xd67, 0x9, 0xba}, 0x1c)
statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/1)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="189018000000000000000000000000009500000000000000db486766b5ed6d135b009b3dce61bc3766bcd37ee90e5cf7fe747796ec013773111c80"], &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0x4, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "4ebcbd"})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000040)=ANY=[], 0x3, 0x657, &(0x7f0000003180)="$eJzs3c1vHGcdB/DvrB3HG0LqpkkbUKVajQQIi8SO5YK5EBAgHypUlQNnK3EaK5u02C5yK0TN+7WH/gHl4BsnJO6RyoUL3Hr1sRISl14wp0UzO+vXtWPnxbsun080+zyzzzPP/J7fzOzsrhVtgP9bcxMZfpgicxOvr5brG+vTrY316fvdepKzSdaS4SSNJMV/2u32J8nNpNgapthT7vPR4uybn36+8Vlnbbheqv6Nw7Y7mrV6yXiSobp8WuPdeuLxiq0Z3kxytS6h784kae/y87+f77SM7OrY7LX16MkECTxTRee+uc9Ycq6+0Mv3AZ27Yueefaqt9TsAAAAAOAHPbWYzq8WFfscBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp8Xa9u//F/XS6NbHU3R//3+kfi51fbC8crzuD59VHAAAAAAAAABwgl7ZzGZWc6G73i6qv/m/Wq1cqh6/lHeznIUs5VpWM5+VrGQpU0nGdgw0sjq/srI0dYQtb/Tc8sYjAj1bl82nM28AAAAAAAAA+IL5Tea2//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDoEiGOkW1XOrWx9IYTjKaZKTst5b8s1s/zR72OwAAAAB4cs1HdXhuM5tZzYXueruoPvO/WH3uH827eZCVLGYlrSzkdvVdQOdTf2Njfbq1sT59v1z2j/v9fx8rzmrEdL576L3nK1WPZu5ksXrmWm7l7bRyO41qy9KVOp7uqHvi+nUZU/G92hEju12X5cw/rMt9PjjWZA9yzC9TxqqMnNnKyGQdW5mN57tHpvcROubR2bunqTS2gr20Z097JvFYOT9Xl+V8/nBQzvtiVyZGU611z74XD8958vW//vlnd1sP7t29szwxOFM6mqG6bFePzf3nxPSOTLz0Rc7EPpNVJi5vrc/lx/lpJjKeN7KUxfwi81nJQsbzw6o2X5/PxY5L/oBM3dy19sajIhmpz9DOwTpeTK9W217IYn6St3M7C3mt+ncjU/l2ZjKT2R1H+PLhR7i66hsHXPXtL/cM/uo36kp5z/rjUe5dJ6bM6/PdvBbZ9Zo7VrXtfGY7SxePkKVjvjYOf7W+Bst9/LYuB8PeTEztyMQLh2fiT9WUllsP7i3dnX/naLu7+GFdKa+j3w/UXaI8Xy6WB6ta2312lG0v9GybqtoubbU19rVd3mrrXKlrB16pI/V7uP0j3ajaXurZNl21XdnR1uv9FgAD79w3z400/9X8R/Pj5u+ad5uvj/7g7HfOvjySM387893hyaGvNV4u/pKP86vtz/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjW37v/XvzrdbC0q7KWqvdbn/Qs+l0V7o/Z3aCO/3K+eSRnc8PSH6OWSmKo3b+b7vdrp8pBiT4Qyrt2qDE049Kn1+YgGfu+sr9d64vv/f+txbvz7+18NbCg9mZmdnJ2ZnXpq/fWWwtTHYe92412p9ggadq+6bf70gAAAAAAAAAAACAozqJ/07Q7zkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9vcRIYfpsjU5LXJcn1jfbpVLt36ds/hJI0kxS+T4pPkZjpLxnYMVxy0n48WZ9/89PONz7bHGu72b/TY7kfHm8VavWQ8yVBdPoFd493qBvvYiq0Zlgm72k0c9Nv/AgAA//+08g5/")
setxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0xc0, 0x40)
pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)

5.499938394s ago: executing program 2 (id=659):
socket$packet(0x11, 0x3, 0x300)
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x451, &(0x7f0000000d80)="$eJzs3M1vG0UbAPDHdpw2bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k2dxE6cxIlL/ftJm8zsjDXz7O7Y41nbAXSsweRPLuJQRPwaEX3V7OoKg9V/t5fnJ/5enp/IRbn8xp+5Sr2/lucnsqrZ4w5WM+XyBu0uvh0xXipNXUvzI3NX3huZvX7juekr45emLk1dHTt37vSp491nx860JM7epK8DH84cO/rKWzdfm7hw850fv076eygtr42jVQarR7euJ1vdWJv11qRzXW3sCFtSiIjkdBUr478vCtGzUtYXL3/S1s4Bu6pczpf3NS5eKAP3sGSiDnSi7IU+ef+bbXs09bgrLJ2PlXWM2+lWLemKfFqnmL5H2g2DEXFh4Z8vki12aR0CAKDWrfMR8Wy9+V8+Hqip97/03lB/RPw/Ig5HxH0RcSQi7o+o1H0wIh7aYvtr75Csn/+U+7YVWJOS+d8L6b2t1fO/bPYX/YU011uJv5i7OF2aOpkek6Eo7kvyoxu08d1Lv3zWqKx2/pdsSfvZXDDtxx9daxboJsfnxncSc62ljyMGuurFn1uZ8ybz46MRMbDNNqaf/upYo7LN499ACybl5S8jnqqe/4VYE38m1/D+5OjzZ8fOjOyP0tTJkeyqWO+nnxdfb9T+juJvgaVb5ThQ9/pfib8/tz9i9vqNy5X7tbNbb2Pxt08bvqfZ7vXfnXuzku5O930wPjd3bTSiO/fq+v1jdx6b5bP6yfU/dKL++D8cd47EwxGRXMTHI+KRiHg07ftjEfF4RJzYIP4fXnzi3VU79jcT/war8i2UxD+52fmP2vO/9UTh8vffNGq/ufN/upIaSvc08/zXbAd3cuwAAADgvyJf+Qx8Lj+8ks7nh4ern+E/EgfypZnZuWcuzrx/dbL6Wfn+KOazla6+mvXQ0XRtOMuPrcmfSteNPy/0VPLDEzOlyXYHDx3uYIPxn/i90O7eAbvO97Wgcxn/0LmMf+hcxj90LuMfOle98f9RG/oB7L1NXv979qofwN4z/4fOZfxD5zL+oSM1/G58fkdf+ZdoU+Lb7p39VkPzicjfJSHfM4li1C3qavrHLLaZ2Fe3qN3PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xbwAAAP//dcfjHA==")
r1 = fanotify_init(0x10, 0x80000)
fanotify_mark(r1, 0x8, 0x8000000, r0, &(0x7f00000000c0)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00'}, 0x90)
r2 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d68b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e6d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd"], 0x0}, 0x90)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0xcc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000880}, 0x40001)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="08871f0000000000472df8250000000000000000000000004000000000000000"])
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x685)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000001020311000000000000000002000000200001801400018008000100000000005efe0200e00000e8050003"], 0x34}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000000c0)={0x0, 0x7a120, 0x60})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)

5.361057505s ago: executing program 4 (id=660):
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$netlink(0x10, 0x3, 0x4)
r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c707fe81436b024c2574980397bc49d70c060d57bc88fbe3bbaa058b040362ab926150763fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f91b18725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982"], 0x0}, 0x90)
r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r7, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}})
io_uring_enter(r4, 0x5b43, 0x0, 0x0, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00')
r9 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00')
getdents64(r9, &(0x7f0000000080)=""/38, 0x26)
fchdir(r8)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r10 = inotify_init1(0x0)
fcntl$setown(r10, 0x8, 0xffffffffffffffff)
r11 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_GETVERSION(r11, 0x80087601, 0x0)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r12, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

5.359545436s ago: executing program 0 (id=670):
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4e5, &(0x7f0000000a40)="$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")
io_setup(0x9, &(0x7f00000001c0)=<r0=>0x0)
r1 = timerfd_create(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
clock_adjtime(0x0, &(0x7f00000003c0)={0x3fd, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x80, 0x0, 0x0, 0xe, 0x4, 0x805, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000000000000000})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c706eeb61f3d48cdd4b14c854c378360022948f32e39e6c4c2a42b5b46bb85724911c5b8492f9cd140b37db67275aab82bf384a0b50e6ff2c72571392188586983062b36e316f31fd8302e03eeb55988d4628ccac1d797d63f05ddb58a7eda61695ed5c7131ad691b198548e05166ff59eb36b7fad00b154250fc3b7450908f0f4de63461d76074b0847cd74c272755feab76987faabd01069e821fe6c36084962e2818f69d299c269bb70dfd90df77365637ea089baba17147ca178e1161694ca143f728b8c7d9c586b47adf7f95b6fc4ac6cdca2be93a9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r6}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0x438e}}, 0x18)

5.358169846s ago: executing program 1 (id=661):
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e"], 0x6a)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000240), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
clock_adjtime(0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x90)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x6, 0xc8, 0x7f, 0x101}}}, 0x9)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

5.276311102s ago: executing program 2 (id=662):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$igmp6(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
socket(0x10, 0x2, 0x0)
getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
rt_sigprocmask(0x0, &(0x7f0000000440)={[0x6]}, &(0x7f0000000480), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb701000008000000b7040000020000008500000082000000950000f347810d57"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r5, 0x1}, 0x1c}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xb28, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x48)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00efe7a45aa1a26838b3eee9f9e3a9b4"], 0x1, 0x1a5, &(0x7f0000000280)="$eJzs3TFr1GAcBvCnterhcjc4iUNAB6fQ6ydokQpiQFBu0EmxLUhzFCwcKGJ18vv5DfwGjh2EiI3etSUODjXS+/2WPPDmgfddkin/vLg93d85ONz79P5rBoOVrG5mM8crGWU1v30MAHCZHDdNvjWtvvcCAPwb3v8AsHyePnv+aKuqtp8UxSCZfp5NZpP22q5v7eV16uxmPcN8T5q5Nj94WG2vFydGuTs9+tU/mk2unO2PM8youz9u+8XZ/tXcON3fyDA3u/sbnf1ruXfnVL/MMF9e5SB1dvKzu+h/GBfF/cfVuf71k/sAAAAAAAAAAAAAAAAAAAAAAOAilMVc5/yesvzTetv/i/lA5+brrOXWWr9nBwAAAAAAAAAAAAAAAAAAgP/F4dt3+y/reveNIAjCPPT9ZAIAAAAAAAAAAAAAAAAAgOWz+Oi3750AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH8W//+/uND3GQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALj8fgQAAP//xVOTag==")
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40}, 0x48)

3.261192976s ago: executing program 2 (id=664):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x12, 0x5, 0x2, 0x4, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
fstat(0xffffffffffffffff, 0x0)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_extract_tcp_res(0x0, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x4da, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r8, 0x1}, 0x1c}}, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

3.227881258s ago: executing program 1 (id=665):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000002000)=ANY=[@ANYBLOB='b\n'], 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a})
syz_mount_image$fuse(0x0, &(0x7f0000000040)='mnt/encrypted_dir/file\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0406619, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r5 = gettid()
sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="e4", 0x8ec0}], 0xc0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x1885)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='c\xf6\xd8@%\x97\x00\xc6>!\xe6\x94K\x02\xa35\x91:\x1a\x96\xac\x01\x83!\x02\x00\xd5(-\xd4d\x11H\xbf\xe3\xbcP\x18\x81/\xf4.8\xd6\x19\x19\xa9z\xbd\xa0O&\x8cki\xe0Ge%t>\xd3\x8c\xd1%\xeeno\x1a\xf4\xd4\x1f\x9b\x97\xcd&\xf3\xe8\xbc\xf7\xc4+M\x7f:.h\xc5\xfa\x90x\xa9\xbd\xeb\xe9+\xf3\xb5\x7f\xfb\xe2\xc9<9e\xbaq\xbf\x1d\x04`\xb5c5T\x04+\x03FJb\x84\x98.\x12\xf8\xd3<\'\xd4\x909.\xf4\xde\xc0\xa2\xde\vC\xb5o\x0f\xc4D\xffahq\xd6\tg7:\xc1\xea/'}, 0x92)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10)
r7 = fanotify_init(0x0, 0x0)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r7, 0x61, 0x40001002, r8, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r7, 0x2, 0x48001022, 0xffffffffffffffff, 0x0)
r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000100)={0x0, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r10=>0xffffffffffffffff})
setrlimit(0x7, &(0x7f0000000000))
ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)

2.186174183s ago: executing program 2 (id=666):
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_pidfd_open(r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
unshare(0xfb4873df2c4acf5e)
syz_open_procfs$namespace(0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x10}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x33}, 0x0, @in6=@empty, 0x0, 0x2, 0x0, 0x7}}, 0xe8)
socket$pppl2tp(0x18, 0x1, 0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = inotify_init1(0x80000)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc0185879, &(0x7f0000000180)={@id={0x3fffffff, 0x0, @auto="ffee8e00001900"}})
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)

2.117648378s ago: executing program 0 (id=667):
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x5, &(0x7f0000000140)={0x0, 0x1, 0x8000000000000000})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)=0x4)
ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000002540)={'veth1_macvtap\x00', @ifru_ivalue})
r3 = accept$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000000)=0xfffffd84)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x110, 0x1a8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0x2a0, 0x250, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
ioctl$sock_ifreq(r4, 0x8935, &(0x7f00000000c0)={'vlan1\x00', @ifru_ivalue=0x5})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000001840)={0x0, @l2tp={0x2, 0x0, @empty, 0x4}, @l2={0x1f, 0x6, @any, 0x992}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x100000000000000, 0x1000400004, 0x1})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"e6696328276c80ede1cbb140551427cb", r6, 0x0, {0x0, 0x7ff}, {0x0, 0x8d}, 0x28e, [0x10001, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x20000100, 0x78, 0x3, 0x0, 0xfffffffffffffff8]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000004580)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{r3}, r6, 0x3, @inherit={0x58, &(0x7f0000001cc0)={0x0, 0x2, 0x3, 0x4, {0x3, 0x643, 0x8, 0x8, 0x7fffffffffffffff}, [0x6, 0x1]}}, @devid=r8})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000004c0)={r8, 0xc1, 0x1})
ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000002540)={'veth1_macvtap\x00', @ifru_ivalue})
r9 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000000)=0xfffffd84)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000001840)={0x0, @l2tp={0x2, 0x0, @empty, 0x4}, @l2={0x1f, 0x6, @any, 0x992}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x100000000000000, 0x1000400004, 0x1})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"e6696328276c80ede1cbb140551427cb", r11, 0x0, {0x0, 0x7ff}, {0x0, 0x8007}, 0x28e, [0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x78, 0x3, 0x0, 0xfffffffffffffff8]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{r9}, r11, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid=r12})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000003580)={{}, r11, 0x1, @unused=[0xb9, 0x37e4, 0xbbe3, 0x8], @name="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"})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001e00)={<r13=>r7, 0xffffffffffff0000, 0x0, [0xe56, 0x8000000000000000, 0x4, 0x20], [0x7fffffff, 0x100, 0x7, 0x0, 0xe6c, 0x8, 0x4, 0xa98, 0x6, 0x20, 0x8, 0x7f, 0x4, 0x400, 0xead, 0x80000000, 0x4, 0x10001, 0x9e90, 0x7, 0x7, 0x3, 0x0, 0xa4, 0x4, 0x400, 0x400, 0x5, 0x7, 0x2, 0xfffffffffffff7b8, 0x4, 0x81, 0x9, 0x0, 0x6, 0x5, 0x6a4e, 0x81, 0x7, 0x9, 0x1, 0x7f, 0xa6, 0x100000000, 0x22, 0x48c2fae2, 0x3, 0x5, 0x0, 0x4, 0x4, 0x80000001, 0x5, 0xffffffffffffffff, 0x800, 0x3, 0x10000, 0x4, 0x200, 0x2, 0x100000001, 0x7f, 0x3, 0x9, 0x7f, 0xf01, 0x77, 0x7, 0x6, 0x6, 0x8, 0xb1ea, 0x0, 0x2017, 0xfffffffffffffffc, 0x8000000000000001, 0x100, 0x0, 0x0, 0x401, 0x4f40, 0x80, 0x88, 0x7, 0x4, 0x66c1, 0x9, 0x2, 0xfffffffffffffbff, 0x9, 0x6, 0xfffffffffffff839, 0xfff, 0x7, 0x0, 0xb0, 0x2, 0x400, 0x8, 0xfffffffffffffffb, 0x3, 0x8, 0x7, 0x4, 0x9, 0xa63000000000, 0x9, 0x6, 0xfff, 0x9, 0x5, 0x1, 0xfffffffffffffea7, 0x480, 0x401, 0x80000001, 0x8000000000000001, 0x3f, 0xfff, 0xac6e]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002580)={{r0}, 0x0, 0xe, @unused=[0x8000000000000001, 0x5, 0x4, 0x200], @devid=r13})
r14 = add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @desc3}, &(0x7f0000000940)={0x0, "9644c8488e9735ec6301614b96165c18373237e6d79b063db588bc7e079329ad8fc72798b6b5d6eb7da58bd858e670ec2a169dd8a4e05f7e5edf47aae1701816"}, 0x48, 0xfffffffffffffffd)
request_key(&(0x7f0000000d40)='ceph\x00', &(0x7f0000000d80)={'syz', 0x1}, &(0x7f0000000dc0)='\x00', r14)

2.112535009s ago: executing program 1 (id=668):
r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240), 0x10)
pipe2$9p(&(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x80000)
close_range(r0, r1, 0x2)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="bb53a945842851", 0x7, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0), 0x78}}, 0x0)
sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r3, 0x1)
recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT, @ANYRES64=r4], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x28, r6, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4008c45)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}}, 0x2000c000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x9}, @TCA_FQ_QUANTUM={0x8, 0x5}]}}]}, 0x40}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getstats={0x1c, 0x5e, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9}, ["", "", "", ""]}, 0x1c}}, 0x2000004)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r10, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r10, &(0x7f0000000000)="2b9e561d39b424d60e1151872a37a63139eea02f95fbf08a96e60ad3f037ee96b9a5787db4ce328cbbf7f2d24ca8c28b9c0ebe939397b072e5cdcc4784857df6c3a02e4d58546376cfd63b9168b5e54c88434a49642f9806f3b72c6ff49fd135c196800aa821c03a94700d9a04a9d378d040b935e61397531bd92b1405433cd46c586d", 0x83, 0x8014, &(0x7f00000000c0)={0xa, 0x4e24, 0x800, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x5}, 0x1c)
getsockopt$sock_buf(r10, 0x1, 0x1c, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56)

1.155218796s ago: executing program 4 (id=669):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x451, &(0x7f0000000d80)="$eJzs3M1vG0UbAPDHdpw2bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k2dxE6cxIlL/ftJm8zsjDXz7O7Y41nbAXSsweRPLuJQRPwaEX3V7OoKg9V/t5fnJ/5enp/IRbn8xp+5Sr2/lucnsqrZ4w5WM+XyBu0uvh0xXipNXUvzI3NX3huZvX7juekr45emLk1dHTt37vSp491nx860JM7epK8DH84cO/rKWzdfm7hw850fv076eygtr42jVQarR7euJ1vdWJv11qRzXW3sCFtSiIjkdBUr478vCtGzUtYXL3/S1s4Bu6pczpf3NS5eKAP3sGSiDnSi7IU+ef+bbXs09bgrLJ2PlXWM2+lWLemKfFqnmL5H2g2DEXFh4Z8vki12aR0CAKDWrfMR8Wy9+V8+Hqip97/03lB/RPw/Ig5HxH0RcSQi7o+o1H0wIh7aYvtr75Csn/+U+7YVWJOS+d8L6b2t1fO/bPYX/YU011uJv5i7OF2aOpkek6Eo7kvyoxu08d1Lv3zWqKx2/pdsSfvZXDDtxx9daxboJsfnxncSc62ljyMGuurFn1uZ8ybz46MRMbDNNqaf/upYo7LN499ACybl5S8jnqqe/4VYE38m1/D+5OjzZ8fOjOyP0tTJkeyqWO+nnxdfb9T+juJvgaVb5ThQ9/pfib8/tz9i9vqNy5X7tbNbb2Pxt08bvqfZ7vXfnXuzku5O930wPjd3bTSiO/fq+v1jdx6b5bP6yfU/dKL++D8cd47EwxGRXMTHI+KRiHg07ftjEfF4RJzYIP4fXnzi3VU79jcT/war8i2UxD+52fmP2vO/9UTh8vffNGq/ufN/upIaSvc08/zXbAd3cuwAAADgvyJf+Qx8Lj+8ks7nh4ern+E/EgfypZnZuWcuzrx/dbL6Wfn+KOazla6+mvXQ0XRtOMuPrcmfSteNPy/0VPLDEzOlyXYHDx3uYIPxn/i90O7eAbvO97Wgcxn/0LmMf+hcxj90LuMfOle98f9RG/oB7L1NXv979qofwN4z/4fOZfxD5zL+oSM1/G58fkdf+ZdoU+Lb7p39VkPzicjfJSHfM4li1C3qavrHLLaZ2Fe3qN3PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xbwAAAP//dcfjHA==")
r2 = fanotify_init(0x10, 0x80000)
fanotify_mark(r2, 0x8, 0x8000000, r1, &(0x7f00000000c0)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00'}, 0x90)
r3 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d68b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e6d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd"], 0x0}, 0x90)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0xcc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000880}, 0x40001)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="08871f0000000000472df8250000000000000000000000004000000000000000"])
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x301)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue1\x00'})
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), 0x33)
write$binfmt_elf64(r6, &(0x7f0000000080)=ANY=[], 0x685)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000000c0)={0x0, 0x7a120, 0x60})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r7, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
ioctl$SIOCGSTAMP(r3, 0x8906, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvfrom(r3, 0x0, 0x0, 0x10002, 0x0, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', r9, 0x29, 0x2, 0x2, 0x6, 0x34, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x80, 0x40, 0xffff, 0x2}})
getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000000240))

1.147621817s ago: executing program 2 (id=671):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8001, 0x0, 0x0, 0x40f00}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r1], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r6, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@orlov}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000340)="$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")
accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000300)=0x1c, 0x80000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000000780)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf5}], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x90)
socket$netlink(0x10, 0x3, 0xc)

113.26329ms ago: executing program 0 (id=672):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000240), 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x978, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f00000020c0), 0x1, 0x4e6, &(0x7f0000000240)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63081b28559b3367", 0xb}], 0x1)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r8, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x6c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @assoc_req={{{}, {}, @device_b, @device_a, @random="f80cdf283520"}, 0x0, 0x0, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x6c}}, 0x0)
socket(0x840000000002, 0x0, 0xfa)

112.666651ms ago: executing program 1 (id=673):
socket$packet(0x11, 0x3, 0x300)
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x451, &(0x7f0000000d80)="$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")
r1 = fanotify_init(0x10, 0x80000)
fanotify_mark(r1, 0x8, 0x8000000, r0, &(0x7f00000000c0)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00'}, 0x90)
r2 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d68b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e6d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd"], 0x0}, 0x90)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0xcc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000880}, 0x40001)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="08871f0000000000472df8250000000000000000000000004000000000000000"])
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x685)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000001020311000000000000000002000000200001801400018008000100000000005efe0200e00000e8050003"], 0x34}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000000c0)={0x0, 0x7a120, 0x60})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)

65.861144ms ago: executing program 2 (id=674):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x7e4, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x20}]}, @NL80211_ATTR_HE_OBSS_PD={0x64, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x10}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x11}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "dbc664a68095ac70"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x9}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x14}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xf}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x12}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8521}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0xa4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9f, 0x3, "68982f9c25efcb8782f177d21f1966e6577813a0237652f63d062b57a03bb63b7d52f807bb811ff85d4ae0e626871d7720031be25b59e5f26560627654387aeaa5c47252b26eabf42dd9cb40e06da2b1a3db6abb3c94be1434533b2f4989ecf0ddf8de27aee706079c9ef48a0793308130b2f6bb997709fef1490ba1a8bb94139c3e37592e7628d3012cb94768eddca8800a24883f867ed312e02e"}]}, @NL80211_ATTR_BEACON_TAIL={0x4a, 0xf, [@mesh_chsw={0x76, 0x6, {0x7a, 0x81, 0x41, 0x1}}, @chsw_timing={0x68, 0x4, {0xaf0, 0x90}}, @perr={0x84, 0x1c, {0xde, 0x2, [{}, {}]}}, @cf={0x4, 0x6, {0x9, 0x1, 0xfff7, 0x9}}, @mic={0x8c, 0x10, {0xce7, "7e23ec1a47b7", @short="7d43ce2415c51b23"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x30c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xa2, 0x2, "15844d2118112f84919e6455887919db52f577acbb39de32169154665ea589073f55ddc2477bf58023482f3e0e7d8b0dce1a5d7a5e60aef246b19329efa1503d24386c60b4eb7ee71812d54cc83cdd09bc8b754b0aabf9e209799e39c5a733c5ba9822ddf8ad8bb5bf288fa3d919985488ce63071e1566a603d8ad3140f3d3b0598839a4abb3ce92e12bcc40baf9313743cea1620551adc9e66d277ea6a1"}, @NL80211_FTM_RESP_ATTR_LCI={0xc6, 0x2, "b41765091a3da40ff88665a528f2a19cd3278dca69f84a402346428f8314cc51f48783a1d806f988fa29933de0087d909b4980de200e0674077dafb0e4b7ec4315e43eb1789ee11d2ca1d6659b7a497717da829b866c5239fdfc4b091397bfdbdcb1e369810e91a5b2504bb0ebadfb92f964a5744394ca1e853dbc72b2edd34364a853f0f066dac90b4bd237aed158782be0ab91a51213b6c1fff55d2ce88044d2d7744f16bc038966f6cda8dd5fefa7de06e486a39a31ceaa121dc43043a9ec6c0d"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x95, 0x3, "9f260aa919f2130c82bc20dd682ed483d0b2e4d934f67114abf98022e39897c165942e03f9e3742981a492f641c931d3dc59eebc3fd6ff2292b84769625e772670f0ad6087f9b04a5ef34ebf38906577102440ad0e15ce491cde4c1509ef761e520375745f204d8ac9e71f64b446062b96b7644d11d5be49fdc6be4ce6fa5beaf0e23a77dc7cb1c2b25181329f97fb5d80"}, @NL80211_FTM_RESP_ATTR_LCI={0x102, 0x2, "963d7c9cfa4f1a1f6c42ca9c01ead55072481b32966e7b2ec9003bc1d45cdcdb187ce5b6fa787a202da4fc9a3f0194f57f7eaa77a0937e9bb63dbcf0609d87918031aa0397abedc9634aa32473a1fa0d9609edfb2fe81362c0766d95e22c2a8107b90d8a762407f0b948c4ed6fb9a8ef64264a40de6d92c9bd36292d49fff7b55b88773d4325976de2015cc0b2f39271cf755aecc6d376c18763b5d1533b66432815008bab081715f910ba63aa48b42209cd8c9a50e301973ccea3b567f8a9d6a8f8eaa90ee7c7333e90a979c87b721ded5f82854feeb620b71126b4cffc98c5f93e977a018f8086c024c8efa71cb238c49baa8fa4ba0d79028caec07893"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x2e9, 0x7f, [@tim={0x5, 0xfb, {0x2, 0xa7, 0x8, "15b62744faccbc0b9c680328f39478a1dcda6c7662fdc4d6087eef28aa54ad7ff6eed80a63bc5cf03f749bc85713218bdae7ffa95ab4458a04fe26c75f96ad380a61d6e947ed577d3d7ab81411c21e808f27bd7b6b5e81cd0bef2675f604369f5d8deb530d7a3a3144485cd4090860dc1b5870e03b3309e355394e2ee2f7baec9b74d644a7e9a90283d600287e305eafb22a0d222ff9862f4639e5bf0c2d7e93eef1a18e179568d8b342933762d84dce5a0bb5596518c8123cbc4b04f17483aebfec86c8e6dfa568e78577864b4029adb271c2479dd08dbccac154631a12852e7e1bd5cb7de213f2023134e9f2390e4771435c9e5928d793"}}, @ssid={0x0, 0x8, @random="24930db4e08072b1"}, @preq={0x82, 0x36}, @chsw_timing={0x68, 0x4, {0x9, 0x3f}}, @random_vendor={0xdd, 0xd1, "ca7290433734520c6afe851aceafe0fe9990f968fe64add8a18a3fcab4d11f9c99d2076a5be7a80adf31a3189215e597779613138ada3432c72fb970ab3636f32d83f99d383cde56c7d95773d66a7dffc9618f224cc610673dd1a35ceeaaa99f4d60b127764031bcfc23d3a678dfa90ddb3c1d936413f69ad847297b95d3dfbb641e7dbdcee2a124a3581733f6f49a6d028ca7a107f147ec54880337bf5a60134c6192ed0e80d2cde0f53759ce061520cad3faf7f552065c8087a71ac0f1d863b862cefffe3db060bf14ccc604b84a66f5"}, @random_vendor={0xdd, 0xa6, "9b3a0d8aa3b6815e402f2eb701206b45ef9cac3b086dfda12fff651deeeb1cad4f359fcdebc1861f2efb94384cc8737355c9e1a33725f861793853c81e1f0f39260d5d70275a7559434aa855adb28543e563563256cfcacfb2f7e6fc307f4074bcbd9152cc8920560dcdfaa83ab494a3b297af9d26b1877b9b5cace932ba99fac5273164411389b81ec65209d2c26b3da536f0a271da86b227f9d882441a9ec2eb167563e5cc"}, @rann={0x7e, 0x15, {{0x0, 0x63}, 0x4, 0x2, @broadcast, 0x7, 0xfc}}, @chsw_timing={0x68, 0x4, {0x800, 0xf9c2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}], @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}]]}, 0x7e4}, 0x1, 0x0, 0x0, 0x24008851}, 0x20044001)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0x4}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x43e}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r12=>0x0})
r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)={0x2c, r13, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}}, 0x0)
r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x2e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0)
sendfile(r14, r14, 0x0, 0xc3)
r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="000202000000fedbdf250200000058000180060004004e2400000c000700060000002600000008000900340000000800080000000000060004004e2200000600f0ff0c000000180007000600000000005f1214000300fe8000003738920c9c97775f000000bb"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20008090)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a80)=<r16=>0x0, &(0x7f0000000ac0)=0x4)
sendmsg$TEAM_CMD_NOOP(r14, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000001780)={0x7ec, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0xe5, 0x80, 0x1ff}, {0x0, 0x64, 0x0, 0x2}, {0x6, 0x8, 0x1, 0xffff}, {0x5, 0x40, 0x81, 0x8}, {0x40, 0x7e, 0x4e, 0x9}, {0xfffa, 0x20, 0x8, 0x7}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1edf800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1d4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x78e81ac}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6d18}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r16}}}]}}]}, 0x7ec}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000)
sendmsg$IPVS_CMD_NEW_SERVICE(r14, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000240)={0x4c, r15, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf801}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x60, r15, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xd4185b6c04dc125f}, 0x4000000)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000a80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xb8, r15, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x30}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x7}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040014)
ioctl$sock_inet_SIOCADDRT(r4, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x7})

0s ago: executing program 4 (id=675):
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e"], 0x6a)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000240), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
clock_adjtime(0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x90)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x6, 0xc8, 0x7f, 0x101}}}, 0x9)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

an device maximum
[   54.577895][ T4451] loop2: detected capacity change from 0 to 2048
[   54.613748][   T27] audit: type=1326 audit(54.550:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.4.18" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff97145e68 code=0x0
[   54.624638][ T4451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   54.631074][ T4430] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   54.688367][ T4451] fs-verity: sha512 using implementation "sha512-arm64"
[   54.724459][ T4301] Bluetooth: hci3: ACL packet for unknown connection handle 204
[   54.839713][ T4459] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18'.
[   55.131401][ T4430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.135298][ T4430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.138006][ T4430] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   55.150420][ T4430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.158039][ T4430] usb 1-1: config 0 descriptor??
[   56.050691][ T4478] loop4: detected capacity change from 0 to 512
[   56.078105][ T4478] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.22: casefold flag without casefold feature
[   56.086326][ T4451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'.
[   56.108427][ T4478] EXT4-fs (loop4): Remounting filesystem read-only
[   56.110786][ T4478] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.22: bad orphan inode 15
[   56.113969][ T4478] ext4_test_bit(bit=14, block=18) = 1
[   56.115752][ T4478] is_bad_inode(inode)=0
[   56.117162][ T4478] NEXT_ORPHAN(inode)=1023
[   56.118589][ T4478] max_ino=32
[   56.119595][ T4478] i_nlink=0
[   56.128073][ T4478] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   56.133218][ T4478] EXT4-fs (loop4): unmounting filesystem.
[   56.209938][ T4484] fuse: Bad value for 'fd'
[   56.268655][ T4295] EXT4-fs (loop2): unmounting filesystem.
[   56.364802][ T4489] loop4: detected capacity change from 0 to 256
[   56.373672][ T4487] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[   56.375811][ T4487] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   56.381441][ T4430] hid (null): bogus close delimiter
[   56.388726][ T4487] vhci_hcd vhci_hcd.0: Device attached
[   56.406457][ T4490] usbip_core: unknown command
[   56.407806][ T4490] vhci_hcd: unknown pdu 0
[   56.409168][ T4490] usbip_core: unknown command
[   56.412675][    T9] vhci_hcd: stop threads
[   56.413980][    T9] vhci_hcd: release socket
[   56.415310][    T9] vhci_hcd: disconnect device
[   56.466049][ T4500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.552812][ T4500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.641034][ T4430] usb 1-1: language id specifier not provided by device, defaulting to English
[   57.483251][ T4516] Bluetooth: MGMT ver 1.22
[   57.690483][ T4430] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71
[   57.693273][ T4430] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71
[   57.695600][ T4430] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71
[   57.703768][ T4430] uclogic 0003:256C:006D.0001: failed probing parameters: -71
[   57.705895][ T4430] uclogic: probe of 0003:256C:006D.0001 failed with error -71
[   57.733592][ T4430] usb 1-1: USB disconnect, device number 2
[   58.555191][ T4581] loop3: detected capacity change from 0 to 512
[   58.807128][ T4584] loop4: detected capacity change from 0 to 256
[   61.282508][ T4581] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   61.284797][ T4581] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   61.312852][ T4584] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   61.336429][ T4581] EXT4-fs (loop3): 1 truncate cleaned up
[   61.337971][ T4581] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   61.360730][ T4580] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[   61.525172][ T4303] EXT4-fs (loop3): unmounting filesystem.
[   61.926957][ T4597] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.372193][ T4596] loop3: detected capacity change from 0 to 512
[   62.384447][ T4599] loop4: detected capacity change from 0 to 128
[   62.857538][ T4605] syz.3.35: attempt to access beyond end of device
[   62.857538][ T4605] loop3: rw=0, sector=511016, nr_sectors = 4 limit=512
[   63.169604][ T4606] EXT2-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   63.172642][ T4606] EXT2-fs (loop3): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c]
[   63.349941][ T4604] loop1: detected capacity change from 0 to 512
[   63.352373][ T4604] =======================================================
[   63.352373][ T4604] WARNING: The mand mount option has been deprecated and
[   63.352373][ T4604]          and is ignored by this kernel. Remove the mand
[   63.352373][ T4604]          option from the mount to silence this warning.
[   63.352373][ T4604] =======================================================
[   63.410723][ T4607] netlink: 2 bytes leftover after parsing attributes in process `syz.2.34'.
[   63.421930][ T4607] loop2: detected capacity change from 0 to 1024
[   63.425182][ T4301] Bluetooth: hci1: ISO packet too small
[   63.442455][ T4301] Bluetooth: hci1: SCO packet for unknown connection handle 0
[   63.442463][ T4607] capability: warning: `syz.2.34' uses 32-bit capabilities (legacy support in use)
[   63.451675][ T4607] input: syz0 as /devices/virtual/input/input3
[   63.530650][ T4604] EXT4-fs (loop1): 1 orphan inode deleted
[   63.532252][ T4604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   63.746951][ T4301] Bluetooth: hci2: ACL packet for unknown connection handle 1
[   63.825865][ T4619] binder: 4603:4619 tried to acquire reference to desc 0, got 1 instead
[   63.837009][ T4619] binder: 4619 RLIMIT_NICE not set
[   63.838753][ T4619] binder: 4619 RLIMIT_NICE not set
[   63.840726][ T4619] binder: send failed reply for transaction 5 to 4603:4619
[   63.843215][ T4619] binder: 4603:4619 transaction 5 fd fixups failed 29201/-12, line 4674
[   63.967970][ T4343] binder: undelivered TRANSACTION_COMPLETE
[   63.969824][ T4343] binder: undelivered TRANSACTION_ERROR: 29201
[   63.999034][ T4617] Cannot find add_set index 0 as target
[   64.000961][ T4301] Bluetooth: Wrong link type (-22)
[   64.038819][ T4617] loop4: detected capacity change from 0 to 256
[   64.057200][ T4618] process 'syz.3.40' launched '/dev/fd/7/./file0' with NULL argv: empty string added
[   64.294827][ T4294] EXT4-fs (loop1): unmounting filesystem.
[   64.409411][ T4625] loop1: detected capacity change from 0 to 256
[   64.492594][ T4286] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   66.360211][    C1] sched: RT throttling activated
[   66.516127][ T4641] loop4: detected capacity change from 0 to 512
[   67.190476][   T27] audit: type=1326 audit(67.120:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4638 comm="syz.1.45" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86745e68 code=0x0
[   67.366475][ T4648] loop3: detected capacity change from 0 to 512
[   67.377300][ T4648] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   67.636683][ T4654] capability: warning: `syz.4.46' uses deprecated v2 capabilities in a way that may be insecure
[   67.839104][ T4301] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   67.844064][ T4301] Bluetooth: hci2: Injecting HCI hardware error event
[   67.850295][ T4301] Bluetooth: hci2: hardware error 0x00
[   68.121797][ T4648] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.47: invalid indirect mapped block 4294967295 (level 1)
[   68.239610][ T4648] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.47: invalid indirect mapped block 4294967295 (level 1)
[   68.255392][ T4648] EXT4-fs (loop3): 2 truncates cleaned up
[   68.257098][ T4648] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   68.299806][ T4657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.047985][ T4657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.081939][ T4311] Bluetooth: hci4: Malformed LE Event: 0x0d
[   69.192255][ T4311] Bluetooth: hci4: command tx timeout
[   69.268625][ T4662] loop4: detected capacity change from 0 to 512
[   69.270752][ T4303] EXT4-fs (loop3): unmounting filesystem.
[   69.425998][ T4667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.550602][ T4667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.020601][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[   70.022564][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[   70.026142][ T1964] cfg80211: failed to load regulatory.db
[   70.186505][ T4667] loop1: detected capacity change from 0 to 40427
[   70.200915][ T4667] F2FS-fs (loop1): invalid crc value
[   70.208316][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'.
[   70.387602][ T4670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'.
[   70.710936][ T4667] F2FS-fs (loop1): Found nat_bits in checkpoint
[   70.966749][ T4664] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   70.997455][ T4667] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   71.022341][ T4668] f2fs_ckpt-7:1: attempt to access beyond end of device
[   71.022341][ T4668] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   71.093617][ T4678] loop2: detected capacity change from 0 to 2048
[   71.100341][ T4301] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   71.172916][ T4678] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[   71.183441][ T4678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   73.962721][ T4294] syz-executor: attempt to access beyond end of device
[   73.962721][ T4294] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   73.980642][ T4294] syz-executor: attempt to access beyond end of device
[   73.980642][ T4294] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   74.126561][ T4695] overlayfs: statfs failed on './file0'
[   74.135657][ T4700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.57'.
[   74.762303][   T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   75.602619][   T27] audit: type=1326 audit(89.521:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[   75.609231][   T27] audit: type=1326 audit(89.521:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff86945e68 code=0x7fc00000
[   75.912198][   T22] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   76.465699][   T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   76.468287][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   76.471338][   T22] usb 1-1: SerialNumber: syz
[   76.510453][   T27] audit: type=1326 audit(90.431:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[   76.524348][   T27] audit: type=1326 audit(90.441:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[   76.529903][ T4731] loop4: detected capacity change from 0 to 8
[   76.560534][   T27] audit: type=1326 audit(90.441:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[   76.566553][   T27] audit: type=1326 audit(90.441:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[   76.688047][   T27] audit: type=1326 audit(90.441:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[   76.694429][   T27] audit: type=1326 audit(90.441:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[   76.701566][   T27] audit: type=1326 audit(90.441:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[   76.707402][   T27] audit: type=1326 audit(90.441:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[   76.803627][ T4733] loop2: detected capacity change from 0 to 16
[   79.233844][ T4733] erofs: (device loop2): mounted with root inode @ nid 36.
[   79.255031][ T4732] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36
[   79.257981][ T4732] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36
[   79.264620][ T4732] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36
[   79.267399][ T4732] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36
[   79.269892][ T4732] syz.2.64: attempt to access beyond end of device
[   79.269892][ T4732] loop2: rw=524288, sector=736, nr_sectors = 112 limit=16
[   79.274015][ T4732] syz.2.64: attempt to access beyond end of device
[   79.274015][ T4732] loop2: rw=524288, sector=13478624032, nr_sectors = 24 limit=16
[   79.320761][   T22] cdc_ether: probe of 1-1:1.0 failed with error -71
[   79.325744][   T22] usb 1-1: USB disconnect, device number 3
[   79.646869][ T4751] loop4: detected capacity change from 0 to 512
[   79.783973][ T4751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   79.804142][   T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.023791][   T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.036119][ T4310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.040782][ T4310] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.044006][ T4310] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.049197][ T4310] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.052540][ T4310] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   80.054798][ T4310] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.114628][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   80.184832][   T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.406375][ T4774] netlink: 'syz.0.72': attribute type 21 has an invalid length.
[   80.411636][ T4774] netlink: 128 bytes leftover after parsing attributes in process `syz.0.72'.
[   80.414081][ T4774] netlink: 'syz.0.72': attribute type 5 has an invalid length.
[   80.424327][ T4774] netlink: 'syz.0.72': attribute type 6 has an invalid length.
[   80.426358][ T4774] netlink: 3 bytes leftover after parsing attributes in process `syz.0.72'.
[   81.292606][ T4780] trusted_key: encrypted_key: master key parameter 'user' is invalid
[   81.308837][   T27] kauditd_printk_skb: 62 callbacks suppressed
[   81.308853][   T27] audit: type=1326 audit(95.231:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.4.74" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff97145e68 code=0x0
[   81.332331][   T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.377209][ T4762] loop2: detected capacity change from 0 to 32768
[   81.394954][ T4762] XFS: attr2 mount option is deprecated.
[   81.396582][ T4762] XFS: noikeep mount option is deprecated.
[   81.467821][ T4768] chnl_net:caif_netlink_parms(): no params data found
[   81.489957][ T4762] XFS (loop2): Mounting V5 Filesystem
[   81.508014][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.510095][ T4768] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.513763][ T4768] device bridge_slave_0 entered promiscuous mode
[   81.517650][ T4768] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.519791][ T4768] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.524178][ T4768] device bridge_slave_1 entered promiscuous mode
[   81.544980][ T4768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.549964][ T4768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.624650][ T4762] XFS (loop2): Ending clean mount
[   81.642113][ T4762] XFS (loop2): Quotacheck needed: Please wait.
[   81.658194][ T4768] team0: Port device team_slave_0 added
[   81.698630][ T4768] team0: Port device team_slave_1 added
[   81.759427][ T4768] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.774345][ T4768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.788048][ T4768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.889394][ T4768] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.891535][ T4768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.899265][ T4768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.957758][ T4800] loop4: detected capacity change from 0 to 128
[   81.999803][ T4800] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   82.039214][ T4762] XFS (loop2): Quotacheck: Done.
[   82.160457][ T4310] Bluetooth: hci0: command tx timeout
[   82.208216][ T4800] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   82.292971][ T4768] device hsr_slave_0 entered promiscuous mode
[   82.331147][ T4768] device hsr_slave_1 entered promiscuous mode
[   82.360821][ T4768] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.364883][ T4768] Cannot create hsr debugfs directory
[   82.574145][ T4813] loop4: detected capacity change from 0 to 4096
[   82.590389][ T4813] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid end of sector marker.
[   82.629002][ T4813] ntfs: volume version 3.1.
[   82.807584][ T4818] netlink: 128 bytes leftover after parsing attributes in process `syz.0.77'.
[   82.829735][ T4818] Zero length message leads to an empty skb
[   83.442817][ T4824] Unsupported ieee802154 address type: 0
[   84.235046][ T4834] loop4: detected capacity change from 0 to 256
[   84.750221][ T4310] Bluetooth: hci0: command tx timeout
[   86.327000][ T4847] 9pnet_fd: Insufficient options for proto=fd
[   86.339032][ T4844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'.
[   86.487280][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.82'.
[   86.800394][ T4310] Bluetooth: hci0: command tx timeout
[   88.926885][ T4301] Bluetooth: hci0: command tx timeout
[   90.544378][ T4886] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING
[   90.633078][ T4310] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   90.638311][ T4310] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   90.642955][ T4310] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   90.646665][ T4310] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   90.651362][ T4310] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   90.656576][ T4310] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   90.682759][ T4888] loop4: detected capacity change from 0 to 4096
[   90.692677][ T4888] ntfs: (device loop4): map_mft_record_page(): Mft record 0x1 is corrupt.  Run chkdsk.
[   90.695703][ T4888] ntfs: (device loop4): map_mft_record(): Failed with error code 5.
[   90.698168][ T4888] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[   90.702977][ T4888] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   90.714727][ T4888] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing.
[   90.718667][ T4888] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   90.726617][ T4888] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   90.737692][ T4888] ntfs: volume version 3.1.
[   90.738911][ T4888] ntfs: (device loop4): map_mft_record_page(): Mft record 0x2 is corrupt.  Run chkdsk.
[   90.760429][ T4888] ntfs: (device loop4): map_mft_record(): Failed with error code 5.
[   90.762727][ T4888] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[   92.250603][ T4904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'.
[   92.806013][ T4301] Bluetooth: hci5: command tx timeout
[   92.996370][ T4911] loop3: detected capacity change from 0 to 128
[   93.989077][ T4914] loop4: detected capacity change from 0 to 512
[   94.039471][ T4914] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   94.910302][ T4310] Bluetooth: hci5: command tx timeout
[   94.979546][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   95.099400][ T4924] loop4: detected capacity change from 0 to 512
[   95.143557][   T55] device hsr_slave_0 left promiscuous mode
[   95.167836][ T4924] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.97: casefold flag without casefold feature
[   95.180837][ T4924] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.97: missing EA_INODE flag
[   95.191889][ T4924] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.97: error while reading EA inode 2 err=-117
[   95.200810][ T4924] EXT4-fs (loop4): 1 orphan inode deleted
[   95.202679][ T4924] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   95.205026][   T55] device hsr_slave_1 left promiscuous mode
[   95.233886][ T4924] mmap: syz.4.97 (4924) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   95.286795][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.290693][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.293693][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.307586][   T55] device bridge_slave_1 left promiscuous mode
[   95.310972][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.383298][   T55] device bridge_slave_0 left promiscuous mode
[   95.385417][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.570994][   T55] device veth1_macvtap left promiscuous mode
[   95.573163][   T55] device veth0_macvtap left promiscuous mode
[   95.574858][   T55] device veth1_vlan left promiscuous mode
[   95.576695][   T55] device veth0_vlan left promiscuous mode
[   95.576835][ T4927] loop3: detected capacity change from 0 to 32768
[   95.842145][ T4927] XFS (loop3): Mounting V5 Filesystem
[   96.082708][   T27] kauditd_printk_skb: 2 callbacks suppressed
[   96.082782][   T27] audit: type=1326 audit(109.931:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.0.99" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x0
[   96.404568][ T4927] XFS (loop3): Ending clean mount
[   96.573386][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   96.606222][ T4303] XFS (loop3): Unmounting Filesystem
[   96.633509][ T4944] syz.0.100 uses obsolete (PF_INET,SOCK_PACKET)
[   97.040283][ T4301] Bluetooth: hci5: command tx timeout
[   97.223244][ T4949] netlink: 104 bytes leftover after parsing attributes in process `syz.4.101'.
[   97.547181][ T4950] block nbd0: shutting down sockets
[   97.741496][   T27] audit: type=1326 audit(111.661:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x7ffc0000
[   97.747802][   T27] audit: type=1326 audit(111.661:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x7ffc0000
[   97.756848][   T27] audit: type=1326 audit(111.661:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=6 compat=0 ip=0xffffa5f45e68 code=0x7ffc0000
[   97.763430][   T27] audit: type=1326 audit(111.661:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x7ffc0000
[   97.769569][   T27] audit: type=1326 audit(111.661:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x7ffc0000
[   97.780119][   T27] audit: type=1326 audit(111.661:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffa5f3d9cc code=0x7ffc0000
[   97.786827][   T27] audit: type=1326 audit(111.661:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa6cda89c code=0x7ffc0000
[   97.792968][   T27] audit: type=1326 audit(111.661:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x7ffc0000
[   97.799302][   T27] audit: type=1326 audit(111.661:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa5f45e68 code=0x7ffc0000
[   98.775882][ T4974] loop4: detected capacity change from 0 to 128
[   98.778159][ T4974] EXT4-fs: Ignoring removed nobh option
[   98.799345][ T4974] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   99.100417][ T4310] Bluetooth: hci5: command tx timeout
[   99.674962][   T55] team0 (unregistering): Port device team_slave_1 removed
[   99.852787][   T55] team0 (unregistering): Port device team_slave_0 removed
[  100.041206][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.261029][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.620372][ T4301] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  102.622950][ T4301] Bluetooth: hci4: Injecting HCI hardware error event
[  102.627133][ T4301] Bluetooth: hci4: hardware error 0x00
[  102.692259][   T55] bond0 (unregistering): Released all slaves
[  102.960305][ T4889] chnl_net:caif_netlink_parms(): no params data found
[  102.993783][ T4302] EXT4-fs (loop4): unmounting filesystem.
[  104.420350][ T4984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.108'.
[  104.423342][ T4984] IPv6: Can't replace route, no match found
[  104.510440][ T4889] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.512379][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.514909][ T4889] device bridge_slave_0 entered promiscuous mode
[  104.519334][ T4889] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.723766][ T5007] loop4: detected capacity change from 0 to 1024
[  105.090295][ T4889] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.218674][ T4301] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  105.248751][ T4889] device bridge_slave_1 entered promiscuous mode
[  105.283504][ T4768] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  105.376542][ T5012] Driver unsupported XDP return value 0 on prog  (id 18) dev N/A, expect packet loss!
[  105.426790][ T5012] tmpfs: Unknown parameter 'iY��� ���uge9alw6�0�\�C���7��l�o���o��'����!E�8��������0rM
[  105.426790][ T5012] �1��ؓ��[����/�雅�5)�'
[  105.432285][ T4768] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  105.477000][ T4762] XFS (loop2): Unmounting Filesystem
[  105.483853][ T4768] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  105.518128][ T4889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.528400][ T4889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.540654][ T4768] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  105.592156][ T5026] loop3: detected capacity change from 0 to 512
[  105.632113][ T5026] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  105.655418][ T5020] fuse: Bad value for 'fd'
[  105.685334][ T5026] EXT4-fs (loop3): 1 truncate cleaned up
[  105.686960][ T5026] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  105.719699][ T4889] team0: Port device team_slave_0 added
[  105.734172][ T4889] team0: Port device team_slave_1 added
[  105.818131][ T5026] netlink: 'syz.3.114': attribute type 3 has an invalid length.
[  105.845040][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  105.868871][ T4889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.910595][ T4889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.924115][ T4889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.999381][ T4889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.001344][ T4889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.008546][ T4889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.864483][ T4889] device hsr_slave_0 entered promiscuous mode
[  106.890696][ T4889] device hsr_slave_1 entered promiscuous mode
[  106.906034][   T27] kauditd_printk_skb: 44 callbacks suppressed
[  106.906048][   T27] audit: type=1326 audit(120.831:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.0.118" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x0
[  106.951390][ T5059] loop4: detected capacity change from 0 to 256
[  106.989555][ T4768] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.001621][ T4982] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  107.071433][ T4303] EXT4-fs (loop3): unmounting filesystem.
[  107.182238][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  107.184749][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  107.214643][ T4768] 8021q: adding VLAN 0 to HW filter on device team0
[  107.245973][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  107.249830][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  107.271973][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.274009][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.291431][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  107.342860][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  107.346014][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  107.352757][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.354808][ T4324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.363409][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  107.372549][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  107.401631][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  107.413648][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  107.418798][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  107.425667][ T5077] netlink: 'syz.3.120': attribute type 17 has an invalid length.
[  107.445577][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  107.448928][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  107.454156][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  107.461247][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  107.471726][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  107.476596][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  107.484780][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  107.585481][ T4889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.706150][ T4889] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.724649][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  107.726853][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  107.738026][ T4768] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.767662][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  107.773457][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  107.932981][ T4889] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.959219][ T5087] binder: 5086:5087 tried to acquire reference to desc 0, got 1 instead
[  107.988644][   T27] audit: type=1326 audit(121.911:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[  108.004501][ T5087] binder: 5086:5087 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  108.006950][ T5087] binder: 5086:5087 BC_ACQUIRE_DONE u0000000000000003 no match
[  108.008939][ T5087] binder: 5086:5087 BC_FREE_BUFFER u0000000000000000 no match
[  108.339055][ T4889] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.780521][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  108.783262][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  108.790351][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  108.792893][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  108.797615][ T4768] device veth0_vlan entered promiscuous mode
[  108.839941][ T4768] device veth1_vlan entered promiscuous mode
[  108.878591][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  108.882501][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  108.885294][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  108.891535][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  108.902629][ T4768] device veth0_macvtap entered promiscuous mode
[  108.931336][ T4768] device veth1_macvtap entered promiscuous mode
[  108.954475][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.957246][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.959678][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.972699][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.975463][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.978071][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.981548][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.984395][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.989334][ T4768] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.026514][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  109.033854][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  109.036749][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  109.052223][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  109.055337][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.058188][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.067681][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.072274][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.074857][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.078003][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.086608][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.093193][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.111483][ T4768] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.140437][ T5101] loop4: detected capacity change from 0 to 256
[  109.158502][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  109.162870][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  109.167793][ T4768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.177137][ T4768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.179543][ T4768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.183059][ T4768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.186418][ T5101] FAT-fs (loop4): Directory bread(block 64) failed
[  109.188193][ T5101] FAT-fs (loop4): Directory bread(block 65) failed
[  109.195921][ T5101] FAT-fs (loop4): Directory bread(block 66) failed
[  109.199389][ T5103] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  109.199389][ T5103] The task syz.0.124 (5103) triggered the difference, watch for misbehavior.
[  109.203234][ T4889] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  109.210359][ T5101] FAT-fs (loop4): Directory bread(block 67) failed
[  109.212878][ T5101] FAT-fs (loop4): Directory bread(block 68) failed
[  109.214604][ T5101] FAT-fs (loop4): Directory bread(block 69) failed
[  109.226807][ T5101] FAT-fs (loop4): Directory bread(block 70) failed
[  109.228615][ T5101] FAT-fs (loop4): Directory bread(block 71) failed
[  109.231048][ T5101] FAT-fs (loop4): Directory bread(block 72) failed
[  109.232800][ T5101] FAT-fs (loop4): Directory bread(block 73) failed
[  109.242445][ T4889] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  109.303540][ T4889] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  109.342566][ T4889] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  110.327205][ T4388] kworker/u4:7: attempt to access beyond end of device
[  110.327205][ T4388] loop4: rw=1, sector=1224, nr_sectors = 128 limit=256
[  110.399487][ T4474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.416795][ T5096] loop3: detected capacity change from 0 to 40427
[  110.417120][ T4474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.424335][ T5110] loop4: detected capacity change from 0 to 512
[  110.426630][ T5110] EXT4-fs: Invalid commit interval 1836789753, must be smaller than 21474836
[  110.441723][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  110.486229][ T4835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.488692][ T4835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.506451][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  110.643418][ T4889] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.682521][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  110.685173][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  111.144816][ T4889] 8021q: adding VLAN 0 to HW filter on device team0
[  111.186757][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  111.189807][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  111.196922][ T4429] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.199005][ T4429] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.210077][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  111.233656][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  111.237388][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  111.245270][ T4429] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.247288][ T4429] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.256911][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  111.294912][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  111.297953][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  111.301791][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  111.334481][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  111.337808][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  111.359800][ T5121] loop4: detected capacity change from 0 to 2048
[  111.389978][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  111.403953][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  111.408389][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  111.510984][ T5121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  111.530029][ T4889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  111.555683][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  111.558954][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  111.564521][ T5121] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  112.247866][ T5121] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  112.270402][ T5121] EXT4-fs (loop4): This should not happen!! Data will be lost
[  112.270402][ T5121] 
[  112.273509][ T5121] EXT4-fs (loop4): Total free blocks count 0
[  112.275377][ T5121] EXT4-fs (loop4): Free/Dirty block details
[  112.277248][ T5121] EXT4-fs (loop4): free_blocks=2415919104
[  112.278778][ T5121] EXT4-fs (loop4): dirty_blocks=16
[  112.280116][ T5121] EXT4-fs (loop4): Block reservation details
[  112.296479][ T5121] EXT4-fs (loop4): i_reserved_data_blocks=1
[  112.322060][ T5129] loop0: detected capacity change from 0 to 4096
[  112.340859][ T5129] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  112.344085][ T5129] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  112.353379][ T5129] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  112.356399][ T5129] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  112.359670][ T5129] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  112.376986][ T5129] ntfs: volume version 3.1.
[  112.380107][ T5129] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  112.384267][ T5129] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  112.388314][ T5129] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  112.391784][ T5129] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  112.394821][ T5129] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  113.576362][ T5146] loop3: detected capacity change from 0 to 2048
[  113.701011][ T5146] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.717068][ T5148] loop0: detected capacity change from 0 to 2048
[  113.789586][ T5148] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  113.796236][ T4302] EXT4-fs (loop4): unmounting filesystem.
[  113.845645][ T5148] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  113.853706][ T5148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.979384][ T5142] UDF-fs: error (device loop3): udf_truncate_tail_extent: Extent after EOF in inode 1367
[  114.023906][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  114.026244][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  114.029995][ T4889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.064150][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  114.067240][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  114.159653][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  114.164636][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  114.168113][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  114.175980][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  114.187156][ T5155] loop4: detected capacity change from 0 to 128
[  114.197414][ T5155] EXT2-fs (loop4): error: couldn't mount because of unsupported optional features (102c0)
[  114.266849][ T4889] device veth0_vlan entered promiscuous mode
[  114.276166][ T4889] device veth1_vlan entered promiscuous mode
[  114.316879][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  114.329103][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  114.368900][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  114.379395][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  115.992268][ T4889] device veth0_macvtap entered promiscuous mode
[  115.996713][ T4889] device veth1_macvtap entered promiscuous mode
[  116.014897][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  116.017655][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  116.197572][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.207585][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.210129][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.228935][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.262112][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.265262][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.268383][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.379209][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.625876][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.700054][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.984074][ T4889] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.107957][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  117.111035][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  117.117114][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.120111][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.128112][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.133223][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.138017][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.148603][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.151665][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.154347][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.267358][ T5184] fuse: Unknown parameter 'use00000000000000000000'
[  117.363685][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.367140][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.205695][ T4889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.274218][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  118.531300][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  118.697321][ T5196] loop0: detected capacity change from 0 to 512
[  118.708181][ T5196] EXT4-fs: Ignoring removed mblk_io_submit option
[  118.724275][ T5180] netlink: 'syz.1.139': attribute type 1 has an invalid length.
[  118.765906][ T4889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.768322][ T4889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.777197][ T4889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.779518][ T4889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.781352][ T5196] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  118.785429][ T5196] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  121.262073][ T5196] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.142: corrupted in-inode xattr
[  121.275872][ T5196] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.142: couldn't read orphan inode 15 (err -117)
[  121.351964][ T5196] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  121.378168][ T4474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.392060][ T4474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.414419][   T27] kauditd_printk_skb: 7 callbacks suppressed
[  121.414431][   T27] audit: type=1326 audit(135.341:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.144" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x0
[  121.489606][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  121.532969][ T5196] netlink: 44 bytes leftover after parsing attributes in process `syz.0.142'.
[  121.535675][ T5196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'.
[  121.607713][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'.
[  121.676186][ T5167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.682503][ T5167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.715435][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  121.820443][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'.
[  122.436651][ T4296] EXT4-fs (loop0): unmounting filesystem.
[  122.504551][ T5232] xt_recent: hitcount (39939) is larger than allowed maximum (255)
[  122.520834][ T5236] fuse: Unknown parameter 'rootmo�de'
[  124.116535][ T5244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'.
[  124.159560][ T5236] netlink: 116 bytes leftover after parsing attributes in process `syz.0.150'.
[  124.187511][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.585418][ T5236] device bridge_slave_0 left promiscuous mode
[  125.587201][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.664489][ T5262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'.
[  125.942141][ T5272] loop3: detected capacity change from 0 to 1024
[  125.944595][ T5272] EXT4-fs: Ignoring removed oldalloc option
[  126.089820][ T5272] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  126.127112][ T5277] loop0: detected capacity change from 0 to 8192
[  127.405501][ T5277] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  127.409509][ T5277] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  127.446382][ T4303] EXT4-fs (loop3): unmounting filesystem.
[  127.461092][ T5277] REISERFS (device loop0): using ordered data mode
[  127.467071][ T5277] reiserfs: using flush barriers
[  127.517999][ T5277] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  127.548122][ T5277] REISERFS (device loop0): checking transaction log (loop0)
[  127.576137][ T5277] REISERFS (device loop0): Using r5 hash to sort names
[  127.582190][ T5277] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  128.930839][ T5305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.161'.
[  129.316841][   T55] device hsr_slave_0 left promiscuous mode
[  129.332885][ T5320] loop2: detected capacity change from 0 to 256
[  129.439392][   T55] device hsr_slave_1 left promiscuous mode
[  129.553480][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.556391][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.559102][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.304019][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.307578][   T55] device bridge_slave_1 left promiscuous mode
[  130.309537][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.408057][   T55] device bridge_slave_0 left promiscuous mode
[  130.409936][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.612640][ T5335] loop3: detected capacity change from 0 to 256
[  130.853958][ T5335] exfat: Deprecated parameter 'utf8'
[  131.151055][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  131.153356][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  131.449488][ T5335] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  131.623754][   T27] audit: type=1326 audit(145.551:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5339 comm="syz.0.168" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x0
[  131.630591][   T55] device veth1_macvtap left promiscuous mode
[  131.632269][   T55] device veth0_macvtap left promiscuous mode
[  131.634514][   T55] device veth1_vlan left promiscuous mode
[  131.636284][   T55] device veth0_vlan left promiscuous mode
[  133.674586][   T55] team0 (unregistering): Port device team_slave_1 removed
[  133.862511][   T55] team0 (unregistering): Port device team_slave_0 removed
[  134.042888][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.241821][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.844944][   T55] bond0 (unregistering): Released all slaves
[  137.091385][ T5317] device macsec0 entered promiscuous mode
[  137.093489][ T5317] device macsec1 entered promiscuous mode
[  137.268719][ T5349] loop3: detected capacity change from 0 to 2048
[  137.283646][ T5349] EXT4-fs: Ignoring removed mblk_io_submit option
[  137.339886][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'.
[  138.825524][ T5360] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  139.640883][ T5349] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  139.729285][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.787389][ T5368] loop0: detected capacity change from 0 to 1024
[  139.789941][ T5368] ext4: Unknown parameter 'rootcontext'
[  139.881105][ T5346] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  139.959200][ T5349] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.170: bg 0: block 234: padding at end of block bitmap is not set
[  140.061374][ T5380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[  141.040619][ T5349] EXT4-fs (loop3): Remounting filesystem read-only
[  141.072494][ T4310] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  141.077242][ T4310] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  141.083797][ T4310] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  141.275640][ T4311] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  141.278204][ T4311] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  141.281679][ T4311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  141.457495][ T5387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'.
[  142.078829][ T4303] EXT4-fs (loop3): unmounting filesystem.
[  142.104874][ T5390] fuse: Unknown parameter 'rootmo�de'
[  142.299515][ T5390] netlink: 116 bytes leftover after parsing attributes in process `syz.2.180'.
[  142.340012][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.496135][ T5401] loop0: detected capacity change from 0 to 256
[  142.499681][ T5401] exfat: Deprecated parameter 'utf8'
[  142.616460][ T5401] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  143.062645][   T27] audit: type=1326 audit(156.941:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.1.183" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7345e68 code=0x0
[  143.112946][ T5390] device bridge_slave_0 left promiscuous mode
[  143.114793][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.341542][ T4311] Bluetooth: hci1: command tx timeout
[  143.721302][ T5407] loop0: detected capacity change from 0 to 1024
[  143.961435][ T5407] input: syz0 as /devices/virtual/input/input6
[  144.065252][ T5406] netlink: 2 bytes leftover after parsing attributes in process `syz.0.184'.
[  144.236384][ T5411] device macsec0 entered promiscuous mode
[  144.238176][ T5411] device macsec1 entered promiscuous mode
[  144.366919][ T5351] udevd[5351]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  144.376732][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'.
[  145.420850][ T4311] Bluetooth: hci1: command tx timeout
[  146.341730][ T5443] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  146.370679][   T27] audit: type=1326 audit(160.299:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5446 comm="syz.1.192" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7345e68 code=0x0
[  146.445630][ T5382] chnl_net:caif_netlink_parms(): no params data found
[  147.300344][ T5382] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.302305][ T5382] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.305833][ T5382] device bridge_slave_0 entered promiscuous mode
[  147.347912][ T5382] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.357991][ T5382] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.367444][ T5382] device bridge_slave_1 entered promiscuous mode
[  147.417383][ T5382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.434194][ T5382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.509733][ T5382] team0: Port device team_slave_0 added
[  147.529436][   T27] audit: type=1326 audit(161.369:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.2.195" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0945e68 code=0x0
[  147.560214][ T5382] team0: Port device team_slave_1 added
[  147.595825][ T5382] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.603510][ T5382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.610552][ T4301] Bluetooth: hci1: command tx timeout
[  147.634038][ T5382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.638591][ T5382] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.656138][ T5382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.677344][ T5382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.289820][ T5382] device hsr_slave_0 entered promiscuous mode
[  149.385082][ T5382] device hsr_slave_1 entered promiscuous mode
[  149.427959][ T5382] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.430103][ T5382] Cannot create hsr debugfs directory
[  149.431816][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'.
[  149.450084][ T5431] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.675800][   T27] audit: type=1326 audit(163.345:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[  149.696080][   T27] audit: type=1326 audit(163.345:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=4 compat=0 ip=0xffff86945e68 code=0x7fc00000
[  149.708189][   T27] audit: type=1326 audit(163.345:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[  149.742352][   T27] audit: type=1326 audit(163.345:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[  149.755842][   T27] audit: type=1326 audit(163.345:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[  149.781664][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'.
[  149.783906][   T27] audit: type=1326 audit(163.345:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[  149.805968][   T27] audit: type=1326 audit(163.345:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[  149.828864][   T27] audit: type=1326 audit(163.345:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[  149.841372][   T27] audit: type=1326 audit(163.345:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[  149.859039][   T27] audit: type=1326 audit(163.345:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7fc00000
[  149.916608][ T4311] Bluetooth: hci1: command tx timeout
[  149.974255][ T5382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.825864][ T5382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.863214][ T5484] device macsec0 entered promiscuous mode
[  151.865053][ T5484] device macsec1 entered promiscuous mode
[  151.869258][ T5499] netlink: 'syz.2.205': attribute type 3 has an invalid length.
[  151.872871][ T5498] loop3: detected capacity change from 0 to 256
[  151.915586][ T5346] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  153.066654][ T5382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.231217][ T5382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.203097][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'.
[  155.218173][ T5540] device batadv_slave_0 entered promiscuous mode
[  155.220568][ T5540] device batadv_slave_0 left promiscuous mode
[  155.230759][ T5537] device batadv_slave_0 entered promiscuous mode
[  156.150686][ T5536] device batadv_slave_0 left promiscuous mode
[  156.153850][ T5543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.038158][ T5382] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  157.059446][ T5550] loop3: detected capacity change from 0 to 512
[  157.109123][ T5382] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  157.131802][ T5550] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  157.136634][ T5550] EXT4-fs (loop3): 1 truncate cleaned up
[  157.138497][ T5550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  157.161785][ T5550] netlink: 'syz.3.217': attribute type 3 has an invalid length.
[  157.235877][ T5382] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  157.265406][ T5560] netlink: 'syz.1.220': attribute type 3 has an invalid length.
[  157.279351][ T4303] EXT4-fs (loop3): unmounting filesystem.
[  157.294524][ T5558] device macsec0 entered promiscuous mode
[  157.296328][ T5558] device macsec1 entered promiscuous mode
[  157.459776][ T5382] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  157.473678][ T5569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'.
[  157.576518][ T5575] input: syz0 as /devices/virtual/input/input7
[  157.721479][ T5382] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.737508][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  157.744205][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  157.797634][ T5382] 8021q: adding VLAN 0 to HW filter on device team0
[  157.894975][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  157.898098][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.902490][ T4585] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.904440][ T4585] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.013510][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  158.021256][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  158.031137][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  158.039616][ T4585] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.041763][ T4585] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.110293][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  158.114705][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  158.122139][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  158.125567][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  158.128617][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  158.134548][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  158.141018][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  158.147662][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  158.151873][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  158.158057][ T5382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.162684][ T5382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  158.165300][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  158.168035][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  158.577133][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  158.579359][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  158.620970][ T5382] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.135251][   T55] device hsr_slave_0 left promiscuous mode
[  159.190345][   T55] device hsr_slave_1 left promiscuous mode
[  159.287265][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.289383][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.291991][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.294061][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.296540][   T55] device bridge_slave_1 left promiscuous mode
[  159.299229][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.364658][   T55] device bridge_slave_0 left promiscuous mode
[  159.366455][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.536664][   T55] device veth1_macvtap left promiscuous mode
[  159.538385][   T55] device veth0_macvtap left promiscuous mode
[  159.540179][   T55] device veth1_vlan left promiscuous mode
[  159.541800][   T55] device veth0_vlan left promiscuous mode
[  161.560505][   T55] team0 (unregistering): Port device team_slave_1 removed
[  161.748749][   T55] team0 (unregistering): Port device team_slave_0 removed
[  161.975681][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.235330][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.982135][   T55] bond0 (unregistering): Released all slaves
[  165.291520][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  165.294429][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  165.308144][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  165.311949][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  165.315026][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  165.317623][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  165.322359][ T5382] device veth0_vlan entered promiscuous mode
[  165.330929][ T5382] device veth1_vlan entered promiscuous mode
[  165.350722][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  165.353590][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  165.364409][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  165.369982][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  165.374817][ T5382] device veth0_macvtap entered promiscuous mode
[  165.381440][ T5382] device veth1_macvtap entered promiscuous mode
[  165.391240][ T5382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.394184][ T5382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.396800][ T5382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.409226][ T5382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.418008][ T5382] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.423135][ T5382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.425962][ T5382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.428578][ T5382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.432062][ T5382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.434899][ T5382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.437698][ T5382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.440294][ T5382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.443282][ T5382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.447123][ T5382] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.449342][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  165.453119][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  165.455911][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  165.458859][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  165.461579][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  165.465492][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  165.470656][ T5382] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.473315][ T5382] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.476829][ T5382] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.479324][ T5382] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.536884][ T4429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.548700][ T4429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.556372][ T4835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.559355][ T4835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.560852][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  165.568772][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  165.724279][ T5593] loop3: detected capacity change from 0 to 128
[  165.825586][ T5601] binder: 5601:5597 cannot find target node
[  165.827275][ T5601] binder: 5597:5601 transaction call to 0:0 failed 10/29189/-22, size 0-0 line 3054
[  167.357524][ T5604] syz.0.233 (5604): drop_caches: 2
[  167.359659][ T5604] syz.0.233 (5604): drop_caches: 2
[  167.365343][ T5604] syz.0.233 (5604): drop_caches: 2
[  167.366776][ T5604] syz.0.233 (5604): drop_caches: 2
[  167.397067][ T5594] syz.0.233 (5594): drop_caches: 2
[  167.398558][ T5594] syz.0.233 (5594): drop_caches: 2
[  167.474395][ T5593] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  167.607889][ T1964] binder: undelivered TRANSACTION_ERROR: 29189
[  167.626273][ T5593] loop3: detected capacity change from 0 to 128
[  168.813876][   T27] kauditd_printk_skb: 57 callbacks suppressed
[  168.813890][   T27] audit: type=1326 audit(195.016:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.4.224" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4345e68 code=0x0
[  169.195826][ T5626] netlink: 'syz.2.226': attribute type 5 has an invalid length.
[  169.198189][ T5626] netlink: 212884 bytes leftover after parsing attributes in process `syz.2.226'.
[  169.562702][ T5630] loop3: detected capacity change from 0 to 512
[  171.065735][ T5651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.128619][ T4358] wlan1: Trigger new scan to find an IBSS to join
[  174.575162][ T5670] loop4: detected capacity change from 0 to 512
[  174.577592][ T5670] EXT4-fs: Ignoring removed i_version option
[  174.579294][ T5670] EXT4-fs: Ignoring removed nobh option
[  174.588293][ T5668] EXT4-fs (nvme0n1p2): resizing filesystem from 262144 to 262144 blocks
[  174.593541][ T5670] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  174.631698][ T5670] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  174.636184][ T5670] EXT4-fs (loop4): 1 truncate cleaned up
[  174.637935][ T5670] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  175.456645][ T5679] loop3: detected capacity change from 0 to 512
[  175.458885][ T5679] EXT4-fs: Ignoring removed orlov option
[  175.512186][ T5679] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  175.690906][ T5679] EXT4-fs (loop3): 1 truncate cleaned up
[  175.692487][ T5679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  175.706680][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  175.729641][ T5681] netlink: 'syz.2.242': attribute type 11 has an invalid length.
[  175.731784][ T5681] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.242'.
[  175.993695][ T4303] EXT4-fs (loop3): unmounting filesystem.
[  176.193148][ T5694] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  176.209397][ T4301] Bluetooth: hci5: Unknown advertising packet type: 0x7070
[  176.209461][ T4301] Bluetooth: hci5: Malformed LE Event: 0x0d
[  177.877649][ T5704] netlink: 136 bytes leftover after parsing attributes in process `syz.1.253'.
[  179.042328][ T4659] wlan1: Trigger new scan to find an IBSS to join
[  179.127870][ T5712] loop4: detected capacity change from 0 to 8192
[  179.173584][ T5712] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  179.622490][ T5725] dccp_invalid_packet: P.Data Offset(0) too small
[  180.217786][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'.
[  180.360137][  T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.459469][ T5742] netlink: 'syz.1.265': attribute type 8 has an invalid length.
[  180.549261][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'.
[  182.188167][ T5783] loop4: detected capacity change from 0 to 512
[  182.292300][ T5783] FAT-fs (loop4): bogus logical sector size 0
[  182.294069][ T5783] FAT-fs (loop4): Can't find a valid FAT filesystem
[  182.878237][ T5786] loop4: detected capacity change from 0 to 512
[  182.946957][ T5786] EXT4-fs (loop4): orphan cleanup on readonly fs
[  183.001817][ T5786] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.277: bg 0: block 248: padding at end of block bitmap is not set
[  183.068740][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'.
[  183.072835][ T5786] Quota error (device loop4): write_blk: dquota write failed
[  183.075330][ T5786] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  183.077999][ T5786] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.277: Failed to acquire dquot type 1
[  183.120720][ T5786] EXT4-fs (loop4): 1 truncate cleaned up
[  183.141880][ T5792] 9pnet: Could not find request transport: fd0x00000000000000070x0000000000000009
[  183.163962][ T5786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  183.186098][ T5786] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  183.263513][ T5786] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  183.279874][ T5799] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  183.402925][ T5802] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  184.441573][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  184.754106][ T5823] input: syz0 as /devices/virtual/input/input8
[  184.874704][ T4301] Bluetooth: hci5: ISO packet too small
[  184.896759][ T4301] Bluetooth: hci5: SCO packet for unknown connection handle 0
[  186.389963][   T27] audit: type=1326 audit(267.234:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  186.409904][   T27] audit: type=1326 audit(267.252:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  186.448571][   T27] audit: type=1326 audit(267.262:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  186.492858][   T27] audit: type=1326 audit(267.262:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  186.498483][   T27] audit: type=1326 audit(267.262:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  186.570194][   T27] audit: type=1326 audit(267.262:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  186.575780][   T27] audit: type=1326 audit(267.262:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  186.581499][   T27] audit: type=1326 audit(267.262:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  189.484300][   T27] audit: type=1326 audit(269.098:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz.4.295" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4345e68 code=0x0
[  190.897994][   T27] audit: type=1326 audit(271.341:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4345e68 code=0x7ffc0000
[  191.131813][   T27] audit: type=1326 audit(271.351:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4345e68 code=0x7ffc0000
[  191.180818][   T27] audit: type=1326 audit(271.351:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=134 compat=0 ip=0xffffb4345e68 code=0x7ffc0000
[  191.225747][   T27] audit: type=1326 audit(271.351:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4345e68 code=0x7ffc0000
[  191.249692][ T5878] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  191.275965][   T27] audit: type=1326 audit(271.351:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4345e68 code=0x7ffc0000
[  191.324004][   T27] audit: type=1326 audit(271.351:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffb4345e68 code=0x7ffc0000
[  191.365571][   T27] audit: type=1326 audit(271.351:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4345e68 code=0x7ffc0000
[  191.429301][   T27] audit: type=1326 audit(271.351:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4345e68 code=0x7ffc0000
[  191.437559][   T27] audit: type=1326 audit(271.351:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=47 compat=0 ip=0xffffb4345e68 code=0x7ffc0000
[  191.492160][ T5884] loop4: detected capacity change from 0 to 512
[  191.516384][ T5884] EXT4-fs (loop4): Test dummy encryption mode enabled
[  192.406465][ T5895] No such timeout policy "syz0"
[  192.559690][ T5884] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.304: inline data xattr refers to an external xattr inode
[  192.601026][ T5884] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.304: couldn't read orphan inode 12 (err -117)
[  192.617135][ T5884] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  193.417032][ T5907] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[  194.199717][ T5909] netlink: 'syz.1.306': attribute type 3 has an invalid length.
[  194.234519][ T5911] tap0: tun_chr_ioctl cmd 1074025677
[  194.236357][ T5911] tap0: linktype set to 512
[  194.449599][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  194.994261][ T5916] device wg2 entered promiscuous mode
[  195.016481][ T5923] sctp: [Deprecated]: syz.3.310 (pid 5923) Use of int in max_burst socket option.
[  195.016481][ T5923] Use struct sctp_assoc_value instead
[  195.035024][ T5923] sctp: [Deprecated]: syz.3.310 (pid 5923) Use of int in max_burst socket option.
[  195.035024][ T5923] Use struct sctp_assoc_value instead
[  195.130901][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'.
[  195.136862][ T5925] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  196.122118][ T5934] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  196.133467][ T4301] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  196.136283][ T4301] Bluetooth: hci5: Injecting HCI hardware error event
[  196.140046][ T4301] Bluetooth: hci5: hardware error 0x00
[  196.395926][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  196.398041][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  196.422477][   T27] kauditd_printk_skb: 19 callbacks suppressed
[  196.422493][   T27] audit: type=1326 audit(276.492:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x7fc00000
[  197.234960][ T5940] input: syz1 as /devices/virtual/input/input9
[  199.171098][ T4311] Bluetooth: hci5: unexpected event for opcode 0x0000
[  199.182146][ T5973] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  199.211251][   T27] audit: type=1326 audit(279.062:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x7fc00000
[  199.217029][   T27] audit: type=1326 audit(279.062:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa5f4840c code=0x7fc00000
[  199.229171][   T27] audit: type=1326 audit(279.062:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x7fc00000
[  199.235808][   T27] audit: type=1326 audit(279.062:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x7fc00000
[  199.241465][   T27] audit: type=1326 audit(279.062:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x7fc00000
[  199.249210][   T27] audit: type=1326 audit(279.062:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x7fc00000
[  199.251037][ T4311] Bluetooth: hci5: Unknown advertising packet type: 0x7070
[  199.255259][ T4311] Bluetooth: hci5: Malformed LE Event: 0x0d
[  199.256134][   T27] audit: type=1326 audit(279.062:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x7fc00000
[  199.264630][   T27] audit: type=1326 audit(279.062:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x7fc00000
[  199.270768][   T27] audit: type=1326 audit(279.062:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x7fc00000
[  199.328093][ T5975] loop4: detected capacity change from 0 to 512
[  199.406613][ T5975] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  199.409865][ T5975] EXT4-fs (loop4): 1 truncate cleaned up
[  199.411427][ T5975] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  199.428254][ T4301] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  199.442450][ T5975] netlink: 'syz.4.324': attribute type 3 has an invalid length.
[  201.015249][ T5992] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  201.067155][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  201.575987][  T112] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  201.916781][  T112] usb 1-1: Using ep0 maxpacket: 32
[  202.450943][  T112] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.162841][ T6021] 9pnet_fd: Insufficient options for proto=fd
[  204.303441][  T112] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=a4.72
[  204.306051][  T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.308296][  T112] usb 1-1: Product: syz
[  204.309411][  T112] usb 1-1: Manufacturer: syz
[  204.310602][  T112] usb 1-1: SerialNumber: syz
[  204.353581][  T112] usb 1-1: config 0 descriptor??
[  204.505943][ T6024] netlink: 'syz.3.340': attribute type 3 has an invalid length.
[  204.596008][  T112] usb 1-1: unknown interface protocol 0xf, assuming v1
[  205.367784][  T112] usb 1-1: USB disconnect, device number 4
[  205.425365][ T5588] udevd[5588]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  205.429476][ T6038] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  208.938572][ T6071] netlink: 'syz.2.352': attribute type 3 has an invalid length.
[  208.946410][ T6071] netlink: 48 bytes leftover after parsing attributes in process `syz.2.352'.
[  209.823098][ T4301] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  209.825519][ T4301] Bluetooth: hci1: Injecting HCI hardware error event
[  209.829226][ T4311] Bluetooth: hci1: hardware error 0x00
[  209.881658][ T6071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.352'.
[  209.938156][ T6071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.352'.
[  209.955043][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'.
[  209.976800][ T6072] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  210.000073][ T6080] netlink: 'syz.0.353': attribute type 3 has an invalid length.
[  210.020554][ T6083] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  211.151620][   T27] kauditd_printk_skb: 59 callbacks suppressed
[  211.151634][   T27] audit: type=1326 audit(318.098:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.3.357" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x0
[  211.330004][ T6113] loop4: detected capacity change from 0 to 512
[  212.357207][ T4311] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  212.481731][ T6127] loop4: detected capacity change from 0 to 1024
[  212.517479][ T6127] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  212.597500][ T6127] EXT4-fs (loop4): shut down requested (2)
[  212.668911][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  212.765817][ T6133] batadv0: mtu less than device minimum
[  212.800399][ T6142] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 4, id = 0
[  213.007451][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'.
[  213.012142][ T6151] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  213.329189][ T6155] device vlan0 entered promiscuous mode
[  213.345607][ T6155] device veth0_vlan left promiscuous mode
[  213.409282][ T6164] loop4: detected capacity change from 0 to 512
[  213.455796][ T6164] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  213.463356][ T6164] EXT4-fs (loop4): 1 truncate cleaned up
[  213.469921][ T6164] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  213.492194][ T6155] device vlan0 left promiscuous mode
[  213.498549][ T6164] netlink: 'syz.4.373': attribute type 3 has an invalid length.
[  213.523575][ T6158] netlink: 104 bytes leftover after parsing attributes in process `syz.2.371'.
[  213.673891][   T27] audit: type=1326 audit(348.411:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.3.375" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x0
[  214.651151][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  217.213704][ T6212] netlink: 'syz.1.380': attribute type 9 has an invalid length.
[  218.384557][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.383'.
[  218.657878][ T6226] xt_TCPMSS: Only works on TCP SYN packets
[  219.593072][ T6234] netlink: 'syz.2.388': attribute type 3 has an invalid length.
[  219.698965][ T6191] netlink: 'syz.3.375': attribute type 10 has an invalid length.
[  219.715794][ T6191] 8021q: adding VLAN 0 to HW filter on device team0
[  219.741199][ T6191] bond0: (slave team0): Enslaving as an active interface with an up link
[  219.806577][ T6229] netlink: 'syz.0.387': attribute type 37 has an invalid length.
[  219.837424][ T6232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.387'.
[  221.944186][ T6252] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  221.947716][ T6252] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  221.950643][ T6252] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  222.420714][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.393'.
[  222.432391][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.396'.
[  223.189989][ T6272] xt_CT: No such helper "snmp_trap"
[  224.432221][ T6289] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  225.545021][ T6307] netlink: 'syz.0.406': attribute type 3 has an invalid length.
[  225.585132][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'.
[  226.789919][ T6327] netlink: 'syz.4.412': attribute type 12 has an invalid length.
[  227.899204][ T6338] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  228.580838][ T6327] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  228.653774][ T6344] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  229.150988][ T6350] device vlan2 entered promiscuous mode
[  229.163741][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'.
[  229.180081][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'.
[  229.183704][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'.
[  229.224992][ T6357] netlink: 'syz.0.420': attribute type 3 has an invalid length.
[  230.201596][ T6372] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  230.380329][ T6378] trusted_key: encrypted_key: master key parameter 'user' is invalid
[  230.428260][   T27] audit: type=1326 audit(419.888:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.427" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0945e68 code=0x0
[  232.989608][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'.
[  232.991889][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'.
[  233.009594][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'.
[  233.038903][ T6406] netlink: 'syz.0.434': attribute type 3 has an invalid length.
[  234.127003][ T6421] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  234.243271][ T4344] kernel write not supported for file /dsp (pid: 4344 comm: kworker/1:3)
[  235.774917][ T6408] loop4: detected capacity change from 0 to 40427
[  236.033229][ T6408] F2FS-fs (loop4): invalid crc value
[  236.063932][ T6408] F2FS-fs (loop4): Found nat_bits in checkpoint
[  237.574955][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'.
[  237.587861][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'.
[  237.590534][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'.
[  237.680132][ T6451] netlink: 'syz.2.447': attribute type 4 has an invalid length.
[  237.732534][ T6451] netlink: 'syz.2.447': attribute type 4 has an invalid length.
[  237.798745][ T6453] netlink: 'syz.3.449': attribute type 3 has an invalid length.
[  238.219002][ T6471] loop4: detected capacity change from 0 to 512
[  238.270398][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.452'.
[  238.289059][ T6474] dccp_invalid_packet: P.Data Offset(0) too small
[  238.361024][ T6471] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=4
[  238.364022][ T6471] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  238.378413][ T6471] EXT4-fs (loop4): mount failed
[  238.475196][ T6482] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  238.618095][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'.
[  238.621169][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'.
[  238.635710][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'.
[  238.640482][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'.
[  238.650532][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'.
[  238.653376][ T6490] loop4: detected capacity change from 0 to 512
[  238.655505][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'.
[  238.666870][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'.
[  238.673484][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'.
[  238.676262][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'.
[  238.678982][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'.
[  239.431273][ T6243] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  240.886294][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.893788][   T27] audit: type=1326 audit(471.541:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.1.457" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7345e68 code=0x0
[  241.455359][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.485926][ T6499] xt_time: unknown flags 0x18
[  245.375214][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  246.198226][ T6554] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  247.976309][ T6566] __nla_validate_parse: 33 callbacks suppressed
[  247.976326][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'.
[  247.980510][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'.
[  247.983068][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'.
[  250.426265][ T6591] netlink: 'syz.3.479': attribute type 3 has an invalid length.
[  250.693869][ T6594] 9pnet_fd: Insufficient options for proto=fd
[  252.368830][ T6602] loop4: detected capacity change from 0 to 4096
[  252.376502][ T6609] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  252.557080][ T6602] NILFS (loop4): invalid segment: Checksum error in segment payload
[  252.561125][ T6602] NILFS (loop4): trying rollback from an earlier position
[  256.210526][ T6602] NILFS (loop4): recovery complete
[  256.219157][ T6602] NILFS (loop4): error -4 creating segctord thread
[  256.332287][ T6630] netlink: 'syz.2.489': attribute type 10 has an invalid length.
[  256.426439][ T6630] team0: Port device netdevsim0 added
[  256.454634][ T6637] netlink: 180 bytes leftover after parsing attributes in process `syz.1.490'.
[  256.458056][ T6638] netlink: 'syz.2.489': attribute type 10 has an invalid length.
[  256.460978][ T6638] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  256.467351][ T6641] loop4: detected capacity change from 0 to 512
[  256.501753][ T6641] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  256.505438][ T6641] EXT4-fs (loop4): 1 truncate cleaned up
[  256.509692][ T6641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  256.564292][ T6641] netlink: 'syz.4.493': attribute type 3 has an invalid length.
[  256.614312][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.489'.
[  256.629240][ T6638] team0: Failed to send options change via netlink (err -105)
[  256.631488][ T6638] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  256.635718][ T6638] team0: Port device netdevsim0 removed
[  256.639734][ T6638] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  257.423108][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  259.324941][ T6657] netlink: 'syz.0.495': attribute type 9 has an invalid length.
[  259.332889][   T27] audit: type=1326 audit(529.546:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.1.504" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7345e68 code=0x0
[  259.352749][   T27] audit: type=1326 audit(529.934:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7345e68 code=0x7ffc0000
[  259.396676][   T27] audit: type=1326 audit(529.943:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7345e68 code=0x7ffc0000
[  259.779401][   T27] audit: type=1326 audit(530.063:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb7345e68 code=0x7ffc0000
[  259.987138][   T27] audit: type=1326 audit(530.063:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7345e68 code=0x7ffc0000
[  260.175387][   T27] audit: type=1326 audit(530.063:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7345e68 code=0x7ffc0000
[  260.303008][   T27] audit: type=1326 audit(530.266:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb7345e68 code=0x7ffc0000
[  260.309590][   T27] audit: type=1326 audit(530.266:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7345e68 code=0x7ffc0000
[  260.315966][   T27] audit: type=1326 audit(530.266:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7345e68 code=0x7ffc0000
[  260.561075][ T6673] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  263.548846][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  263.550745][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  263.586377][ T6683] loop4: detected capacity change from 0 to 512
[  264.253413][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.303708][ T6683] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  264.466244][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.531549][ T6683] EXT4-fs (loop4): 1 truncate cleaned up
[  264.533168][ T6683] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  264.550182][ T6683] netlink: 'syz.4.501': attribute type 3 has an invalid length.
[  265.331847][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  266.867905][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'.
[  268.391628][ T4346] kernel write not supported for file /dsp (pid: 4346 comm: kworker/0:7)
[  268.399109][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'.
[  268.456218][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'.
[  268.458728][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'.
[  268.474835][ T6736] loop4: detected capacity change from 0 to 512
[  268.481883][ T6739] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  268.483747][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'.
[  268.488449][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'.
[  268.491109][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'.
[  268.493864][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'.
[  268.496860][ T6736] EXT4-fs: Ignoring removed bh option
[  268.502818][ T6736] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  268.516201][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'.
[  268.522197][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'.
[  268.681229][ T6736] EXT4-fs (loop4): 1 truncate cleaned up
[  268.682893][ T6736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  269.883646][ T6754] netlink: 'syz.2.517': attribute type 4 has an invalid length.
[  270.074610][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  270.539905][ T6760] loop4: detected capacity change from 0 to 512
[  270.571742][ T6760] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  270.610595][ T6760] EXT4-fs (loop4): 1 truncate cleaned up
[  270.612137][ T6760] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  270.678257][ T6760] netlink: 'syz.4.520': attribute type 3 has an invalid length.
[  270.964784][ T6772] netlink: 'syz.1.524': attribute type 4 has an invalid length.
[  272.352292][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  272.441879][   T27] audit: type=1326 audit(542.653:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.525" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x0
[  273.226575][ T6794] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  273.443484][ T6795] loop4: detected capacity change from 0 to 512
[  273.472052][ T6795] EXT4-fs: Ignoring removed orlov option
[  273.494384][ T6795] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  273.596877][ T6795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002]
[  273.599421][ T6795] System zones: 1-12
[  273.608122][ T6795] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.528: casefold flag without casefold feature
[  273.660281][ T6795] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.528: missing EA_INODE flag
[  273.700017][ T6795] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.528: error while reading EA inode 12 err=-117
[  273.718940][ T6795] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.528: missing EA_INODE flag
[  273.780371][ T6795] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.528: error while reading EA inode 12 err=-117
[  273.800662][ T6795] EXT4-fs (loop4): 1 orphan inode deleted
[  273.802227][ T6795] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  273.870990][ T6795] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.528: Directory hole found for htree leaf block 0
[  273.889454][ T6795] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.528: Directory hole found for htree leaf block 0
[  273.913508][ T6795] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.528: Directory hole found for htree leaf block 0
[  273.931350][ T6795] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.528: Directory hole found for htree leaf block 0
[  273.942668][ T6795] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.528: Directory hole found for htree leaf block 0
[  275.287178][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  275.803141][   T27] audit: type=1326 audit(545.767:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.0.535" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f45e68 code=0x0
[  275.836959][ T6827] loop4: detected capacity change from 0 to 512
[  275.905331][ T6827] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  275.950500][ T6827] EXT4-fs (loop4): 1 truncate cleaned up
[  275.952008][ T6827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  276.099596][ T6838] netlink: 'syz.2.539': attribute type 3 has an invalid length.
[  276.165583][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  276.316750][ T6849] __nla_validate_parse: 12 callbacks suppressed
[  276.316766][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'.
[  276.321566][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'.
[  276.425195][ T6851] netlink: 'syz.4.540': attribute type 10 has an invalid length.
[  276.458489][ T6851] team0: Port device netdevsim0 added
[  276.460775][ T6856] netlink: 'syz.4.540': attribute type 10 has an invalid length.
[  276.463437][ T6856] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  277.150554][ T6856] team0: Failed to send options change via netlink (err -105)
[  277.152762][ T6856] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  277.156060][ T6856] team0: Port device netdevsim0 removed
[  277.159592][ T6856] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  277.297322][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.540'.
[  277.334062][ T6866] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  281.738252][ T6881] netlink: 'syz.4.547': attribute type 5 has an invalid length.
[  281.740444][ T6881] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.547'.
[  282.134560][ T6889] netlink: 44 bytes leftover after parsing attributes in process `syz.4.553'.
[  282.150591][ T6887] netlink: 'syz.1.552': attribute type 3 has an invalid length.
[  282.172129][ T6889] loop4: detected capacity change from 0 to 2048
[  282.235377][ T6890] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  282.998029][ T6889] [U] �KU���'.�h�
[  283.030327][ T6889] [U] ��Q�8@ q�מ�}���g��'����=ϼ����;��Um�.//TB����G�����o9���|�mK�B����>�ݙ���{/��W�R�5��W[�n!��åP;/^~�ͥǏ�?va�[���>s
[  283.034603][ T6889] [U] ��i���[�~�������3]i���fc��w�7�e��rj�x�=ʟ�ʯ�oC���gچu�o�di=��Ju�#]�..����q�\e���3�<WRE�5���C��‘��q�ƠC���a"��ѕu����yQhl-{�"�^x�s���������ʿ�X����F��T�\�����-k�N]��|��і�ί#��/����W::���#j}ֳ�u�I��Ы�3#�ǰz�?_/�T_�qZ_���?�w:)�1������ �w���|V���0������h��ח�o(��X�?_��� sA>L��}������q~~L?���t���h����#-?��wP�[~~?1��?�x���~��������#���p�[���|a~^�u����j�����sW���w�Wپ�9�m;sK=:���k�]��ճ��cؘ�7�?ٔM��?�v5-��l~k�|�e�Hەm1��
�H�c������j�gN�9�hL���O3�
[  283.069617][ T6889] [U] 7��q������?����-��j�va�����v��y�×Z�t����[3���'�{�鵟}�j����o�8s������Wǣ��I�-�Ro��M�&`�����N�#��s��SϞ:�����KK��yos�~o��}�s%�XK��e�
[  283.106005][ T6889] [U] ��e��b�pV��Y9;��>�V?~���T\ޮk��=��Z�d֜�-���em���~<�b��
[  283.122386][ T6889] [U] q��!��d����+������+�o���l_�q��!�����z��oK7�eJ׺,�;u[��ݩ��7a��A�?4f����O\��o4�{B�@��S��/�8����^�E���}����<?��7��������7�+?��7_�y��y�=����/�� g���a����*��XA��V���1R�}��_�wA���(��dA������
��?U0��.=�2���,>���G������� �\?{uߑ�~������s��!�:�ᘮ���t~�;��o������|L���������|`r�����a
[  283.130046][ T6889] [U] U6v�v�z��3Y>�����1~$Ƌ1��}1^Q�XG^���+���[��~�'ϟ�h'*���������=o�oP�[����

[  283.160150][ T6889] [U] 
[  283.161158][ T6889] [U] 
[  283.161945][ T6889] [U] 
[  283.162680][ T6889] [U] 
[  283.163578][ T6889] [U] 
[  283.164276][ T6889] [U] 
[  283.164977][ T6889] [U] 
[  283.178891][ T6904] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  283.192825][ T6904] Remounting filesystem read-only
[  284.035738][ T6889] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  284.047135][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.557'.
[  284.080972][ T6888] [U] 
[  284.157186][ T5382] NILFS (loop4): discard dirty page: offset=0, ino=6
[  284.159553][ T5382] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  284.162161][ T5382] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  284.175702][ T5382] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[  284.178522][ T5382] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[  285.306921][ T4301] Bluetooth: hci3: command 0x1003 tx timeout
[  285.312886][ T4311] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  286.221505][ T6942] netlink: 'syz.1.567': attribute type 3 has an invalid length.
[  286.886608][ T6951] loop4: detected capacity change from 0 to 4096
[  286.922380][ T6951] NILFS (loop4): invalid segment: Checksum error in segment payload
[  286.927233][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.572'.
[  286.929771][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'.
[  286.932329][ T6951] NILFS (loop4): trying rollback from an earlier position
[  286.971629][ T6951] NILFS (loop4): recovery complete
[  286.978887][ T6958] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  288.081933][   T27] audit: type=1326 audit(598.945:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.574" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x0
[  290.704126][ T6993] xt_CT: No such helper "snmp_trap"
[  291.026980][ T7001] loop4: detected capacity change from 0 to 512
[  291.792603][ T7001] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  291.796432][ T7001] EXT4-fs (loop4): 1 truncate cleaned up
[  291.797989][ T7001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  291.873687][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'.
[  291.992869][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  292.114434][ T7019] loop4: detected capacity change from 0 to 512
[  292.972480][ T7022] netlink: 'syz.0.585': attribute type 4 has an invalid length.
[  293.421455][ T6636] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  293.701772][   T27] audit: type=1326 audit(632.282:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.588" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7345e68 code=0x0
[  293.955511][ T7035] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  293.962247][ T7035] netlink: 'syz.3.587': attribute type 5 has an invalid length.
[  293.964609][ T7035] netlink: 212884 bytes leftover after parsing attributes in process `syz.3.587'.
[  296.575367][ T7055] loop4: detected capacity change from 0 to 512
[  297.316231][ T7058] xt_CT: No such helper "snmp_trap"
[  297.542613][ T7055] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  297.546530][ T7055] EXT4-fs (loop4): 1 truncate cleaned up
[  297.548084][ T7055] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  297.995572][   T27] audit: type=1326 audit(650.246:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.3.598" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x0
[  299.749064][   T27] audit: type=1326 audit(651.658:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  299.801277][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  299.823246][   T27] audit: type=1326 audit(651.658:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  299.830705][   T27] audit: type=1326 audit(651.667:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  299.841772][   T27] audit: type=1326 audit(651.667:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  299.858421][   T27] audit: type=1326 audit(651.667:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  299.872681][ T7086] futex_wake_op: syz.3.603 tries to shift op by 32; fix this program
[  299.876312][   T27] audit: type=1326 audit(651.667:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  299.895875][   T27] audit: type=1326 audit(651.667:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  299.901836][   T27] audit: type=1326 audit(651.667:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86945e68 code=0x7ffc0000
[  299.975003][ T7089] IPv6: NLM_F_CREATE should be specified when creating new route
[  300.889870][ T7096] loop4: detected capacity change from 0 to 128
[  300.899174][ T7096] ext4: Unknown parameter 'hash'
[  301.026955][ T7087] netlink: 'syz.1.601': attribute type 11 has an invalid length.
[  301.072398][ T6636] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  302.832186][ T7123] xt_CT: No such helper "snmp_trap"
[  304.527786][ T7136] loop4: detected capacity change from 0 to 512
[  304.697585][ T7136] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  304.702833][ T7136] EXT4-fs (loop4): 1 truncate cleaned up
[  304.781861][ T7136] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  304.921322][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  305.888436][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'.
[  308.978423][ T7179] loop4: detected capacity change from 0 to 512
[  309.015761][ T7179] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  309.019974][ T7179] EXT4-fs (loop4): 1 truncate cleaned up
[  309.021515][ T7179] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  309.082069][ T7179] netlink: 'syz.4.626': attribute type 3 has an invalid length.
[  310.786602][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  310.843378][ T7203] loop4: detected capacity change from 0 to 512
[  311.877786][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.633'.
[  312.134926][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'.
[  312.141238][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  312.144942][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  312.147093][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  312.156871][ T7224] device macsec0 left promiscuous mode
[  315.339131][ T7233] netlink: 'syz.1.638': attribute type 11 has an invalid length.
[  315.611837][ T7238] tipc: Started in network mode
[  315.613456][ T7238] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  315.617570][ T7238] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  315.622890][ T7238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.626404][ T7243] loop4: detected capacity change from 0 to 512
[  315.629476][ T7242] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  315.668752][ T7238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.702078][ T7243] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  315.726065][ T7243] EXT4-fs (loop4): 1 truncate cleaned up
[  315.727773][ T7243] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  315.749020][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'.
[  315.927105][ T7250] af_packet: tpacket_rcv: packet too big, clamped from 4192 to 3952. macoff=96
[  316.882880][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  316.898776][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'.
[  316.945911][ T7261] 8021q: adding VLAN 0 to HW filter on device bond1
[  316.954536][ T7261] bond0: (slave bond1): Enslaving as an active interface with an up link
[  317.910360][ T7267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  318.017360][ T7277] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  318.146617][ T7281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.651'.
[  319.378237][ T7290] i2c i2c-0: Invalid block write size 34
[  321.567929][   T27] audit: type=1107 audit(770.000:339): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  321.741034][ T7310] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  321.838894][ T7314] futex_wake_op: syz.2.662 tries to shift op by 32; fix this program
[  324.895264][ T4301] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  324.902878][ T4301] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  324.906065][ T4301] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  324.909190][ T4301] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  324.912237][ T4301] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  324.914431][ T4301] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  325.985352][ T7350] loop4: detected capacity change from 0 to 512
[  326.034108][ T7350] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  326.043228][ T7350] EXT4-fs (loop4): 1 truncate cleaned up
[  326.045054][ T7350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  327.032239][   T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.071823][ T7363] netlink: 32 bytes leftover after parsing attributes in process `syz.0.672'.
[  327.079448][ T5382] EXT4-fs (loop4): unmounting filesystem.
[  327.114526][ T4474] ------------[ cut here ]------------
[  327.116369][ T4474] WARNING: CPU: 0 PID: 4474 at net/mac80211/ibss.c:500 ieee80211_ibss_csa_beacon+0x518/0x5b0
[  327.119099][ T4474] Modules linked in:
[  327.120109][ T4474] CPU: 0 PID: 4474 Comm: kworker/u4:10 Not tainted 6.1.106-syzkaller #0
[  327.122425][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  327.125259][ T4474] Workqueue: phy10 ieee80211_iface_work
[  327.126893][ T4474] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  327.129232][ T4474] pc : ieee80211_ibss_csa_beacon+0x518/0x5b0
[  327.131073][ T4474] lr : ieee80211_ibss_csa_beacon+0x514/0x5b0
[  327.132822][ T4474] sp : ffff80001e527260
[  327.133991][ T4474] x29: ffff80001e527280 x28: 1fffe0001e2fa2b5 x27: dfff800000000000
[  327.136320][ T4474] x26: ffff0000f17d2adf x25: ffff0000f19c0760 x24: 0000000000000000
[  327.138666][ T4474] x23: ffff0000f17d15a8 x22: ffff0000f17d1b08 x21: 0000000000000002
[  327.141037][ T4474] x20: ffff0000f17d0c80 x19: ffff80001e527520 x18: ffff80001e526ea0
[  327.143381][ T4474] x17: ffff800018a97000 x16: ffff8000084fa048 x15: 0000000000000002
[  327.145826][ T4474] x14: 0000000000000003 x13: ffff0000d9929bc0 x12: 0000000000100000
[  327.148180][ T4474] x11: 0000000000001e89 x10: ffff80002c0c8000 x9 : ffff800011b48154
[  327.150614][ T4474] x8 : 0000000000001e8a x7 : 0000000000000000 x6 : 0000000000000000
[  327.152909][ T4474] x5 : 0000000000000020 x4 : 0000000000000000 x3 : 0000000000000000
[  327.155326][ T4474] x2 : 0000000000000006 x1 : ffff8000123dc680 x0 : 00000000ffffffea
[  327.157628][ T4474] Call trace:
[  327.158561][ T4474]  ieee80211_ibss_csa_beacon+0x518/0x5b0
[  327.160224][ T4474]  ieee80211_channel_switch+0x125c/0x21b4
[  327.161885][ T4474]  ieee80211_ibss_process_chanswitch+0x9f4/0xd68
[  327.163684][ T4474]  ieee80211_ibss_rx_queued_mgmt+0x11ec/0x27a0
[  327.165448][ T4474]  ieee80211_iface_work+0x5c4/0xa90
[  327.166919][ T4474]  process_one_work+0x7ac/0x1404
[  327.168464][ T4474]  worker_thread+0x8e4/0xfec
[  327.169812][ T4474]  kthread+0x250/0x2d8
[  327.170961][ T4474]  ret_from_fork+0x10/0x20
[  327.172243][ T4474] irq event stamp: 2419402
[  327.173476][ T4474] hardirqs last  enabled at (2419401): [<ffff8000081c715c>] __local_bh_enable_ip+0x230/0x470
[  327.176588][ T4474] hardirqs last disabled at (2419402): [<ffff800012285e14>] el1_dbg+0x24/0x80
[  327.179151][ T4474] softirqs last  enabled at (2419400): [<ffff80001198f034>] cfg80211_get_bss+0x708/0xb34
[  327.181979][ T4474] softirqs last disabled at (2419398): [<ffff80001198ea74>] cfg80211_get_bss+0x148/0xb34
[  327.184786][ T4474] ---[ end trace 0000000000000000 ]---
[  327.188134][ T4311] Bluetooth: hci3: command tx timeout
[  327.264793][   T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.282920][ T4474] wlan1: Trigger new scan to find an IBSS to join
[  327.322538][ T7373] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  327.395937][   T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.402626][ T7331] chnl_net:caif_netlink_parms(): no params data found
[  327.433422][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.435812][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.438343][ T7331] device bridge_slave_0 entered promiscuous mode
[  327.442937][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.445022][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.447991][ T7331] device bridge_slave_1 entered promiscuous mode
[  327.523724][   T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.530581][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  327.535224][ T7331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  327.557052][ T7331] team0: Port device team_slave_0 added
[  327.560713][ T7331] team0: Port device team_slave_1 added
[  327.573381][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_0
[  327.576135][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.582804][ T7331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  327.593253][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  327.595513][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.603020][ T7331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.664277][ T7331] device hsr_slave_0 entered promiscuous mode
[  327.706694][ T7331] device hsr_slave_1 entered promiscuous mode
[  327.748824][ T7331] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  327.750910][ T7331] Cannot create hsr debugfs directory
[  328.307182][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.909437][ T7331] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  328.974667][ T7331] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  329.096621][ T7331] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  329.170926][ T7331] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  329.262927][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.439589][ T4311] Bluetooth: hci3: command tx timeout
[  329.527797][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  329.529539][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  329.569687][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  329.572292][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  329.578930][ T7331] 8021q: adding VLAN 0 to HW filter on device team0
[  329.585067][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  329.588013][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  329.591043][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.593154][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.667026][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  329.669893][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  329.673046][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  329.675816][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.678025][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.681296][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  329.695436][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  329.698599][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  329.705167][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  329.708276][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  329.712028][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  330.138969][ T7331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  330.141909][ T7331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  330.146600][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  330.149409][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  330.152246][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  330.155862][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  330.158520][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  330.161848][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  330.236458][   T55] device hsr_slave_0 left promiscuous mode
[  330.284142][   T55] device hsr_slave_1 left promiscuous mode
[  330.381436][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.384180][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.386287][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.388772][   T55] device bridge_slave_1 left promiscuous mode
[  330.390471][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.447460][   T55] device bridge_slave_0 left promiscuous mode
[  330.450611][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.599681][   T55] device veth1_macvtap left promiscuous mode
[  330.601405][   T55] device veth0_macvtap left promiscuous mode
[  330.603076][   T55] device veth1_vlan left promiscuous mode
[  330.604611][   T55] device veth0_vlan left promiscuous mode
[  331.499189][   T55] bond0 (unregistering): (slave bond1): Releasing backup interface
[  331.542741][   T55] bond1 (unregistering): Released all slaves
[  331.692492][ T4301] Bluetooth: hci3: command tx timeout
[  333.957007][ T4301] Bluetooth: hci3: command tx timeout
[  334.081667][   T55] team0 (unregistering): Port device team_slave_1 removed
[  334.305493][   T55] team0 (unregistering): Port device team_slave_0 removed
[  334.521023][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.802773][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  336.897138][   T55] bond0 (unregistering): (slave team0): Releasing backup interface