last executing test programs:

29.40392969s ago: executing program 3 (id=324):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000600)=0x2, 0x4)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r1, r1, 0x2)
syz_io_uring_setup(0x791f, &(0x7f0000000440)={0x0, 0xa5f9, 0x1, 0x1, 0x23c}, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000100)=0x2)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f0000000080)={'\x00', 0x8, 0x0, 0x7})
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
r5 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000140)={0x0, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000300)={r6})
r7 = socket(0x2, 0x80805, 0x0)
listen(r7, 0x8)
sendmmsg$inet_sctp(r7, &(0x7f00000009c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100060d13d23e94111d22f885d482f01ec0807000000000000000000ff0200000000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="f00000001a0000000000000000000000000000190000000001ffff00000000000000000000020000005870701c37ed4a9b2aee085e306da7102262cbc6b6d9cd19d25f92cdc0878328621ca39846b7eeea0f5145c6ff5c0503e4e404d9df92e9342a164a50197aace202aa508187e4a296f7876d5aad631443e6f0934650", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000040000000b40000000000000200000000000000010000007ffffffe0000000000000000050000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000053500000a0002007000000000000000"], 0xf0}}, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @private=0xa010102}, 0x10)
socket$netlink(0x10, 0x3, 0x8000000004)
socket(0x10, 0x803, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80)
getdents64(r9, &(0x7f0000000a00)=""/4123, 0x101b)
recvfrom$rxrpc(r9, &(0x7f0000000340)=""/244, 0xf4, 0x40, 0x0, 0x0)

29.370178788s ago: executing program 3 (id=325):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'})
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1d, r2})

29.293848061s ago: executing program 3 (id=327):
socket(0x28, 0x1, 0x2)
r0 = socket(0x10, 0x803, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000023c0)=@delchain={0x82c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x800, 0x2, [@TCA_BPF_ACT={0x7fc, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x144, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xf4, 0x8, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xa3b7, 0x9, 0xb, 0x7}, {0x28a3, 0x4, 0x4, 0xfffffffa}]}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x0, 0x0, 0x9, 0xff}, {0xb, 0xf6, 0x5, 0xfffffffc}, {0x401, 0xb0, 0x32}, {0x6092, 0x70, 0x6, 0x1ff}]}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x464, 0x9, 0x0, 0x0, {{0xb}, {0x410, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5bb5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0x3, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x2, 0x4, 0x6, 0x1000, 0x3, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x5, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x10, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x6, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x5, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x289f, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0xfffffffd, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x4, 0x0, 0x421, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6155, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0x7, 0xa, 0x80000000, 0x2797, 0x4, 0x2, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x4, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0x29, 0x6, "94cedea66d85e9b70c476ee3b07ad24452af4725e6123a5351d4a5987f8df95171c60c0a3c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x82c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$chown(0x4, r2, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'macvtap0\x00', {0x2}, 0x9})

29.254759492s ago: executing program 3 (id=330):
r0 = syz_io_uring_setup(0x1c9c, &(0x7f0000000400)={0x0, 0xdfb3, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000001200)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaa455180e4b7c003, 0x1})
r4 = socket(0x2, 0x80805, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000140)={0x4, 0xc, 0x100, "8857a7848a93fe27a493d8662e5a19a407fae4af4f25f92ff86dea96ad595380", 0x79731c})
write(r5, &(0x7f0000001140)="140000081a004f7fb3e45f2024d2f1c9fb470000d48ccba43befc1be91ee0d73ca037b3a36161a72f75aa6da42efacf681cd0edb4e5af4f64fe4dd12a2ae8bff2dc774ed9f9475c8ffd6bb30a810e1b75ca8bbc22f2bd4c047274bff934f15e8f3c8a09a20d7a9dcd03d5fbbbd22968a60b0ba569547eda8853283f39ebfdfa492e1a4b56d8b1e4c38f5c331", 0x8c)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112b9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
open_by_handle_at(r8, &(0x7f0000000200)=@raw={0x1c, 0xf8, {"00000000fb19020100"/25}}, 0x0)
ioctl$IOMMU_VFIO_SET_IOMMU(r8, 0x3b66, 0x1)
write$P9_RFLUSH(r7, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7)
recvmmsg(r5, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e}, 0x8}], 0x32, 0x10122, 0x0)

28.102020097s ago: executing program 3 (id=354):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xfb, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x51, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000600), 0x511002, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1f, 0x7, 0x9, 0x8, 0xec0e, r1, 0xfffffff7, '\x00', r0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x0, @value=r1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x31, 0x0, 0x0, 0x1e00, 0xc, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x407ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xfb, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x51, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000600), 0x511002, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1f, 0x7, 0x9, 0x8, 0xec0e, r1, 0xfffffff7, '\x00', r0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x0, @value=r1}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x31, 0x0, 0x0, 0x1e00, 0xc, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x407ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

28.091794375s ago: executing program 3 (id=356):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x5, 0x0, 0x0) (async, rerun: 32)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x146) (rerun: 32)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)='5', 0x1}], 0x1, 0x7ffffe, 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2810000, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2)
close(r1)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000004500), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)

27.138198943s ago: executing program 2 (id=368):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, r1, 0x3000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000400)=0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x8}}, 0x0, 0x0, 0x0, 0x4, 0x94}, &(0x7f00000001c0)=0x9c)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0]}, &(0x7f00000002c0)=0x24)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={r4, 0x4, 0x4, 0x5, 0xfff8, 0x6, 0x6, 0x2bf22254, {r5, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x2, 0x0, 0x401, 0x0, 0x5}}, &(0x7f00000003c0)=0xb0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket$kcm(0x11, 0x200000000000002, 0x300)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000001300)=r9, 0x4)
prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x8, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$SIOCGETVIFCNT(r10, 0x89e0, &(0x7f00000001c0)={0x1})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000040000000000000000100000000000000", @ANYRES32, @ANYBLOB="000000000080000000000000000000ee8ed51c84482ac500"/36])
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000f40)={'ipvlan0\x00', &(0x7f0000000e40)=@ethtool_drvinfo={0x3, "ad2d53b155f55222074ac545b0b526834451f5c63771cddd30b1de1aee81de2a", "7d774b76005c8846835ae47ff6ba275800", "07ffda7e8037293db8c178f1f44bc1156e55e87a9c45eef2eef7630542683565", "70df1710d3518991326dbd966869e5a5a02f091c53bc8045071241d866110bdb", "c6eda83fa7ff6dedb263ae5efc60938baa18c9acce190528f7c8b31464be1e81", "183f19e71e9dc3962aa67400", 0x0, 0x0, 0x8}})

26.19113411s ago: executing program 2 (id=376):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES64, @ANYBLOB="0100001000"/18, @ANYRES32=r1, @ANYBLOB="1800be030000000000000800bc00000006000500d9000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r2 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$smackfs_change_rule(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='^! syz rwab r'], 0x10)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = fanotify_init(0x2, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
fanotify_mark(r3, 0x1, 0x8001009, r4, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x62}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54010000100001002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008200200140003006e657464657673696d300000000000000c011680980001800c00070006000000030000000c000700bafbffff"], 0x154}}, 0x0)

25.266833565s ago: executing program 2 (id=391):
syz_emit_ethernet(0x46, &(0x7f00000008c0)=ANY=[], 0x0) (async, rerun: 32)
quotactl$Q_QUOTAON(0xffffffff80000101, 0x0, 0x0, 0x0) (async, rerun: 32)
socket$inet6(0xa, 0x5, 0x0) (async)
chdir(0x0) (async)
r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x2e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

25.239205417s ago: executing program 2 (id=392):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210080, &(0x7f0000000400)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x13}}, {@abort}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$eJzs3c1rHOUfAPDvbHb7/vs1hVKsiBR6sFK7aRJfKnioR9FiQT3XkGxDyaZbspvSxILtwV68SBFELIh3vXvwULx49K8oaKFICQp6WZnNbLJpNslmszFp9/OBSZ5nZnafeeaZ78Mz++wyAfStE+mfXMTxiPgiiTjcsi0f2cYTi/stPL45ni5J1Osf/JFEkq1r7p9k/w9mmeci4ufPIk7nVpdbnZufGiuXSzNZfqg2fW2oOjd/5sr02GRpsnR1ZHT03GujI2++8XrP6vryxb++fv/+O+c+P7nw1Q8Pj9xN4nwcyra11mNT9q7I3WrNnKjXs3NSiPNPvGy4q8J2r2SnD4CuDGRxXoiI44XDhWbUA8++TyOiDvSpZJPxv1d/Ac+I5jigeW/f9X3wU+rR24s3QKvrn1/8bCT2Ne6NDiwkK+6M0vvdwR6Un5bx4+/37qZLbOVzCIBNunU7Is7m86v7vyTr/7p3toN9nixD/wf/nfvp+OeVduOf3NL4J9qMfw62id1ubBz/uYc9KGZN6fjvrbbj36VJq8GBLPe/xpivkFy+Ui6lfdv/I+JUFPam+fXmc84tPKivta11/JcuafnNsWB2HA/zK+eYYmKsNraVOrd6dDvi+bbj32Sp/ZM27Z+ej486LONY6d6La23buP7bq/5dxEtt2395RitZf35yqHE9DDWvitX+vHPs17XKb1//X37ahqq2lbb/gfXrP5i0ztdWN1/Gt/v+Ka21rdvrf0/yYSO9J1t3Y6xWmxmO2JO8t3r9yPJrm/nm/mn9T51cv/9rd/3vj4iPO6z/naPfv9B9/bdXWv+JTbX/5hMP3v3km7XK76z9X22kTmVrOun/Oj3ArZw7AAAAAAAA2G1yEXEoklwx9mXpXK5YXPx+x9E4kCtXqrXTlyuzVyei8VvZwSjkmjPdh1u+DzGcfR+2mR95Ij8aEUci4suB/Y18cbxSntjpygMAAAAAAAAAAAAAAAAAAMAucXDp9/+x4vf/qd8GdvrogG2XX3z+N9CHNnzkfy+e9ATsShvGP/DMEv/Qv8Q/9C/xD32pMcUn/qF/iX/oX+If+pf4BwAAAAAAAAAAAAAAAAAAAAAAAAAAgJ66eOFCutQXHt8cT/MT1+dmpyrXz0yUqlPF6dnx4nhl5lpxslKZLJeK45Xpjd6vXKlcGx6J2RtDtVK1NlSdm780XZm9Wrt0ZXpssnSp5DnjAAAAAAAAAAAAAAAAAAAAsFp1bn5qrFwuzfQgUSiXS7mI6GTniB4V+tQl/t7y+6Ttdivf2XnenkQSy2vyu+KsSvQ6sdM9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs+zcAAP//MUwypA==")
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$ptp(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
unshare(0x26020480)
r1 = userfaultfd(0x801)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x3, 0xc, 0x6})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r3, &(0x7f0000006380)={0x1f, 0x4, @none, 0x0, 0x3}, 0xe)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a3023b28ca4d2f2458016542daa845f30a2ece1e75f1fc0100f41e4de6256109383664418dcfbb522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r4, 0xe4772000)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0x400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000180), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c)
r7 = socket$netlink(0x10, 0x3, 0xa)
writev(r7, &(0x7f0000000300), 0x0)
syz_clone(0x21000011, 0x0, 0x0, 0x0, 0x0, 0x0)

24.956091059s ago: executing program 2 (id=399):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00e7fbdeffb78a4ce8004b33f5daadfe816405fbada8418f44ac43d1da5da19b59383b58e2850e4c9e41f86fc9fced5031c1fb4e87dc267d2c4e6bb682963b2bdecb5616f5c099001d66c543c26cc9842e993116fac253f2cb42fa6712c1ae9e064ad93cb6c66b21bcfa6ec2fff308edd467badf90ac3ef65723a990474187b738f8f93598694125cf1f2b455877ebea83e5eeab1d5a5eebad70c725926b874453d19480a52dcb7212fde03182a8088925aab1258365", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0xfff, 0x48080)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000040)={0x7, {"679fe5d6366e6c8c3a66ad6bb73b2a77", "4c4677a042d17af41acf89fcff49edf6", "2337561c1f2b222f40c0c6a6af50561a"}, 0x933})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000080000007b0a00ff000000001d0a000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="10000000000000a73b9e74eb97288c009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)

24.925153245s ago: executing program 0 (id=400):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket(0x23, 0xa, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='algo=zstd \"', 0xb)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb})
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})

24.412926811s ago: executing program 2 (id=402):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x52, 0x6, 0x4, 0xa4, 0x16, @remote, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1, 0x10, 0xffffff7f, 0x7f}}) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x1ff, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x24000800) (async)
r3 = io_uring_setup(0x6ed6, &(0x7f00000004c0)={0x0, 0xbf57, 0x40000, 0x2, 0x26e})
io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r3, 0x0, 0x0, 0x8, 0x3, 0x1}, 0x1)
syz_emit_ethernet(0xca, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@lsrr={0x83, 0x3}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback=0x7f00002f}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)

24.347950623s ago: executing program 32 (id=402):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x52, 0x6, 0x4, 0xa4, 0x16, @remote, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1, 0x10, 0xffffff7f, 0x7f}}) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x1ff, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x24000800) (async)
r3 = io_uring_setup(0x6ed6, &(0x7f00000004c0)={0x0, 0xbf57, 0x40000, 0x2, 0x26e})
io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r3, 0x0, 0x0, 0x8, 0x3, 0x1}, 0x1)
syz_emit_ethernet(0xca, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@lsrr={0x83, 0x3}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback=0x7f00002f}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)

23.76743596s ago: executing program 0 (id=409):
r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000111401002abd7000fedbdf2508004b"], 0x20}, 0x1, 0x0, 0x0, 0x24008855}, 0x40000c0)

23.594341542s ago: executing program 0 (id=411):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd25, 0x25dfdbfd, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x480c0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x6f}, [@ldst={0x5}]}, 0x0, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd25, 0x25dfdbfd, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x480c0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x6f}, [@ldst={0x5}]}, 0x0, 0x5}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)

23.55496795s ago: executing program 0 (id=413):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844b100e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000280)=""/59, 0x5e)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
sendmmsg$inet6(r2, 0x0, 0x0, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0)
write(r4, &(0x7f0000000100)='deny', 0x4)
syz_emit_ethernet(0xfc0, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{}, &(0x7f0000000040), 0x0}, 0x20)
readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/69, 0xe56}], 0x10000000000000b7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r5 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf58, 0x0, 0x5, 0x202}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000))
syz_io_uring_setup(0x2508, &(0x7f0000000000)={0x0, 0x4365, 0x2c, 0x2, 0x35e, 0x0, r5}, 0x0, 0x0, 0x0)
r6 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e, 0x0, r5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000001400)=[{&(0x7f0000000640)=""/220, 0xdc}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

23.159349916s ago: executing program 0 (id=414):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000400)={0x0, 0xed83, 0x400, 0x2, 0x2e3}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f00000003c0)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000000480)=""/222, 0xde}], &(0x7f00000005c0)=[0x200, 0x0, 0x6], 0x2}, 0x20)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0, 0x44}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000280)}], 0x7}}], 0x1, 0x4008c50)
io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000380)=0xd, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)

22.642896799s ago: executing program 0 (id=417):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='l'], 0x9, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003181a08, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000340))
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x90}}, 0x4000080)
sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f0000002bc0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x2000009, @remote, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000680)="e2", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf03}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000180)="cb09", 0x2}], 0x1, &(0x7f0000002c80)=ANY=[@ANYBLOB="1400"], 0x18}}], 0x2, 0x14)
shutdown(r7, 0x1)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x85, &(0x7f0000000200)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa7614a93ec085d1d3caf76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808fdd3b04603f0cd79529f6d4b86ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec33"}, &(0x7f0000000500)=0x90)
fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x5c, 0x1)

22.577182488s ago: executing program 33 (id=417):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='l'], 0x9, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003181a08, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000340))
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x90}}, 0x4000080)
sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f0000002bc0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x2000009, @remote, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000680)="e2", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf03}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000180)="cb09", 0x2}], 0x1, &(0x7f0000002c80)=ANY=[@ANYBLOB="1400"], 0x18}}], 0x2, 0x14)
shutdown(r7, 0x1)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x85, &(0x7f0000000200)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa7614a93ec085d1d3caf76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808fdd3b04603f0cd79529f6d4b86ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec33"}, &(0x7f0000000500)=0x90)
fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x5c, 0x1)

12.022313353s ago: executing program 34 (id=356):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x5, 0x0, 0x0) (async, rerun: 32)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x146) (rerun: 32)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)='5', 0x1}], 0x1, 0x7ffffe, 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2810000, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2)
close(r1)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000004500), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)

3.114560795s ago: executing program 4 (id=639):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000003100)=0x15, 0x4) (async, rerun: 64)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) (rerun: 64)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
shmget$private(0x0, 0x2000, 0x80, &(0x7f0000001000/0x2000)=nil) (async, rerun: 32)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x6b, 0x0}, 0x10) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4048004) (async)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
recvmmsg$unix(r7, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f00000003c0)=""/270, 0x10e}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/253, 0xfd}], 0x5}}], 0x1, 0x0, 0x0) (async)
write(r7, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
getsockopt$llc_int(r7, 0x10c, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0xd, 0x6, {<r8=>0xffffffffffffffff}, {0xee01}, 0x2, 0x2})
sched_setscheduler(r8, 0x6, &(0x7f0000000200)=0x2) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={<r9=>0x0, 0x46, "8704f50cff07f618d562284f354618e0cff555f51346fd2f8570afa4c01d3235430c2c4019f1766c0db3476dbe5f27b23ee93d83c373d6e013f49ab7ad5e20de0c8dad7c4832"}, &(0x7f0000000080)=0x4e)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000000c0)={r9, @in={{0x2, 0x4e21, @private=0xa010100}}}, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b19, &(0x7f00000003c0)={'wlan0\x00'})

3.089526236s ago: executing program 7 (id=642):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804c10, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1232, &(0x7f0000001840)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x3, 0x10}, 0xc)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
write$P9_RSETATTR(r1, &(0x7f0000000140)={0x7, 0x1b, 0x7}, 0x7)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x680180, 0xb0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r4, &(0x7f00000004c0)='./file0\x00', 0x2)

2.205261847s ago: executing program 4 (id=646):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x1800, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x3, 0x6) (async)
ioctl$MEMGETBADBLOCK(r1, 0x40084d0b, &(0x7f0000000000)=0x8001)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3010008, &(0x7f0000000140), 0x2, 0x557, &(0x7f0000001240)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, <r6=>0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, <r7=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000280)={0x20, r7, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1})
ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000300)={0x8, r7}) (async)
ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8, r6}) (async)
ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r5, 0x1c, &(0x7f00000003c0)=""/28})
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000001840)={0x28, 0x1, r5, r8, 0x0, 0x0, 0x0, 0x76, &(0x7f00000017c0)="975fa8e88dcb5e97425a7863d609eb7dc34f4ed050839089673930dbc363044ac149655694c58a7bb21d4a7c7429f888215024483597c1699da259be42db88103534fbf82035d1f201f41aefadfd8c6137defd1d49f06a7bb93a549d62f99363292596aa57a8faa5b58b8ffac08c6395bf02bcc1b847"})
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async)
sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0)

2.089782443s ago: executing program 5 (id=647):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x4, 0x800, 0x1, 0x1aa2, 0xc, 0x1}}, {0x6, 0x2, [0x2]}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)
r2 = accept4(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000100)=0x80, 0x800)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={<r3=>0x0, 0x8, 0x3, [0x4, 0x400, 0xff]}, &(0x7f0000000200)=0xe)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000300)=0x84)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xd2, &(0x7f0000000040)={[{@noauto_da_alloc}, {@bh}, {@block_validity}, {@noblock_validity}]}, 0x3, 0x54e, &(0x7f0000000240)="$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")
symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0)
unshare(0x6020400)
ioctl$AUTOFS_IOC_CATATONIC(r6, 0xc0089364, 0x1000000000000)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x2, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x24, 0x12, 0x1, 0x0, [{@empty, 0x4248}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x457d7800}, {@multicast2, 0x7}, {@private=0xa010101, 0x7}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)

2.088688087s ago: executing program 4 (id=648):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0xc2ed, 0x8, 0x5, 0x388}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x62ad, 0x200, 0x0, 0x55}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xae50, 0x1, 0x0, 0x2e2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3fdf, 0x2, 0x0, 0x1d3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c00, 0x80, 0x3, 0x169}, <r1=>0xffffffffffffffff}], 0x4, &(0x7f0000003500)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x4, 0xf87, 0x0, &(0x7f0000002500)=@buf_512="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"}}, &(0x7f0000003580))
mmap$IORING_OFF_SQ_RING(0x0, 0x550, 0x0, 0x80010, r1, 0x0)
syz_open_dev$vim2m(&(0x7f0000000280), 0x40003, 0x2)
socket$inet(0xa, 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = fsmount(0xffffffffffffffff, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r5, r6, 0x16, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000600)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x8000000000000001, 0x1, 0x2, 0xcc62, 0x9], 0x0, 0x0}, 0x78)
msgget(0x1, 0x501)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a00000000000061107800000000001800000000000000000000000000000095000000000000002eb2c1c2f17a3eee4cfa6261abad1d398fd465e3b08f8b3f983e99e09e8419c0bfd06da29f498f77594385783f7a73a4b3c82821d56a5c3f11f79b5747f92c3374a7"], 0x0}, 0x94)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f0000000a40)=ANY=[@ANYBLOB="1803fd000300007f2cfc40ca9c9378de22d42e28fb77340800ff00000000000000040000869374fbe0423b436bd9c2d12b009b4635e63c01d9be8fe5168497e0b9ced872965b0515", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0910000000000055090100000001569500000000000000180100002020642500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b5020000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}}], 0x1, 0x4008040)
r9 = socket$inet(0x2, 0xa, 0x200000)
ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @local}})
socket$netlink(0x10, 0x3, 0x0)

2.088411879s ago: executing program 7 (id=649):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x3, 0xfffffffd}, {0xfffffffe}]}, @fwd, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0xf54, 0x0, r0})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x0, 0x26}, 0x28)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f00000000c0)={[{@dax_never}]}, 0x0, 0x248, &(0x7f0000000bc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0)
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
unshare(0x22020400)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000)=0x20, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005dc0)={@ifindex, 0x26, 0x1, 0x2, 0x0, 0xfffffffffffffeb2, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94)

2.004251448s ago: executing program 5 (id=650):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000100), &(0x7f0000000200)=0x4)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r3 = gettid()
r4 = syz_open_procfs(r3, &(0x7f0000000040)='timerslack_ns\x00')
write$binfmt_format(r4, &(0x7f0000000180)='1\x00', 0x2)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0})
r6 = dup3(r5, r0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x7}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x15}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

1.586649857s ago: executing program 7 (id=653):
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0082, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c)
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x586, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x26, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x12, 0x0, @gue={{0x2, 0x1, 0x1, 0x81, 0x0, @val=0x80}, '?c'}}}}, 0x34)

1.585738759s ago: executing program 5 (id=654):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1, @ANYBLOB="010800040000000000000b00000300000000", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030005ac0f000500090001"], 0x58}}, 0x0) (async)
landlock_create_ruleset(&(0x7f0000000100)={0x12c0, 0x8, 0x2, 0x10400, 0xc, 0x1}, 0x30, 0x2) (async)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000780), 0x0, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x2}], 0x18, 0x40080}, 0x4048094)

1.56053751s ago: executing program 5 (id=656):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r1, 0x4)
listen(r1, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0)
r4 = syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000300)={<r5=>0x0, 0xc7, "8fb4a6defdc8224172edb104a34300c684437359c85954eee20c4edd435bd15a6cbccf335f4a7a3d29b962aa7ff67a1b0fd10b885cd572d8a07c515252865470752701fe11496bc4f0bddfb80648ce7815babce2854ab16da08337dc1320afe3b5a8c5e77f524ba612a4aac4ce2ed498b30731e22c199ff4034982a100a4e19dbe4e047cc743a7ab07738c367342275e7dd20557a18ef6d5d1737f58f70cf5a3da61a8a10fc212d517e961736c6f61ca2a1d0f84187333d57eb1bba677c0d8de06d10a20eb5a54"}, &(0x7f0000000400)=0xcf)
setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000440)={r5, 0x8}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r5], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRESHEX=r0, @ANYRESDEC=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000002440)=0xd)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x80000000000004, 0x4, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="c71825ef58d10fd5000005000000180001801400020073797a5f74756e000000000000000000500003804c000380"], 0x7c}}, 0x0)
madvise(&(0x7f00004c3000/0x1000)=nil, 0x1000, 0x8)

1.354486344s ago: executing program 7 (id=657):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = pidfd_getfd(r3, r3, 0x0)
setns(r4, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@fallback=r1, r1, 0x2f}, 0x20)
ptrace$peekuser(0x3, r2, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xe6f}, 0x26)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, <r6=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback=r1, r5, 0x2f, 0x2030, 0x4, @void, @void, @value=r6}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x2, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x50}}, 0x0)

914.612294ms ago: executing program 4 (id=658):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e23, 0x6, @empty}}, 0x0, 0x0, 0x7, 0x0, "06f0494753d2899387dac44e413460212c4fa0d680904570055a09eba917440f844be97c0451481c07c4c78e2a08c0e7a8beabfde7b79280e6b5c161f6dcee43174c64e576bd524ddc044f1fe318b6e2"}, 0xd8)

914.289156ms ago: executing program 6 (id=659):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000100)={0x40, r2, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f0000000080)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x200008c0}, 0x6008045)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000100)={0x40, r2, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) (async)
sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f0000000080)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x200008c0}, 0x6008045) (async)

914.069783ms ago: executing program 4 (id=660):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x4, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
r1 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000003640)=r0, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x30040053}, 0x4000084)

895.378379ms ago: executing program 6 (id=661):
syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@resuid}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@bsdgroups}, {@quota}]}, 0x2, 0x450, &(0x7f0000000880)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060108000000000000000005000009140007800800114000000000050015000d000000050005000a000000050004000300000011000300686173687a8028f853b51628db103a69702c6d61726b000000000900020073797a320000"], 0x60}}, 0x0)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x66)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x15)

834.839816ms ago: executing program 6 (id=662):
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x3f, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x8001, '\x00', r7, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) (async)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3, r9}]}, 0x40}}, 0x4000000) (async)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) (async)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
dup(0xffffffffffffffff) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48)
r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

706.502219ms ago: executing program 1 (id=663):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x7, "4c251d0d6fe17eda0381979930de0be8eb307a1084bb24ba7be7675030344d7d", <r1=>0xffffffffffffffff})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x9, 0x0, <r3=>r1})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000140)={0x0, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, r4, 0xcccccccc})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r1}, 0x18)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8)
mmap$panthor(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x10, r5, 0x99f0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r6=>0x0})
recvfrom(r2, &(0x7f0000000280)=""/250, 0xfa, 0x4040, &(0x7f00000003c0)=@can={0x1d, r6}, 0x80)
socket(0x9, 0x2, 0x7)
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000005c0)={0xfffffff8, 0x2, 0x1, {0x1, @win={{0x1, 0x8, 0xb, 0xdbe3}, 0x2, 0x9, &(0x7f0000000500)={{0x0, 0x1b, 0xf43b, 0x9}, &(0x7f00000004c0)={{0x5, 0x1, 0x333, 0xffff0000}, &(0x7f0000000480)={{0x7f, 0x6, 0x3, 0xffffffff}, &(0x7f0000000440)={{0x4, 0x9, 0x5, 0xffffffff}}}}}, 0x6, &(0x7f0000000540)="55bc3a8d99c4c638af1a97d1906dadcb9092bc504f6dae88fdcf0429e0cff8ce5669c577b3b8f1881978d3d5d356d181f5a30764916127669a6cd1e577f5f8a2c70648d6c1b2494b6f3d0f2c9cacd9c922bc", 0x3}}, 0x235})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000700)={&(0x7f00000006c0)=[r4], 0x1, 0x0, 0x0, <r7=>0xffffffffffffffff})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$USBDEVFS_RELEASE_PORT(r7, 0x80045519, &(0x7f0000000740)=0xef4)
r8 = syz_open_dev$vim2m(&(0x7f0000000780), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000007c0)={0x6, 0x3})
ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000800))
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000880)={<r9=>0x0, 0x1, r3})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000008c0)={<r10=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01864c2, &(0x7f0000000900)={<r11=>0x0, 0x1, r5})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000940)={<r12=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000000980)={<r13=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01864c2, &(0x7f00000009c0)={<r14=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f0000000a80)={&(0x7f0000000a00)=[0x0, r9, r10, r11, 0x0, 0x0, r12, r13, r14], &(0x7f0000000a40)=[0x0, 0x80000000, 0x7], 0x9})
ioctl$FE_SET_TONE(r7, 0x6f42, &(0x7f0000000ac0))
flock(r0, 0x0)
r15 = syz_open_dev$I2C(&(0x7f0000000b00), 0x45, 0x402900)
copy_file_range(r15, &(0x7f0000000b40)=0xffffffffffffffb3, r7, &(0x7f0000000b80)=0x1, 0x8a6, 0x0)

701.595513ms ago: executing program 1 (id=664):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000ff9f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00feffc0000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde9b6ce895530c53bdaa13be7bd2ba689053a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6cc4d330131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c460880000000080000000000000000000000000000000000000000000ca356bb6653694bab090c0684eb2c19c6223693292ac24258473a5b32689de6de0ddf5b5aa90d3ba6da9228252d853c20d43c3a5f045e4bccb0c7722e8536fb270b89f23489b536640a1787dbe8bc5e67390c46b7b6b102725e8cd29ea28180f0f6c4c7cb12f2e43c95344df1392b37d9929ee5c826928f971dbe104fdae0cda6abfc909846b1f34836cd9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x2fbd, 0x7}, 0x10}, 0x94)
r0 = socket$l2tp(0x2, 0x2, 0x73)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x10002000})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000ff9f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00feffc0000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde9b6ce895530c53bdaa13be7bd2ba689053a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6cc4d330131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c460880000000080000000000000000000000000000000000000000000ca356bb6653694bab090c0684eb2c19c6223693292ac24258473a5b32689de6de0ddf5b5aa90d3ba6da9228252d853c20d43c3a5f045e4bccb0c7722e8536fb270b89f23489b536640a1787dbe8bc5e67390c46b7b6b102725e8cd29ea28180f0f6c4c7cb12f2e43c95344df1392b37d9929ee5c826928f971dbe104fdae0cda6abfc909846b1f34836cd9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x2fbd, 0x7}, 0x10}, 0x94) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x10002000}) (async)

668.244694ms ago: executing program 1 (id=665):
r0 = epoll_create1(0x0)
mq_open(&(0x7f0000000080)='\xf1\xd9?\xcb\xe2u\x8e\xdcY\xa3V\xb0\xf0\x92\xdb\xe7f\xfbJh\xefm\x84@\x9dO\x8c\xf4Ng\xf2\xd0)*5\x8fJp\x91\x15\xd5m\xf0MY?u2\x1d\x10*3k\x9eXg\x00\x00\xcc\x96\xf2\b\x89\x1b\xf5P/\xcaa\xdd\xda\\F\xf2\x85d\x0e3\x8b\xf4c\xac~\xf8\x94\xe0\xe9\x81\x16\xb0\x1d||\x0el\x9dz\x04\x9be=\xd4\xff\x17\x1dU\xc1\x94:\xcc\xeeM\xee\x06\xd5\x03\xe7\xae\xeaA\xa0Y^\xc9\xdb\v\xba\xbb\x85OT\xe8\xdc\xde\xd5\xf7\xc1\\rMw)z\xac)\x17\"4w\xe2<\xb9W\x06\xc6\x8c\xca\xb7o\xc7\x1d\xb5\xae\xeb\xd9\x14\x8e\x99#\xd9 \xdby\xfc,\xa5\xb1$B\x87\xcb\xe5f\a%\xb8\x81a\xab\xe9C\x94\x04\xd6\x7f\x03\xa6Xw7\ft\x817\xaf\x97f)$KOV<{n\xb2\x88\x1a\x0e\xeb;B{\xf5\xf92\x9c\n~\xe5dZ\xfd\xdd\xe6\xc4`C\x1b\xd0]\x18\x8aC\x03\xd6\x94\x97\x9e\x8d\xd3n\x84\r\x93\xe7\apWv\xbd\b\xa5\xfb\rq\x00\xb9o\x8cJ#\x99:HvY\xf12e\xc2dq\xcc\xe4\xfcX\xb4]\xa8;$$\x1a\xc4\xd3:C}\x7fD5<w\xbc\xd6sX*\xd8?\x162y\x87&\x17\b\x102\xa6d\n\xdek.7y\xd9\x00\xdb\x14\x8d\x1a\xfb\xe6\xd19|\t5\\\x1d\xdc\x7f\x8e1\xcew\x87\x8e', 0x40, 0x308, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x4c, 0x31, 0x107, 0x70bd26, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xa0000008})

558.346158ms ago: executing program 5 (id=666):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61125b00000000006113500000000000bf200000000000001500000008ffffffbd03010000000000dd000000000000006916630000000000bf67000000000000a406000007ff07006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='1', 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r1}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%pK    \x00'}, 0x20)
pipe2(&(0x7f0000001040)={<r5=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
tee(r5, r6, 0xfffffffffffffc01, 0x0)
close_range(r5, r6, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', <r8=>0x0, 0x29, 0x4, 0x80, 0x5, 0x0, @private2, @empty, 0x7, 0x8, 0x7, 0xd}})
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x401, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%pi6   \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x31, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6db2, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}, @generic={0x8, 0x7, 0x1, 0x0, 0x401}, @alu={0x7, 0xd487ae29b8d8f312, 0x2, 0x3, 0x7, 0x11, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0x1, 0xbd, &(0x7f0000000740)=""/189, 0x40f00, 0x2d, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x0, 0x1, 0x4c0d}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000a80)=[r9, r10], &(0x7f0000000ac0)=[{0x3, 0x3, 0xb, 0x5}, {0x0, 0x2, 0xc, 0x3}, {0x5, 0x2, 0x4, 0x8}, {0x2, 0x3, 0x6, 0x4}, {0x0, 0x5, 0x10, 0x4}, {0x3, 0x5, 0x7, 0x9}, {0x2, 0x2, 0x1, 0x1}, {0x3, 0x2, 0xd, 0x6}], 0x10, 0x7}, 0x94)
r11 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)
socket$netlink(0x10, 0x3, 0x9)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r12 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82782)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r12, 0x0)
mincore(&(0x7f00002b3000/0x4000)=nil, 0x4000, &(0x7f0000000180)=""/33)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r13 = dup3(r1, r11, 0x80000)
ioctl$MON_IOCG_STATS(r13, 0xc0109207, &(0x7f0000000180))
ptrace(0x4207, 0xffffffffffffffff)
fsetxattr(r12, &(0x7f0000000040)=@random={'user.', '/dev/bus/usb/00#/00#\x00'}, &(0x7f0000000100)='{$\x00', 0x3, 0x2)

556.768339ms ago: executing program 1 (id=667):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@init_itable}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000680)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000001e00)={&(0x7f0000001a80)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x4048081}, 0x400)
r3 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x5)
setresuid(0x0, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)={<r6=>0x0, 0x46e, 0x1, [0x9]}, &(0x7f0000000080)=0xa)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r6, 0x2}, &(0x7f0000000140)=0x8)
ioctl$sock_SIOCETHTOOL(r1, 0xc0045878, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r7, 0x325, 0x2, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x5b, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x180a4}, 0x40)

502.236133ms ago: executing program 4 (id=668):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0xffffffffffffffff}}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, 0x44, 0x1, 0x7fffc, 0x25dfdbfd, {0x1}, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x40080d4)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x20000004})

495.278762ms ago: executing program 1 (id=669):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x8000004, {0x0, 0x0, 0x0, 0x0, 0x88ad3db1, 0x440a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x300}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0)
sendto$inet6(r0, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3)
shutdown(r0, 0x1)

422.657351ms ago: executing program 6 (id=670):
r0 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x16}]}, 0x10)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/net\x00')
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061106c000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94)
ioctl$NS_GET_OWNER_UID(r2, 0xb704, 0x0)

420.833745ms ago: executing program 5 (id=671):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002580)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c080c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441aeb6ac71e6311087c9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74b3f73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000184ce348745e75e93df536d3b7b3e55388b34c8087f1c4e35f5a7b3b82a697c96dc835f83da837f9ce5265c3ac2e6153af04c3bc63c51dfad1dc8956b784f0ceceb23327fa717a465d4ec381e95cffa0f6cf54faa23bef60a86887def6235af69b10d1c7c702c88d6378b11f49a0a16d33604bef139a65c091eb33e131a04c04ef8f025b399c70ad0da6515f6765b84fabdec2de9e84010ed72265179bba5be1506238e169fd360a0e5a75000da0c695c45210a4a6d2fa77d91ddf4b029b541e96672590dc68fd9c1d39340aeb19e9557e09b43720a1f4986c20e9fd7497de8853c7f5bacaacd9a75c9ef3b7c0ce"], &(0x7f0000000340)='GPL\x00'}, 0x94)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x1409, 0x8, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd2f0010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)

399.396521ms ago: executing program 7 (id=672):
r0 = getpid()
syz_open_procfs(r0, &(0x7f0000000000)='cmdline\x00') (async)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='cmdline\x00')
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x311}]}, 0x1c}}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x311}]}, 0x1c}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300001f, 0x10, 0xffffffffffffffff, 0x5cfe1000) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300001f, 0x10, 0xffffffffffffffff, 0x5cfe1000)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0)
setgroups(0x1, &(0x7f0000000080)=[0x0])
setns(0xc9, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000280), 0x4)
bind$rds(r3, &(0x7f00000000c0)={0xa}, 0x1c)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r5 = userfaultfd(0x80001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r8=>0x0})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000010", @ANYRES16=r8, @ANYBLOB="010f000000000000000005000000180001801400020073797a5f74756e0000000800000000001800031c4a47ffc54e0f648ca6a2914a0b802653c7e4e755ab546a400e2df3204677c1abb0ee50d4a57c89"], 0x44}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000010", @ANYRES16=r8, @ANYBLOB="010f000000000000000005000000180001801400020073797a5f74756e0000000800000000001800031c4a47ffc54e0f648ca6a2914a0b802653c7e4e755ab546a400e2df3204677c1abb0ee50d4a57c89"], 0x44}}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

375.209926ms ago: executing program 1 (id=673):
r0 = io_uring_setup(0x7272, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x1, 0x117})
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x1, @vbi={0x4, 0x2, 0x6, 0x0, [0xfffffffb, 0xfffffff9], [0x3, 0x5ee6], 0x13a}})
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r2, 0x5412, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001100)={<r3=>0xffffffffffffffff})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x8927, &(0x7f0000000180)={0x100, 0x2d93c, 0x0, 0x9, 0x1, [0x7ff, 0x803, 0x8, 0x7f]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = getpid()
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x40, 0x650ce4b086bd45eb)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000080)={0x1, 0x2, 0x1000, 0x20, 0x0, 0x0, 0x0, 0x0})
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x4040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r9 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r9, 0x80106f53, &(0x7f0000000000)={0x4, &(0x7f0000000340)=[{0x3a, '\x00', @buffer={"2b9053c646adec80cb505c0537a87849ba764eb0a00b12e3f51b0f01a90c001c", 0x20}, 0x5}, {0x31, '\x00', @buffer={"1a1ce152a194c3c5d8630dd694a849230c000000000000edffffffffffffff00", 0x20}, 0x6447}, {0x8, '\x00', @buffer={"7fd5b0696a4b0b9f7831b08a6840564caa0777fc9dbf165f44a334aa38b2e117", 0x20}, 0x9b10}, {0x41, '\x00', @st={0x4, [{0x3, @svalue=0x2df}, {0x0, @uvalue=0x1ba0aabc}, {0x3, @uvalue=0x9}, {0x0, @uvalue=0x100}]}, 0x2}]})
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000810000000000000009000000731168000000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

310.554775ms ago: executing program 6 (id=674):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00'], 0x2a, 0x0)
r0 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000000fbff008014000180bbba05a5ab5d08000100e000ee0008000200e0000001000000"], 0x2c}}, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x0, 0x0})
keyctl$get_keyring_id(0x0, r0, 0x9c7)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRES32=r0, @ANYRESDEC=r5, @ANYRESOCT=r5, @ANYRES32=r3, @ANYRES32=r4], 0xa)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x8001, 0x9, 0x8, 0xfffffffffffffffc, 0x6, <r6=>0xffffffffffffffff})
sched_setscheduler(r6, 0x7, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00700000000000000000", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000480), 0x1, 0x278642)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0)
write(r7, &(0x7f0000000200)='usb1', 0x4)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80), 0x0, 0x0, 0x0, 0x20004880}, 0xc000)
sendmmsg$inet(r3, 0x0, 0x0, 0x24008080)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2000000, 0x2172, 0xffffffffffffffff, 0xffffe000)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2c0858, &(0x7f00000004c0)={[{@fat=@dos1xfloppy}, {@shortname_lower}, {@shortname_lower}, {@fat=@debug}, {@utf8}, {@utf8no}, {@shortname_mixed}, {@fat=@tz_utc}, {@rodir}, {}, {@uni_xlate}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@numtail}, {@fat=@nfs}, {@shortname_winnt}], [{@fsmagic}, {@subj_user={'subj_user', 0x3d, 'utf8=0'}}]}, 0x7, 0x2a6, &(0x7f0000000740)="$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")
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c)

76.977985ms ago: executing program 7 (id=675):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x315b, &(0x7f00000006c0)={0x0, 0xc7ca, 0x40, 0x0, 0x800001c1}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000))
socket$inet6(0xa, 0x3, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x7ffffffe)
write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe0400010000000014000b0020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef0500080001000000f5eb05ff52cebdd3", 0x68)

0s ago: executing program 6 (id=676):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="50010000100001040000000000000000000000000000000000000000000000010000000000000000000000000000000112341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d233000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdffffffeffffffffffffffffffffffffffff000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000060001400686d6163287368613129000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000a0000000303132333435363738393031323334353637383900"/264], 0x150}}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket$key(0xf, 0x3, 0x2)
recvfrom(r5, 0x0, 0x0, 0x161, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}}, 0x50)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockname$packet(r6, &(0x7f00000005c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100037042bbd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d090000080003"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

kernel console output (not intermixed with test programs):

 will be case sensitive!
[   35.168452][ T5142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   35.347531][ T5140] netlink: 44 bytes leftover after parsing attributes in process `syz.2.55'.
[   35.364510][ T5140] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.364848][ T5140] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.372236][ T5146] fuse: Unknown parameter 'aÕφÿ-­F’ÔÙäZ¼£õŸÚQÁÿ:ºY²À|+'Gd'
[   35.379369][ T5140] netlink: 44 bytes leftover after parsing attributes in process `syz.2.55'.
[   35.392284][ T5144] syzkaller0: entered promiscuous mode
[   35.392321][ T5144] syzkaller0: entered allmulticast mode
[   35.413832][ T5144] =======================================================
[   35.413832][ T5144] WARNING: The mand mount option has been deprecated and
[   35.413832][ T5144]          and is ignored by this kernel. Remove the mand
[   35.413832][ T5144]          option from the mount to silence this warning.
[   35.413832][ T5144] =======================================================
[   35.443226][ T5159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.59'.
[   35.444405][ T5144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002]
[   35.444457][ T5144] System zones: 0-1, 3-12
[   35.452119][ T5150] EXT4-fs: Ignoring removed orlov option
[   35.462495][ T5144] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.479481][ T5150] EXT4-fs (loop1): unable to read superblock
[   35.564984][ T5168] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   35.565011][ T5168] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   35.577291][ T5168] EXT4-fs (loop0): 1 truncate cleaned up
[   35.577726][ T5168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.593738][ T5176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.636079][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[   35.636831][ T5181] fuse: Bad value for 'fd'
[   35.663605][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.666404][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.708869][ T5188] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   35.766870][ T5188] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   35.766911][ T5188] FAT-fs (loop2): Filesystem has been set read-only
[   35.766933][ T5188] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   35.796400][ T5201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.855806][ T5208] ªªªªªª: renamed from vlan0 (while UP)
[   36.051058][ T4714] Bluetooth: hci0: command tx timeout
[   36.051285][ T4714] Bluetooth: hci3: command tx timeout
[   36.051513][ T4714] Bluetooth: hci4: command tx timeout
[   36.052826][ T4719] Bluetooth: hci1: command tx timeout
[   36.170193][ T5217] EXT4-fs: Ignoring removed nobh option
[   36.172490][ T5217] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   36.173821][ T5217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002]
[   36.173940][ T5217] EXT4-fs (loop0): orphan cleanup on readonly fs
[   36.175990][ T5217] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.74: attempt to clear invalid blocks 1024 len 1
[   36.176014][ T5217] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   36.181122][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   36.181147][    C0] EXT4-fs (loop0): initial error at time 36: ext4_clear_blocks:876: inode 11
[   36.181166][    C0] EXT4-fs (loop0): last error at time 36: ext4_clear_blocks:876: inode 11
[   36.182148][ T5217] EXT4-fs (loop0): Remounting filesystem read-only
[   36.182678][ T5217] EXT4-fs (loop0): 1 truncate cleaned up
[   36.183150][ T5217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   36.194189][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   36.218340][ T5220] EXT4-fs: inline encryption not supported
[   36.218388][ T5220] ext4: Bad value for 'journal_ioprio'
[   36.342257][ T5228] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   36.347455][ T5228] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[   36.347534][ T5228] System zones: 1-12
[   36.350485][ T5228] EXT4-fs (loop0): 1 truncate cleaned up
[   36.352496][ T5228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.397946][ T5231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   36.397976][ T5231] IPv6: NLM_F_CREATE should be set when creating new route
[   36.398030][ T5231] IPv6: NLM_F_CREATE should be set when creating new route
[   36.516258][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'.
[   36.533607][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.535450][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.536377][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.539786][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.541543][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.551904][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.552757][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.558860][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.559789][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.565443][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.565848][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.569477][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.570254][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.735495][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.736213][ T5187] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   36.832078][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.835300][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.211037][ T4719] Bluetooth: hci2: command 0x2016 tx timeout
[   37.372903][ T1291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.401626][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   37.421787][ T5242] netlink: 'syz.4.88': attribute type 1 has an invalid length.
[   37.422230][ T5242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.88'.
[   37.424632][ T5242] netlink: 'syz.4.88': attribute type 10 has an invalid length.
[   37.424645][ T5242] netlink: 40 bytes leftover after parsing attributes in process `syz.4.88'.
[   37.424730][ T5242] dummy0: entered promiscuous mode
[   37.431347][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   37.431899][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   37.436801][ T1291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.438581][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   37.438792][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   37.475047][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   37.476707][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   37.485813][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   37.512319][ T4714] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   37.515613][ T4714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   37.516119][ T4714] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   37.516483][ T4714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   37.516686][ T4714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   37.525774][ T1291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.540413][ T4714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   37.540808][ T4714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   37.543396][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   37.543835][ T4719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   37.544040][ T4719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   37.544377][ T4719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   37.544590][ T4719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   37.656194][ T1291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.029012][ T1291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.036987][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.038616][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.039988][ T5252] bridge_slave_0: entered allmulticast mode
[   38.041764][ T5252] bridge_slave_0: entered promiscuous mode
[   38.044857][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.049985][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.051578][ T5252] bridge_slave_1: entered allmulticast mode
[   38.053426][ T5252] bridge_slave_1: entered promiscuous mode
[   38.089489][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.102055][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.108259][ T1291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.132979][ T5252] team0: Port device team_slave_0 added
[   38.135238][ T5252] team0: Port device team_slave_1 added
[   38.155788][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.157137][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.158401][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.166459][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0
[   38.178813][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.178838][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.178853][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.212533][ T5252] hsr_slave_0: entered promiscuous mode
[   38.213552][ T5252] hsr_slave_1: entered promiscuous mode
[   38.213773][ T5252] debugfs: 'hsr0' already exists in 'hsr'
[   38.213782][ T5252] Cannot create hsr debugfs directory
[   38.234259][ T1291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.288358][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.290083][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.291865][ T5238] bridge_slave_0: entered allmulticast mode
[   38.292346][ T5238] bridge_slave_0: entered promiscuous mode
[   38.302769][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.304554][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.306179][ T5238] bridge_slave_1: entered allmulticast mode
[   38.307838][ T5238] bridge_slave_1: entered promiscuous mode
[   38.326474][ T1291] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.338254][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.345791][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.347419][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.349141][ T5246] bridge_slave_0: entered allmulticast mode
[   38.353229][ T5246] bridge_slave_0: entered promiscuous mode
[   38.362266][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.364411][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.366116][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.367786][ T5246] bridge_slave_1: entered allmulticast mode
[   38.369678][ T5246] bridge_slave_1: entered promiscuous mode
[   38.391036][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.405332][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.416334][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.417865][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.419267][ T5255] bridge_slave_0: entered allmulticast mode
[   38.428290][ T5255] bridge_slave_0: entered promiscuous mode
[   38.429584][ T5238] team0: Port device team_slave_0 added
[   38.430470][ T5238] team0: Port device team_slave_1 added
[   38.434271][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1
[   38.441966][ T5246] team0: Port device team_slave_0 added
[   38.444332][ T5246] team0: Port device team_slave_1 added
[   38.449928][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.449937][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.449948][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.450475][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.450482][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.450498][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.461058][ T5246] hsr_slave_0: entered promiscuous mode
[   38.461453][ T5246] hsr_slave_1: entered promiscuous mode
[   38.461640][ T5246] debugfs: 'hsr0' already exists in 'hsr'
[   38.461650][ T5246] Cannot create hsr debugfs directory
[   38.509988][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.510085][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.510161][ T5255] bridge_slave_1: entered allmulticast mode
[   38.510647][ T5255] bridge_slave_1: entered promiscuous mode
[   38.516016][ T5348] netlink: 44 bytes leftover after parsing attributes in process `syz.4.93'.
[   38.534254][ T5252] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.543739][ T5255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.544737][ T5255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.549707][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.549731][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.549758][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.550399][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.550413][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.550434][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.597416][ T5252] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.602012][ T5255] team0: Port device team_slave_0 added
[   38.603467][ T5255] team0: Port device team_slave_1 added
[   38.629073][ T5238] hsr_slave_0: entered promiscuous mode
[   38.629473][ T5238] hsr_slave_1: entered promiscuous mode
[   38.629794][ T5238] debugfs: 'hsr0' already exists in 'hsr'
[   38.629803][ T5238] Cannot create hsr debugfs directory
[   38.630127][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.630134][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.630147][ T5255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.637985][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.637995][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.638008][ T5255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.652170][ T1291] bridge_slave_1: left allmulticast mode
[   38.652212][ T1291] bridge_slave_1: left promiscuous mode
[   38.652629][ T1291] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.656150][ T1291] bridge_slave_0: left allmulticast mode
[   38.656199][ T1291] bridge_slave_0: left promiscuous mode
[   38.656276][ T1291] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.665160][ T1291] bridge_slave_1: left allmulticast mode
[   38.665194][ T1291] bridge_slave_1: left promiscuous mode
[   38.665268][ T1291] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.667287][ T1291] bridge_slave_0: left allmulticast mode
[   38.667300][ T1291] bridge_slave_0: left promiscuous mode
[   38.667360][ T1291] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.769572][ T1291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   38.784026][ T1291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   38.812237][ T1291] bond0 (unregistering): Released all slaves
[   38.847208][ T1291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   38.882024][ T1291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   38.922416][ T1291] bond0 (unregistering): Released all slaves
[   38.925877][ T1291] bond1 (unregistering): Released all slaves
[   38.933499][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2
[   38.946206][ T5255] hsr_slave_0: entered promiscuous mode
[   38.947603][ T5255] hsr_slave_1: entered promiscuous mode
[   38.948141][ T5255] debugfs: 'hsr0' already exists in 'hsr'
[   38.948155][ T5255] Cannot create hsr debugfs directory
[   38.956508][ T5252] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.020260][ T5252] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.143391][ T5252] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.145973][ T5252] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.147828][ T5252] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.150493][ T5252] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.152585][ T5252] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.154848][ T5252] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.156812][ T5252] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.159462][ T5252] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.252678][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.257222][ T5252] 8021q: adding VLAN 0 to HW filter on device team0
[   39.258983][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.259025][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.264769][ T4851] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.264823][ T4851] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.290885][ T4719] Bluetooth: hci2: command 0x2016 tx timeout
[   39.416851][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4
[   39.451207][ T4713] Bluetooth: hci0: command tx timeout
[   39.475808][ T1291] hsr_slave_0: left promiscuous mode
[   39.480780][ T1291] hsr_slave_1: left promiscuous mode
[   39.481270][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.481297][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.485591][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.485618][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.491266][ T1291] hsr_slave_0: left promiscuous mode
[   39.492608][ T1291] hsr_slave_1: left promiscuous mode
[   39.493897][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.495255][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.496850][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.498222][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.506020][ T1291] veth1_macvtap: left promiscuous mode
[   39.507111][ T1291] veth0_macvtap: left promiscuous mode
[   39.508152][ T1291] veth1_vlan: left promiscuous mode
[   39.509193][ T1291] veth0_vlan: left promiscuous mode
[   39.514315][ T1291] veth1_macvtap: left promiscuous mode
[   39.515412][ T1291] veth0_macvtap: left promiscuous mode
[   39.516552][ T1291] veth1_vlan: left promiscuous mode
[   39.517487][ T1291] veth0_vlan: left promiscuous mode
[   39.531066][ T4713] Bluetooth: hci3: command tx timeout
[   39.611823][ T4719] Bluetooth: hci4: command tx timeout
[   39.613007][ T4713] Bluetooth: hci1: command tx timeout
[   39.670313][ T1291] team0 (unregistering): Port device team_slave_1 removed
[   39.676040][ T1291] team0 (unregistering): Port device team_slave_0 removed
[   39.715955][ T5436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.99'.
[   39.784560][ T1291] team0 (unregistering): Port device team_slave_1 removed
[   39.788447][ T1291] team0 (unregistering): Port device team_slave_0 removed
[   39.839417][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5
[   39.864396][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.924940][ T5252] veth0_vlan: entered promiscuous mode
[   39.941952][ T5252] veth1_vlan: entered promiscuous mode
[   39.949889][ T5246] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   39.954074][ T5246] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.957227][ T5246] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   39.960957][ T5246] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.965114][ T5252] veth0_macvtap: entered promiscuous mode
[   39.966279][ T5252] veth1_macvtap: entered promiscuous mode
[   39.969906][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.976452][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.979366][ T5102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.979461][ T5102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.979519][ T5102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.979565][ T5102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.986825][ T5246] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.989393][ T5246] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.992367][ T5246] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.996319][ T5246] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   40.078611][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.078652][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.130354][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.133471][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.139872][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.144306][ T5246] 8021q: adding VLAN 0 to HW filter on device team0
[   40.157596][ T5246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   40.157690][ T5246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.164705][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.164752][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.165302][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.165333][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.319036][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.343708][ T5246] veth0_vlan: entered promiscuous mode
[   40.346517][ T5246] veth1_vlan: entered promiscuous mode
[   40.356101][ T5246] veth0_macvtap: entered promiscuous mode
[   40.358606][ T5246] veth1_macvtap: entered promiscuous mode
[   40.363763][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.367813][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.415884][   T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.415941][   T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.415964][   T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.448307][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.448336][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.451040][ T1197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.477291][ T5238] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   40.479758][ T5238] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   40.480091][ T5238] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   40.482708][ T5238] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   40.498399][ T5255] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.502769][ T5238] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   40.505174][ T5238] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   40.507237][ T5238] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   40.509792][ T5238] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   40.513391][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.513417][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.549383][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.555755][ T5238] 8021q: adding VLAN 0 to HW filter on device team0
[   40.557628][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.557676][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.570482][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.570527][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.606642][ T5255] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.677299][ T5255] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.744849][ T5551] set_capacity_and_notify: 14 callbacks suppressed
[   40.747452][ T5551] loop1: detected capacity change from 0 to 1024
[   40.763881][ T5551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.103'.
[   40.779072][ T5255] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.788276][ T5551] netlink: 'syz.1.103': attribute type 3 has an invalid length.
[   40.791006][ T5551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.103'.
[   40.801249][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.828605][ T5238] veth0_vlan: entered promiscuous mode
[   40.836034][ T5238] veth1_vlan: entered promiscuous mode
[   40.853456][ T1291] bridge_slave_1: left allmulticast mode
[   40.855830][ T1291] bridge_slave_1: left promiscuous mode
[   40.855947][ T1291] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.859754][ T1291] bridge_slave_0: left allmulticast mode
[   40.861130][ T1291] bridge_slave_0: left promiscuous mode
[   40.862313][ T1291] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.867364][ T1291] bridge_slave_1: left allmulticast mode
[   40.868637][ T1291] bridge_slave_1: left promiscuous mode
[   40.869728][ T1291] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.872091][ T1291] bridge_slave_0: left allmulticast mode
[   40.872117][ T1291] bridge_slave_0: left promiscuous mode
[   40.872183][ T1291] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.953684][ T5571] capability: warning: `syz.4.106' uses 32-bit capabilities (legacy support in use)
[   40.954536][   T30] audit: type=1326 audit(40.940:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5570 comm="syz.4.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf79228 code=0x7ffc0000
[   40.954882][   T30] audit: type=1326 audit(40.940:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5570 comm="syz.4.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf79228 code=0x7ffc0000
[   40.955105][   T30] audit: type=1326 audit(40.940:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5570 comm="syz.4.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf79228 code=0x7ffc0000
[   40.955504][   T30] audit: type=1326 audit(40.940:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5570 comm="syz.4.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf79228 code=0x7ffc0000
[   40.955760][   T30] audit: type=1326 audit(40.940:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5570 comm="syz.4.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf79228 code=0x7ffc0000
[   40.955989][   T30] audit: type=1326 audit(40.940:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5570 comm="syz.4.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff8cf79228 code=0x7ffc0000
[   40.957907][   T30] audit: type=1326 audit(40.940:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5570 comm="syz.4.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf79228 code=0x7ffc0000
[   40.957983][   T30] audit: type=1326 audit(40.940:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5570 comm="syz.4.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf79228 code=0x7ffc0000
[   40.958111][   T30] audit: type=1326 audit(40.940:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5570 comm="syz.4.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf79228 code=0x7ffc0000
[   40.958185][   T30] audit: type=1326 audit(40.940:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5570 comm="syz.4.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff8cf79228 code=0x7ffc0000
[   41.016002][ T5576] loop1: detected capacity change from 0 to 4096
[   41.027068][ T5576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.030173][ T1291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   41.094766][ T1291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   41.124891][ T1291] bond0 (unregistering): Released all slaves
[   41.421195][ T4713] Bluetooth: hci2: command 0x2016 tx timeout
[   41.447264][ T1291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   41.480145][ T1291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   41.502266][ T1291] bond0 (unregistering): Released all slaves
[   41.531014][ T4719] Bluetooth: hci0: command tx timeout
[   41.538521][ T5238] veth0_macvtap: entered promiscuous mode
[   41.539732][ T5238] veth1_macvtap: entered promiscuous mode
[   41.550314][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.562635][ T5255] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   41.567588][ T5255] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   41.570597][ T5255] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   41.577875][ T5255] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   41.590079][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.594278][ T5255] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   41.606714][ T5255] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   41.611751][ T4719] Bluetooth: hci3: command tx timeout
[   41.651486][ T1197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.652646][   T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.652676][   T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.652698][   T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.656486][ T5255] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   41.659466][ T5255] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   41.691042][ T4719] Bluetooth: hci1: command tx timeout
[   41.697022][ T5626] loop0: detected capacity change from 0 to 8
[   41.720954][ T5626] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2
[   41.843115][ T5641] netlink: 132 bytes leftover after parsing attributes in process `syz.0.110'.
[   41.853378][ T5246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.859439][ T5642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.111'.
[   41.894682][ T5102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.894717][ T5102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.959104][ T1197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.959147][ T1197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.006133][ T5644] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   42.013466][ T5255] 8021q: adding VLAN 0 to HW filter on device bond0
[   42.019781][ T5255] 8021q: adding VLAN 0 to HW filter on device team0
[   42.029792][ T4851] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.029844][ T4851] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.030491][ T4851] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.030511][ T4851] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.059946][ T5255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   42.059983][ T5255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   42.080781][ T5650] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   42.275139][ T5669] loop3: detected capacity change from 0 to 512
[   42.282450][ T1291] hsr_slave_0: left promiscuous mode
[   42.284616][ T1291] hsr_slave_1: left promiscuous mode
[   42.286113][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.286141][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_0
[   42.289637][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.289660][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.303083][ T5669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.319489][ T1291] hsr_slave_0: left promiscuous mode
[   42.325168][ T1291] hsr_slave_1: left promiscuous mode
[   42.325454][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.325480][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_0
[   42.334348][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.334373][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.352717][ T1291] veth1_macvtap: left promiscuous mode
[   42.355055][ T1291] veth0_macvtap: left promiscuous mode
[   42.355150][ T1291] veth1_vlan: left promiscuous mode
[   42.355202][ T1291] veth0_vlan: left promiscuous mode
[   42.359888][ T1291] veth1_macvtap: left promiscuous mode
[   42.363498][ T1291] veth0_macvtap: left promiscuous mode
[   42.363578][ T1291] veth1_vlan: left promiscuous mode
[   42.363630][ T1291] veth0_vlan: left promiscuous mode
[   42.367413][ T5238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.427124][ T5677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.119'.
[   42.537193][ T1291] team0 (unregistering): Port device team_slave_1 removed
[   42.543500][ T1291] team0 (unregistering): Port device team_slave_0 removed
[   42.723987][ T5687] loop0: detected capacity change from 0 to 128
[   42.725704][ T5687] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal
[   42.785259][ T1291] team0 (unregistering): Port device team_slave_1 removed
[   42.799649][ T1291] team0 (unregistering): Port device team_slave_0 removed
[   42.904495][ T5699] tmpfs: Bad value for 'mpol'
[   42.968007][ T5709] xt_recent: hitcount (16777216) is larger than allowed maximum (65535)
[   43.007725][ T5712] syz_tun: entered allmulticast mode
[   43.022380][ T5712] netlink: 'syz.4.130': attribute type 39 has an invalid length.
[   43.033762][ T5712] syz_tun (unregistering): left allmulticast mode
[   43.057628][ T5255] 8021q: adding VLAN 0 to HW filter on device batadv0
[   43.085637][ T5255] veth0_vlan: entered promiscuous mode
[   43.097635][ T5255] veth1_vlan: entered promiscuous mode
[   43.136862][ T5255] veth0_macvtap: entered promiscuous mode
[   43.139285][ T5255] veth1_macvtap: entered promiscuous mode
[   43.143885][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_0
[   43.146926][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_1
[   43.170883][ T1197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.173224][ T1197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.174968][ T1197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.176851][ T1197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.206469][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.206508][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.226664][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.226697][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.482374][ T5717] loop1: detected capacity change from 0 to 512
[   43.489526][ T5717] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   43.519938][ T5717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.618015][ T4719] Bluetooth: hci0: command tx timeout
[   43.641587][ T5246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.751432][ T4719] Bluetooth: hci3: command tx timeout
[   43.771183][ T4719] Bluetooth: hci1: command tx timeout
[   44.142566][ T5762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.141'.
[   44.246331][ T5770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.143'.
[   44.257659][ T5770] loop2: detected capacity change from 0 to 1024
[   44.264566][ T5770] EXT4-fs: Ignoring removed nobh option
[   44.264618][ T5770] EXT4-fs: quotafile must be on filesystem root
[   44.390434][ T5742] ima: policy update failed
[   44.664006][ T5785] loop3: detected capacity change from 0 to 1024
[   44.664824][ T5785] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.669078][ T5785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   44.710481][ T5785] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   44.727694][ T5238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.171715][ T5809] netlink: zone id is out of range
[   45.171745][ T5809] netlink: zone id is out of range
[   45.171769][ T5809] netlink: zone id is out of range
[   45.171780][ T5809] netlink: zone id is out of range
[   45.171789][ T5809] netlink: zone id is out of range
[   45.171798][ T5809] netlink: zone id is out of range
[   45.171806][ T5809] netlink: zone id is out of range
[   45.171814][ T5809] netlink: zone id is out of range
[   45.180597][ T5809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'.
[   45.225390][ T5818] loop0: detected capacity change from 0 to 512
[   45.226049][ T5819] netlink: 'syz.1.156': attribute type 1 has an invalid length.
[   45.228643][ T5819] 9p: Bad value for 'rfdno'
[   45.251214][ T5821] netlink: 44 bytes leftover after parsing attributes in process `syz.4.158'.
[   45.276823][ T5818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.290311][ T5832] binder: 5831:5832 ioctl c0306201 20000080 returned -14
[   45.294741][ T5832] binder: 5831:5832 tried to acquire reference to desc 0, got 1 instead
[   45.294790][ T5832] binder: 5831:5832 ioctl c0306201 200003c0 returned -14
[   45.297116][ T4827] binder: release 5831:5832 transaction 5 out, still active
[   45.297134][ T4827] binder: undelivered TRANSACTION_COMPLETE
[   45.304311][ T4827] binder: send failed reply for transaction 5, target dead
[   45.338445][ T5838] loop2: detected capacity change from 0 to 1024
[   45.356893][ T5838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   45.386636][ T5252] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.396335][ T5255] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   45.518335][ T5853] 9p: Bad value for 'rfdno'
[   45.598842][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'.
[   45.751753][ T4719] Bluetooth: hci0: command tx timeout
[   45.778749][ T4719] Bluetooth: hci3: command tx timeout
[   45.834599][ T5879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.875984][ T4719] Bluetooth: hci1: command tx timeout
[   45.945830][ T5889] set_capacity_and_notify: 1 callbacks suppressed
[   45.947414][ T5889] loop3: detected capacity change from 0 to 256
[   45.949074][ T5889] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   46.013154][ T5900] netlink: 104 bytes leftover after parsing attributes in process `syz.0.180'.
[   46.075950][ T5906] loop0: detected capacity change from 0 to 4096
[   46.078757][ T5906] EXT4-fs: Ignoring removed orlov option
[   46.080343][ T5906] EXT4-fs (loop0): Test dummy encryption mode enabled
[   46.084917][ T5906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.092357][ T5906] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   46.139757][ T5906] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   46.369929][ T5246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.901214][ T5252] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.912303][ T5957] loop1: detected capacity change from 0 to 512
[   46.922959][ T5957] EXT4-fs (loop1): 1 truncate cleaned up
[   46.923504][ T5957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.971550][ T5957] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.189: bg 0: block 465: padding at end of block bitmap is not set
[   47.016302][ T5975] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input3
[   47.019610][ T5246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.027256][ T5973] netlink: 'syz.3.192': attribute type 6 has an invalid length.
[   47.027297][ T5973] netlink: 'syz.3.192': attribute type 7 has an invalid length.
[   47.027320][ T5973] netlink: 'syz.3.192': attribute type 8 has an invalid length.
[   47.063117][ T5979] Cannot find del_set index 1 as target
[   47.063392][ T5979] x_tables: duplicate underflow at hook 2
[   47.066259][ T5979] overlayfs: missing 'lowerdir'
[   47.135154][ T5988] loop1: detected capacity change from 0 to 512
[   47.136931][ T5988] EXT4-fs: Ignoring removed bh option
[   47.141567][ T5988] journal_path: Lookup failure for './file1'
[   47.142990][ T5988] EXT4-fs: error: could not find journal device path
[   47.152058][ T5989] loop1: detected capacity change from 0 to 512
[   47.152356][ T5989] EXT4-fs: Ignoring removed bh option
[   47.152392][ T5989] journal_path: Lookup failure for './file1'
[   47.152402][ T5989] EXT4-fs: error: could not find journal device path
[   47.224134][ T5986] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   47.225896][ T5986] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   47.231192][ T5986] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   47.231273][ T5986] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   47.234480][ T5986] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   47.237586][ T5986] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   47.237683][ T5986] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   47.240989][ T5986] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   47.243652][ T5986] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   47.243949][ T5986] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   47.247573][ T5986] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   47.251107][ T5986] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   47.251257][ T5986] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   47.254070][ T5986] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   47.309956][ T6015] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   47.310759][ T6012] Invalid logical block size (2)
[   47.339287][ T6015] 
@0Ù: renamed from bond_slave_1 (while UP)
[   47.442250][ T6027] overlayfs: failed to resolve './file2': -2
[   47.444395][ T6027] fuse: Bad value for 'user_id'
[   47.444428][ T6027] fuse: Bad value for 'user_id'
[   47.582750][ T6051] 
: renamed from bond_slave_0 (while UP)
[   47.641312][ T6055] loop1: detected capacity change from 0 to 1024
[   47.665943][ T6055] EXT4-fs warning (device loop1): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop1.
[   47.761350][ T6082] syz_tun: entered allmulticast mode
[   47.808906][ T6086] loop0: detected capacity change from 0 to 256
[   47.811272][ T6084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.216'.
[   47.832078][ T6086] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152)
[   47.832125][ T6086] FAT-fs (loop0): Filesystem has been set read-only
[   47.832165][ T6086] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152)
[   47.882694][ T6093] netlink: 44 bytes leftover after parsing attributes in process `syz.0.219'.
[   47.882737][ T6093] tipc: Enabling of bearer <u1p:s> rejected, media not registered
[   47.926553][ T6084] loop1: detected capacity change from 0 to 512
[   47.929484][ T6084] ext4: Unknown parameter 'mode'
[   47.961256][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'.
[   47.969370][ T6095] veth3: entered promiscuous mode
[   47.974355][ T6095] loop0: detected capacity change from 0 to 512
[   48.020321][ T6095] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.220: dx entry: limit 0 != root limit 125
[   48.020361][ T6095] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.220: Corrupt directory, running e2fsck is recommended
[   48.025985][ T6095] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 8: comm syz.0.220: lblock 11 mapped to illegal pblock 8 (length 1)
[   48.026024][ T6095] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[   48.029523][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   48.029542][    C1] EXT4-fs (loop0): initial error at time 48: ext4_map_blocks:791: inode 2: block 8
[   48.029563][    C1] EXT4-fs (loop0): last error at time 48: ext4_map_blocks:791: inode 2: block 8
[   48.045234][ T6095] EXT4-fs (loop0): Remounting filesystem read-only
[   48.045575][ T6095] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   48.046116][ T6095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.099401][ T5252] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.140436][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'.
[   48.167646][ T6116] xt_CT: You must specify a L4 protocol and not use inversions on it
[   48.414975][ T6115] loop0: detected capacity change from 0 to 8192
[   48.458355][ T6124] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[   48.469117][ T6124] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.227: lblock 2 mapped to illegal pblock 2 (length 1)
[   48.469164][ T6124] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   48.473198][ T6124] __quota_error: 301 callbacks suppressed
[   48.473244][ T6124] Quota error (device loop0): qtree_write_dquot: dquota write failed
[   48.473280][ T6124] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.227: lblock 0 mapped to illegal pblock 48 (length 1)
[   48.473307][ T6124] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   48.474529][ T6124] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   48.474548][ T6124] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.227: Failed to acquire dquot type 0
[   48.474627][ T6124] loop0: lost filesystem error report for type 5 error -117
[   48.475164][ T6124] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem
[   48.475178][ T6124] loop0: lost filesystem error report for type 5 error -117
[   48.476032][ T6124] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.227: mark_inode_dirty error
[   48.476056][ T6124] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   48.476449][ T6124] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[   48.476500][ T6124] EXT4-fs (loop0): 1 orphan inode deleted
[   48.477044][ T6124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.505330][ T5252] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.506888][ T5110] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1)
[   48.506909][ T5110] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   48.508193][ T5110] Quota error (device loop0): remove_tree: Can't read quota data block 1
[   48.508211][ T5110] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:12: Failed to release dquot type 0
[   48.508223][ T5110] loop0: lost filesystem error report for type 5 error -117
[   48.510399][ T5252] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0
[   48.510418][ T5252] loop0: lost filesystem error report for type 5 error -117
[   48.514250][ T5252] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem
[   48.514271][ T5252] loop0: lost filesystem error report for type 5 error -117
[   48.514592][ T5252] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error
[   48.514615][ T5252] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   48.533952][ T6128] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[   48.710997][ T6147] EXT4-fs (loop2): invalid inodes per group: 32766
[   48.710997][ T6147] 
[   48.751857][ T6152] ext4: Unknown parameter './file1'
[   48.815881][ T6168] fuse: Unknown parameter 'g«¼¹0'
[   49.041337][ T6186] mmap: syz.3.246 (6186) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   49.267637][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'.
[   49.271133][ T4714] Bluetooth: hci1: command 0x0c1a tx timeout
[   49.271177][ T4714] Bluetooth: hci0: command 0x0c1a tx timeout
[   49.271205][ T4714] Bluetooth: hci2: command 0x2016 tx timeout
[   49.273687][ T4719] Bluetooth: hci4: command 0x040f tx timeout
[   49.273751][ T4713] Bluetooth: hci3: command 0x0c1a tx timeout
[   49.316690][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'.
[   49.326538][ T6206] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[   49.331695][ T6209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   49.387467][ T6209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.413563][ T6209] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.250: bg 0: block 217: padding at end of block bitmap is not set
[   49.419922][ T6209] EXT4-fs (loop3): Remounting filesystem read-only
[   49.490750][ T6220] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   49.493771][ T5238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.613805][ T6247] comedi comedi0: bad chanlist[0]=0x00200004 chan=4 range length=2
[   49.649194][ T6250] process 'syz.1.261' launched './file1' with NULL argv: empty string added
[   49.666052][ T6251] misc userio: Can't change port type on an already running userio instance
[   49.738065][ T6265] netlink: 152 bytes leftover after parsing attributes in process `syz.3.266'.
[   49.775573][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'.
[   49.783175][ T6273] ifb1: entered promiscuous mode
[   49.793414][ T6273] macvlan0: entered allmulticast mode
[   49.793456][ T6273] ifb1: entered allmulticast mode
[   49.943888][ T6288] vfat: Unknown parameter 'obj_user'
[   50.067821][ T6298] EXT4-fs: Ignoring removed oldalloc option
[   50.083218][ T6298] EXT4-fs (loop1): Test dummy encryption mode enabled
[   50.084615][ T6304] ext4: Unknown parameter 'nouser_xattr'
[   50.111648][ T6298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.116838][ T6298] net_ratelimit: 8 callbacks suppressed
[   50.116883][ T6298] openvswitch: netlink: Actions may not be safe on all matching packets
[   50.140623][ T6298] syzkaller0: entered promiscuous mode
[   50.140664][ T6298] syzkaller0: entered allmulticast mode
[   50.280790][ T6334] EXT4-fs: inline encryption not supported
[   50.356930][ T5246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.369447][ T6334] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   50.369493][ T6334] EXT4-fs (loop2): Test dummy encryption mode enabled
[   50.421814][ T6334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.593923][ T6374] [U] 
[   50.593974][ T6374] [U] 
[   50.593980][ T6374] [U] 

[   50.594028][ T6374] [U] 
[   50.594043][ T6374] [U] 
[   50.594056][ T6374] [U] 
[   50.594115][ T6374] [U] 
[   50.594133][ T6374] [U] 
[   50.594145][ T6374] [U] 
[   50.594158][ T6374] [U] 
[   50.594216][ T6374] [U] 
[   50.594230][ T6374] [U] 
[   50.594242][ T6374] [U] 
[   50.594255][ T6374] [U] 
[   50.594312][ T6374] [U] 
[   50.594326][ T6374] [U] 
[   50.594338][ T6374] [U] 
[   50.594351][ T6374] [U] 
[   50.594408][ T6374] [U] 
[   50.594422][ T6374] [U] 
[   50.594435][ T6374] [U] 
[   50.594447][ T6374] [U] 
[   50.594504][ T6374] [U] 
[   50.594518][ T6374] [U] 
[   50.594531][ T6374] [U] 
[   50.594544][ T6374] [U] 
[   50.594601][ T6374] [U] 
[   50.594615][ T6374] [U] 
[   50.594627][ T6374] [U] 
[   50.594640][ T6374] [U] 
[   50.594697][ T6374] [U] 
[   50.594710][ T6374] [U] 
[   50.594723][ T6374] [U] 
[   50.594736][ T6374] [U] 
[   50.594792][ T6374] [U] 
[   50.594806][ T6374] [U] 
[   50.594819][ T6374] [U] 
[   50.594831][ T6374] [U] 
[   50.594888][ T6374] [U] 
[   50.594902][ T6374] [U] 
[   50.594915][ T6374] [U] 
[   50.594927][ T6374] [U] 
[   50.594984][ T6374] [U] 
[   50.594998][ T6374] [U] 
[   50.595010][ T6374] [U] 
[   50.595023][ T6374] [U] 
[   50.595080][ T6374] [U] 
[   50.595094][ T6374] [U] 
[   50.595107][ T6374] [U] 
[   50.595123][ T6374] [U] 
[   50.595180][ T6374] [U] 
[   50.595194][ T6374] [U] 
[   50.595207][ T6374] [U] 
[   50.595219][ T6374] [U] 
[   50.595276][ T6374] [U] 
[   50.595290][ T6374] [U] 
[   50.595303][ T6374] [U] 
[   50.595315][ T6374] [U] 
[   50.595372][ T6374] [U] 
[   50.595386][ T6374] [U] 
[   50.595399][ T6374] [U] 
[   50.595411][ T6374] [U] 
[   50.595468][ T6374] [U] 
[   50.595482][ T6374] [U] 
[   50.595495][ T6374] [U] 
[   50.595507][ T6374] [U] 
[   50.595520][ T6374] [U] 
[   50.595577][ T6374] [U] 
[   50.595591][ T6374] [U] 
[   50.595604][ T6374] [U] 
[   50.595616][ T6374] [U] 
[   50.595673][ T6374] [U] 
[   50.595687][ T6374] [U] 
[   50.595700][ T6374] [U] 
[   50.595712][ T6374] [U] 
[   50.595769][ T6374] [U] 
[   50.595783][ T6374] [U] 
[   50.595796][ T6374] [U] 
[   50.595808][ T6374] [U] 
[   50.595865][ T6374] [U] 
[   50.595879][ T6374] [U] 
[   50.595892][ T6374] [U] 
[   50.595904][ T6374] [U] 
[   50.595961][ T6374] [U] 
[   50.595975][ T6374] [U] 
[   50.595987][ T6374] [U] 
[   50.596000][ T6374] [U] 
[   50.596057][ T6374] [U] 
[   50.596070][ T6374] [U] 
[   50.596083][ T6374] [U] 
[   50.596096][ T6374] [U] 
[   50.596155][ T6374] [U] 
[   50.596169][ T6374] [U] 
[   50.596181][ T6374] [U] 
[   50.596194][ T6374] [U] 
[   50.596251][ T6374] [U] 
[   50.596264][ T6374] [U] 
[   50.596277][ T6374] [U] 
[   50.596290][ T6374] [U] 
[   50.596346][ T6374] [U] 
[   50.596360][ T6374] [U] 
[   50.596373][ T6374] [U] 
[   50.596386][ T6374] [U] 
[   50.596442][ T6374] [U] 
[   50.596456][ T6374] [U] 
[   50.596469][ T6374] [U] 
[   50.596481][ T6374] [U] 
[   50.596538][ T6374] [U] 
[   50.596552][ T6374] [U] 
[   50.596565][ T6374] [U] 
[   50.596577][ T6374] [U] 
[   50.596634][ T6374] [U] 
[   50.596648][ T6374] [U] 
[   50.596660][ T6374] [U] 
[   50.596673][ T6374] [U] 
[   50.596739][ T6374] [U] 
[   50.596753][ T6374] [U] 
[   50.596766][ T6374] [U] 
[   50.596779][ T6374] [U] 
[   50.596835][ T6374] [U] 
[   50.596849][ T6374] [U] 
[   50.596862][ T6374] [U] 
[   50.596875][ T6374] [U] 
[   50.596949][ T6374] [U] 
[   50.596963][ T6374] [U] 
[   50.596975][ T6374] [U] 
[   50.596988][ T6374] [U] 
[   50.597036][ T6374] [U] 
[   50.597050][ T6374] [U] 
[   50.597062][ T6374] [U] 
[   50.732580][ T4713] block nbd1: Receive control failed (result -107)
[   50.757113][   T24] atkbd serio0: keyboard reset failed on 
[   50.757936][ T6376] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[   50.757951][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.3.279 Not tainted syzkaller #0 PREEMPT 
[   50.757966][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   50.757972][ T6376] Call trace:
[   50.757975][ T6376]  show_stack+0x2c/0x3c (C)
[   50.757998][ T6376]  __dump_stack+0x30/0x40
[   50.758011][ T6376]  dump_stack_lvl+0xd8/0x12c
[   50.758023][ T6376]  dump_stack+0x1c/0x28
[   50.758035][ T6376]  sysfs_warn_dup+0x9c/0xb8
[   50.758048][ T6376]  sysfs_create_dir_ns+0x190/0x1f4
[   50.758060][ T6376]  kobject_add_internal+0x290/0x6f0
[   50.758073][ T6376]  kobject_add_varg+0x9c/0xe8
[   50.758084][ T6376]  kobject_add+0x110/0x1c8
[   50.758094][ T6376]  device_add+0x394/0x9e0
[   50.758103][ T6376]  device_register+0x28/0x38
[   50.758122][ T6376]  tty_register_device_attr+0x31c/0x5e8
[   50.758134][ T6376]  tty_register_device+0x3c/0x50
[   50.758144][ T6376]  gsm_activate_mux+0xdc/0x284
[   50.758155][ T6376]  gsmld_ioctl+0xea8/0x1414
[   50.758166][ T6376]  tty_ioctl+0x8a8/0xcb0
[   50.758176][ T6376]  __arm64_sys_ioctl+0x154/0x1cc
[   50.758189][ T6376]  invoke_syscall+0x98/0x244
[   50.758202][ T6376]  el0_svc_common+0xec/0x23c
[   50.758214][ T6376]  do_el0_svc+0x4c/0x5c
[   50.758225][ T6376]  el0_svc+0x64/0x260
[   50.758235][ T6376]  el0t_64_sync_handler+0x44/0x104
[   50.758245][ T6376]  el0t_64_sync+0x198/0x19c
[   50.758265][ T6376] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[   50.805565][ T6375] [U] 
[   50.828412][ T5255] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.872463][ T6369] block nbd1: shutting down sockets
[   50.958608][ T6390] dvmrp0: entered allmulticast mode
[   51.100287][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'.
[   51.161513][ T5532] IPVS: starting estimator thread 0...
[   51.251746][ T6408] IPVS: using max 63 ests per chain, 151200 per kthread
[   51.256574][ T6419] set_capacity_and_notify: 16 callbacks suppressed
[   51.257783][ T6419] loop2: detected capacity change from 0 to 256
[   51.291018][ T6422] netlink: 'syz.3.293': attribute type 1 has an invalid length.
[   51.298538][ T6422] bond1: entered promiscuous mode
[   51.299017][ T6422] 8021q: adding VLAN 0 to HW filter on device bond1
[   51.316390][ T6421] bond1: (slave bridge1): making interface the new active one
[   51.316425][ T6421] bridge1: entered promiscuous mode
[   51.318420][ T6421] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   51.426928][ T4713] Bluetooth: hci3: command 0x0c1a tx timeout
[   51.426982][ T4713] Bluetooth: hci4: command 0x040f tx timeout
[   51.427014][ T4713] Bluetooth: hci2: command 0x2016 tx timeout
[   51.427031][ T4713] Bluetooth: hci0: command 0x0c1a tx timeout
[   51.427047][ T4713] Bluetooth: hci1: command 0x0c1a tx timeout
[   51.529901][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'.
[   51.556444][ T6458] ieee802154 phy0 wpan0: encryption failed: -90
[   51.810082][ T6477] loop3: detected capacity change from 0 to 2048
[   51.843484][ T6477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.845166][ T6479] ªªªªªª: renamed from vlan0 (while UP)
[   51.911166][ T6477] fscrypt (loop3, inode 12): Error -61 getting encryption context
[   52.074909][ T5238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.364466][ T6496] loop2: detected capacity change from 0 to 512
[   52.383647][ T6496] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   52.399263][ T6496] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00fc018, mo2=0002]
[   52.399326][ T6496] System zones: 1-12
[   52.401826][ T6496] EXT4-fs (loop2): orphan cleanup on readonly fs
[   52.401849][ T6496] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.316: inode #15: comm syz.2.316: iget: illegal inode #
[   52.401865][ T6496] loop2: lost filesystem error report for type 5 error -117
[   52.404033][ T6496] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.316: couldn't read orphan inode 15 (err -117)
[   52.404059][ T6496] loop2: lost filesystem error report for type 5 error -117
[   52.404707][ T6496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   52.458827][ T6496] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[   52.461414][ T6496] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00fc018, mo2=0002]
[   52.471045][ T6496] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   52.520764][ T6511] loop0: detected capacity change from 0 to 256
[   52.604103][ T5255] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.718339][ T6534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.328'.
[   52.721671][ T6534] mmap: syz.0.328 (6534): VmData 37498880 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data.
[   52.886166][ T6529] loop2: detected capacity change from 0 to 32768
[   52.889369][ T6560] new mount options do not match the existing superblock, will be ignored
[   52.894460][ T6560] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[   52.896655][ T6564] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   52.899603][ T6561] netlink: 25 bytes leftover after parsing attributes in process `syz.1.336'.
[   52.901597][ T6561] netlink: 25 bytes leftover after parsing attributes in process `syz.1.336'.
[   52.936087][ T6529]  loop2: p1 p3 < >
[   53.005604][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   53.006976][ T4727] udevd[4727]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   53.352259][   T30] audit: type=1326 audit(53.173:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.342" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1579228 code=0x7ffc0000
[   53.356765][   T30] audit: type=1326 audit(53.173:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.342" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1579228 code=0x7ffc0000
[   53.356972][   T30] audit: type=1326 audit(53.173:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.342" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1579228 code=0x7ffc0000
[   53.356996][   T30] audit: type=1326 audit(53.173:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.342" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=216 compat=0 ip=0xffffb1579228 code=0x7ffc0000
[   53.357016][   T30] audit: type=1326 audit(53.173:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.342" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1579228 code=0x7ffc0000
[   53.357035][   T30] audit: type=1326 audit(53.173:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.342" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1579228 code=0x7ffc0000
[   53.357053][   T30] audit: type=1326 audit(53.173:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.342" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb1579228 code=0x7ffc0000
[   53.358214][ T6583] netlink: 144 bytes leftover after parsing attributes in process `syz.1.341'.
[   53.394194][ T6582] loop0: detected capacity change from 0 to 1024
[   53.401538][ T6588] binder: 6586:6588 got transaction to invalid handle, 1
[   53.401916][ T6582] EXT4-fs: Ignoring removed mblk_io_submit option
[   53.402509][ T6582] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   53.402523][ T6582] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869)
[   53.402561][ T6582] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   53.405999][ T6582] EXT4-fs (loop0): journal inode is deleted
[   53.410327][ T6588] binder: 6586:6588 cannot find target node
[   53.410374][ T6588] binder: 6586:6588 transaction call to 0:0 failed 9/29201/-22, code 0 size 0-24 line 3252
[   53.413910][ T6588] binder: 6586:6588 ioctl 9360 a returned -22
[   53.415416][  T866] binder: undelivered TRANSACTION_ERROR: 29201
[   53.453989][ T6592] netlink: 'syz.1.345': attribute type 1 has an invalid length.
[   53.468371][ T6592] bond1: entered promiscuous mode
[   53.468615][ T6592] 8021q: adding VLAN 0 to HW filter on device bond1
[   53.520625][ T6592] veth3: entered promiscuous mode
[   53.528526][ T6592] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   53.533207][ T6592] netlink: 'syz.1.345': attribute type 1 has an invalid length.
[   53.551744][ T6603] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   53.551775][ T6603] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   53.551783][ T6603] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   53.551794][ T6603] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   53.624958][ T4719] Bluetooth: hci1: command 0x0c1a tx timeout
[   53.626143][ T4719] Bluetooth: hci0: command 0x0c1a tx timeout
[   53.626165][ T4719] Bluetooth: hci4: command 0x040f tx timeout
[   53.626182][ T4719] Bluetooth: hci3: command 0x0c1a tx timeout
[   54.485512][   T30] kauditd_printk_skb: 5 callbacks suppressed
[   54.485559][   T30] audit: type=1326 audit(54.233:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.4.361" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf79228 code=0x0
[   54.763395][ T6660] binder: tried to use weak ref as strong ref
[   54.764756][ T6660] binder: 6659:6660 Acquire 1 refcount change on invalid ref 0 ret -22
[   54.769947][ T6660] binder: 6659:6660 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[   54.771673][ T6660] binder: 6659:6660 ioctl c0306201 20000180 returned -22
[   54.922839][ T6678] loop1: detected capacity change from 0 to 2048
[   54.930696][ T6678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.978898][ T6682] loop0: detected capacity change from 0 to 128
[   54.988093][ T6682] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   55.694217][ T6694] 9p: Bad value for 'rfdno'
[   55.810763][ T6678] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   55.810928][ T6678] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   55.811029][ T6678] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   55.811121][ T6678] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   55.812294][ T6678] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   56.096870][   T30] audit: type=1326 audit(55.746:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.2.376" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1579228 code=0x0
[   56.101489][ T5246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.101998][ T5252] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   56.204995][ T6716] __nla_validate_parse: 2 callbacks suppressed
[   56.206572][ T6716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.376'.
[   56.208614][ T6716] netlink: 124 bytes leftover after parsing attributes in process `syz.2.376'.
[   56.488909][ T6736] loop0: detected capacity change from 0 to 512
[   56.493678][ T6736] EXT4-fs (loop0): Test dummy encryption mode enabled
[   56.495595][ T6736] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.386: inode has both inline data and extents flags
[   56.495638][ T6736] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   56.495849][ T6736] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.386: couldn't read orphan inode 15 (err -117)
[   56.495872][ T6736] loop0: lost filesystem error report for type 5 error -117
[   56.496381][ T6736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.537128][ T5252] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.572491][ T1030] kernel write not supported for file /input/event0 (pid: 1030 comm: kworker/0:2)
[   56.602609][ T6744] loop1: detected capacity change from 0 to 128
[   56.603690][ T6744] vfat: Unknown parameter 'uni_|late'
[   56.792440][ T6763] loop2: detected capacity change from 0 to 1024
[   56.806467][ T6765] ip6tnl1: entered promiscuous mode
[   56.854661][ T6763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.868960][ T6763] netlink: 'syz.2.392': attribute type 39 has an invalid length.
[   56.949694][ T6782] netlink: 'syz.0.397': attribute type 18 has an invalid length.
[   56.949737][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'.
[   56.961921][ T6782] netlink: 'syz.0.397': attribute type 18 has an invalid length.
[   56.961963][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'.
[   56.966363][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   56.966416][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   56.966435][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   56.966453][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   56.993998][ T6785] loop0: detected capacity change from 0 to 512
[   56.996149][ T6785] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   57.001357][ T6785] EXT4-fs (loop0): 1 truncate cleaned up
[   57.002200][ T6785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.069438][ T5252] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.137255][ T4713] Bluetooth: hci2: command 0x2016 tx timeout
[   57.272004][ T6791] binder: 6788:6791 tried to acquire reference to desc 0, got 1 instead
[   57.272268][ T6791] binder: 6788:6791 got transaction with invalid data ptr
[   57.272974][ T6791] binder: 6788:6791 transaction call to 6788:0 failed 16/29201/-14, code 0 size 0-24 line 3511
[   57.564848][ T5255] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.676366][ T6798] loop1: detected capacity change from 0 to 128
[   57.701315][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   57.702446][ T4719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   57.702740][ T4719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   57.703069][ T4719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   57.703335][ T4719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   57.731716][ T6798] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   57.731762][ T6798] FAT-fs (loop1): Filesystem has been set read-only
[   57.937395][ T4851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.942020][ T6815] netlink: 'syz.1.406': attribute type 3 has an invalid length.
[   58.008559][ T4719] Bluetooth: hci3: command 0x0c1a tx timeout
[   58.008594][ T4719] Bluetooth: hci1: command 0x0c1a tx timeout
[   58.008616][ T4719] Bluetooth: hci0: command 0x0c1a tx timeout
[   58.026890][  T866] binder: undelivered TRANSACTION_ERROR: 29201
[   58.026937][  T866] binder: release 6788:6793 transaction 17 out, still active
[   58.026952][  T866] binder: undelivered TRANSACTION_COMPLETE
[   58.090481][ T4851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.189476][ T6791] syz.0.400 (6791): drop_caches: 2
[   58.224748][  T866] binder: send failed reply for transaction 17, target dead
[   58.267931][ T4851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.315060][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'.
[   58.391159][ T4851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.509088][ T4851] bridge_slave_1: left allmulticast mode
[   58.509132][ T4851] bridge_slave_1: left promiscuous mode
[   58.509227][ T4851] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.513991][ T4851] bridge_slave_0: left allmulticast mode
[   58.514460][ T4851] bridge_slave_0: left promiscuous mode
[   58.514546][ T4851] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.518902][ T4851] dvmrp0: left allmulticast mode
[   58.522172][ T6857] loop0: detected capacity change from 0 to 8192
[   58.535104][ T6857] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   58.536166][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'.
[   58.644850][ T4851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.668539][ T4851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.712352][ T4851] bond0 (unregistering): Released all slaves
[   58.730647][ T6857] bond1: Invalid ad_actor_system MAC address.
[   58.730679][ T6857] bond1: option ad_actor_system: invalid value (1)
[   58.733530][ T6857] bond1 (unregistering): Released all slaves
[   58.806524][ T6800] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.806609][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.806803][ T6800] bridge_slave_0: entered allmulticast mode
[   58.807379][ T6800] bridge_slave_0: entered promiscuous mode
[   58.808150][ T6800] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.808174][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.808230][ T6800] bridge_slave_1: entered allmulticast mode
[   58.808650][ T6800] bridge_slave_1: entered promiscuous mode
[   58.815417][ T6800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.827652][ T6800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.911145][ T6800] team0: Port device team_slave_0 added
[   58.924950][ T5252] syz_tun (unregistering): left allmulticast mode
[   58.933630][ T6800] team0: Port device team_slave_1 added
[   58.952434][ T6800] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.952473][ T6800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.952492][ T6800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.953156][ T6800] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.953164][ T6800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.953176][ T6800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.987954][ T6800] hsr_slave_0: entered promiscuous mode
[   58.988320][ T6800] hsr_slave_1: entered promiscuous mode
[   59.084224][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1
[   59.095630][ T4851] hsr_slave_0: left promiscuous mode
[   59.096720][ T4851] hsr_slave_1: left promiscuous mode
[   59.096957][ T4851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.096969][ T4851] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.103778][ T4851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.103806][ T4851] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.268807][ T4851] veth1_macvtap: left promiscuous mode
[   59.269412][ T4851] veth0_macvtap: left promiscuous mode
[   59.272328][ T4851] veth1_vlan: left promiscuous mode
[   59.273960][ T4851] veth0_vlan: left promiscuous mode
[   59.367824][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'.
[   59.463839][ T4719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   59.465029][ T4719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   59.465960][ T4719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   59.468610][ T4719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   59.469042][ T4719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   59.495515][ T4851] team0 (unregistering): Port device team_slave_1 removed
[   59.501561][ T4851] team0 (unregistering): Port device team_slave_0 removed
[   59.569922][ T6888] macsec1: entered promiscuous mode
[   59.569954][ T6888] macsec1: entered allmulticast mode
[   59.604130][ T6800] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   59.614411][ T6800] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   59.622173][ T6800] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   59.624784][ T6800] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   59.630799][ T6800] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   59.633744][ T6800] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   59.635593][ T6800] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   59.644810][ T6800] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   59.672016][   T30] audit: type=1400 audit(59.051:327): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="lowerdir" requested=r pid=6896 comm="syz.4.420" path="/90/file0" dev="tmpfs" ino=478
[   59.706786][ T6800] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.729503][ T6800] 8021q: adding VLAN 0 to HW filter on device team0
[   59.734906][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.734966][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.742598][ T4851] IPVS: stop unused estimator thread 0...
[   59.744003][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.744047][ T5120] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.863715][ T4851] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   59.863770][ T4851] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.888858][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0
[   59.925491][ T4713] Bluetooth: hci4: command tx timeout
[   59.940424][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.948020][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.949782][ T6890] bridge_slave_0: entered allmulticast mode
[   59.954647][ T6890] bridge_slave_0: entered promiscuous mode
[   59.955965][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.956007][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.956088][ T6890] bridge_slave_1: entered allmulticast mode
[   59.956572][ T6890] bridge_slave_1: entered promiscuous mode
[   59.969770][ T6890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.970780][ T6890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.979071][ T6890] team0: Port device team_slave_0 added
[   59.979871][ T6890] team0: Port device team_slave_1 added
[   60.010920][ T4851] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   60.010970][ T4851] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.024821][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.024858][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.024875][ T6890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.027649][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.027660][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.027677][ T6890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.045217][ T6950] loop1: detected capacity change from 0 to 512
[   60.050089][ T6950] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   60.057491][ T6950] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002]
[   60.057624][ T6950] EXT4-fs (loop1): orphan cleanup on readonly fs
[   60.062353][ T6950] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.424: bg 0: block 361: padding at end of block bitmap is not set
[   60.062397][ T6950] loop1: lost filesystem error report for type 5 error -117
[   60.065825][ T6950] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   60.069120][ T6950] loop1: lost filesystem error report for type 5 error -117
[   60.069286][ T6950] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.424: attempt to clear invalid blocks 33619980 len 1
[   60.069310][ T6950] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   60.070877][    C0] EXT4-fs (loop1): error count since last fsck: 3
[   60.070889][    C0] EXT4-fs (loop1): initial error at time 59: ext4_validate_block_bitmap:441
[   60.070903][    C0] EXT4-fs (loop1): last error at time 59: ext4_clear_blocks:876: inode 11
[   60.079187][ T6950] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.424: invalid indirect mapped block 1811939328 (level 0)
[   60.079215][ T6950] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   60.082097][ T6950] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.424: invalid indirect mapped block 2185560079 (level 1)
[   60.082131][ T6950] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   60.087354][ T6950] EXT4-fs (loop1): 1 truncate cleaned up
[   60.087821][ T6950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   60.088922][ T6890] hsr_slave_0: entered promiscuous mode
[   60.089303][ T6890] hsr_slave_1: entered promiscuous mode
[   60.089496][ T6890] debugfs: 'hsr0' already exists in 'hsr'
[   60.089507][ T6890] Cannot create hsr debugfs directory
[   60.146635][ T6890] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   60.149245][ T6890] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   60.151149][ T6890] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   60.153359][ T6890] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   60.155125][ T6890] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   60.157765][ T6890] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   60.185558][ T4851] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   60.185606][ T4851] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.192785][ T6890] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   60.193090][ T5246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   60.200500][ T6890] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   60.481720][ T6800] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.528595][ T4851] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   60.531586][ T4851] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.541563][ T6982] loop1: detected capacity change from 0 to 1024
[   60.548978][ T6982] EXT4-fs: inline encryption not supported
[   60.563121][ T6982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   60.576046][ T6982] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.427: lblock 0 mapped to illegal pblock 0 (length 1)
[   60.590091][ T6982] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   60.590149][ T6982] EXT4-fs (loop1): This should not happen!! Data will be lost
[   60.590149][ T6982] 
[   60.590738][ T6982] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.427: lblock 0 mapped to illegal pblock 0 (length 1)
[   60.600013][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3
[   60.607238][ T6982] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.427: lblock 0 mapped to illegal pblock 0 (length 1)
[   60.620014][ T6982] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.427: lblock 0 mapped to illegal pblock 0 (length 1)
[   60.626882][ T6982] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.427: lblock 0 mapped to illegal pblock 0 (length 1)
[   60.631295][ T6982] ieee802154 phy0 wpan0: encryption failed: -22
[   60.646055][ T6890] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.669780][ T6890] 8021q: adding VLAN 0 to HW filter on device team0
[   60.670975][ T5246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   60.703834][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.703891][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.717822][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.717872][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.732888][ T4851] bridge_slave_1: left allmulticast mode
[   60.732927][ T4851] bridge_slave_1: left promiscuous mode
[   60.733038][ T4851] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.739956][ T4851] bridge_slave_0: left allmulticast mode
[   60.741565][ T4851] bridge_slave_0: left promiscuous mode
[   60.742854][ T4851] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.750286][ T7005] loop1: detected capacity change from 0 to 512
[   60.767080][ T7005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.776354][ T7005] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.885727][ T4851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   60.921284][ T4851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   60.946591][ T4851] bond0 (unregistering): Released all slaves
[   60.975862][ T6800] veth0_vlan: entered promiscuous mode
[   61.003250][ T6800] veth1_vlan: entered promiscuous mode
[   61.014392][ T6800] veth0_macvtap: entered promiscuous mode
[   61.047897][ T6800] veth1_macvtap: entered promiscuous mode
[   61.060656][ T6800] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.061728][ T6800] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.108162][   T39] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.110828][ T5102] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.111209][ T5102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.111288][ T5102] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.204242][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.204273][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.258349][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.258389][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.333063][ T4851] hsr_slave_0: left promiscuous mode
[   61.338373][ T4851] hsr_slave_1: left promiscuous mode
[   61.338752][ T4851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.338766][ T4851] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.340862][ T4851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.340875][ T4851] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.361345][ T4851] veth1_macvtap: left promiscuous mode
[   61.361491][ T4851] veth0_macvtap: left promiscuous mode
[   61.361545][ T4851] veth1_vlan: left promiscuous mode
[   61.361587][ T4851] veth0_vlan: left promiscuous mode
[   61.379051][ T7044] netlink: 'syz.4.432': attribute type 21 has an invalid length.
[   61.509024][ T4851] team0 (unregistering): Port device team_slave_1 removed
[   61.514508][ T4851] team0 (unregistering): Port device team_slave_0 removed
[   61.571769][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2
[   61.631548][ T6890] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.724136][ T4713] Bluetooth: hci3: command tx timeout
[   61.828746][ T6890] veth0_vlan: entered promiscuous mode
[   61.838254][ T6890] veth1_vlan: entered promiscuous mode
[   61.867739][ T6890] veth0_macvtap: entered promiscuous mode
[   61.870728][ T6890] veth1_macvtap: entered promiscuous mode
[   61.881154][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.888931][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.931794][   T39] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.932012][   T39] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.932050][   T39] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.932065][   T39] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.942329][ T5102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.942364][ T5102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.956650][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.956685][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.007353][ T7089] netlink: 'syz.4.437': attribute type 1 has an invalid length.
[   62.045364][ T7094] Device name cannot be null; rc = [-22]
[   62.045721][ T7094] sock: sock_set_timeout: `syz.4.438' (pid 7094) tries to set negative timeout
[   62.047507][ T7094] netlink: 32 bytes leftover after parsing attributes in process `syz.4.438'.
[   62.145831][ T4713] Bluetooth: hci4: command tx timeout
[   62.259951][ T4881] IPVS: starting estimator thread 0...
[   62.557385][ T7113] IPVS: using max 65 ests per chain, 156000 per kthread
[   63.120285][ T7119] netlink: 24 bytes leftover after parsing attributes in process `syz.5.443'.
[   63.223242][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.445'.
[   63.226097][ T7127] netlink: 'syz.5.445': attribute type 10 has an invalid length.
[   63.277909][ T4713] Bluetooth: hci1: Malformed Event: 0x02
[   63.489949][ T7153] bond0: (slave macsec1): Error -34 calling dev_set_mtu
[   63.539235][ T7170] loop1: detected capacity change from 0 to 1024
[   63.541158][ T7170] EXT4-fs: Ignoring removed oldalloc option
[   63.544829][ T7170] EXT4-fs: Ignoring removed oldalloc option
[   63.547302][ T7170] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   63.558350][ T7170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.651551][ T7183] loop6: detected capacity change from 0 to 512
[   63.651962][ T7183] EXT4-fs: Ignoring removed i_version option
[   63.651974][ T7183] EXT4-fs: Ignoring removed oldalloc option
[   63.670559][ T5246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.725582][ T7189] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   63.782907][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4
[   63.965568][ T4713] Bluetooth: hci3: command tx timeout
[   64.180020][ T7213] syzkaller1: entered promiscuous mode
[   64.182040][ T7213] syzkaller1: entered allmulticast mode
[   64.225123][ T7214] block nbd0: server does not support multiple connections per device.
[   64.227899][ T7214] block nbd0: shutting down sockets
[   64.310696][ T7213] block nbd0: server does not support multiple connections per device.
[   64.314511][ T7213] block nbd0: shutting down sockets
[   64.396958][ T4713] Bluetooth: hci4: command tx timeout
[   64.525062][ T7288] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20001
[   64.525142][ T7288] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20001
[   64.543036][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5
[   64.726676][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6
[   64.946056][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7
[   65.045582][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'.
[   65.580008][ T1596] ieee802154 phy0 wpan0: encryption failed: -22
[   65.580061][ T1596] ieee802154 phy1 wpan1: encryption failed: -22
[   65.609458][   T26] cfg80211: failed to load regulatory.db
[   65.867167][ T7378] lo: entered allmulticast mode
[   65.868313][ T7378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   65.871350][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.481'.
[   65.871364][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.481'.
[   66.003496][ T7384] netlink: 28 bytes leftover after parsing attributes in process `syz.5.486'.
[   66.178852][ T7410] loop5: detected capacity change from 0 to 4096
[   66.193369][ T7410] EXT4-fs mount: 2 callbacks suppressed
[   66.193409][ T7410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.217507][ T4713] Bluetooth: hci3: command tx timeout
[   66.259215][ T7410] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.493: corrupted inode contents
[   66.263172][ T7410] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.493: mark_inode_dirty error
[   66.266158][ T7410] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.493: corrupted inode contents
[   66.269267][ T7410] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.493: mark_inode_dirty error
[   66.274865][ T7410] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.493: corrupted inode contents
[   66.277574][ T7410] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.493: mark_inode_dirty error
[   66.280315][ T7410] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.493: corrupted inode contents
[   66.286499][ T7410] EXT4-fs error (device loop5): ext4_truncate:4691: inode #15: comm syz.5.493: mark_inode_dirty error
[   66.290179][ T7410] EXT4-fs error (device loop5) in ext4_setattr:6172: Corrupt filesystem
[   66.354178][ T6800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.408440][ T7438] loop5: detected capacity change from 0 to 512
[   66.412079][ T7438] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   66.432321][ T7438] EXT4-fs (loop5): 1 truncate cleaned up
[   66.438195][ T7438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.596171][ T7449] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[   66.604342][ T7449] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   66.650871][ T7451] vxcan0: tx address claim with dlc 0
[   66.675814][ T4713] Bluetooth: hci4: command tx timeout
[   66.690395][ T6800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.848690][ T7469] gtp0: entered allmulticast mode
[   66.884756][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'.
[   66.904999][ T7469] team_slave_0: mtu less than device minimum
[   67.374170][ T7488] Injecting memory failure for pfn 0x139200 at process virtual address 0x20000000
[   67.402534][ T7488] Memory failure: 0x139200: Sending SIGBUS to syz.5.513:7488 due to hardware memory corruption
[   67.402647][ T7488] Memory failure: 0x139200: recovery action for dirty LRU page: Recovered
[   67.403493][ T7488] Injecting memory failure for pfn 0x142200 at process virtual address 0x20200000
[   67.547229][ T7488] Memory failure: 0x142200: unhandlable page.
[   67.548275][ T7488] Memory failure: 0x142200: recovery action for get hwpoison page: Ignored
[   67.557221][ T7490] loop5: detected capacity change from 0 to 8192
[   68.106787][ T7504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.517'.
[   68.266846][ T7511] loop1: detected capacity change from 0 to 1024
[   68.351798][ T7511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   68.354102][ T7511] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   68.363099][ T7511] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   68.363268][ T7511] EXT4-fs (loop1): orphan cleanup on readonly fs
[   68.378741][ T7511] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 3: comm syz.1.520: lblock 3 mapped to illegal pblock 3 (length 1)
[   68.378793][ T7511] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   68.382666][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   68.382684][    C1] EXT4-fs (loop1): initial error at time 67: ext4_map_blocks:833: inode 3: block 3
[   68.382703][    C1] EXT4-fs (loop1): last error at time 67: ext4_map_blocks:833: inode 3: block 3
[   68.389444][ T7511] Quota error (device loop1): write_blk: dquota write failed
[   68.391701][ T7511] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3
[   68.393594][ T7511] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   68.393631][ T7511] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.520: Failed to acquire dquot type 0
[   68.393643][ T7511] loop1: lost filesystem error report for type 5 error -117
[   68.394035][ T7511] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 3: comm syz.1.520: lblock 3 mapped to illegal pblock 3 (length 1)
[   68.394054][ T7511] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   68.402211][ T7511] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   68.402255][ T7511] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.520: Failed to acquire dquot type 0
[   68.402274][ T7511] loop1: lost filesystem error report for type 5 error -117
[   68.406382][ T7511] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.520: Freeing blocks not in datazone - block = 0, count = 4096
[   68.406408][ T7511] loop1: lost filesystem error report for type 5 error -117
[   68.408811][ T7511] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 3: comm syz.1.520: lblock 3 mapped to illegal pblock 3 (length 1)
[   68.408836][ T7511] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   68.412505][ T7511] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   68.412534][ T7511] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.520: Failed to acquire dquot type 0
[   68.412548][ T7511] loop1: lost filesystem error report for type 5 error -117
[   68.425016][ T7511] EXT4-fs (loop1): 1 orphan inode deleted
[   68.438616][ T7511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   68.469342][ T4719] Bluetooth: hci3: command tx timeout
[   68.518809][ T5246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.574469][ T7544] netlink: 72 bytes leftover after parsing attributes in process `syz.4.527'.
[   68.585266][ T7535] netlink: 40 bytes leftover after parsing attributes in process `syz.5.528'.
[   68.664299][ T7549] loop5: detected capacity change from 0 to 8
[   68.666944][ T7549] squashfs image failed sanity check
[   68.704810][ T7549] vhci_hcd vhci_hcd.2: default hub control req: 010b v0000 i0000 l0
[   68.710343][ T7549] loop5: detected capacity change from 0 to 512
[   68.712069][ T7549] vfat: Unknown parameter 'squashfs'
[   68.798429][ T7558] loop5: detected capacity change from 0 to 8
[   68.860867][ T7560] loop5: detected capacity change from 0 to 8
[   68.864777][ T7560] squashfs: Unknown parameter '/proc/keys'
[   69.221887][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'.
[   69.385486][   T30] audit: type=1326 audit(68.032:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.540" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94579228 code=0x7ffc0000
[   69.385538][   T30] audit: type=1326 audit(68.032:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.540" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94579228 code=0x7ffc0000
[   69.385707][   T30] audit: type=1326 audit(68.032:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.540" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94579228 code=0x7ffc0000
[   69.385776][   T30] audit: type=1326 audit(68.032:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.540" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94579228 code=0x7ffc0000
[   69.390050][   T30] audit: type=1326 audit(68.032:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7576 comm="syz.6.540" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=188 compat=0 ip=0xffff94579228 code=0x7ffc0000
[   69.449549][ T7583] fuse: Bad value for 'fd'
[   69.653445][ T7594] syz.6.544 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   69.671003][ T7594] loop6: detected capacity change from 0 to 512
[   69.826282][ T7594] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   69.829361][ T7594] EXT4-fs (loop6): Remounting filesystem read-only
[   69.830201][ T7594] EXT4-fs (loop6): 1 truncate cleaned up
[   69.830671][ T7594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.835111][ T7590] netlink: 88 bytes leftover after parsing attributes in process `syz.6.544'.
[   69.856711][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.874849][ T7598] loop5: detected capacity change from 0 to 512
[   69.875199][ T7598] EXT4-fs: Ignoring removed nomblk_io_submit option
[   69.894479][ T7598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.903693][ T7598] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.546: Failed to acquire dquot type 1
[   69.911394][ T7602] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.546: Failed to acquire dquot type 1
[   69.914464][ T7592] gretap0: entered promiscuous mode
[   69.914559][ T7592] macvlan2: entered promiscuous mode
[   69.915968][ T7592] gretap0: left promiscuous mode
[   69.930836][ T6800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.954717][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.547'.
[   69.956713][ T7605] netlink: 'syz.5.547': attribute type 26 has an invalid length.
[   69.988899][ T7608] loop5: detected capacity change from 0 to 512
[   69.990754][ T7608] EXT4-fs: Ignoring removed mblk_io_submit option
[   69.997994][ T7608] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   70.020889][ T7610] macvlan2: entered promiscuous mode
[   70.022058][ T7610] bridge0: entered promiscuous mode
[   70.035088][ T7608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.047871][ T7608] EXT4-fs error (device loop5): ext4_get_first_dir_block:3545: inode #12: block 32: comm syz.5.549: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   70.049471][ T7608] EXT4-fs (loop5): Remounting filesystem read-only
[   70.051573][ T4722] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   70.053193][ T4722] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   70.054376][ T4722] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   70.054942][ T4722] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   70.055215][ T4722] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   70.108101][ T6800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.241550][ T7630] input: syz1 as /devices/virtual/input/input6
[   70.356970][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.358656][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.360295][ T7613] bridge_slave_0: entered allmulticast mode
[   70.362061][ T7613] bridge_slave_0: entered promiscuous mode
[   70.364438][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.366454][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.368139][ T7613] bridge_slave_1: entered allmulticast mode
[   70.369914][ T7613] bridge_slave_1: entered promiscuous mode
[   70.372814][ T7638] loop5: detected capacity change from 0 to 4096
[   70.375753][ T7638] EXT4-fs: Mount option(s) incompatible with ext2
[   70.414647][ T7613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.419239][ T6890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.428270][ T7613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.482714][ T7613] team0: Port device team_slave_0 added
[   70.483592][ T7613] team0: Port device team_slave_1 added
[   70.507842][ T7644] loop5: detected capacity change from 0 to 128
[   70.508312][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.508323][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.508339][ T7613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.508928][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.508936][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.508950][ T7613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.535613][ T7644] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   70.545752][ T7613] hsr_slave_0: entered promiscuous mode
[   70.546112][ T7613] hsr_slave_1: entered promiscuous mode
[   70.546327][ T7613] debugfs: 'hsr0' already exists in 'hsr'
[   70.546337][ T7613] Cannot create hsr debugfs directory
[   70.617352][ T6800] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   70.742490][ T7613] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   70.746709][ T7613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.747265][ T7613] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   70.749058][ T7613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.749535][ T7613] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   70.751899][ T7613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.752263][ T7613] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   70.758478][ T7613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.819443][ T7613] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.827321][ T7613] 8021q: adding VLAN 0 to HW filter on device team0
[   70.836618][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.836673][ T5110] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.838545][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.838571][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.037109][ T7682] loop5: detected capacity change from 0 to 512
[   71.159255][ T7682] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.565: invalid block
[   71.159558][ T7682] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   71.163329][ T7682] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.565: invalid indirect mapped block 4294967295 (level 1)
[   71.163395][ T7682] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   71.168880][    C1] EXT4-fs (loop5): error count since last fsck: 2
[   71.168897][    C1] EXT4-fs (loop5): initial error at time 69: ext4_get_branch:178: inode 11: block 4294967295
[   71.168917][    C1] EXT4-fs (loop5): last error at time 69: ext4_free_branches:1023: inode 11
[   71.179077][ T7682] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.565: invalid indirect mapped block 4294967295 (level 1)
[   71.179150][ T7682] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   71.185028][ T7682] EXT4-fs (loop5): 2 truncates cleaned up
[   71.195110][ T7682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.504111][ T4713] Bluetooth: hci5: command 0x1003 tx timeout
[   71.506028][ T4719] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   72.002324][ T7693] loop1: detected capacity change from 0 to 512
[   72.002769][ T7693] ext3: Unknown parameter 'permit_directio'
[   72.010285][ T7695] nfs: Deprecated parameter 'nointr'
[   72.153132][ T7613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.202665][ T7709] gtp0: entered promiscuous mode
[   72.202708][ T7709] gtp0: entered allmulticast mode
[   72.221810][ T7712] loop1: detected capacity change from 0 to 8192
[   72.283823][ T4719] Bluetooth: hci6: command tx timeout
[   72.301715][ T7613] veth0_vlan: entered promiscuous mode
[   72.312691][ T7613] veth1_vlan: entered promiscuous mode
[   72.329211][ T7613] veth0_macvtap: entered promiscuous mode
[   72.333495][ T7613] veth1_macvtap: entered promiscuous mode
[   72.339488][ T7613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.343408][ T7613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.395385][ T1197] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.395448][ T1197] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.395474][ T1197] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.395491][ T1197] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.417769][ T5110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.417809][ T5110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.453164][ T7723] 9pnet_fd: Insufficient options for proto=fd
[   72.463019][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.463053][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.571503][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.6.576'.
[   72.571549][ T7735] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.613109][ T7739] loop7: detected capacity change from 0 to 4096
[   72.637851][ T7739] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.688741][ T7613] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.914237][ T7760] netlink: 20 bytes leftover after parsing attributes in process `syz.7.580'.
[   73.456041][ T7770] netlink: 'syz.4.584': attribute type 2 has an invalid length.
[   73.458461][ T4719] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9
[   73.459454][ T4719] Bluetooth: hci2: unexpected event for opcode 0x1407
[   73.518033][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'.
[   73.730985][ T7786] loop7: detected capacity change from 0 to 512
[   73.733522][ T7786] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[   73.735132][ T7786] EXT4-fs error (device loop7): __ext4_fill_super:5600: inode #2: comm syz.7.588: iget: special inode unallocated
[   73.735152][ T7786] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[   73.735382][    C1] EXT4-fs (loop7): error count since last fsck: 1
[   73.735392][    C1] EXT4-fs (loop7): initial error at time 72: __ext4_fill_super:5600: inode 2
[   73.735406][    C1] EXT4-fs (loop7): last error at time 72: __ext4_fill_super:5600: inode 2
[   73.736085][ T7786] EXT4-fs (loop7): get root inode failed
[   73.736097][ T7786] EXT4-fs (loop7): mount failed
[   73.800878][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.589'.
[   73.934706][ T4719] Bluetooth: hci6: ACL packet for unknown connection handle 1
[   73.936661][ T7802] netlink: 'syz.7.592': attribute type 3 has an invalid length.
[   74.031974][ T6800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.055683][ T7809] netlink: 143 bytes leftover after parsing attributes in process `syz.7.595'.
[   74.136854][ T7809] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   74.139477][ T7809] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   74.180759][ T7809] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   74.182086][ T7809] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   74.213004][ T7809] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   74.213697][ T7813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.213901][ T7813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.217133][ T7809] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   74.256110][ T7809] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   74.256137][ T7809] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[   74.386402][ T7809] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   74.386437][ T7809] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   74.539361][ T4719] Bluetooth: hci6: command tx timeout
[   74.626575][ T7809] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[   74.628309][ T7809] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[   74.811807][ T7825] IPv6: Can't replace route, no match found
[   75.821812][ T7737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   75.833713][ T7869] netlink: 'syz.4.604': attribute type 11 has an invalid length.
[   76.005534][ T7882] netlink: 17292 bytes leftover after parsing attributes in process `syz.7.608'.
[   76.006919][ T7882] netlink: 'syz.7.608': attribute type 1 has an invalid length.
[   76.013122][ T7882] bond1: entered promiscuous mode
[   76.013322][ T7882] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.099815][ T7893] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[   76.338947][ T7903] loop6: detected capacity change from 0 to 2048
[   76.367794][ T7903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.384547][ T7903] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.611: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   76.408694][ T6890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.444250][ T7915] Cannot find set identified by id 0 to match
[   76.457278][ T7915] Cannot find set identified by id 0 to match
[   76.929356][ T7954] loop6: detected capacity change from 0 to 4096
[   76.931133][ T7954] EXT4-fs: inline encryption not supported
[   76.949874][ T7949] loop5: detected capacity change from 0 to 1024
[   76.951295][ T7954] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[   76.980182][ T7949] EXT4-fs: Invalid want_extra_isize 2
[   77.085798][ T7961] Driver unsupported XDP return value 0 on prog  (id 66) dev N/A, expect packet loss!
[   77.246793][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.629'.
[   77.246827][ T7960] netlink: 36 bytes leftover after parsing attributes in process `syz.7.629'.
[   77.353846][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.354057][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.416132][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.634'.
[   77.416188][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.634'.
[   77.436925][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.439164][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.567852][ T7964] geneve2: entered promiscuous mode
[   77.578797][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.634'.
[   77.580777][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.634'.
[   77.594419][ T1197] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.594467][ T1197] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.594501][ T1197] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.594529][ T1197] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.642383][ T8000] TC_ACT_REPEAT abuse ?
[   77.723189][ T8014] loop7: detected capacity change from 0 to 128
[   77.819031][ T8018] loop6: detected capacity change from 0 to 1024
[   77.819464][ T8018] EXT4-fs: Ignoring removed oldalloc option
[   77.819492][ T8018] EXT4-fs: Ignoring removed nobh option
[   77.819541][ T8018] EXT4-fs: Ignoring removed nomblk_io_submit option
[   78.762430][ T8018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.019541][ T8038] loop7: detected capacity change from 0 to 8192
[   79.021716][ T8038] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   79.355428][ T6890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.894712][ T8105] loop5: detected capacity change from 0 to 512
[   79.900779][ T8105] EXT4-fs: Ignoring removed bh option
[   79.963925][ T8105] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #11: comm syz.5.647: corrupted in-inode xattr: bad e_name length
[   79.963979][ T8105] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   79.964781][ T8105] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.647: couldn't read orphan inode 11 (err -117)
[   79.964810][ T8105] loop5: lost filesystem error report for type 5 error -117
[   79.964961][ T8105] EXT4-fs (loop5): 1 truncate cleaned up
[   79.965449][ T8105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.967280][ T8105] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.647: bg 0: block 5: invalid block bitmap
[   79.996597][ T6800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.271222][ T8116] loop7: detected capacity change from 0 to 128
[   80.300705][ T8116] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   80.317656][ T8118] binder: 8117:8118 got transaction to invalid handle, 1
[   80.317689][ T8118] binder: 8117:8118 cannot find target node
[   80.317717][ T8118] binder: 8117:8118 transaction call to 0:0 failed 19/29201/-22, code 0 size 120-24 line 3252
[   80.327249][ T4797] binder: undelivered TRANSACTION_ERROR: 29201
[   80.393016][ T7613] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   81.120572][ T8205] loop6: detected capacity change from 0 to 512
[   81.122006][ T8205] EXT4-fs: Ignoring removed oldalloc option
[   81.125036][ T8205] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[   81.436725][ T8229] loop1: detected capacity change from 0 to 512
[   81.440418][ T8229] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   81.446563][ T8229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   81.446620][ T8229] System zones: 1-12
[   81.450282][ T8229] EXT4-fs (loop1): 1 truncate cleaned up
[   81.452231][ T8229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.469100][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.667'.
[   81.501130][ T5246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.620494][ T8242] RDS: rds_bind could not find a transport for ::8000:20:0:0, load rds_tcp or rds_rdma?
[   81.898969][ T8251] loop1: detected capacity change from 0 to 512
[   81.957122][ T8255] loop6: detected capacity change from 0 to 256
[   82.005302][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.7.675'.
[   82.0
** replaying previous printk message **
[   82.026221][   T40] ==================================================================
[   82.026239][   T40] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0xc28/0x1758
[   82.026265][   T40] Write of size 8 at addr ffff800094ed91e0 by task kworker/u8:3/40
[   82.026273][   T40] 
[   82.026280][   T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:3 Tainted: G             L      syzkaller #0 PREEMPT 
[   82.026290][   T40] Tainted: [L]=SOFTLOCKUP
[   82.026293][   T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   82.026297][   T40] Workqueue: events_power_efficient fb_flashcursor
[   82.026309][   T40] Call trace:
[   82.026312][   T40]  show_stack+0x2c/0x3c (C)
[   82.026326][   T40]  __dump_stack+0x30/0x40
[   82.026337][   T40]  dump_stack_lvl+0xd8/0x12c
[   82.026347][   T40]  print_address_description+0xb0/0x238
[   82.026355][   T40]  print_report+0x68/0x84
[   82.026362][   T40]  kasan_report+0x8c/0xc4
[   82.026372][   T40]  __asan_report_store8_noabort+0x20/0x2c
[   82.026381][   T40]  sys_imageblit+0xc28/0x1758
[   82.026390][   T40]  drm_fbdev_shmem_defio_imageblit+0x38/0x144
[   82.026400][   T40]  soft_cursor+0x534/0x6bc
[   82.026408][   T40]  bit_cursor+0xaac/0x112c
[   82.026415][   T40]  fb_flashcursor+0x268/0x398
[   82.026422][   T40]  process_scheduled_works+0x788/0x10b8
[   82.026432][   T40]  worker_thread+0x798/0xbd0
[   82.026442][   T40]  kthread+0x304/0x3d4
[   82.026451][   T40]  ret_from_fork+0x10/0x20
[   82.026460][   T40] 
[   82.026462][   T40] The buggy address belongs to a vmalloc virtual mapping
[   82.026472][   T40] Memory state around the buggy address:
[   82.026477][   T40]  ffff800094ed9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   82.026481][   T40]  ffff800094ed9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   82.026485][   T40] >ffff800094ed9180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   82.026489][   T40]                                                        ^
[   82.026493][   T40]  ffff800094ed9200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   82.026497][   T40]  ffff800094ed9280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   82.026500][   T40] ==================================================================
[   82.026566][   T40] Disabling lock debugging due to kernel taint
[   82.026585][   T40] Unable to handle kernel paging request at virtual address ffff800094ed91e0
[   82.026596][   T40] KASAN: probably user-memory-access in range [0x00000004a76c8f00-0x00000004a76c8f07]
[   82.026606][   T40] Mem abort info:
[   82.026609][   T40]   ESR = 0x0000000096000047
[   82.026613][   T40]   EC = 0x25: DABT (current EL), IL = 32 bits
[   82.026619][   T40]   SET = 0, FnV = 0
[   82.026624][   T40]   EA = 0, S1PTW = 0
[   82.026628][   T40]   FSC = 0x07: level 3 translation fault
[   82.026633][   T40] Data abort info:
[   82.026636][   T40]   ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000
[   82.026640][   T40]   CM = 0, WnR = 1, TnD = 0, TagAccess = 0
[   82.026645][   T40]   GCS = 0, Overlay = 0, DirtyBit = 0
[   82.026650][   T40] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021b049000
[   82.026655][   T40] [ffff800094ed91e0] pgd=0000000000000000, p4d=1000000221341003, pud=1000000221342003, pmd=1000000107e91403, pte=0000000000000000
[   82.026675][   T40] Internal error: Oops: 0000000096000047 [#1]  SMP
[   82.067362][ T8269] loop6: detected capacity change from 0 to 512
[   82.070511][ T8269] EXT4-fs (loop6): Test dummy encryption mode enabled
[   82.083470][   T40] Modules linked in:
[   82.084154][   T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:3 Tainted: G    B        L      syzkaller #0 PREEMPT 
[   82.085946][   T40] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[   82.086883][   T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   82.088615][   T40] Workqueue: events_power_efficient fb_flashcursor
[   82.089739][   T40] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[   82.091051][   T40] pc : sys_imageblit+0xc30/0x1758
[   82.091859][   T40] lr : sys_imageblit+0xc28/0x1758
[   82.092704][   T40] sp : ffff8000901e7790
[   82.093404][   T40] x29: ffff8000901e7810 x28: dfff800000000000 x27: 0000000000000000
[   82.094694][   T40] x26: ffff800094ed91e0 x25: ffff0000c7b112f0 x24: 0000000000000004
[   82.096061][   T40] x23: 0000000000000000 x22: ffff800094ed91e0 x21: 0000000000000000
[   82.097471][   T40] x20: ffff0000c7b112f1 x19: ffff8000901e77e8 x18: 1fffe00034bbbe28
[   82.098929][   T40] x17: 0000000000000003 x16: ffff800088b37000 x15: 0000000000000000
[   82.100389][   T40] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000
[   82.101728][   T40] x11: 0000000000000000 x10: ffff70001146771d x9 : 0000000000000000
[   82.103137][   T40] x8 : ffff0000c1e39d40 x7 : 0000000000000000 x6 : ffff80008048c5b8
[   82.104499][   T40] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f62f4
[   82.105915][   T40] x2 : 0000000000000000 x1 : ffff0000c1e39d40 x0 : ffff800094ed91e0
[   82.107224][   T40] Call trace:
[   82.107770][   T40]  sys_imageblit+0xc30/0x1758 (P)
[   82.108605][   T40]  drm_fbdev_shmem_defio_imageblit+0x38/0x144
[   82.109762][   T40]  soft_cursor+0x534/0x6bc
[   82.110534][   T40]  bit_cursor+0xaac/0x112c
[   82.111324][   T40]  fb_flashcursor+0x268/0x398
[   82.112174][   T40]  process_scheduled_works+0x788/0x10b8
[   82.113175][   T40]  worker_thread+0x798/0xbd0
[   82.114011][   T40]  kthread+0x304/0x3d4
[   82.114704][   T40]  ret_from_fork+0x10/0x20
[   82.115463][   T40] Code: aa1a03e0 97b7a66d aa1a03e0 d34416e9 (f8008415) 
[   82.116664][   T40] ---[ end trace 0000000000000000 ]---
[   82.454934][   T40] Kernel panic - not syncing: Oops: Fatal exception
[   82.456161][   T40] SMP: stopping secondary CPUs
[   82.457023][   T40] Kernel Offset: disabled
[   82.457755][   T40] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7
[   82.458889][   T40] Memory Limit: none
[   82.781078][   T40] Rebooting in 86400 seconds..