last executing test programs:

28.774609271s ago: executing program 0 (id=102):
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x4)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = accept4(r0, 0x0, &(0x7f0000000240), 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="35b79da69b046c891b1653855c4da4f6a09fe99a21ad7627f658373f04b59aebbe3d4de886b269530c17c200170af1cf68fc9aad2a1b52", @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, <r3=>0xffffffffffffffff}, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080002000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff4ebf95f0d398b363000018230000d79734f255824105b1077b6d5b823223189b3262719754e16853380e3bfe3ba8d0cbd923ba1fbe643177c0b7db0dca678237875a", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

28.759553351s ago: executing program 0 (id=103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async, rerun: 32)
r1 = socket$kcm(0x10, 0x2, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)

28.511035785s ago: executing program 0 (id=104):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4, 0x80000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {0xffe0, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3e5d000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048008}, 0x44) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32)
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) (rerun: 32)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

28.439314378s ago: executing program 0 (id=106):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc5c, &(0x7f0000000380)={[{@test_dummy_encryption}, {@errors_remount}]}, 0x3, 0x459, &(0x7f0000000540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2009850, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000100)={0x18})
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x105)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in6=@ipv4}}, &(0x7f0000000280)=0xe8)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x4, r4, 0xffffffffffffffff, 0xee00)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, <r5=>0x0}, &(0x7f0000000140)=0xc)
keyctl$chown(0x4, r4, r5, 0x0)
read$FUSE(r1, &(0x7f0000000bc0)={0x2020, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
r7 = getuid()
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2840050, &(0x7f0000002c00)={[{@uid={'uid', 0x3d, r2}}, {@uid={'uid', 0x3d, r5}}, {@gid}, {@gid={'gid', 0x3d, r6}}], [{@smackfsroot={'smackfsroot', 0x3d, 'workdir'}}, {@obj_user}, {@seclabel}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '-&+'}}, {@euid_eq={'euid', 0x3d, r7}}]})
lseek(r1, 0x101, 0x0)
getdents64(r1, 0xfffffffffffffffe, 0x29)

28.413559461s ago: executing program 0 (id=108):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd25, 0xffffff81, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {0x4}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48082)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x8, 0x8}, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0xc, 0x401})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x8, 0x10}, 0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x5, 0x8}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r0, {0xfffffff9}}, './file1\x00'})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000210001042abd7000fbdbdf25e0000002000000000000000000000000fe8000000000000000000000000000aa4e2302004e2400000200c02000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100000008001f00020000000c001c00", @ANYRES32=0x0, @ANYBLOB="0100000050001100fc000000000000000000000000000000ac1414240000000000000000000001a8fe8000000000000000000000000000bbe0000002000000000000000000000000330200000135000002000200e99abe5ef6542c1334e1c7a09fe71f79e96b5b12db3de711c22dde5f800659d088cfdcc17396d1897cab21dab1740ec357b647c946c10c5464e6d04ba20edb62879b3b67540df23b2c4bed27f4f07af9207291300404aba99a125868a987a4f75e8e632fb8766459031fed32040445874cf74b6fc583e78c1891f7bd9d59669bde215f2c42052a187adc26117dc5a80ae49428"], 0xb4}}, 0x4c050)

28.075298538s ago: executing program 0 (id=114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000000300001802c00018014000300fe80000000000000000000000000002014000400000000000000000000000000000000003c0003800c00028004000100890000002c0001801400030000000000000000000000ffffac1e000114000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414aa0c0002960000000086000000"], 0xbc}, 0x1, 0x0, 0x0, 0x24000801}, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020)
r3 = getuid()
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f00000021c0)={[{@sysvgroups}, {@dax_inode}, {@data_ordered}, {@minixdf}, {@data_journal}, {@journal_checksum}]}, 0x3, 0x455, &(0x7f0000000f00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS(r7, 0x4b72, &(0x7f0000000700)={0x5, 0x2, 0x0, 0x0, 0xb, "f6ff00"})
setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000002080)={{0x7fffffff, 0x7}, 0x1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x12b6c58, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x2924480, &(0x7f0000002180)={[{@uuid_on, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, 0x0)
quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, r3, 0x0)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000080)=0x1, 0x4)
socket(0x23, 0x803, 0x3)
socket$nl_route(0x10, 0x3, 0x0)

28.067594735s ago: executing program 32 (id=114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000000300001802c00018014000300fe80000000000000000000000000002014000400000000000000000000000000000000003c0003800c00028004000100890000002c0001801400030000000000000000000000ffffac1e000114000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414aa0c0002960000000086000000"], 0xbc}, 0x1, 0x0, 0x0, 0x24000801}, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020)
r3 = getuid()
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f00000021c0)={[{@sysvgroups}, {@dax_inode}, {@data_ordered}, {@minixdf}, {@data_journal}, {@journal_checksum}]}, 0x3, 0x455, &(0x7f0000000f00)="$eJzs3MtvG0UYAPBv10n6pDGlPPoAAgUR8UiatEAPXEAgcQAJCQ7lGJK0KnUb1ASJVhUYhMoRVeKOOCLxF3CCCwJOSFzhjipVqJcWTkZr7yaOY6dxmsSl/v2kTWZ2Zz3zeXfs2Z1sAuhbI9mPJGJ3RPwREcON7PICI41fN69fmv7n+qXtEVF7+++kXu7G9UvTRdFiv115ZjSNSD9P4mCbeucvXDwzVanMns/z4wtnPxifv3DxudNnp07Nnpo9N3n8+LGjEy++MPn8in0vD3cfZ7bLjQMfzx3a//q7V96cPnHlvV++S4r4W+Jor9xtlSOrbXyyVuv29e5o9zSlk4EeNoSulCIiO1yD9f4/HKVYOnjD8dpnPW0csKlquQ6bqzXgLpZEr1sA9EbxRZ9d/xbL1o0+eu/ay40LoCzum/nS2DIQaV5msOX6diONRMSJ6r9fZ0us6T4EAMDt+SEb/zzbbvyXxgNN5fbkcyjliLg3IvZGxH0RsS8i7o+ol30wIh7qsv7WSZKV45/06roCW6Ns/PdSPre1fPyXRrWRKJfqucYYsByDycnTldkj+XsyGoPbsvzEKnX8+OrvX3ba1jz+y5as/mIsmLfj6sC25fvMTC1M3V7US659GnFgoF38yeJMQBIR+yPiwDrrOP30t4c6bRuJ6i3i72RjJplq30Q81Tj+1WiJv5CsPj85vj0qs0fGi7NipV9/u/xWp/pvffw3V3b8d7Y9/xfjLyfN87Xz3ddx+c8vOl7TrPf8H0reqaeH8nUfTS0snJ+IGEreaDS6ef3k0r5FviifxT96uH3/3xtL78TBiMhO4ocj4pGIeDRv+2MR8XhEHF4l/p9feeL99ce/ubL4Z7o6/kuJoWhd0z5ROvPT98sqLXcTf3b8j9VTo/matXz+raVd6zubAQAA4P8njYjdkaRji+k0HRtr/A3/vtiZVubmF545OffhuZnGMwLlGEyLO13DTfdDJxYv6xv5yTxfbD+a3zf+qrSjnh+bnqvM9Dp46HO7OvT/zF+ltrts29oWApvK81rQv/R/6F/6P/Qv/R/6V5v+v6MX7QC2Xrvv/0960A5g67X0//bTfsBdyfU/9C/9H/qX/g99aX5HrPqQfFT31Mut7Ul/iTsqEbERr1P8I4iWTZH2PkCJzUv09GMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgw/wXAAD//7Jx47M=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS(r7, 0x4b72, &(0x7f0000000700)={0x5, 0x2, 0x0, 0x0, 0xb, "f6ff00"})
setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000002080)={{0x7fffffff, 0x7}, 0x1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x12b6c58, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x2924480, &(0x7f0000002180)={[{@uuid_on, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, 0x0)
quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, r3, 0x0)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000080)=0x1, 0x4)
socket(0x23, 0x803, 0x3)
socket$nl_route(0x10, 0x3, 0x0)

2.19952863s ago: executing program 4 (id=582):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
ioprio_set$pid(0x0, r0, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000100))
r3 = socket$kcm(0x10, 0x2, 0x4)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340))
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)

2.071137481s ago: executing program 2 (id=583):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0xff03, 0x3a8, 0x2c0, 0x1d0, 0x1d0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xffff}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x3f8) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r0, 0x0) (async)
r1 = socket$kcm(0xa, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
close(r1) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r3) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) (async, rerun: 64)
setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000380)=0x8001, 0x4) (rerun: 64)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (async)
r6 = socket$inet_smc(0x2b, 0x1, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES16=r5], 0x3c}}, 0x0) (async, rerun: 64)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) (rerun: 64)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001140)='team0\x00', 0x10) (async, rerun: 32)
connect$inet(r6, &(0x7f0000001200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (rerun: 32)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRESOCT=r5, @ANYRESOCT=r7], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
connect$unix(r3, &(0x7f0000000940)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0)=0x1, 0xfffffc30) (async)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000600)={r8, r8, 0x8, 0x0, 0x0, 0x6, 0xff, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x7, @mcast1, 0xffffffff}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)

1.179386862s ago: executing program 2 (id=586):
syz_emit_ethernet(0x60c, &(0x7f0000000080)={@broadcast, @broadcast, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0xb, 0x6, 'ALN', 0x5ce, 0x2f, 0x1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[@fragment={0x5c, 0x0, 0x7, 0x0, 0x0, 0x2, 0x68}, @routing={0x5e, 0x4, 0x1, 0x7f, 0x0, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x21, 0x8, '\x00', [@pad1, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x28, {0x2, 0x8, 0x5f, 0x660, [0x17, 0xfc1, 0x6, 0x6]}}]}, @dstopts={0x3c, 0x47, '\x00', [@generic={0x30, 0x2d, "f48d0e0bcb46520cc8ecf3daf0d57bdd0dd8c49a2f9b9dbe88b1ce88da3ca222826a74b8af672f286e73568e82"}, @generic={0x4, 0xd2, "580fff70a3d677f0aea702eb62a959346186817105c651007e5b3bc1f0eb36f4108baffcdb59ba9b552b7aa7aaba1778ad443199497bfbc224400471db558f0909cb023c1ed04a0417a42ba15b18eea26ac482cfab6729abad36357c6364bfab23d661c0d20ad5bf0ef742f87a0205fd731508f45b3723976380df9d228ce66490f5846eaf241828cf391b8b52d2b7fc0f4431e973e6f8e679cf682d083baad1db6e5e86a6fcb1afaf6b3d2b625db52f43fd0ce75c64f63819ebcbe8dd8eb23afd43133aa184134a8e36992442c65d0cd9eb"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x6, 0xfd, "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"}, @pad1, @enc_lim={0x4, 0x1, 0x33}, @jumbo={0xc2, 0x4, 0x7f}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x18, {0x2, 0x4, 0x6, 0x0, [0x4, 0x7ff]}}]}, @srh={0x87, 0x4, 0x4, 0x2, 0x0, 0x20, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xce, 0x0, [0x7, 0xfa37], "73d1e841a5f63fba57c30295de64e76948d853bea5b223c2ef691eecee9f8064ff87ca4133c3d97b7649bfb7e632f07fab3cb8f152c4fa008a05b127db8bfce4f280121d02b8c667cd1402969e0013a33e2cef3c7ce8abff9e3841449c1f763c2e183c900c3ae1368b2c8510dbe63ac08d8776f09c8c45af379027bbb91a43deba5d80674854ef8857838b655b366f20dfdb068e9201c4d54611e49a1b37fb0000a38d862ffd8b527ac532ec7947677ce1748ac174694190e474c9a540f90f78bdb261408e142a694932cc636e11"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x0], "769627359c4bc7a9830e71da6049a5a390d9cb85d82456e4981c8e16b23a8e1b10797c1ff0e030c9373c5b985ebe709cb55a3ca374685020a7ea02f5caaa83b3dff1ed45d7158a6757ef3cfad11c4dd3f82ad325489b399246355b442323e86dcb6e158e2d716209df759d474bc320420bbc912e2ea1027b471338604700f748a5a382e9a3e37c27ad8872bad5d603856ec58cebf1d13762725187ab7743ba6aa098ffa535bd1099c9fba2ff6f08b4d2040474ce5571be26b95352c5ae5b85e464d29205d49233010b5bf2fe349b549044ce25"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "113123a428c73b87ce3730f3de8c8185c828be15dab3520fb951c79184a0e169ca159204e60ac266e36891f7019da0e7805ec5f1a251e71c8ad1d62f08b559228996030055e18193602fab3b4f4663ee18efaac481653f16d83c1be972dcab57ea177e90ce9ec8cbb7c4cfc603a38e5d2e1a36a987db6e61805005b066b180f173fb6557dca9c70b38f91c7b15ca5e43220bef4310193304c6384a77e9f23036e0df2f7d81389bbe9cfac8657152c2d06ac62eec7142a018364847400334b1891d9462d133e730340c2f9b9989aae6e5ec25c5df95808126b68acb"}, {0x8, 0x88be, 0x2, {{0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, 0x7f}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0xa, 0x2, 0x1, 0x3, 0x0, 0x2, 0x6, 0xdb}, 0x2, {0xc00000, 0xebdd, 0x2, 0x1a, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "325808b361e99b424deb04634e6a37e03c8c1009d18011f1"}}}}}}}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'macvlan1\x00', <r2=>0x0})
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0c1088989f"], 0xf)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x7540}, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r2})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}})

1.145629557s ago: executing program 4 (id=588):
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x800400, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}}, 0x20000042)
r0 = socket$inet6(0xa, 0x1, 0x0)
sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x30}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019180)=ANY=[@ANYBLOB="700000006800080026a55febfcaebd700d00dbdf25000000003904000008000500", @ANYRES32=r2, @ANYBLOB="04000b0008000500", @ANYRESHEX, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRESHEX], 0x70}}, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140), 0x300)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = epoll_create1(0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
pidfd_getfd(0xffffffffffffffff, r4, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
close(r5)
socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
recvmmsg$unix(r7, &(0x7f0000001080)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000740)}}, {{&(0x7f0000000300), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000140)=""/102, 0x66}], 0x2, &(0x7f00000001c0)}}, {{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000001000)=""/52, 0xffffffffffffff21}], 0x1}}], 0x3, 0x101, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$COMEDI_INSNLIST(r6, 0x8010640b, &(0x7f00000de580)={0x1, &(0x7f00000de440)=[{0xe000003, 0xf, &(0x7f0000000780)=[0xe1, 0x2, 0x9, 0x0, 0x7, 0x8, 0x5, 0xf, 0x8, 0x1, 0x7fffffff, 0x1, 0x0, 0x80, 0x778], 0x4, 0x9}]})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000080)={0xa002a008})
r8 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/rt_acct\x00')
pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file1\x00', 0x104000, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@redirect_dir_off}, {@verity_on}, {@uuid_null}, {@xino_off}]})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="623eab98e59b4e94"], 0x0, 0x1400)

1.12788181s ago: executing program 2 (id=589):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000040)=0x3, 0x4)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async)
listen(r0, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
fsopen(&(0x7f0000000080)='selinuxfs\x00', 0x0)

1.079080314s ago: executing program 3 (id=592):
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x21a880b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x3, 0x100}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000980)}, 0x9}], 0x1, 0x2003, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
write$smackfs_label(0xffffffffffffffff, 0x0, 0x2)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES32], 0x16, 0x2b3, &(0x7f0000000bc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84)

1.061745064s ago: executing program 3 (id=593):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0xb701, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000))
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x0, 0x5c}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x1, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.042552022s ago: executing program 3 (id=595):
pwritev(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000080)="119fcead6feeb1057169c4dc62bc380652f508d35a4a74693120ed24d70a842317269a8b9314041ba4db985ed8", 0x2d}], 0x1, 0x5, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
capset(&(0x7f0000000700)={0x19980330}, &(0x7f00000006c0)={0x200000, 0x200000}) (async)
capset(&(0x7f0000000700)={0x19980330}, &(0x7f00000006c0)={0x200000, 0x200000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1001, &(0x7f0000000940), 0x0, 0x5ad, &(0x7f0000000180)="$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")
r2 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e0ffac00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000bb"], 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000140)='/-$\x00', &(0x7f0000000740)="1aaf657d45fee6e37103a63ce8b235dfd6961e30cab6a8eea8d9de9eac7e63db76761d3833d40d234657c287637c7faa87af9e08aa49c0d2c4db2bb03e3c64b992fe196a82dbefdbe99679ed202ce004b5779430fbfa605dc16af91bbbd3ace55515a02a1c2d0c02eeb5b6ede44777ed4ca17c38c080805337b74b1fd828a60aa85667dc74006cf2bc6b06783cb2ee50bc70db3e011ac38db38c431824ee298c7f22185bce523d768fea5d3683b76685c69f11a057b564a0ca958832c2423290e97eac4953b27702100248681902f7c098489b7b4b96a8fae8b0b98b74d5e346", 0xe0) (async)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000140)='/-$\x00', &(0x7f0000000740)="1aaf657d45fee6e37103a63ce8b235dfd6961e30cab6a8eea8d9de9eac7e63db76761d3833d40d234657c287637c7faa87af9e08aa49c0d2c4db2bb03e3c64b992fe196a82dbefdbe99679ed202ce004b5779430fbfa605dc16af91bbbd3ace55515a02a1c2d0c02eeb5b6ede44777ed4ca17c38c080805337b74b1fd828a60aa85667dc74006cf2bc6b06783cb2ee50bc70db3e011ac38db38c431824ee298c7f22185bce523d768fea5d3683b76685c69f11a057b564a0ca958832c2423290e97eac4953b27702100248681902f7c098489b7b4b96a8fae8b0b98b74d5e346", 0xe0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000002080)="527302587e0ae717df3e", 0xa}], 0x3, 0xfffffffd, 0xbf)
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340)={0x0, <r8=>0x0}, &(0x7f00000003c0)=0xc)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)=ANY=[@ANYBLOB="201000001800040000000000000000000200000008000000e00000020410f7004b088b310f941ebf27fbd5ce2b8a720d80f36d2cb5ec134ef79a060f56227997b6c62f7deba5152263e903b0e424ecc38736e28e78a0d88b779630bd894973151ac6dbd96b88fd96e64e258b9dd1f15f7c5edcfa6fde0571d6661c04a389ea84923935971c8a1765028186c2e2aafe2e18b350fef8d8088fe53a26e9261f7ae15e49d7f2805060fa8e9c76fd8480c2d864f406350774d41d252f3968fe9f5eecd74545bdbb6cbaf64d7f9364e003e895524b00df633f6a57107224e52fa3bf34cfbd1f49d8c3111c3bf48ad14edd086df34bf672067e4ee17d78e4a50fadbb6d0d184bfa156175fd79506a50b86ec9964e594d7a8861daa6390102bc2536e351ad120e80f88a4b0666989224b46f4ed9d8a6013f53aad513ce5274e3e7865998254c6258e1b4b0d6f1323fc0979e7f0d177f13f50463fd2c7fb5d9e25480c39533a703cf373b744df6910eb73e9728f944be9bc2bd6ef80dea9c4de911fae384d87341ba72013693c7f9c99aaf269456ee714c41ac22b88802960d5a972d335f961fe65138b44d617e6ec44a699c174d6f671ced692c597789981e35ccb3b2c062d8bbf362a20fc33bca5593cd856a8f1a5b82fbf38074510d8026eefa5500fc8eb5547c16108df6d693f32f5705d399862fecf1d9bf7f26e59585afda568d566a6b98a429ab300e115dbfa5964a6e6e6abf1645b9848332a2f9c8ae85867485bdacc17090bf9aa170c020203a6fbdbd2faf1ab129eb32caa82884bbb03816fc03727c9d4ca6a4ec88a06a0f5675d7247f4beda3aaba442d99503a48d61888603bb2a96aca26abf250a1e60df67778794af3ac8e3d253a25759fe3a6c2461f7302d0f0ab56db2e2008c06a797484086478469ff6a6854f2d2dcd091fbc28bd4b1c1dee37e7c2451c720646f17e84f1bb9578ad5ef1113fc5f7af2b4e93ddb131144b41877566c240c5af24bc07be132e1e3ed22bd16713e52a58cef81cb80afcc94ff29e860ae677d393420998f88418b0dfb44d541f9f7331fc7d194fd2e731e35e226d423aba0ec35b930a309d2ef14a71a0a019fdc8563d4ac5bd45f43746b3b07cd2b1747ad1b1355ea9b16e1cc6d1be8b24affa16aa1395a54fc3f9a48d7b4ef8f3753b076ebf32fad298b8a60a47fae5831b9a8821656d4679bd11e2e43cca45030420b7be7d04a1f3b7a0afd6b9882c31cba4cde4f4535e0c43dac9268b5973a419882ca1be08c397161120f81a031043552ceffd737da452ffcd1c2eb0e69e81ab565c41606d8ea0bd3c36d5ca3013f39be5eec5d24ce89a72421924629947e599665f355706676ae6bbd7f6f0af0dfef66e74acdc139835b7ea42eca260f9442c07fbdbdff3f27e1eb10ef86e16919fc13e93e80de0edda37cc571a379630ed01a2811ee1f646e7b6661f5798ff4c8c999bb144a6e1915fbde25d91ca0664034229c1032092dd9343af8451a235ac6f5226c58851d82358ffb26baa7c253aa2353df1ed3e06c5fd5597932bbd6840d2b3f561ed0445e2d528260f1075e09f0e2e4ca9997f2412dcc42c7f4da3530ffe87875259b846b226792b256d837bf8bdf166453da51473987c0197f8d5a60a9d8f4c53d4ca42c374d02d0e236b96a15ce9f919779edd8dfac7d7f29b799e89493cf084f6929bb565b9469c7188739add1946d73f67b859de12ebbb64170e28840ad48bd4d53aac29b0052fd9c6e05a64da258e7d6c468c0cbabf4fba3241579fca7c3529a8e812aea7dcfc2a165d4e7861075b06ee54d26c5e2887ed92e5f522fe406879cd0c45dac5679833a2d987c2f35cdc77f3cb9d981dd1117ccf9d32356a560feb5bef8bfa4b4dab4da095d4327a389d981b94e2bc5083ca1b8930728fc1d4b022eabc2014cf3dc87789e0d6820c6d032549974f1272571859811680b90bf7a3e6e345e258d1fb7232fd2025c1720258048f16f0649595f1f62b0ea0a7b7071159d34a643792208e1347cd997fd897ba1207c4155b2d7737551e501abdf7721b7ee5e4574a0baabb2f66bfa18d69f3ae01fa348e6d05691c56f9b5a56681e62bcb92c6c59db8db1147bd8ab3410d36754adc99d2c23bd0fe49dcd724b090c92201fb10998cdad6eeffa1d1c202f627be95963789d0ebddb2c75b2a50ea5e50cc2d52d7ee44ae784cea87dacb8f885d76bf7f34762b969c5e89e3b0d87e306709b88a8c00548360bdb3dcc8e25e3d6631eede4d6eaaab59461a64313496710e21ab79096e1989a89d02b2ba1d733243f3911931a3d67bef946177d66c6f1ebeb2aa06daf70df4d0e8e260e519c2e2ccfac479c0d82507554c1468a99077e7388aaaddb36fef1600406d1b66b1d5e4a9f54f5f9848bace264b4b7c88a04d743a84bf58e9993e813c88ad36bd5e4909a00b9aa3f8c11b768af85f8276be2814bc4d6748ad5b07982ad69fd1f27296ccc724d0e0065e419e50d4e7edc828428d600b3f8ca00da3ef49f46ae07d330eaaa941c0df880b6163cd72689e2a1bfef27a1d51314b9c4316874e3a3bf6076a30358f34e6acb5012f69dd63f9af5fd56314324bf92b5e2631c57525693d14b2a3bfe576ff1799bb14d21bf0f53468acdb738fd9d7f1fc1587a8845d77b2aa969ecc150fff4b75cd41119630e8a7dc1cb49abcc19d5e0b683e1422363bfe985fcbfa36a675a47315df054cb87f921b8418f2b855b304bb2373b3a3eda93ddc0bb085d1a63ebf6fc072e11cca9e8ef673aa94cce00c80ad17f7979ed52b520aacba785fcd56a7fb0c959a9609c3b6776a40ad86eedf86509316e9bdf57fa837312b6dc1dd7e3811f09d8a2102ae71992a9ede20f71b453df1622c641cb5874700da48731304a1fb3a1a279f12bafb3a2b80c52826a536d2160b1ffdd9283fb884f2a17c1885bfb8a1ad33de48efe05d89505c0121faab496edd41b09beeacf06c0cd95e0fe4ccee9af72f0f52fc8deea57bc5c1e08798a3749103d2bdc1b8365ed49a09251061c2e7f23a6fe087c79c08e66bf967e6ee9024458efb1d0bb33665792a593bf61489a2059c9d05e7137cc8c7d5b2c13276f9f6759cb9298062f159ea49e096a321af667db9cd071fded44d19d1304aafacd8f96910e4ce84bb0128b69d26e511af5728078cf815ac98c2296b6c2265a84db5f0dc7d7cf6efdd7959373a7100afb7ac58e863fd269f0f201f69b6179e90ed2728f1ddf83c695f467ed3942e809064000b18ae78e0a455d4bc3a5e07cbfc9edf7d76a2d5d6d0194444cb8b5fcc1e675149a1047e804fe668cd414008c4c5e0c751cb84d2af3a62772950752de22859ede7bfb1289e6316ef7ecd1819ebaff26fdee4eb99f0d02f9b984ebc85a06892f90742046b70e7dcb629d9f1eb3a71ada5d96f4175aad68e31cd3e759fdf139cefc08e22f2f5cc6a899a79ac765366543bba687bc10743fcc61f88ad4bb2d8cc310dc9918dae5de90fcdcc7a23b888a037360f011744bac97472192ee12f9625791a0aff41cd7660d7b5c2725fc4431d18953c29c3341344f88e23a113980a1c6294f62935fc880b61924cef9025056bdb1f0b8c50a7647b1ad0a43b5c555e00ae9a0a0ea796ca60d3f1139f743a003d7cf8a2b684a433af018f34992c5d73f8aa75170cac998c478484f2527a3f526efa68325ff9fd288717933a021d87fcd7d064dbed878121d48c1508706d4827654a4f1423cedd26ab17c9c6412b1d8dab2d8a0684fe54eb0b5b1c5d77e22bd63ba805263fde94afa061a9ca550970f9294e520c4e8a658b3317822a4097998b5c0bcd013fbde0a2bdd79673d8bb5a2055ef32ea77cdbd9531a141e5498dd24a7c41c3119b4e4f679447e367d69f341a4a8729717ee19e0c57d25bdd1296c81d2749bfa8061c4c81acc651df1cad55d8cdbf1e31d92faa48900dc063d662450e0312d831af53b65e7a654cdc2c863446b4d258d9d9936f8638c934a2d4850b0236f917aaefdc2b52cc88898f398585ea576583849bcb303cf5d86dfc57ffd4ab28e887f394039c7606a1bbbf63522af7fec7e3cb3085990d48a6814952a0ae752400c242d42af0e1685260a936f0fead277163fd8d047332fa675128ce0c27bc6d29a42cdb5acf6d305026a7bd43019228854a09a4bf2d7a176da2ead31acf50c17b1ad6dffdc5c7025d68f85722bff27844cb7f2add21f7913ba5ae8cc36a4d8f33d31e83689ded30caeffe6be9f664448383c87d0b362c1dbd21d4521010e1bf24f76be629b82d3d2510d17df2aa650de7d7e19afbe9b60b4740fe567014a913872899f3e073a60eb0956dae883b124011db6abe5eb19f6d4731c600e50ed47debe15af01e4e39fbabe26383041c317b510417ebbd538c2a824bfbeefdc8a303eca2ac47cfdf743583fc0e0fef09f10ebddeb129918ca7d899edab50885895d21ed26f1bd8ea1528184bbca6a7feaf23be0bd0e96bf450b45965ff1d70f13b291f141981313822348a9ceb542b7f2066e241b0d874e716f1b4427922fd95708c90b7a903a2e8b592aba7a4085a17a7212557075d611f99531765d965a049253dc858ef4d0703cc0f5b02e6daaa51167a1939571cd753a8484d2867e196c0310d4aaac2a611bbd68dc78776dec30a3a30113045f64bb4ec45c04f5069177d0770dae9179f7b9da78ea1ba18b9b19069994671a067b175a5474f95defa80d3b753032277b90dc545e751ae086634ff595ca75c603b8f2aa50b5689f5fa4c21437a3bf90a34383e00537c6268a943d69663211e7cdcf1176f82f5e6d27155fe0d03e7ee8e04e0f0060c24751a3185cf0c672bf7ac038b5e23de5dbb1f42b2aa35a83b69faad15bdc1d93de89f85a35a48a1aca4afe5b26e2dfba186f4eb29d7a808eed6d5b475ebedb8ad74a5cc4df49437705ce82f9db0305c14f5f945b6cf3ba8e3672b314e4287ecb4c19cc9634d7196a0c5e6f3c03afe336184d0f20266be3f1e4614b2ec4583f86ff5e5aae228e9b757544f82d48cd24430b15a91ad14cbb54ae81043bb12b649adb8a673290af64b3b5913f5c0732fe3335047dc24fe1f9d6c64f508049ea66f374d00c8f0e5183ad6cb9f82f039e302082501187616be7e54134389f3bc68ca1c2707e7a4b12f2b521d94051def4947937ab8d8bdede91e8bbb125d4f9826201762955aac673f1edf52acecb57f5d4d3eeb750040594df84985e8cb51c459cec1c03e235fe32586ac5255b800a2e8432539d69d4e465e354459eb7fc426a4b0f7af95e3f51ae665e69fff66401cc386a658c52e24e2c7b20adf78c019b2d849a7d19ba14465f3fab3b45196269ff6e052b4df0cbb9f7691abba47172be36e88d04cd8fc7222cda180cf1f89990336383be917e34052b5796f0157f16a891e7eebd4bab5a85535f10c524671625566ceaf861e47bd4e47bea42aa71bf88d828be5192af22d3a7939d6c481cd5cade7f3979e2f968822f262e59972b03dc7c6ab8a7f04c523b047d0ae9a098e3edf01281a6c911e65ab22091469bc0fa2c57deb02ab3469682786308f2b22c3d2f4df75b5f65d152e63bb4240570bb9b2fa67affc4651aaff9ab6f555a9c177f5f6cfb058b6ba8a45a35e6080b6868df600f564a58de31973e4aa7f54c035dc9734a89997c920ebe2021ecd5374a3df574629e8fcc1894afd314af2aab6e2031f3d913504c6144d4b7a0e2e63ae616754e87834c9f1398267034023355b9ff98659de100fc43802d41b2abb775683947487bbe4ade0b564d7d58a25d65731f5a29ae53373e51a7085e3fd1959378495b3ea"], 0x1020}}, 0x0)
getresuid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=<r9=>0x0)
fstat(r0, &(0x7f0000000c40)) (async)
fstat(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
getgid() (async)
r11 = getgid()
lsetxattr$system_posix_acl(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='system.posix_acl_default\x00', &(0x7f0000000bc0)={{}, {0x1, 0x2}, [{0x2, 0x4, r8}, {0x2, 0x2, r9}, {0x2, 0x2, r10}], {0x4, 0x5}, [{0x8, 0x4, r11}], {0x10, 0x1}, {0x20, 0x2}}, 0x44, 0x0)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYRES64=r2, @ANYRESDEC=r1, @ANYBLOB="010000080003001295d7cf", @ANYRES32=r5, @ANYRES8=r5], 0x6f4}, 0x1, 0x0, 0x0, 0x48011}, 0x0)
r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
preadv(r12, &(0x7f0000000000)=[{&(0x7f0000000080)=""/166, 0xa6}], 0x1, 0x4a084b75, 0xe10)

990.791093ms ago: executing program 2 (id=596):
process_vm_writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000400)=""/233, 0xf6}, {&(0x7f0000000500)=""/48, 0x3f}], 0x2, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x3, 0x1)
socket$inet(0x2, 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000002100), 0x1500a0, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESHEX=r2, @ANYRESDEC])
read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0x34014c40, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x300, 0xc0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)
r4 = fsopen(&(0x7f0000000380)='gadgetfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x1, 0x7)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)

985.226038ms ago: executing program 4 (id=598):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
ioprio_set$pid(0x0, r0, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb2020000)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000100))
r2 = socket$kcm(0x10, 0x2, 0x4)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340))
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)

934.845559ms ago: executing program 3 (id=599):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd25, 0xffffff81, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {0x4}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48082)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x8, 0x8}, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0xc, 0x401})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x8, 0x10}, 0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x5, 0x8}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r0, {0xfffffff9}}, './file1\x00'})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000210001042abd7000fbdbdf25e0000002000000000000000000000000fe8000000000000000000000000000aa4e2302004e2400000200c02000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100000008001f00020000000c001c00", @ANYRES32=0x0, @ANYBLOB="0100000050001100fc000000000000000000000000000000ac141424000000000000000000000000fe800000000000000000000001a800bbe0000002000000000000000000000000330200000135000002000200e99abe5ef6542c1334e1c7a09fe71f79e96b5b12db3de711c22dde5f800659d088cfdcc17396d1897cab21dab1740ec357b647c946c10c5464e6d04ba20edb62879b3b67540df23b2c4bed27f4f07af9207291300404aba99a125868a987a4f75e8e632fb8766459031fed32040445874cf74b6fc583e78c1891f7bd9d59669bde215f2c42052a187adc26117dc5a80ae49428"], 0xb4}}, 0x4c050)

839.405967ms ago: executing program 3 (id=600):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r3=>0x0})
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00')
pread64(r4, &(0x7f0000000000)=""/165, 0xa5, 0x3)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r3, 0x25, 0x0, @void}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r5, r6}, 0x5)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x3}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000008991c37b76044bdf180000001800000002000000000000000100008500000000000000010200"], &(0x7f0000001540)=""/4096, 0x32, 0x1000, 0xa}, 0x28)

816.441293ms ago: executing program 3 (id=601):
process_vm_writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000400)=""/233, 0xf6}, {&(0x7f0000000500)=""/48, 0x3f}], 0x2, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x3, 0x1)
r2 = socket$inet(0x2, 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000002100), 0x1500a0, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESHEX=r4, @ANYRES32=r2, @ANYRESDEC])
read$FUSE(r3, &(0x7f00000041c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x8, 0x34014c40, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x300, 0xc0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)
r6 = fsopen(&(0x7f0000000380)='gadgetfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x1, 0x7)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x8, 0x0, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x5, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20048024)
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x3b12, 0x0, 0x4}})

594.899608ms ago: executing program 1 (id=605):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0xf9}, 0x2}, 0x80)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x20000090)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
fchdir(r3)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044021}, 0x4800)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETSW2(r0, 0x80047456, 0xfffffffffffffffe)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r4, &(0x7f00000002c0), 0x220, 0x100, 0x0)

554.94969ms ago: executing program 5 (id=606):
r0 = shmget(0x3, 0x2000, 0x802, &(0x7f0000ffe000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000440)={0x0, 0x1, 0x5, 0xf, 0x9d, &(0x7f0000000040)="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"})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'sit0\x00', <r3=>0x0, 0x7, 0x8000, 0x37a, 0x400, {{0x10, 0x4, 0x0, 0x30, 0x40, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0x2c, 0x1e, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf0ee}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x8000}]}]}}}}})
sendmsg$nl_route_sched(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@delqdisc={0x3c, 0x25, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0x1}, {0xfff5, 0xfff1}, {0xffe0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x45}, @qdisc_kind_options=@q_blackhole={0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCCBRK(r4, 0x5428)
pipe2$9p(&(0x7f0000000640)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x10080)
write$P9_RLINK(r6, &(0x7f0000000680)={0x7, 0x47, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r7=>r4, {0x1000}}, './file0\x00'})
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r7, 0x942e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1c4, 0x11, 0x4, 0x101, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x1}, [@nested={0x197, 0x1c, 0x0, 0x1, [@typed={0x8, 0xac, 0x0, 0x0, @u32=0xa}, @typed={0x55, 0x5b, 0x0, 0x0, @binary="cb631a0de8daba6e6c4b09ff9ff189fd16f44ebe52233aadad149d3d9a61756f26ee0f05ef260fde5691d9c20e8fdc552f7039271e9744458193121e6e6ee53af4facbbbd95832a32ad5af3c6ee2480d8d"}, @nested={0x4, 0xb4}, @generic="7d02096cc1985393a379c214515fd1314ce045604d2d6371e9eb486c156eb34300377aa845805e57b922a2853f13a72b3e88c7ea13abc44acfb488fdd41efeac6fe8057578f06c121f549f9108102aa13c7ce1b17532d5f21552e88e3fd75e41be3c25e70b4a6ee11d4d107d4925ee241e3fc6a867b2f67ce5d97636cef03330b60b2fba4f07f19f1fac9e4bf46fdfd857e8ae7ce16cd0f40f2bd5d8377ab5a4c1d8ec7d013f6e9ffe46955519c2ebd6033625336c", @nested={0x4, 0x37}, @generic="ca21310af0b1330d8b0b5eb028723f80d40b6712be7f3af1987f5ae83515123c79061fd1d8ea11f7a3f8f85a886261c9d8e4baddae6ce9477c409331f41c5962e8ac79ac06f5094f4bd6fd9f117ed2c75009f11f764d818311f1eb8684ac1b1905813d8c2607aa6393de4a7db0fca2b02c05", @typed={0x4, 0x102}]}, @nested={0x18, 0xa6, 0x0, 0x1, [@typed={0x14, 0x161, 0x0, 0x0, @ipv6=@private1}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x450}, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000000c00)={{<r8=>r5, &(0x7f00000009c0)='blackhole\x00', 0x100840, &(0x7f0000000a00)={@_ha_fsid={[0x4]}, {0xa1, 0x7660, 0x615, 0x1}}, 0x8, &(0x7f0000000a40)={@_ha_fsid}, &(0x7f0000000a80)=0x5}, 0x1, &(0x7f0000000bc0)=[{0x3, 0xd, &(0x7f0000000ac0)=')#\x00', &(0x7f0000000b00)="5e5d06f1e557b92534e415cb2878acc7bfd56a11470d26a0ddb257ea35f2f8f9d15e6765a5916100bb61e2d1d2fd2b3c6bb7ed40459159f3c35e1ca09b16faf9765ab55330ea41e1572d5f218faf74a01b56376d1a97cb8988eabc3286f2c283bbc5817553603810937413afe4ab6910a005139a8103df483d1dd987a0b97e48265d957dfd3e179a1ef633ff5487f10bd80a148f3d89f52704763b5569f761b8e55842d96d0f83c3ac80372d6fee", 0xae, 0xa}]})
write$UHID_INPUT2(r8, &(0x7f0000000c80)={0xc, {0x20, "355b788104eb017cb7d2261783d51003911285f0496f74954c7fba6f6603bc47"}}, 0x26)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDGKBDIACR(r9, 0x4b4a, &(0x7f0000000cc0)=""/109)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
accept4(r10, &(0x7f0000000d40)=@generic, &(0x7f0000000dc0)=0x80, 0x800)
statx(r7, &(0x7f0000000e40)='./file1\x00', 0x100, 0x160, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000f80)={0x0, 0x0, <r12=>0x0}, &(0x7f0000000fc0)=0xc)
fsetxattr$system_posix_acl(r8, &(0x7f0000000e00)='system.posix_acl_access\x00', &(0x7f0000001000)={{}, {}, [], {0x4, 0x3}, [{0x8, 0x1, r11}, {0x8, 0x6, r12}], {0x10, 0x2}, {0x20, 0x7}}, 0x34, 0x0)
ioctl$UI_SET_SNDBIT(r8, 0x4004556a, 0x2)
ioctl$UI_DEV_CREATE(r7, 0x5501)
ioctl$VT_DISALLOCATE(r9, 0x5608)
r13 = syz_open_dev$evdev(&(0x7f0000001040), 0x8, 0xa0001)
ioctl$EVIOCGABS2F(r13, 0x8018456f, &(0x7f0000001080)=""/221)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000001180), 0x401, 0x0)

479.804869ms ago: executing program 1 (id=607):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14)
sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="0f05b77401e87273a336aed936d726d0a2e3bf9374b027aec053e8c33e69b13ddaec83c2aaa4e7db6309d62ba8039b0fb73ebbae0a", 0x35}, {&(0x7f00000002c0)="ef2c5f8ef75d62f7", 0x8}], 0x2, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @rand_addr=0x64010100}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xbd, [@private=0xa010100, @loopback, @local]}, @timestamp_prespec={0x44, 0x54, 0xa, 0x3, 0x9, [{@private=0xa010101, 0xca7d}, {@multicast2, 0x9}, {@remote, 0xff}, {@rand_addr=0x64010100, 0x4}, {@rand_addr=0x64010102}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@remote, 0x5}, {@multicast1, 0xe}]}]}}}], 0xc8}, 0x40000)
r2 = geteuid()
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000480)={0x8, 'veth0_vlan\x00', {'bond0\x00'}, 0x5})
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@migrate={0x134, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@multicast1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x2}, [@sa={0xe4, 0x6, {{@in=@private=0xa010102, @in6=@mcast1, 0x4e21, 0xd, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x84, r1, r2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x4d2, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x16}, {0x7, 0x5, 0x4, 0xffffffff00000000, 0x1, 0x8001, 0x1, 0xff}, {0x9, 0x1, 0x7, 0x5}, {0x80000000, 0xe, 0x8001}, 0x70bd2d, 0x3503, 0xa, 0x4, 0xf9, 0x40}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40004040}, 0x4000)
socket$can_bcm(0x1d, 0x2, 0x2)

427.468043ms ago: executing program 5 (id=608):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00')
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
munmap(&(0x7f00002e0000/0x2000)=nil, 0x2000)
pread64(r0, &(0x7f0000000100)=""/102400, 0x19000, 0x108008)

424.03726ms ago: executing program 1 (id=609):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000640)=ANY=[@ANYBLOB="181e31255924000000050000c1d6cd362007736ebd0000000000820000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x22, 0x1, 0xffffff00, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], <r2=>0x0}, 0x40)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x101800, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)={0xc5f, <r4=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="20002455f8d663de406d0000b105cb143b89ca3664e0097d0cd00fd7c6dabf7de4812a842e525c12b5d4681b50182c05cd5bd6f7958249aec8a3d87223f8", @ANYRES32=r4, @ANYRES64=r2], 0x20)
r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r6 = fsopen(&(0x7f0000000600)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x82)
fchdir(r7)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

409.905555ms ago: executing program 5 (id=610):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x81800)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={<r2=>r1})
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$UHID_INPUT2(r3, &(0x7f0000000100)={0xc, {0x51, "59b148d599212e1060e8e944b5da80b17b84d51365ed73fb9d0e756db8f5b619b6d190bc51a7a9b01580d07a2ab93ca74838e62509e7cbcdd62f230b4452cb585704a586e00e906143630c9d907a9f20a2"}}, 0x57)
symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
fchmod(r3, 0x180)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0x9, <r4=>r0, 0x2})
ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000240)={0x81, 0x7fff, 0x7, 0x7, 0x3, "fc90d4c14b620c3194b0918536859a7549fe9b", 0x8, 0x7a91775})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4)
ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f00000002c0)=[0x7, 0x2])
socket(0xf, 0x1, 0x9)
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2000)
mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x50810, &(0x7f0000000440)={[{@xino_auto}, {@verity_require}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_off}, {@workdir={'workdir', 0x3d, './file0/file0'}}, {@nfs_export_on}, {@workdir={'workdir', 0x3d, './file1'}}, {@uuid_auto}, {@verity_on}], [{@smackfshat={'smackfshat', 0x3d, 'nl80211\x00'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@subj_user={'subj_user', 0x3d, '/dev/uhid\x00'}}, {@dont_measure}]})
ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f0000000540)=0xedcb)
write$char_usb(r4, &(0x7f0000000580)="a02dc21aa4a58e06a46593356cec87dc81351ddf386ed737491b94471b2bbd87d78c34390a47e41c7c2d6b2bace1e2d7", 0x30)
bind$l2tp(r2, &(0x7f00000005c0)={0x2, 0x0, @broadcast, 0x1}, 0x10)
write$UHID_INPUT2(r3, &(0x7f0000000600)={0xc, {0xb1, "ad52463064916d52319daf8b4134430ce1bd79da75c4f916554088d8a79aecf514518d55ebcc0327a932801ec16adcb89baea506f531fc6d361ba9f0fc289414c6c07f82d50d18f7851aca25e86ec070ed51a8b92a8016909aeb1efa3eb7ea88c092113926ab88d83451cbe37140d24c0e78ed409bc1e3be4631012884640d19cf0ac0ce220185efdbd2d9dadcd5410c31c6f22652e54eda4b848ed60bf92098263fbcdb55506074d6875079d23fb6b2ff"}}, 0xb7)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000800)={'tunl0\x00', <r6=>0x0, 0x8040, 0x80, 0x8, 0x1, {{0x19, 0x4, 0x1, 0x11, 0x64, 0x66, 0x0, 0x0, 0x29, 0x0, @broadcast, @broadcast, {[@noop, @lsrr={0x83, 0x17, 0x1d, [@local, @rand_addr=0x64010101, @empty, @multicast2, @private=0xa010101]}, @rr={0x7, 0x27, 0xf8, [@private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end, @rr={0x7, 0xf, 0xbf, [@broadcast, @loopback, @private=0xa010101]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r4, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0], <r7=>0x0, 0x93, &(0x7f00000009c0)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x63, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xa, 0x2, &(0x7f00000006c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ldst={0x0, 0x0, 0x4, 0x9, 0x4, 0x80, 0x10}], &(0x7f0000000700)='syzkaller\x00', 0x2, 0xa5, &(0x7f0000000740)=""/165, 0x40f00, 0x68, '\x00', r6, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x6, &(0x7f0000000c00)=[r4, r4, r4, r4, r4, r4], &(0x7f0000000c40)=[{0x1, 0x1, 0x6, 0xc}, {0x4, 0x4, 0x0, 0x3}, {0x0, 0x2, 0xa, 0x7}, {0x8, 0x2, 0x5}, {0x5, 0x1, 0xe, 0x7}, {0x5, 0x5, 0x3, 0x1}], 0x10, 0x5cc}, 0x94)
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000d80)={0x0, 0x3, 0xf05, 0x6, 0x0, [0x0, <r9=>0x0], [0x4, 0x5, 0x5, 0x8dfc], [0xefc, 0x6, 0x8, 0x3], [0x5a40, 0x9, 0x8000000000000000, 0x100000000]})
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000e00)={r9})
sendmmsg$sock(r2, &(0x7f0000003800)=[{{&(0x7f0000000e40)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5, 0x1}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000ec0)="9aa11c5713633ddbf8129f8b6856df63a6bba7b27c91c16cc4132182622a35107fa1b8a9548d4564885a0a4c80aa0c521260266bff736f518a426c94bb6d8a2b30eeb00e5d6c5615806d489c959f4434353b5d9cd6f786510185698d302559428a4cfd65d3a7ce5a11b53936aed2c4d5f9db68c554fbaa50a0881a456644dea0b057612fe1a7d4349698fceb1e497a19a0abc97aaabae8acc5f22adde92c23a8aba0ec7d68246bf6f8a1c07da509663f93225ccced12c5af8b86e284940f0358221522", 0xc3}, {&(0x7f0000000fc0)="95c4e698f84ef5a536a44e69fcdb0219bbc2fa00c76c87bf01acdcc7938c2a8c4b405b1045b826929b18b74f6c4f4e352978acebe4e73370aa36c37ef71a8a9cd69a19c07a2c220d97b32bd6ab9d921abf1146d536899d1580b36a0c4e1784e712efa12c4e625ce4956506f5cb88755b87ca0be84ae51ee7b839676b69b2b21ce0e24eea8f1e4bdbc5381b8e82912067753adf4bb8ca94bde3951548cd8cf1782f18cd580b30897d2b406083438022b8634e504c4f58ecf8a513f4388893aa17e611f7d0cde74d212cc80b98c9c0e0e44780bbce1691061ef4fc7c38ab6ce0c137355ecec389eccea0376a85900051", 0xef}, {&(0x7f00000010c0)="e084c590155e498457458d47eb6cc4142d902364caaf26c3a7268200fda06f4852f674739cfb0d57a1ea4eb3493c8b8e8d0acb5204711772ce9daa514b9628b30d1608628c1a0b40fa972830557888412578dac10731489854d5a812248ac0948fc687f54631112e90b63fa6e59faa01ecb0ebbb315288bbef2a739805491e14eb7406f1cf6b428c23a2b2602af4bf0c267c095890f03347a2e68ee41e829dd5", 0xa0}], 0x3, &(0x7f00000011c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x6aa5}}, @txtime={{0x18, 0x1, 0x3d, 0xde}}, @txtime={{0x18, 0x1, 0x3d, 0xae82}}], 0x60}}, {{&(0x7f0000001240)=@phonet={0x23, 0x2, 0x5, 0xe}, 0x80, &(0x7f0000001300)=[{&(0x7f00000012c0)="a387071a68715463648954d74c5cb7bca6262c37fac7ee036aab", 0x1a}], 0x1, &(0x7f0000001340)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x48}}, {{&(0x7f00000013c0)=@caif=@dgm={0x25, 0xc209, 0xb}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001440)="649c47d589a8a94fd61b095663a7d2d506e04fe193bc1714ad036b65f96e32e95081b7e7b47f281ac212bb1a1376b68d2154ce93ae6cf25a9e62566316421a2713c807fc6ed00a896bae769ea102ba4fa72d88157c9b7dd55f978c9242bfa061a501b41c737a33ff658283b79e2550897a25312c2d836a83f9dc8ff10096536d6bf70a633cc93a26f6c59a001880f41cb6964d9e6f0d6e79ca3785d678b0b46f894383087436a2278b979fd37e3130a286207a513751f02594a0ada1", 0xbc}, {&(0x7f0000001500)="3228d4f340b6b6bb32b223ddcc56a3e8fcb75be382b0641a1067eb394dc68ea272da13a6cefe6915e068710567c5f9927ee090c6f8e671d98672aec7e80d1c0b6edc66a472a76c08ec277be752b5f92aa8b435692e22aad5725a6fe4c93748ee5290d4f7e1e8b2b01391e5aed745baa568471f4440d383205f8448a2bb6c457e566da5195ea80cb577b1e4ef9e4f83072e54a3eb6c", 0x95}, {&(0x7f00000015c0)="ce319130779c427203a29da1fbb277a9d4774ae540dc7f4b2feeafcd0721e492a5ce022dd402344d0397902e93b9488fab7e9005c047781e9592e3d2cb6b6e11d37acb6eac25a34189ac7d1d43e4a11e9c0a81772cbb175bb55c392f3f3ac7be5e17b60a37d8c84f458efa276b20a2937d4937530ecb97b2a159a5de4cd0a6ea02d598b1c2ebd841becf28a9e35875037bea9fd2cf4125d00fbf59eac7f0728a9f31246b4f8578de86aacf6b3454a6ff85688adb5ff57539f71737fe7476a0b7c060411f6f5acf629bfc1899f383faf6322917150af66e42b640943fa2133305da4b6bba303babccde230f7b37ee1a944be4ec3206638c", 0xf7}], 0x3, &(0x7f0000001700)=[@mark={{0x14, 0x1, 0x24, 0x72}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff01}}, @mark={{0x14, 0x1, 0x24, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x2569}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x63}}, @mark={{0x14, 0x1, 0x24, 0xf}}], 0xc0}}, {{&(0x7f00000017c0)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001840)="1b0361a0325d9ae0409c76f77c81f16a0faee0f2e9b6349399de61767e339613b9ec5c7900b71056a2ba6ec723e09a6da85c2952c96abf2755ef8b268d59d92853a41f041e9963081b150bcce0c86f99ca43e0f4f8541dc619f0c6efcdb270754a80f5945a5343625ffe929a1536d1f8ea80b51b65a62521a28544cb9425162c7d528ba862cc0b78b42b31d26ae33e0e751342cc19f7e09a49579e0a5e1d6364dc9898e01dcae7623d0b28136d4b50d27f2ace2aad6fea0861a9c8a006f9abd43f226efbaeff50f908f9ca6f6873bdc3a4cb0c8ef4a135cb9c20eae2c83dce031edd0dc1a84cdbd367e769dd1c3c86baf5985476", 0xf4}, {&(0x7f0000001940)="e66b04a6a9829d5b448986ca0f2f1471c5cce9b4235412fd73449f0a90f5d54906a75e9444280db268065220e39486583046108736edc918d7ef39378c67b0841777874c1395260e6f6fddaa2dea5a9852e19d7e37a41e5e9970ccc3b497026b2f738926de47ac371bbe6d8569a0767260abba0f62f94e299c3162dbabf09482839d27bcf0b1cb4108d1b2d0faa95fcd90424419c214cb7824f815052c0107ab57495b1534a7029500f94e54009c42a1c3f2bf5a19f5feef32a60269a8a077b4af52b096c84592b79f57f70854d47dda1e5c08a84d0991d50acab55c6612e6fdc56fa9b18acfaa932c1e742ea88a0c3b284f96171c", 0xf5}, {&(0x7f0000001a40)="d8fa8d20c4013c8b7de69bed432888f6b7f6a165339ac0362cd58599f18d6fcf61a7165762bbb675ff874f2aadf9c501cf562ade775b914ebe1c17cb622e63f54787746999c786068ee9109cde0ed079f786fe", 0x53}, {&(0x7f0000001ac0)="0d48069ec085a1cc1e434fba289f1985507e75528d3fac4579127a9dd16df51231e2accce980a25f381647ca9e5f6e20d5090c3e0d308e959061e388", 0x3c}, {&(0x7f0000001b00)="6301ea253d0beee0d14c39e965fa059a6468872280ce6aa61bedf4ccc9171924c6650fc66c5427f6fd179c5f44da424c55b909bab3b8af28cb65743ab39c96c3fbe4da14ade54aabfe168ba2200d126dfbf99e7da4a1d33d7320bd535d565dbe331d5eb2f0a17b1b6d0db8083f604047a06aa68580eda1753a6f443071926e3d8ee99ec9890fae5b8f795b76e1c4cb12a284c898d69d269feb38440f84161106620caf7ef851be9221b788a69b62b8d318905deadf06fa93a0fc661424953611e5a25a6e7552eeb91b958b6f8fdb75528e31f3b40a4469083f2763cd", 0xdc}], 0x5}}, {{&(0x7f0000001c80)=@generic={0x18, "93bf43ec5719a86262cb5b38890a602ea9b012a11d99eb81f4f57906501dc6441e57ae68511cc01a438de71862ac8a1f8407dfbba8c70f28eff5fdbb68c0ff050fc47a8764998dccb0263295834f92326ea234335accc943e3c2c719b574c31ba976f502a69d8f4887587e68773b6ad6fc77401e5c55f107bccdc88ae0c1"}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d00)="44b56862835ec6df75a80d06d5231e020eb2579460dd8a412d9945db07967429a2ea32da3b0fb44398f1791fd7f3ed4718b36ee919a0907ca325a07eeb3030c1420fc5e07d24ec5fd11f27a9db8e3cb4e4a61ac90b42df53b9ac81f6230673f4d561a1445a374d7120410962961741114c8210f50e1013c45ec83aa336f7770f890be42de7f285a3f69d9a89b4aa59c0134281f81fbef41a1a54a1d5c35c0ca65929910284497bfc07ef60b9a453efd1a5ee50be935650d6edb622312ceba34b2f76d06629ad4073720df5ffab4a88d7f424360683dee209de616dcf3592a7b97cfdf92c3864b9ccd358c2a4", 0xec}, {&(0x7f0000001e00)="d7d88a34796cab8842a3a6832a4aa848b12a84575a8c6c2454eb0bae2c647fd5fdb90ecd828649c3d6a5e1fc35fcd33bba62528c9ae0b69694", 0x39}, {&(0x7f0000001e40)="f403d2fce8645687c99e36f38e5846d7c4cbd60a79ea39c08157149a2efa47c674bc5f50ee149f65229fb1424b11c2c0a3c4499cf5bd24075b11acad86d93999226c5d76b72446f41082e921ec3baa50b8bd", 0x52}, {&(0x7f0000001ec0)="882d46db08b194dc5d34666043222fbc1f0d21f63349fe3422eeee591bd662e167aea539cb384e5205f95b9b69645973ba7ebec8146aebd56a7c424f72bfe87b4035cac6112188448af8fb8c3a6b13061804fa073557a456bed114a6936a8e752e0ecd99694e3a1b93e8c29b79e6a549d615e97b212dddc01df01e07c3a95fa229f44b4ebcf993a1a45030a2ae51880359f1947f4a8169e0bcab0ab43b", 0x9d}], 0x4, &(0x7f0000001fc0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xfffffffd}}, @txtime={{0x18, 0x1, 0x3d, 0xdc}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xd8}}, {{&(0x7f00000020c0)=@ax25={{0x3, @null, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)="eedb1f1e14a0b9e08719a156212f1f362db9ddb5ca27acab6da850f6175f7b982e3701fdb3529074e372cbe4ee9f1a1fa9d0544a98c9e7588a46888178b17cab8b08fe86f07ea2dc582ed45cc2190062dc0c1774dfd866b4d135fd502ad9d624e6e70dc49c3183b27b9d11fd31e2fabafb9bf3585ac951ec2ba1b8af07ec575e69546f34be86f7858cfe7268186ec49c29e4af7daac35ab37a05907a", 0x9c}], 0x1, &(0x7f0000002240)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}], 0x48}}, {{&(0x7f00000022c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x3, 0x1, {0xa, 0x4e21, 0x2, @empty, 0x3}}}, 0x80, &(0x7f0000003700)=[{&(0x7f0000002340)="68a831c304a271fe8831453c3598f054c569029daefd35ae991ece30e9bd72121873b6c9eb70281fc06613c585ffb57996fdb62557e110776e7315c6287ec87170b1e162f71230068e505c6bbb9214ed5d13834d486a90dc8a5d2931654298a95ddb19947d74c86c4402214e17b6672d9dfef6515963432c338a6a00431c7425df54b36e9aab33f3642cf8ef1d8ae1b1769fb3ce93505de9d225a6b06e4ecad028ea50f8467c31302dd9b0729461f2cc1d82432ebb3a5b40c3002e525a795353bcc9a158b5bc74328e14d2e0b2ac01583f218d392ffc4e32c26db1304a427c623d9067942f995589", 0xe8}, {&(0x7f0000002440)="f88d422713d89f7e7a7a94d411374b0d7ade", 0x12}, {&(0x7f0000002480)="6d4cde0c4e3242ace4379d4235743a722491a28e25573e0b3136ad9e962a0d1ff8657170b1dd19052c3c9c7e", 0x2c}, {&(0x7f00000024c0)="dfb1913bb458ed55f870b71b6fcc19b0633ad913dffb970cd9b593503bd5e483f1cd35fd750774141888f4e1135eda5baab440602ef65d23f814264b0551835639633d633336d395f78b7b2fdb2ccd808ed9496c9fa1507aa3a7cbb9a20241d0c7", 0x61}, {&(0x7f0000002540)="25397e99d30d84d5c8436722ab99ce29f95714c80f657eb1aeaff53e487205437ecda33f4a308fb5bc890840ca33d154782b0b653416e8e7", 0x38}, {&(0x7f0000002580)="1585d76e443e6ab2ed572d480f6dd30b07caaa2c4c2ef1de043b8920d606", 0x1e}, {&(0x7f00000025c0)="02", 0x1}, {&(0x7f0000002600)="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", 0x1000}, {&(0x7f0000003600)="17b77b7a22135a43dcb2348e98959ad712bbdf0271749144ee75bba1e50f04fb02ab9df20e87c3f1c78cada36addb970392d23f5b9261bf0294ec9d05a239eeba6cf1c412d9a32829871b223de21ed1911df716c23f88b3711aae29505f6c549788718eadd58dccf5340ab3b7f4908cb30330074430a67e455928509e145e337eccd625693e2d4923a8fdaac3de25d799ae21212ef529f4d4fa3e3399bb368f684a1fa313e58fef5a6b04eb4626a1d3bcf9e62025b7a9c829c2851e5634f8727d4033b3e4701bd4db651237daa4f39", 0xcf}], 0x9, &(0x7f00000037c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}}], 0x7, 0x8046)
r10 = signalfd4(r8, &(0x7f00000039c0)={[0x3ff]}, 0x8, 0x80000)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000003a00), 0x2, 0x0)
r12 = fcntl$dupfd(r10, 0x0, r11)
r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x8421d7dce39f9664, &(0x7f0000003a40)=0x2000, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f0000003a80)={0xffffffffffffffff, r8})

384.126468ms ago: executing program 1 (id=611):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd25, 0xffffff81, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {0x4}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48082)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x8, 0x8}, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0xc, 0x401})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x8, 0x10}, 0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x5, 0x8}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r0, {0xfffffff9}}, './file1\x00'})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000210001042abd7000fbdbdf25e0000002000000000000000000000000fe8000000000000000000000000000aa4e2302004e2400000200c02000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100000008001f00020000000c001c00", @ANYRES32=0x0, @ANYBLOB="0100000050001100fc000000000000000000000000000000ac141424000000000000000000000000fe800000000000a801000000000000bbe0000002000000000000000000000000330200000135000002000200e99abe5ef6542c1334e1c7a09fe71f79e96b5b12db3de711c22dde5f800659d088cfdcc17396d1897cab21dab1740ec357b647c946c10c5464e6d04ba20edb62879b3b67540df23b2c4bed27f4f07af9207291300404aba99a125868a987a4f75e8e632fb8766459031fed32040445874cf74b6fc583e78c1891f7bd9d59669bde215f2c42052a187adc26117dc5a80ae49428"], 0xb4}}, 0x4c050)

299.386697ms ago: executing program 5 (id=612):
uname(&(0x7f0000000100)=""/211)

291.937597ms ago: executing program 1 (id=613):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000a00)={[{@abort}, {@noblock_validity}, {@auto_da_alloc}, {@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}]}, 0x6, 0x60d, &(0x7f0000000340)="$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")
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000180)={0x6, 0x3, 0x2})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r1, 0x560f, &(0x7f0000000000))

285.005302ms ago: executing program 5 (id=614):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000010000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

218.908509ms ago: executing program 1 (id=615):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2800c1e, &(0x7f00000001c0)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r4 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCGFLAGS(r4, 0x8004745a, 0x0)
setxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000020800130000000000080014"], 0x4c}}, 0x0)

145.184272ms ago: executing program 5 (id=616):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00')
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000180)={0x7, 0x1, 0x3, 0xce, 0x0, 0x15, 0xe, "c250653ccca21ac976740e30bb984eea9a4aa442", "54f580db05b65f766a63babdb3b310ba40e12f55"})
fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000040)=@md5={0x1, "dba2d5979dda64dab5f233f9a49dfc94"}, 0x11, 0x2)
syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0)

144.464345ms ago: executing program 2 (id=617):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00')
ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
dup(0xffffffffffffffff)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@updsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x4d4, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff, 0x2}, {0x0, 0xfffffffffffffffd, 0x1900000000000000, 0x80}, {}, 0x0, 0x0, 0xa, 0x4, 0x80, 0x8}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "d4b6706f80669088e4582151cdff4d1192529ba6f44bbd1312391eab4b21324dcfd0274b3e72bd817980a7f2932d86281cc94d9967ea267301a2121ed4b6b52fb5"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x1000000000000)

104.295285ms ago: executing program 4 (id=618):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x8}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)='%pK    \x00'}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xd}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x5}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7fb}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x9}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl1\x00', <r4=>0x0, 0x4, 0x8, 0x3, 0x4, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x1, 0x4, 0x3}})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/sync_on_suspend', 0xa8042, 0x0)
write$tcp_mem(r5, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x28, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, r1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}]}, &(0x7f0000000680)='syzkaller\x00', 0x8, 0x9e, &(0x7f00000006c0)=""/158, 0x41000, 0x70, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000840)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)=[{0x1, 0x3, 0x9, 0xa}], 0x10, 0x8}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f0000000240), 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x95b}, [@alu={0x4, 0x0, 0x8, 0xb, 0x9, 0x30, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[r1, r0, r2, r0], &(0x7f0000000280)=[{0x2, 0x3, 0x6, 0xb}, {0x3, 0x4, 0xa, 0x8}, {0x4, 0x2, 0x6, 0xc}, {0x2, 0x1, 0x9, 0xa}, {0x2, 0x5, 0x3, 0x6}], 0x10, 0x4}, 0x94)

27.271125ms ago: executing program 2 (id=619):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$notify(r0, 0x402, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ffffffff0000000000000200850000008d0000b144e00600000000004b57af068e814909a32bc311b02133b70fd3a6847c9c3873bbbb930edf1fdd3fcf0c85cb3a2d3a55117f63576d9dbd7386514f4ce8e04d1d4404805160880811667e7297fe5f89381a8f0800000000000000d704b0e897513fdbfaddb5ac32434f35a0c0912f998bc30fd1c491acccda753ab6f82d"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18021000fbffffff000000000000000085000000d00000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="ffd9035e71d0284ad32a5f49f175", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r3, 0x5)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xfa2, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x2}]}, &(0x7f0000000080)=0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet(0xa, 0x801, 0x84)
r6 = socket$inet(0xa, 0x5, 0x2)
listen(r6, 0x8)
listen(r5, 0xfffffffd)
r7 = socket$inet(0xa, 0x801, 0x84)
r8 = socket$inet(0xa, 0x801, 0x84)
listen(r8, 0x8)
listen(r7, 0x1)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xcc, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x4)
listen(r4, 0x8200002)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYRES32=r4], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r11, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c006aeaa62f0d9ae4381deb0acf170000", @ANYRES16=r12, @ANYBLOB="01002bbd7000ffdbdf258300000008000300", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000094)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010001bd7000fddbdf251300150008000300", @ANYRES32=r13, @ANYBLOB="0600140100020000090013008018020b020000000600ab00020000000800a400030000000c004300080000000306000012001300866009968689180102a4b006039b00001200130086b6b69b24068186098430079612000008001400", @ANYRES32=r14, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x400c0}, 0x40810)

27.044799ms ago: executing program 4 (id=620):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1700000054008106fdffffffffffffff07"], 0x18}}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88)

0s ago: executing program 4 (id=621):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000580)=[@request_death, @clear_death={0x400c630e}], 0x0, 0x1000000, 0x0})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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")
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r5], 0x1c8}}, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
utimensat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x9f7fa54a3df54fda)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts.
[   28.031196][ T4656] cgroup: Unknown subsys name 'net'
[   28.160962][ T4656] cgroup: Unknown subsys name 'cpuset'
[   28.163126][ T4656] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   28.325159][ T4656] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   29.226335][ T4673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   29.228323][ T4675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   29.230654][ T4675] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   29.244691][   T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   29.255293][ T4681] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   29.256046][ T4681] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   29.256485][ T4681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   29.256807][ T4681] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   29.256987][ T4681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   29.257139][ T4681] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   29.257839][ T4681] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   29.258113][ T4681] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   29.258256][ T4681] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   29.258979][ T4673] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   29.268141][ T4683] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   29.268171][ T4675] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   29.268380][ T4682] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   29.270054][ T4682] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   29.270402][ T4683] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   29.280209][ T4682] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   29.282287][ T4683] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   29.282360][ T4682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   29.282814][ T4671] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   29.290450][ T4682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   29.292057][ T4682] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   29.638752][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.639683][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.639756][ T4668] bridge_slave_0: entered allmulticast mode
[   29.640241][ T4668] bridge_slave_0: entered promiscuous mode
[   29.652805][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.652860][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.652934][ T4668] bridge_slave_1: entered allmulticast mode
[   29.653421][ T4668] bridge_slave_1: entered promiscuous mode
[   29.677096][ T4668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.695029][ T4668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.698052][ T4667] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.699999][ T4667] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.700448][ T4667] bridge_slave_0: entered allmulticast mode
[   29.701145][ T4667] bridge_slave_0: entered promiscuous mode
[   29.701943][ T4667] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.701969][ T4667] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.702052][ T4667] bridge_slave_1: entered allmulticast mode
[   29.702505][ T4667] bridge_slave_1: entered promiscuous mode
[   29.714290][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.714365][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.714430][ T4669] bridge_slave_0: entered allmulticast mode
[   29.714850][ T4669] bridge_slave_0: entered promiscuous mode
[   29.720845][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.720891][ T4670] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.720960][ T4670] bridge_slave_0: entered allmulticast mode
[   29.721546][ T4670] bridge_slave_0: entered promiscuous mode
[   29.722437][ T4670] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.722457][ T4670] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.722546][ T4670] bridge_slave_1: entered allmulticast mode
[   29.722987][ T4670] bridge_slave_1: entered promiscuous mode
[   29.726454][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.726509][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.726562][ T4669] bridge_slave_1: entered allmulticast mode
[   29.727349][ T4669] bridge_slave_1: entered promiscuous mode
[   29.742701][ T4668] team0: Port device team_slave_0 added
[   29.747076][ T4668] team0: Port device team_slave_1 added
[   29.749403][ T4667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.754226][ T4670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.755707][ T4669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.756765][ T4669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.761000][ T4667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.767206][ T4670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.779202][ T4679] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.779283][ T4679] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.779343][ T4679] bridge_slave_0: entered allmulticast mode
[   29.779970][ T4679] bridge_slave_0: entered promiscuous mode
[   29.784646][ T4669] team0: Port device team_slave_0 added
[   29.785600][ T4669] team0: Port device team_slave_1 added
[   29.786097][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.786105][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.786116][ T4668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.787061][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.787078][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.787094][ T4668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.787472][ T4679] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.787529][ T4679] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.787591][ T4679] bridge_slave_1: entered allmulticast mode
[   29.788188][ T4679] bridge_slave_1: entered promiscuous mode
[   29.801579][ T4670] team0: Port device team_slave_0 added
[   29.809890][ T4670] team0: Port device team_slave_1 added
[   29.813514][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.813536][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.813563][ T4669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.818491][ T4679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.820265][ T4679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.821082][ T4667] team0: Port device team_slave_0 added
[   29.822259][ T4667] team0: Port device team_slave_1 added
[   29.822512][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.822518][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.822531][ T4669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.837564][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.837588][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.837745][ T4670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.840586][ T4668] hsr_slave_0: entered promiscuous mode
[   29.840963][ T4668] hsr_slave_1: entered promiscuous mode
[   29.846299][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.846310][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.846323][ T4670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.851940][ T4679] team0: Port device team_slave_0 added
[   29.852784][ T4679] team0: Port device team_slave_1 added
[   29.858238][ T4667] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.858247][ T4667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.858260][ T4667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.859085][ T4667] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.859096][ T4667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.859111][ T4667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.879945][ T4669] hsr_slave_0: entered promiscuous mode
[   29.880293][ T4669] hsr_slave_1: entered promiscuous mode
[   29.880511][ T4669] debugfs: 'hsr0' already exists in 'hsr'
[   29.880541][ T4669] Cannot create hsr debugfs directory
[   29.887303][ T4679] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.887807][ T4679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.887838][ T4679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.894881][ T4670] hsr_slave_0: entered promiscuous mode
[   29.895187][ T4670] hsr_slave_1: entered promiscuous mode
[   29.895404][ T4670] debugfs: 'hsr0' already exists in 'hsr'
[   29.895413][ T4670] Cannot create hsr debugfs directory
[   29.895693][ T4679] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.895701][ T4679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.895715][ T4679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.922844][ T4667] hsr_slave_0: entered promiscuous mode
[   29.923192][ T4667] hsr_slave_1: entered promiscuous mode
[   29.923379][ T4667] debugfs: 'hsr0' already exists in 'hsr'
[   29.923389][ T4667] Cannot create hsr debugfs directory
[   29.932808][ T4679] hsr_slave_0: entered promiscuous mode
[   29.934499][ T4679] hsr_slave_1: entered promiscuous mode
[   29.935836][ T4679] debugfs: 'hsr0' already exists in 'hsr'
[   29.936934][ T4679] Cannot create hsr debugfs directory
[   30.069302][ T4668] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.073123][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.073433][ T4668] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.075482][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.079201][ T4668] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.081716][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.083547][ T4668] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.085725][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.102203][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.102249][ T4668] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.102401][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.102436][ T4668] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.111722][ T4669] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.114105][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.114765][ T4669] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.116284][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.119130][ T4669] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.122672][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.123356][ T4669] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.124828][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.151958][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.155509][ T4667] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.157965][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.158254][ T4667] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.160743][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.165726][ T4667] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.166893][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.167189][ T4667] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.169327][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.173613][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.173658][ T4669] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.173755][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.173784][ T4669] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.176647][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.177770][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.182724][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.184402][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.198597][ T4668] 8021q: adding VLAN 0 to HW filter on device team0
[   30.210043][  T853] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.210099][  T853] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.210522][  T853] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.210558][  T853] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.216455][ T4679] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.219169][ T4679] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.221120][ T4679] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.223454][ T4679] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.231910][ T4679] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.234410][ T4679] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.236261][ T4679] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.238568][ T4679] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.261966][ T4670] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.264207][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.265865][ T4670] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.268456][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.275325][ T4668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.275362][ T4668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.285777][ T4670] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.288112][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.289157][ T4670] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.291262][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.313030][ T4669] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.326598][ T4679] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.331327][ T4669] 8021q: adding VLAN 0 to HW filter on device team0
[   30.338190][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.338232][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.348164][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.348209][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.356420][ T4679] 8021q: adding VLAN 0 to HW filter on device team0
[   30.372430][ T4667] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.376308][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.376354][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.381881][  T193] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.381929][  T193] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.400520][ T4670] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.411233][ T4667] 8021q: adding VLAN 0 to HW filter on device team0
[   30.425304][ T4670] 8021q: adding VLAN 0 to HW filter on device team0
[   30.426876][ T4667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.428981][ T4667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.433869][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.433920][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.434269][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.434287][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.436286][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.436306][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.447798][ T4679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.447831][ T4679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.457438][  T853] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.457479][  T853] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.488716][ T4670] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.488756][ T4670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.498172][ T4668] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.542898][ T4668] veth0_vlan: entered promiscuous mode
[   30.560558][ T4668] veth1_vlan: entered promiscuous mode
[   30.575477][ T4668] veth0_macvtap: entered promiscuous mode
[   30.585568][ T4668] veth1_macvtap: entered promiscuous mode
[   30.595093][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.598859][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.613779][  T853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.613985][  T853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.614003][  T853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.614020][  T853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.640406][ T4669] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.654660][ T4669] veth0_vlan: entered promiscuous mode
[   30.668155][ T4669] veth1_vlan: entered promiscuous mode
[   30.676578][ T4669] veth0_macvtap: entered promiscuous mode
[   30.695826][ T4669] veth1_macvtap: entered promiscuous mode
[   30.697484][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.698320][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.706430][ T4679] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.720598][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.721611][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.731694][   T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.731747][   T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.731768][   T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.731784][   T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.743392][ T4667] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.745059][ T4820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.745102][ T4820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.782152][ T4827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.782181][ T4827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.788327][ T4670] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.796621][ T4668] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   30.827870][ T4679] veth0_vlan: entered promiscuous mode
[   30.848955][ T4670] veth0_vlan: entered promiscuous mode
[   30.850579][ T4827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.852060][ T4827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.865644][ T4679] veth1_vlan: entered promiscuous mode
[   30.894438][ T4670] veth1_vlan: entered promiscuous mode
[   30.901459][ T4670] veth0_macvtap: entered promiscuous mode
[   30.902968][ T4670] veth1_macvtap: entered promiscuous mode
[   30.912464][ T4679] veth0_macvtap: entered promiscuous mode
[   30.914613][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.918360][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.921599][ T4679] veth1_macvtap: entered promiscuous mode
[   30.926203][ T4667] veth0_vlan: entered promiscuous mode
[   30.931947][   T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.933071][   T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.933102][   T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.933123][   T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.946882][ T4667] veth1_vlan: entered promiscuous mode
[   30.951132][ T4679] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.216026][ T4679] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.221809][ T4852] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   31.221857][ T4852] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2'.
[   31.233096][   T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.233151][   T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.233172][   T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.233189][   T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.238125][ T4667] veth0_macvtap: entered promiscuous mode
[   31.242666][ T4667] veth1_macvtap: entered promiscuous mode
[   31.247360][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.247395][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.261353][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.286794][ T4827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.286826][ T4827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.290858][ T4682] Bluetooth: hci2: command tx timeout
[   31.290923][ T4682] Bluetooth: hci1: command tx timeout
[   31.298102][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.315890][   T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.315937][   T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.315967][   T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.315989][   T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.345674][ T4827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.347385][ T4827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.366930][ T4827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.366968][ T4827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.370187][ T4683] Bluetooth: hci4: command tx timeout
[   31.370319][ T4683] Bluetooth: hci3: command tx timeout
[   31.370377][ T4683] Bluetooth: hci0: command tx timeout
[   31.376374][ T4827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.376401][ T4827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.454210][ T4859] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[   31.646237][  T853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.646268][  T853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.310890][ T4880] syz.2.7 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   32.347007][ T4880] loop2: detected capacity change from 0 to 8192
[   32.350285][ T4880] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   32.387827][ T4878] loop3: detected capacity change from 0 to 512
[   32.391226][ T4878] =======================================================
[   32.391226][ T4878] WARNING: The mand mount option has been deprecated and
[   32.391226][ T4878]          and is ignored by this kernel. Remove the mand
[   32.391226][ T4878]          option from the mount to silence this warning.
[   32.391226][ T4878] =======================================================
[   32.391403][ T4878] EXT4-fs: Ignoring removed mblk_io_submit option
[   32.401643][ T4878] EXT4-fs (loop3): Test dummy encryption mode enabled
[   32.412116][ T4878] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.422717][ T4878] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[   32.422926][ T4878] EXT4-fs error (device loop3): __ext4_add_entry:2412: inode #2: comm syz.3.4: Directory hole found for htree leaf block 0
[   32.428441][ T4878] EXT4-fs (loop3): Remounting filesystem read-only
[   32.953383][ T4890] geneve2: entered promiscuous mode
[   33.037980][ T4891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.038209][ T4891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.050495][ T4892] futex_wake_op: syz.0.8 tries to shift op by 32; fix this program
[   33.399872][ T4683] Bluetooth: hci2: command tx timeout
[   33.400564][ T4682] Bluetooth: hci1: command tx timeout
[   33.605736][ T4682] Bluetooth: hci0: command tx timeout
[   33.607063][ T4682] Bluetooth: hci3: command tx timeout
[   33.608378][ T4682] Bluetooth: hci4: command tx timeout
[   33.830815][ T4884] Set syz1 is full, maxelem 65536 reached
[   33.935041][ T4679] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[   33.961342][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'.
[   33.971886][ T4900] macsec1: entered promiscuous mode
[   33.972969][ T4900] bridge0: entered promiscuous mode
[   34.001915][ T4902] loop4: detected capacity change from 0 to 512
[   34.033760][ T4902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.124365][ T4667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.399518][   T30] audit: type=1326 audit(34.370:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4941 comm="syz.1.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577a28 code=0x50000
[   34.399560][   T30] audit: type=1326 audit(34.370:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4941 comm="syz.1.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577a28 code=0x50000
[   34.399588][   T30] audit: type=1326 audit(34.370:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4941 comm="syz.1.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577a28 code=0x50000
[   34.399608][   T30] audit: type=1326 audit(34.370:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4941 comm="syz.1.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577a28 code=0x50000
[   34.399627][   T30] audit: type=1326 audit(34.370:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4941 comm="syz.1.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577a28 code=0x50000
[   34.399647][   T30] audit: type=1326 audit(34.370:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4941 comm="syz.1.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577a28 code=0x50000
[   34.399664][   T30] audit: type=1326 audit(34.370:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4941 comm="syz.1.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577a28 code=0x50000
[   34.399681][   T30] audit: type=1326 audit(34.370:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4941 comm="syz.1.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577a28 code=0x50000
[   34.399699][   T30] audit: type=1326 audit(34.370:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4941 comm="syz.1.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577a28 code=0x50000
[   34.399716][   T30] audit: type=1326 audit(34.380:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4941 comm="syz.1.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577a28 code=0x50000
[   34.442243][ T4945] process 'syz.4.24' launched './file0' with NULL argv: empty string added
[   34.477714][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'.
[   34.500636][ T4948] macsec1: entered promiscuous mode
[   34.500669][ T4948] bridge0: entered promiscuous mode
[   34.618765][ T4955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25'.
[   34.630898][ T4955] bond0: entered promiscuous mode
[   34.630930][ T4955] bond_slave_0: entered promiscuous mode
[   34.631022][ T4955] bond_slave_1: entered promiscuous mode
[   34.641109][ T4957] input: syz0 as /devices/virtual/input/input2
[   34.642089][ T4955] bond0: left promiscuous mode
[   34.642115][ T4955] bond_slave_0: left promiscuous mode
[   34.644053][ T4955] bond_slave_1: left promiscuous mode
[   34.784846][ T4965] loop0: detected capacity change from 0 to 1024
[   34.796242][ T4965] EXT4-fs: Ignoring removed oldalloc option
[   34.796272][ T4965] EXT4-fs: Ignoring removed orlov option
[   34.820650][ T4965] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002]
[   34.820707][ T4965] System zones: 0-1, 3-12
[   34.821259][ T4965] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.850690][ T4670] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[   34.903893][ T4972] warning: `syz.0.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   34.907398][ T4972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'.
[   34.910885][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'.
[   35.142888][ T4978] loop3: detected capacity change from 0 to 2048
[   35.144080][ T4978] EXT4-fs: Ignoring removed oldalloc option
[   35.155412][ T4978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.186588][ T4983] loop2: detected capacity change from 0 to 512
[   35.197642][ T4983] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   35.197666][ T4983] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   35.206043][ T4983] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   35.210873][ T4983] EXT4-fs (loop2): 1 truncate cleaned up
[   35.211347][ T4983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.237511][ T4977] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   35.242232][ T4977] EXT4-fs (loop3): Remounting filesystem read-only
[   35.242345][ T4977] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30)
[   35.248587][ T4978] Zero length message leads to an empty skb
[   35.307547][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'.
[   35.309211][ T4679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.327541][ T4992] macsec1: entered promiscuous mode
[   35.332119][ T4992] bridge0: entered promiscuous mode
[   35.402155][ T5000] loop3: detected capacity change from 0 to 1024
[   35.413902][ T5000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   35.450066][ T4683] Bluetooth: hci1: command tx timeout
[   35.450115][ T4683] Bluetooth: hci2: command tx timeout
[   35.468278][ T4679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   35.495820][ T5005] fuse: fd is not a fuse device
[   35.496757][ T4669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.651887][ T5007] loop2: detected capacity change from 0 to 128
[   35.690209][ T4682] Bluetooth: hci4: command tx timeout
[   35.690292][ T4682] Bluetooth: hci3: command tx timeout
[   35.690319][ T4682] Bluetooth: hci0: command tx timeout
[   35.691877][ T5015] loop4: detected capacity change from 0 to 8192
[   35.697425][ T5017] loop3: detected capacity change from 0 to 128
[   35.699344][ T5017] vfat: Unknown parameter 'o'
[   35.731131][ T5015]  loop4: p1 < > p3 < > p4
[   35.731160][ T5015] loop4: partition table partially beyond EOD, truncated
[   35.731337][ T5015] loop4: p1 start 4294967040 is beyond EOD, truncated
[   35.733005][ T5015] loop4: p4 size 851974 extends beyond EOD, truncated
[   35.737816][ T5015] netlink: 44 bytes leftover after parsing attributes in process `syz.4.45'.
[   35.743132][ T5015] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.743427][ T5015] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.818759][ T4660] udevd[4660]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   35.824789][ T4658] udevd[4658]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   35.965634][ T5039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'.
[   35.970270][ T5039] Injecting memory failure for pfn 0x137380 at process virtual address 0x20000000
[   35.975676][ T5039] Memory failure: 0x137380: Failed to invalidate
[   35.975701][ T5039] Memory failure: 0x137380: dirty LRU page still referenced by 1 users
[   35.975713][ T5039] Memory failure: 0x137380: recovery action for dirty LRU page: Failed
[   35.998995][ T5043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'.
[   36.002207][ T5043] macsec1: entered promiscuous mode
[   36.002235][ T5043] bridge0: entered promiscuous mode
[   36.163789][ T5046] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   36.174943][ T5046] EXT4-fs (loop4): 1 truncate cleaned up
[   36.175421][ T5046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.254948][ T5053] EXT4-fs: Ignoring removed nobh option
[   36.262116][ T5053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.387948][ T5057] tmpfs: Unknown parameter 'M>�����o~'
[   37.499667][ T4667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.530179][ T4682] Bluetooth: hci1: command tx timeout
[   37.531426][ T4683] Bluetooth: hci2: command tx timeout
[   37.730965][ T5068] FAT-fs (loop2): Directory bread(block 64) failed
[   37.731002][ T5068] FAT-fs (loop2): Directory bread(block 65) failed
[   37.731030][ T5068] FAT-fs (loop2): Directory bread(block 66) failed
[   37.731042][ T5068] FAT-fs (loop2): Directory bread(block 67) failed
[   37.731093][ T5068] FAT-fs (loop2): Directory bread(block 68) failed
[   37.731105][ T5068] FAT-fs (loop2): Directory bread(block 69) failed
[   37.731127][ T5068] FAT-fs (loop2): Directory bread(block 70) failed
[   37.731137][ T5068] FAT-fs (loop2): Directory bread(block 71) failed
[   37.731159][ T5068] FAT-fs (loop2): Directory bread(block 72) failed
[   37.731169][ T5068] FAT-fs (loop2): Directory bread(block 73) failed
[   37.775822][ T4683] Bluetooth: hci0: command tx timeout
[   37.775867][ T4683] Bluetooth: hci3: command tx timeout
[   37.775897][ T4683] Bluetooth: hci4: command tx timeout
[   37.811484][ T5075] set_capacity_and_notify: 3 callbacks suppressed
[   37.813006][ T5075] loop3: detected capacity change from 0 to 512
[   37.816161][ T5075] EXT4-fs: Ignoring removed mblk_io_submit option
[   37.817896][ T5075] EXT4-fs: inline encryption not supported
[   37.817964][ T5075] EXT4-fs: Ignoring removed mblk_io_submit option
[   37.818489][ T5075] EXT4-fs (loop3): Test dummy encryption mode enabled
[   37.818500][ T5075] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   37.821054][ T5075] EXT4-fs (loop3): 1 truncate cleaned up
[   37.821532][ T5075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.838703][ T4668] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.915059][ T5075] Illegal XDP return value 4294967274 on prog  (id 11) dev N/A, expect packet loss!
[   37.942739][ T5080] vlan2: entered promiscuous mode
[   37.943773][ T5080] veth1_virt_wifi: entered promiscuous mode
[   37.970860][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'.
[   37.996264][ T4679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.015484][ T5081] futex_wake_op: syz.1.60 tries to shift op by 32; fix this program
[   38.913414][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'.
[   39.066207][ T5124] can0: slcan on ttyS3.
[   39.070864][ T5124] loop3: detected capacity change from 0 to 256
[   39.090699][ T5124] FAT-fs (loop3): Directory bread(block 64) failed
[   39.090733][ T5124] FAT-fs (loop3): Directory bread(block 65) failed
[   39.090762][ T5124] FAT-fs (loop3): Directory bread(block 66) failed
[   39.090773][ T5124] FAT-fs (loop3): Directory bread(block 67) failed
[   39.090795][ T5124] FAT-fs (loop3): Directory bread(block 68) failed
[   39.090806][ T5124] FAT-fs (loop3): Directory bread(block 69) failed
[   39.090838][ T5124] FAT-fs (loop3): Directory bread(block 70) failed
[   39.090851][ T5124] FAT-fs (loop3): Directory bread(block 71) failed
[   39.090870][ T5124] FAT-fs (loop3): Directory bread(block 72) failed
[   39.090880][ T5124] FAT-fs (loop3): Directory bread(block 73) failed
[   39.140271][ T5134] loop0: detected capacity change from 0 to 512
[   39.154463][ T5134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.171960][ T5124] can0 (unregistered): slcan off ttyS3.
[   39.204463][ T4670] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.233428][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'.
[   39.241960][ T5145] macsec1: entered promiscuous mode
[   39.241987][ T5145] bridge0: entered promiscuous mode
[   39.365121][ T5164] fuse: Bad value for 'fd'
[   39.877750][ T5188] loop2: detected capacity change from 0 to 128
[   39.912428][   T12] kworker/u8:0: attempt to access beyond end of device
[   39.912428][   T12] loop3: rw=1, sector=1192, nr_sectors = 32 limit=256
[   39.916972][   T12] kworker/u8:0: attempt to access beyond end of device
[   39.916972][   T12] loop3: rw=1, sector=1288, nr_sectors = 32 limit=256
[   39.921316][   T12] kworker/u8:0: attempt to access beyond end of device
[   39.921316][   T12] loop3: rw=1, sector=1352, nr_sectors = 32 limit=256
[   39.924358][   T12] kworker/u8:0: attempt to access beyond end of device
[   39.924358][   T12] loop3: rw=1, sector=1416, nr_sectors = 32 limit=256
[   39.927600][   T12] kworker/u8:0: attempt to access beyond end of device
[   39.927600][   T12] loop3: rw=1, sector=1480, nr_sectors = 32 limit=256
[   39.930823][   T12] kworker/u8:0: attempt to access beyond end of device
[   39.930823][   T12] loop3: rw=1, sector=1544, nr_sectors = 32 limit=256
[   39.933860][   T12] kworker/u8:0: attempt to access beyond end of device
[   39.933860][   T12] loop3: rw=1, sector=1608, nr_sectors = 32 limit=256
[   39.933952][   T12] kworker/u8:0: attempt to access beyond end of device
[   39.933952][   T12] loop3: rw=1, sector=1672, nr_sectors = 32 limit=256
[   39.934007][   T12] kworker/u8:0: attempt to access beyond end of device
[   39.934007][   T12] loop3: rw=1, sector=1736, nr_sectors = 32 limit=256
[   39.934059][   T12] kworker/u8:0: attempt to access beyond end of device
[   39.934059][   T12] loop3: rw=1, sector=1832, nr_sectors = 32 limit=256
[   39.946299][ T5189] futex_wake_op: syz.4.80 tries to shift op by 32; fix this program
[   40.900746][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'.
[   40.961577][ T5210] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   40.986222][ T5213] netlink: 'syz.1.90': attribute type 2 has an invalid length.
[   40.991959][ T5213] netlink: 'syz.1.90': attribute type 2 has an invalid length.
[   41.058253][   T30] kauditd_printk_skb: 446 callbacks suppressed
[   41.058288][   T30] audit: type=1326 audit(41.040:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5228 comm="syz.3.94" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a177a28 code=0x0
[   41.145692][ T5246] fuse: Bad value for 'fd'
[   41.226271][ T5247] binder: 5244:5247 tried to acquire reference to desc 0, got 1 instead
[   41.226448][ T5247] binder: 5244:5247 got transaction with invalid offsets size, 39
[   41.226511][ T5247] binder: 5244:5247 transaction call to 5244:0 failed 5/29201/-22, code 0 size 72-39 line 3440
[   41.463226][ T4761] binder: undelivered TRANSACTION_ERROR: 29201
[   41.572690][ T5272] loop0: detected capacity change from 0 to 512
[   41.575230][ T5272] EXT4-fs (loop0): Test dummy encryption mode enabled
[   41.575268][ T5272] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   41.580620][ T5272] EXT4-fs (loop0): 1 truncate cleaned up
[   41.581106][ T5272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.584973][ T5272] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   41.616096][ T5272] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.106: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   41.620519][ T5272] EXT4-fs (loop0): Remounting filesystem read-only
[   41.835625][ T5287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.111'.
[   41.837610][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'.
[   41.866388][ T5290] binder: 5289:5290 ioctl 4018620d 0 returned -22
[   41.887389][ T4670] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.887741][ T5290] binder: 5289:5290 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   41.887771][ T5290] binder: 5290 RLIMIT_NICE not set
[   41.946788][ T4820] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.023820][ T4683] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   42.026040][ T4683] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   42.027828][ T4683] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   42.029740][ T4683] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   42.031709][ T4683] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   42.113057][ T5306] loop3: detected capacity change from 0 to 128
[   42.146445][ T4820] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.166393][ T5309] loop4: detected capacity change from 0 to 512
[   42.186525][ T5309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.221983][ T5316] loop3: detected capacity change from 0 to 256
[   42.285127][ T4820] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.369032][ T4820] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.398647][ T4667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.553836][   T30] audit: type=1326 audit(42.540:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5342 comm="syz.4.124" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a977a28 code=0x0
[   42.994753][ T5364] loop2: detected capacity change from 0 to 512
[   42.996627][ T5364] EXT4-fs: inline encryption not supported
[   43.004107][ T5364] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.126: missing EA_INODE flag
[   43.007497][ T5364] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   43.009091][ T5364] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.126: error while reading EA inode 11 err=-117
[   43.011022][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   43.011032][    C0] EXT4-fs (loop2): initial error at time 42: ext4_xattr_inode_iget:441: inode 11
[   43.011048][    C0] EXT4-fs (loop2): last error at time 42: ext4_xattr_inode_iget:441: inode 11
[   43.018619][ T5364] loop2: lost filesystem error report for type 5 error -117
[   43.022371][ T5364] EXT4-fs (loop2): 1 orphan inode deleted
[   43.022929][ T5364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.066158][ T4669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.142926][ T4820] bridge_slave_1: left allmulticast mode
[   43.142992][ T4820] bridge_slave_1: left promiscuous mode
[   43.143657][ T4820] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.147154][ T4820] bridge_slave_0: left allmulticast mode
[   43.147183][ T4820] bridge_slave_0: left promiscuous mode
[   43.147265][ T4820] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.307504][ T5396] futex_wake_op: syz.3.131 tries to shift op by 32; fix this program
[   43.476933][ T4820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   43.759749][ T4820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   43.999594][ T4820] bond0 (unregistering): Released all slaves
[   44.144966][ T4682] Bluetooth: hci3: command tx timeout
[   44.296927][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.303116][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.304800][ T5299] bridge_slave_0: entered allmulticast mode
[   44.306736][ T5299] bridge_slave_0: entered promiscuous mode
[   44.311489][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.314837][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.314942][ T5299] bridge_slave_1: entered allmulticast mode
[   44.315401][ T5299] bridge_slave_1: entered promiscuous mode
[   44.415772][ T5299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.424754][ T5299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.445569][ T5299] team0: Port device team_slave_0 added
[   44.493492][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'.
[   44.506453][ T5437] netlink: 'syz.3.139': attribute type 49 has an invalid length.
[   44.538262][ T5299] team0: Port device team_slave_1 added
[   44.555612][ T4356] 8021q: adding VLAN 0 to HW filter on device eth0
[   44.557383][ T5299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.557405][ T5299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   44.557435][ T5299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.572133][ T5299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.572158][ T5299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   44.572492][ T5299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.695148][ T4820] hsr_slave_0: left promiscuous mode
[   44.696403][ T4820] hsr_slave_1: left promiscuous mode
[   44.697472][ T4820] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   44.697493][ T4820] batman_adv: batadv0: Removing interface: batadv_slave_0
[   44.698531][ T4820] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   44.698544][ T4820] batman_adv: batadv0: Removing interface: batadv_slave_1
[   44.716515][ T5451] futex_wake_op: syz.3.142 tries to shift op by 32; fix this program
[   45.580093][ T5459] loop1: detected capacity change from 0 to 512
[   45.681116][ T4820] veth1_macvtap: left promiscuous mode
[   45.681164][ T4820] veth0_macvtap: left promiscuous mode
[   45.681216][ T4820] veth1_vlan: left promiscuous mode
[   45.681259][ T4820] veth0_vlan: left promiscuous mode
[   45.763555][ T5478] loop3: detected capacity change from 0 to 512
[   45.783906][ T5481] input: syz1 as /devices/virtual/input/input3
[   45.871926][ T4820] team0 (unregistering): Port device team_slave_1 removed
[   45.876462][ T4820] team0 (unregistering): Port device team_slave_0 removed
[   45.934424][ T5299] hsr_slave_0: entered promiscuous mode
[   45.935841][ T5299] hsr_slave_1: entered promiscuous mode
[   45.936100][ T5299] debugfs: 'hsr0' already exists in 'hsr'
[   45.936124][ T5299] Cannot create hsr debugfs directory
[   45.955469][ T4356] 8021q: adding VLAN 0 to HW filter on device eth1
[   46.214771][ T4682] Bluetooth: hci3: command tx timeout
[   46.375558][ T5299] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   46.383057][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   46.386596][ T5299] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   46.390865][ T5509] loop4: detected capacity change from 0 to 2048
[   46.395732][ T5509] ext4: Unknown parameter 'subj_user'
[   46.409910][ T5509] fuse: Bad value for 'user_id'
[   46.409937][ T5509] fuse: Bad value for 'user_id'
[   46.424941][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   46.428307][ T5299] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   46.438650][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   46.440740][ T5299] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   46.447304][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   46.456762][ T5520] loop1: detected capacity change from 0 to 128
[   46.465081][ T5520] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   46.794947][ T5299] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.808036][ T5299] 8021q: adding VLAN 0 to HW filter on device team0
[   46.816640][  T853] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.816694][  T853] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.887909][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.887958][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.956344][ T5548] loop3: detected capacity change from 0 to 1024
[   46.963873][ T5534] Injecting memory failure for pfn 0x121801 at process virtual address 0x20001000
[   46.968605][ T5534] Memory failure: 0x121801: Sending SIGBUS to syz.1.156:5534 due to hardware memory corruption
[   46.984807][ T5548] EXT4-fs: Ignoring removed nomblk_io_submit option
[   46.984847][ T5548] EXT4-fs: Ignoring removed nomblk_io_submit option
[   46.995098][ T5548] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal
[   46.995886][ T5534] Memory failure: 0x121801: recovery action for unsplit thp: Failed
[   47.044417][ T4356] 8021q: adding VLAN 0 to HW filter on device eth2
[   47.132492][ T4668] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   47.250960][ T5299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.268836][ T5568] loop1: detected capacity change from 0 to 1024
[   47.286579][ T5568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   47.287056][ T5568] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   47.287130][ T5568] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   47.287161][ T5568] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.160: inode #1: comm syz.1.160: iget: illegal inode #
[   47.287173][ T5568] loop1: lost filesystem error report for type 5 error -117
[   47.291528][ T5568] EXT4-fs (loop1): no journal found
[   47.291553][ T5568] EXT4-fs (loop1): can't get journal size
[   47.296340][ T5568] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002]
[   47.296401][ T5568] EXT4-fs (loop1): failed to initialize system zone (-22)
[   47.296464][ T5568] EXT4-fs (loop1): mount failed
[   47.299975][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   47.299989][    C1] EXT4-fs (loop1): initial error at time 47: ext4_get_journal_inode:5896
[   47.300007][    C1] EXT4-fs (loop1): last error at time 47: ext4_get_journal_inode:5896
[   47.468976][ T4356] 8021q: adding VLAN 0 to HW filter on device eth3
[   47.486348][ T5299] veth0_vlan: entered promiscuous mode
[   47.501227][ T5299] veth1_vlan: entered promiscuous mode
[   47.509394][ T5299] veth0_macvtap: entered promiscuous mode
[   47.512314][ T5299] veth1_macvtap: entered promiscuous mode
[   47.518533][ T5299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.525402][ T5299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.528516][ T4827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.528635][ T4827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.528669][ T4827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.528692][ T4827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.563742][    C1] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96
[   47.610782][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.610816][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.650382][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.650416][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.767514][ T5626] futex_wake_op: syz.2.171 tries to shift op by 32; fix this program
[   47.787018][ T5631] loop4: detected capacity change from 0 to 4096
[   47.792016][ T5631] EXT4-fs (loop4): Test dummy encryption mode enabled
[   47.792046][ T5631] EXT4-fs (loop4): bs(8192) > ps(4096) unsupported for encrypt
[   47.921913][ T5637] loop5: detected capacity change from 0 to 1024
[   47.936216][ T5637] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   47.936298][ T5637] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   47.946708][ T5637] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   47.946852][ T5637] EXT4-fs (loop5): orphan cleanup on readonly fs
[   47.947068][ T5637] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.174: Inode bitmap for bg 0 marked uninitialized
[   47.947088][ T5637] loop5: lost filesystem error report for type 5 error -117
[   47.947236][ T5637] EXT4-fs (loop5): Remounting filesystem read-only
[   47.947776][ T5637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   47.951015][ T5637] EXT4-fs (loop5): shut down requested (1)
[   47.967352][ T5299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.032110][ T5641] capability: warning: `syz.3.175' uses deprecated v2 capabilities in a way that may be insecure
[   48.054059][ T5641] loop3: detected capacity change from 0 to 2048
[   48.083005][ T5653] loop5: detected capacity change from 0 to 1024
[   48.083357][ T5653] EXT4-fs: Ignoring removed i_version option
[   48.087889][ T5653] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   48.088177][ T5653] EXT4-fs (loop5): Test dummy encryption mode enabled
[   48.099365][ T4682] Bluetooth: hci1: ACL packet for unknown connection handle 3981
[   48.109343][ T5653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.115769][ T5660] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   48.195770][ T5668] loop4: detected capacity change from 0 to 512
[   48.213255][ T5668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.215757][ T5299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.229763][ T5668] EXT4-fs error (device loop4): ext4_get_first_dir_block:3537: inode #12: comm syz.4.185: Attempting to read directory block (0) that is past i_size (3)
[   48.250228][ T4682] Bluetooth: hci3: command tx timeout
[   48.267516][ T5678] loop3: detected capacity change from 0 to 512
[   48.268120][ T4667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.269384][ T5678] EXT4-fs: Ignoring removed nobh option
[   48.278110][ T5678] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   48.289147][ T5678] EXT4-fs (loop3): 1 truncate cleaned up
[   48.296975][ T5678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.344493][ T4679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.355415][ T5684] syz_tun: entered allmulticast mode
[   48.371294][ T5683] syz_tun: left allmulticast mode
[   48.373661][ T5686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.375858][ T5686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.402299][ T5688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'.
[   48.422142][ T5690] netlink: 76 bytes leftover after parsing attributes in process `syz.5.193'.
[   48.433698][ T5695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'.
[   48.484936][ T5697] loop5: detected capacity change from 0 to 512
[   48.620377][ T5710] netlink: 68 bytes leftover after parsing attributes in process `syz.2.199'.
[   48.677293][ T5720] loop4: detected capacity change from 0 to 512
[   48.700734][ T5720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.779386][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'.
[   48.794443][ T4667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.927951][ T5741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'.
[   48.943066][ T5743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.209'.
[   49.712680][ T5743] netlink: 'syz.3.209': attribute type 8 has an invalid length.
[   49.797479][ T5752] loop4: detected capacity change from 0 to 512
[   49.800867][ T5752] EXT4-fs: inline encryption not supported
[   49.812055][ T5752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.824045][ T5752] EXT4-fs warning (device loop4): ext4_group_add:1715: Can't resize non-sparse filesystem further
[   49.967998][ T5772] netlink: 'syz.2.215': attribute type 3 has an invalid length.
[   49.969790][ T5772] netlink: 666 bytes leftover after parsing attributes in process `syz.2.215'.
[   50.123282][ T5752] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.126995][ T5752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.329540][ T4682] Bluetooth: hci3: command tx timeout
[   50.389744][ T5752] geneve2: left promiscuous mode
[   50.391839][ T5752] bridge0: left promiscuous mode
[   50.391930][ T5752] macsec1: left promiscuous mode
[   50.408723][ T4827] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.408782][ T4827] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.408818][ T4827] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.408838][ T4827] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.424770][ T4667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.425234][ T5775] loop3: detected capacity change from 0 to 512
[   50.458134][ T5775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   50.500892][ T5788] loop2: detected capacity change from 0 to 512
[   50.512878][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   50.532543][ T5788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0400-000000000000 r/w without journal. Quota mode: writeback.
[   50.551639][ T5800] overlayfs: failed to resolve './bus': -2
[   50.637813][ T5807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'.
[   50.646779][ T5809] usb usb8: usbfs: process 5809 (syz.5.226) did not claim interface 0 before use
[   50.684285][ T5814] loop5: detected capacity change from 0 to 512
[   50.972521][ T5812] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   50.989401][ T5812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.993624][ T5812] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.228: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   50.995201][ T5812] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.228: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   50.995877][ T5812] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.228: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   51.014049][ T5812] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.228: bg 0: block 18: invalid block bitmap
[   51.018317][ T5812] Quota error (device loop4): write_blk: dquota write failed
[   51.018387][ T5812] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   51.018420][ T5812] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.228: Failed to acquire dquot type 1
[   51.065566][ T4667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.106910][ T5825] vfat: Unknown parameter 'short�ame'
[   51.197067][ T5847] ext4: Unknown parameter 'nojournal'
[   51.228019][ T5851] netlink: 68 bytes leftover after parsing attributes in process `syz.5.238'.
[   51.232300][ T5851] usb usb8: usbfs: process 5851 (syz.5.238) did not claim interface 7 before use
[   51.271023][ T5854] netlink: 68 bytes leftover after parsing attributes in process `syz.5.238'.
[   51.292982][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.240'.
[   51.297561][ T5858] macsec1: entered promiscuous mode
[   51.298834][ T5858] bridge0: entered promiscuous mode
[   51.363170][ T4669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0400-000000000000.
[   51.456468][ T5874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   51.465695][ T5874] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.244: lblock 0 mapped to illegal pblock 0 (length 6)
[   51.466065][ T5874] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[   51.466714][ T5874] EXT4-fs (loop2): This should not happen!! Data will be lost
[   51.466714][ T5874] 
[   51.468238][ T5874] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.244: lblock 0 mapped to illegal pblock 0 (length 6)
[   51.469215][ T5874] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.244: lblock 0 mapped to illegal pblock 0 (length 6)
[   51.473343][ T5874] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.244: lblock 0 mapped to illegal pblock 0 (length 6)
[   51.475396][ T5874] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.244: lblock 0 mapped to illegal pblock 0 (length 6)
[   51.475577][ T5874] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.244: lblock 0 mapped to illegal pblock 0 (length 6)
[   51.475727][ T5874] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.244: lblock 0 mapped to illegal pblock 0 (length 6)
[   51.475870][ T5874] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.244: lblock 0 mapped to illegal pblock 0 (length 6)
[   51.476009][ T5874] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.244: lblock 0 mapped to illegal pblock 0 (length 6)
[   51.476243][ T5874] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.244: lblock 0 mapped to illegal pblock 0 (length 6)
[   51.887956][ T5881] EXT4-fs: Ignoring removed mblk_io_submit option
[   51.891457][ T5881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   51.893600][ T5881] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   51.900230][ T5881] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.246: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   51.900271][ T5881] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   51.901392][ T5881] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.246: couldn't read orphan inode 11 (err -117)
[   51.901415][ T5881] loop3: lost filesystem error report for type 5 error -117
[   51.902577][ T5881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.919607][ T5881] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.246: Invalid block bitmap block 0 in block_group 0
[   51.927480][ T5881] Quota error (device loop3): write_blk: dquota write failed
[   51.927513][ T5881] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   51.927557][ T5881] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.246: Failed to acquire dquot type 0
[   51.939396][ T5881] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.246: Invalid inode bitmap blk 137438953472 in block_group 0
[   51.961841][ T4897] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm kworker/u8:10: Invalid inode table block 8589934593 in block_group 0
[   51.967049][ T4679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.064004][ T5886] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   52.073793][ T5886] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.248: invalid indirect mapped block 4294967295 (level 1)
[   52.076802][ T5886] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   52.079288][ T5886] EXT4-fs (loop3): Remounting filesystem read-only
[   52.081665][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   52.081678][    C1] EXT4-fs (loop3): initial error at time 52: ext4_free_branches:1023: inode 11
[   52.081696][    C1] EXT4-fs (loop3): last error at time 52: ext4_free_branches:1023: inode 11
[   52.088925][ T5886] EXT4-fs (loop3): 2 truncates cleaned up
[   52.097515][ T5886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.134427][ T4679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.196223][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.251'.
[   52.207792][ T5894] use of bytesused == 0 is deprecated and will be removed in the future,
[   52.207823][ T5894] use the actual size instead.
[   52.209330][ T5894] 9p: Bad value for 'rfdno'
[   52.229696][ T5896] ext4: Unknown parameter 'nouser_xattr'
[   52.291805][ T4669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   52.308641][ T5904] netlink: 'syz.5.255': attribute type 2 has an invalid length.
[   52.382688][ T5902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.407170][ T5914] tipc: Can't bind to reserved service type 1
[   52.437252][ T5902] macsec1: left promiscuous mode
[   52.539676][ T5931] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5
[   52.543156][ T4679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.546493][ T5931] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[   52.546527][ T5931] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.264: Failed to acquire dquot type 0
[   52.546546][ T5931] loop1: lost filesystem error report for type 5 error -117
[   52.549721][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   52.549735][    C1] EXT4-fs (loop1): initial error at time 52: ext4_acquire_dquot:7034
[   52.549750][    C1] EXT4-fs (loop1): last error at time 52: ext4_acquire_dquot:7034
[   52.561141][ T5931] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[   52.566771][ T5931] EXT4-fs (loop1): 1 truncate cleaned up
[   52.572298][ T5931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.573378][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.266'.
[   52.585790][ T5931] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5
[   52.585856][ T5931] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[   52.585879][ T5931] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.264: Failed to acquire dquot type 0
[   52.596457][ T4760] hid (null): invalid report_size 52652
[   52.596505][ T4760] hid (null): unknown global tag 0xd
[   52.596527][ T4760] hid (null): invalid report_size 49748
[   52.596542][ T4760] hid (null): unknown global tag 0xe
[   52.596559][ T4760] hid (null): unknown global tag 0xe
[   52.609922][ T4760] hid-generic 0040:10001:01A1.0001: invalid report_size 52652
[   52.609946][ T4760] hid-generic 0040:10001:01A1.0001: item 0 2 1 7 parsing failed
[   52.610112][ T4760] hid-generic 0040:10001:01A1.0001: probe with driver hid-generic failed with error -22
[   52.616323][ T5937] bond0: (slave macsec2): Error -34 calling dev_set_mtu
[   52.634664][ T4668] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.652093][ T5938] bond0: (slave macsec2): Error -34 calling dev_set_mtu
[   52.718584][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.269'.
[   52.772779][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'.
[   52.783431][ T5961] fuse: Bad value for 'group_id'
[   52.783456][ T5961] fuse: Bad value for 'group_id'
[   52.785513][ T5957] vlan2: entered allmulticast mode
[   52.785527][ T5957] erspan0: entered allmulticast mode
[   52.838245][ T5971] syz.5.276 uses obsolete (PF_INET,SOCK_PACKET)
[   52.867079][ T5975] EXT4-fs (loop3): Test dummy encryption mode enabled
[   52.869797][ T5975] EXT4-fs (loop3): 1 truncate cleaned up
[   52.870426][ T5975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.903870][ T4679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.926876][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'.
[   53.050102][ T5999] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   53.050130][ T5999] unable to read xattr id index table
[   53.058622][ T5999] SQUASHFS error: zlib decompression failed, data probably corrupt
[   53.058655][ T5999] SQUASHFS error: Failed to read block 0x9b: -5
[   53.058669][ T5999] SQUASHFS error: Unable to read metadata cache entry [99]
[   53.058682][ T5999] SQUASHFS error: Unable to read inode 0x127
[   53.114060][ T6003] set_capacity_and_notify: 11 callbacks suppressed
[   53.118815][ T6003] loop3: detected capacity change from 0 to 128
[   53.130634][ T6003] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   53.137374][ T6003] EXT4-fs warning (device loop3): ext4_group_extend:1885: will only finish group (8193 blocks, 8129 new)
[   53.142487][ T6003] EXT4-fs warning (device loop3): ext4_group_extend:1890: can't read last block, resize aborted
[   53.505561][ T4679] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   53.521786][   T30] audit: type=1326 audit(53.510:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6014 comm="syz.4.286" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a977a28 code=0x7ffc0000
[   53.522333][   T30] audit: type=1326 audit(53.510:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6014 comm="syz.4.286" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9a977a28 code=0x7ffc0000
[   53.525581][ T6015] xt_hashlimit: size too large, truncated to 1048576
[   53.592421][ T6024] loop2: detected capacity change from 0 to 128
[   53.631275][ T6024] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   53.661215][ T6027] vhci_hcd vhci_hcd.1: invalid port number 236
[   53.661248][ T6027] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[   53.686898][ T4669] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   53.985188][ T6041] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   53.987093][ T6041] overlayfs: failed to set xattr on upper
[   53.987116][ T6041] overlayfs: ...falling back to redirect_dir=nofollow.
[   53.987126][ T6041] overlayfs: ...falling back to uuid=null.
[   54.020611][ T6041] loop2: detected capacity change from 0 to 512
[   54.020990][ T6041] ext4: Bad value for 'init_itable'
[   54.210773][ T6058] binder: 6057:6058 tried to acquire reference to desc 0, got 1 instead
[   54.210946][ T6058] binder: 6057:6058 got transaction with invalid handle, 3
[   54.210973][ T6058] binder: 6058:6057 translate handle failed
[   54.211019][ T6058] binder: 6057:6058 transaction call to 6057:0 failed 10/29201/-22, code 0 size 72-24 line 3556
[   54.220544][ T5036] binder: undelivered TRANSACTION_ERROR: 29201
[   54.230556][ T6061] loop2: detected capacity change from 0 to 512
[   54.254378][ T6061] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   54.263692][ T6061] EXT4-fs (loop2): mount failed
[   54.328542][ T6074] loop5: detected capacity change from 0 to 128
[   54.335996][ T6074] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   54.754014][ T6090] netlink: 'syz.2.304': attribute type 1 has an invalid length.
[   54.773401][ T6090] bond1: (slave veth3): Enslaving as an active interface with a down link
[   54.780041][ T6090] bond1: (slave dummy0): making interface the new active one
[   54.781532][ T6090] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   54.784611][ T6090] netlink: 'syz.2.304': attribute type 10 has an invalid length.
[   54.784715][ T6090] dummy0: entered promiscuous mode
[   54.787999][ T6090] bond1: (slave dummy0): Releasing active interface
[   54.835737][ T6097] loop2: detected capacity change from 0 to 512
[   54.848917][ T6098] mmap: syz.2.307 (6098) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   55.210672][ T5299] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   55.257229][ T6124] __nla_validate_parse: 6 callbacks suppressed
[   55.259222][ T6124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.316'.
[   55.273878][   T12] Bluetooth: hci5: Frame reassembly failed (-84)
[   55.276778][ T6122] Bluetooth: hci5: Frame reassembly failed (-84)
[   55.295078][ T6127] loop2: detected capacity change from 0 to 2048
[   55.302640][ T6127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.324289][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.328695][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.401542][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'.
[   55.406790][ T6127] overlayfs: failed to set xattr on upper
[   55.411350][ T6127] overlayfs: ...falling back to redirect_dir=nofollow.
[   55.413195][ T6127] overlayfs: ...falling back to uuid=null.
[   55.415413][ T6127] overlayfs: Failed to create volatile/dirty file.
[   55.470669][ T4669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.502674][ T6147] loop4: detected capacity change from 0 to 4096
[   55.503050][ T6149] loop2: detected capacity change from 0 to 512
[   55.506020][ T6147] EXT4-fs: inline encryption not supported
[   55.507512][ T6149] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   55.514293][ T6149] EXT4-fs (loop2): 1 orphan inode deleted
[   55.514323][ T6149] EXT4-fs (loop2): 1 truncate cleaned up
[   55.514783][ T6149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.523019][ T6147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   55.523041][ T6147] EXT4-fs (loop4): Test dummy encryption mode enabled
[   55.526829][ T6147] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[   55.526879][ T6147] System zones: 0-5
[   55.533759][ T6147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.559773][ T6149] xt_connbytes: Forcing CT accounting to be enabled
[   55.559809][ T6149] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   55.559894][ T6149] xt_bpf: check failed: parse error
[   55.640027][ T6158] loop4: detected capacity change from 0 to 512
[   55.640409][ T6158] EXT4-fs: Ignoring removed nobh option
[   55.657170][ T6158] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #3: comm syz.4.325: corrupted inode contents
[   55.662019][ T6158] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   55.667057][ T6158] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #3: comm syz.4.325: mark_inode_dirty error
[   55.667123][ T6158] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   55.669567][    C0] EXT4-fs (loop4): error count since last fsck: 2
[   55.669578][    C0] EXT4-fs (loop4): initial error at time 55: ext4_do_update_inode:5690: inode 3
[   55.669593][    C0] EXT4-fs (loop4): last error at time 55: ext4_dirty_inode:6587: inode 3
[   55.682131][ T6158] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #3: comm syz.4.325: corrupted inode contents
[   55.682164][ T6158] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   55.685554][ T6158] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.325: mark_inode_dirty error
[   55.689767][ T6158] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   55.690902][ T6158] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.325: Failed to acquire dquot type 0
[   55.695054][ T6158] loop4: lost filesystem error report for type 5 error -117
[   55.700165][ T6158] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.325: corrupted inode contents
[   55.700197][ T6158] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.704450][ T6158] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.325: mark_inode_dirty error
[   55.704490][ T6158] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.709065][ T6158] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.325: corrupted inode contents
[   55.709115][ T6158] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.713655][ T6158] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.325: mark_inode_dirty error
[   55.713680][ T6158] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.718213][ T6158] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.325: corrupted inode contents
[   55.718445][ T6158] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[   55.718456][ T6158] loop4: lost filesystem error report for type 5 error -117
[   55.718576][ T6158] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.325: corrupted inode contents
[   55.721896][ T6158] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.325: mark_inode_dirty error
[   55.724665][ T6158] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[   55.724686][ T6158] loop4: lost filesystem error report for type 5 error -117
[   55.730895][ T6158] EXT4-fs (loop4): 1 truncate cleaned up
[   55.734790][ T6158] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #3: comm syz.4.325: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18]
[   55.734790][ T6158] 
[   55.742247][ T6158] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.325: Failed to acquire dquot type 1
[   55.761278][ T4827] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1
[   55.761305][ T4827] loop4: lost filesystem error report for type 5 error -117
[   55.922098][ T6176] tipc: Started in network mode
[   55.922139][ T6176] tipc: Node identity 7f000001, cluster identity 4711
[   55.922793][ T6176] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   56.034282][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'.
[   56.076199][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'.
[   56.077815][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.293871][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'.
[   56.354590][ T6243] fuse: fd is not a fuse device
[   56.363092][ T6236] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.365460][ T6236] 8021q: adding VLAN 0 to HW filter on device team0
[   56.373992][ T6236] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.389486][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[   56.402242][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.404443][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.408268][ T6236] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.409486][ T6236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.411785][ T6236] veth1_vlan: left promiscuous mode
[   56.412135][ T6236] veth0_vlan: left promiscuous mode
[   56.412381][ T6236] veth0_vlan: entered promiscuous mode
[   56.413323][ T6236] veth1_vlan: entered promiscuous mode
[   56.415059][ T6236] veth1_macvtap: left promiscuous mode
[   56.415402][ T6236] veth0_macvtap: left promiscuous mode
[   56.415712][ T6236] veth0_macvtap: entered promiscuous mode
[   56.416030][ T6236] veth1_macvtap: entered promiscuous mode
[   56.421253][ T6236] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.422034][ T6236] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.422442][ T6236] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.422838][ T6236] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.433837][   T24] bridge0: entered promiscuous mode
[   56.434879][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.434911][   T12] bridge0: port 1(bridge_slave_0) entered listening state
[   56.435373][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.435391][   T12] bridge0: port 2(bridge_slave_1) entered listening state
[   56.452910][   T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.452954][   T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.452972][   T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.452988][   T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.453053][ T6226] netlink: 44 bytes leftover after parsing attributes in process `syz.1.346'.
[   56.560792][ T6250] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   56.561341][ T6250] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.350: bad orphan inode 15
[   56.561359][ T6250] loop3: lost filesystem error report for type 5 error -117
[   56.561504][ T6250] ext4_test_bit(bit=14, block=4) = 1
[   56.561511][ T6250] is_bad_inode(inode)=0
[   56.561516][ T6250] NEXT_ORPHAN(inode)=0
[   56.561519][ T6250] max_ino=32
[   56.561523][ T6250] i_nlink=1
[   56.902532][ T6260] netlink: 40 bytes leftover after parsing attributes in process `syz.1.353'.
[   57.092571][ T6270] CUSE: unknown device info "�x�KJ�H+��ۤ2Lh��nL�1�`�Cc�������8���0���(�3նi�"
[   57.094581][ T6270] CUSE: unknown device info "ٮ,��
�ً�q��d"
[   57.095837][ T6270] CUSE: unknown device info "3�ܟ�,��̘�"
[   57.097112][ T6270] CUSE: unknown device info "J���2SZ�� !e/��������J�+-n��a4��\N���4��"
[   57.098960][ T6270] CUSE: unknown device info "��
[   57.098960][ T6270] f����z��X�S!
[   57.098960][ T6270] �A�x��j�"
[   57.100406][ T6270] CUSE: unknown device info "���xR�ɐQ��(hҏj	p�VdY0��|M?2J��I�v�^
R�@��"
[   57.100425][ T6270] CUSE: unknown device info "!To�}ݝ&|L+U��o��ϲ���"��FstV�:׌E�gJ�����<@c�����4�T�M��_����/��V�����{���"
[   57.100433][ T6270] CUSE: unknown device info "�n�_�h�b<Ur���whU~���V�߶�ݸFs�X�,x�k��q��/�Q]�3��H"
[   57.100438][ T6270] CUSE: zero length info key specified
[   57.102000][ T6270] tmpfs: Cannot disable swap on remount
[   57.142754][ T6273] binfmt_misc: register: failed to install interpreter file ./file2
[   57.215426][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'.
[   57.217340][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'.
[   57.258195][ T6295] tipc: Started in network mode
[   57.259226][ T6295] tipc: Node identity 080211000001, cluster identity 4711
[   57.262856][ T6278] overlay: ./file0 is not a directory
[   57.264123][ T6297] vfat: Unknown parameter 'shortname�winnt'
[   57.268910][ T6295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.271931][ T6295] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   57.273523][ T6297] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[   57.273668][ T6295] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   57.288571][ T6295] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   57.290221][ T4683] Bluetooth: hci5: command 0x1003 tx timeout
[   57.290265][ T4682] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   57.352294][ T6295] tipc: Resetting bearer <eth:syzkaller0>
[   57.736188][ T6319] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.372: No space for directory leaf checksum. Please run e2fsck -D.
[   57.736224][ T6319] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.372: checksumming directory block 0
[   57.761697][ T6327] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   57.761723][ T6327] unable to read xattr id index table
[   57.893033][ T6339] EXT4-fs: Ignoring removed bh option
[   57.893085][ T6339] EXT4-fs: Ignoring removed mblk_io_submit option
[   57.898302][ T6339] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   57.908921][ T6339] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   57.909055][ T6339] EXT4-fs (loop1): orphan cleanup on readonly fs
[   57.910397][ T6339] __quota_error: 12 callbacks suppressed
[   57.910406][ T6339] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4
[   57.910436][ T6339] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[   57.910464][ T6339] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.377: Failed to acquire dquot type 1
[   57.910475][ T6339] loop1: lost filesystem error report for type 5 error -5
[   57.910822][ T6339] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.377: Invalid block bitmap block 0 in block_group 0
[   57.910836][ T6339] loop1: lost filesystem error report for type 5 error -117
[   57.911980][ T6339] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.377: Invalid block bitmap block 0 in block_group 0
[   57.911996][ T6339] loop1: lost filesystem error report for type 5 error -117
[   57.914034][ T6339] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.377: Invalid block bitmap block 0 in block_group 0
[   57.914056][ T6339] loop1: lost filesystem error report for type 5 error -117
[   57.914611][ T6339] Quota error (device loop1): write_blk: dquota write failed
[   57.914648][ T6339] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[   57.914662][ T6339] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.377: Failed to acquire dquot type 1
[   57.914672][ T6339] loop1: lost filesystem error report for type 5 error -28
[   57.917157][ T6339] Quota error (device loop1): write_blk: dquota write failed
[   57.917579][ T6339] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[   57.917603][ T6339] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.377: Failed to acquire dquot type 1
[   57.917614][ T6339] loop1: lost filesystem error report for type 5 error -28
[   57.918971][ T6339] EXT4-fs (loop1): 1 orphan inode deleted
[   57.919460][    C0] EXT4-fs (loop1): error count since last fsck: 6
[   57.919475][    C0] EXT4-fs (loop1): last error at time 57: ext4_acquire_dquot:7034
[   57.961845][ T6341] EXT4-fs: inline encryption not supported
[   57.964476][ T6341] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   57.966662][ T6341] EXT4-fs (loop4): Test dummy encryption mode enabled
[   58.030672][ T6341] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[   58.030760][ T6341] System zones: 0-5
[   58.218587][ T6365] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.377: deleted inode referenced: 12
[   58.224726][ T6365] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.377: deleted inode referenced: 12
[   58.828062][ T6371] overlay: ./file0 is not a directory
[   59.024473][ T1483] tipc: Node number set to 134418688
[   59.092884][   T30] audit: type=1326 audit(59.080:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6395 comm="syz.5.386" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b77a28 code=0x7ffc0000
[   59.097906][   T30] audit: type=1326 audit(59.080:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6395 comm="syz.5.386" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff83b77a28 code=0x7ffc0000
[   59.103005][   T30] audit: type=1326 audit(59.090:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6395 comm="syz.5.386" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b77a28 code=0x7ffc0000
[   59.116809][ T6402] netlink: 'syz.2.387': attribute type 27 has an invalid length.
[   59.127830][   T30] audit: type=1326 audit(59.110:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6395 comm="syz.5.386" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff83b77a28 code=0x7ffc0000
[   59.139088][ T6402] bond0: (slave bond_slave_1): Releasing backup interface
[   59.183434][ T6406] tmpfs: Bad value for 'mpol'
[   59.647684][ T6444] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   59.721284][ T6447] netlink: 'syz.1.396': attribute type 11 has an invalid length.
[   59.868018][ T6453] set_capacity_and_notify: 10 callbacks suppressed
[   59.868069][ T6453] loop4: detected capacity change from 0 to 512
[   59.887677][ T6453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.399: iget: bad extra_isize 58 (inode size 256)
[   59.887718][ T6453] fserror_report: 3 callbacks suppressed
[   59.887743][ T6453] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   59.892276][ T6453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.399: error while reading EA inode 11 err=-117
[   59.892294][ T6453] loop4: lost filesystem error report for type 5 error -117
[   59.892885][ T6453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.399: iget: bad extra_isize 58 (inode size 256)
[   59.892909][ T6453] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   59.895135][ T6453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.399: error while reading EA inode 11 err=-117
[   59.895152][ T6453] loop4: lost filesystem error report for type 5 error -117
[   59.897827][ T6453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.399: iget: bad extra_isize 58 (inode size 256)
[   59.897850][ T6453] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[   59.899455][    C1] EXT4-fs (loop4): error count since last fsck: 5
[   59.899470][    C1] EXT4-fs (loop4): initial error at time 59: ext4_xattr_inode_iget:441: inode 11
[   59.899487][    C1] EXT4-fs (loop4): last error at time 59: ext4_xattr_inode_iget:441: inode 18
[   59.901539][ T6453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.399: error while reading EA inode 18 err=-117
[   59.901553][ T6453] loop4: lost filesystem error report for type 5 error -117
[   59.906643][ T6453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.399: iget: bad extra_isize 58 (inode size 256)
[   59.906663][ T6453] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[   59.910918][ T6453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.399: error while reading EA inode 18 err=-117
[   59.910935][ T6453] loop4: lost filesystem error report for type 5 error -117
[   59.920070][ T6453] EXT4-fs (loop4): 1 orphan inode deleted
[   60.061927][ T6475] IPv6: addrconf: prefix option has invalid lifetime
[   60.061962][ T6475] IPv6: addrconf: prefix option has invalid lifetime
[   60.108802][ T6486] loop4: detected capacity change from 0 to 128
[   60.113610][ T6486] ext4: Unknown parameter 'appraise_type'
[   60.331610][ T6514] loop3: detected capacity change from 0 to 4096
[   60.333440][ T6514] EXT4-fs: inline encryption not supported
[   60.335865][ T6514] EXT4-fs: quotafile must be on filesystem root
[   60.371771][ T6519] __nla_validate_parse: 6 callbacks suppressed
[   60.371813][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'.
[   60.377564][ T6519] can0: slcan on ttyS3.
[   60.380901][ T6523] loop5: detected capacity change from 0 to 128
[   60.412302][ T6523] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   60.428659][ T6523] FAT-fs (loop5): bread failed, FSINFO block (sector = 148)
[   60.429293][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.5.418'.
[   60.430515][ T6519] can0 (unregistered): slcan off ttyS3.
[   60.533199][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'.
[   60.542852][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.424'.
[   60.545238][ T6543] netlink: 'syz.4.423': attribute type 1 has an invalid length.
[   60.550948][ T6544] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   60.586107][ T6543] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   60.686343][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.429'.
[   60.737128][ T6575] netlink: 'syz.3.429': attribute type 39 has an invalid length.
[   60.881367][ T6583] loop4: detected capacity change from 0 to 1024
[   61.083141][ T6595] usb usb6: usbfs: process 6595 (syz.2.436) did not claim interface 63 before use
[   61.106578][ T6597] netlink: 'syz.3.437': attribute type 5 has an invalid length.
[   61.274591][ T6602] fuse: Bad value for 'fd'
[   61.288581][ T6603] loop4: detected capacity change from 0 to 512
[   61.339025][ T6603] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.435: inode has both inline data and extents flags
[   61.339063][ T6603] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   61.339387][ T6603] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.435: couldn't read orphan inode 15 (err -117)
[   61.339451][    C0] EXT4-fs (loop4): error count since last fsck: 2
[   61.339461][    C0] EXT4-fs (loop4): initial error at time 61: ext4_orphan_get:1397: inode 15
[   61.339480][    C0] EXT4-fs (loop4): last error at time 61: ext4_orphan_get:1402
[   61.460058][ T6608] fuse: Bad value for 'fd'
[   61.521888][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'.
[   61.623599][ T6613] loop5: detected capacity change from 0 to 2071
[   61.655541][ T6616] loop3: detected capacity change from 0 to 128
[   61.771058][ T6618] loop5: detected capacity change from 0 to 512
[   61.776311][ T6618] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   61.777826][ T6618] EXT4-fs (loop5): orphan cleanup on readonly fs
[   61.785171][ T6618] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.444: Allocating blocks 41-42 which overlap fs metadata
[   61.788331][ T6618] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.444: Failed to acquire dquot type 0
[   61.789447][    C0] EXT4-fs (loop5): error count since last fsck: 1
[   61.789463][    C0] EXT4-fs (loop5): initial error at time 61: ext4_mb_mark_diskspace_used:4222
[   61.789477][    C0] EXT4-fs (loop5): last error at time 61: ext4_mb_mark_diskspace_used:4222
[   61.790861][ T6618] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   61.794299][ T6618] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.444: corrupted inode contents
[   61.794330][ T6618] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   61.794825][ T6618] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #12: comm syz.5.444: mark_inode_dirty error
[   61.794846][ T6618] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   61.796917][ T6618] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.444: corrupted inode contents
[   61.796938][ T6618] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   61.797916][ T6618] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.444: mark_inode_dirty error
[   61.797943][ T6618] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   61.798196][ T6618] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.444: corrupted inode contents
[   61.798211][ T6618] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   61.802005][ T6618] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[   61.808955][ T6618] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.444: corrupted inode contents
[   61.809089][ T6618] EXT4-fs error (device loop5): ext4_truncate:4690: inode #12: comm syz.5.444: mark_inode_dirty error
[   61.848577][ T6618] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[   61.848983][ T6618] EXT4-fs (loop5): 1 truncate cleaned up
[   61.849098][ T6618] EXT4-fs (loop5): pa 00000000ba4ace5c: logic 1, phys. 41, len 23
[   61.849110][ T6618] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23
[   61.869141][ T6618] fuse: Unknown parameter 'default_permissions�3��n�]���I;�"��W�����7��������&Yyīv�Z���g��H�6#�'
[   61.905121][ T6621] Bluetooth: MGMT ver 1.23
[   61.991227][ T6624] binder: 6623:6624 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   61.993968][ T6624] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[   62.194085][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'.
[   62.235502][ T6643] loop3: detected capacity change from 0 to 1024
[   62.239020][ T6643] EXT4-fs: Ignoring removed bh option
[   62.244755][ T6643] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   62.275886][ T6643] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.454: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   62.281168][ T6643] EXT4-fs (loop3): Remounting filesystem read-only
[   62.337106][ T6649] FAT-fs (loop1): Directory bread(block 64) failed
[   62.337149][ T6649] FAT-fs (loop1): Directory bread(block 65) failed
[   62.337206][ T6649] FAT-fs (loop1): Directory bread(block 66) failed
[   62.337233][ T6649] FAT-fs (loop1): Directory bread(block 67) failed
[   62.337273][ T6649] FAT-fs (loop1): Directory bread(block 68) failed
[   62.337292][ T6649] FAT-fs (loop1): Directory bread(block 69) failed
[   62.337322][ T6649] FAT-fs (loop1): Directory bread(block 70) failed
[   62.337339][ T6649] FAT-fs (loop1): Directory bread(block 71) failed
[   62.337366][ T6649] FAT-fs (loop1): Directory bread(block 72) failed
[   62.337381][ T6649] FAT-fs (loop1): Directory bread(block 73) failed
[   62.371008][ T6649] bio_check_eod: 430 callbacks suppressed
[   62.371115][ T6649] syz.1.455: attempt to access beyond end of device
[   62.371115][ T6649] loop1: rw=524288, sector=1192, nr_sectors = 4 limit=256
[   62.372284][ T6649] syz.1.455: attempt to access beyond end of device
[   62.372284][ T6649] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256
[   62.649499][    C1] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[   62.649567][    C1] Buffer I/O error on dev loop9, logical block 0, lost async page write
[   62.660998][ T6685] netlink: 68 bytes leftover after parsing attributes in process `syz.2.466'.
[   62.671912][    C0] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[   62.671951][    C0] Buffer I/O error on dev loop9, logical block 0, lost async page write
[   62.689820][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.465'.
[   62.771367][ T6694] wireguard: wireguard0: Could not create IPv6 socket
[   62.772671][ T6692]  loop2: p1 p2 p3 p4
[   62.772671][ T6692]  p1: <netbsd: (ignored 55 more) >
[   62.772751][ T6692] loop2: p1 size 16779263 extends beyond EOD, truncated
[   62.774516][ T6692] loop2: p2 size 458752 extends beyond EOD, truncated
[   62.778077][ T6692] loop2: p3 start 3036676096 is beyond EOD, truncated
[   62.778120][ T6692] loop2: p4 start 100663296 is beyond EOD, truncated
[   62.837276][ T6700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.464'.
[   62.858649][ T6700] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.858676][ T6700] EXT4-fs: inline encryption not supported
[   62.858696][ T6700] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.858709][ T6700] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.858978][ T6700] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   62.868190][ T6700] EXT4-fs (loop1): 1 truncate cleaned up
[   62.913156][ T4660] udevd[4660]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   62.922241][ T5357] udevd[5357]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   62.927148][ T6704] netlink: 'syz.2.468': attribute type 5 has an invalid length.
[   62.937505][ T6704] ip6erspan0: entered promiscuous mode
[   62.944669][ T6703] overlayfs: failed to resolve './file7/file0': -2
[   63.011701][ T6708] FAT-fs (loop5): Directory bread(block 64) failed
[   63.011741][ T6708] FAT-fs (loop5): Directory bread(block 65) failed
[   63.011783][ T6708] FAT-fs (loop5): Directory bread(block 66) failed
[   63.011801][ T6708] FAT-fs (loop5): Directory bread(block 67) failed
[   63.011830][ T6708] FAT-fs (loop5): Directory bread(block 68) failed
[   63.011846][ T6708] FAT-fs (loop5): Directory bread(block 69) failed
[   63.011872][ T6708] FAT-fs (loop5): Directory bread(block 70) failed
[   63.011887][ T6708] FAT-fs (loop5): Directory bread(block 71) failed
[   63.011936][ T6708] FAT-fs (loop5): Directory bread(block 72) failed
[   63.011950][ T6708] FAT-fs (loop5): Directory bread(block 73) failed
[   63.042263][ T1180] kworker/u8:6: attempt to access beyond end of device
[   63.042263][ T1180] loop5: rw=1, sector=1224, nr_sectors = 4 limit=256
[   63.088497][ T6713] sctp: [Deprecated]: syz.4.473 (pid 6713) Use of struct sctp_assoc_value in delayed_ack socket option.
[   63.088497][ T6713] Use struct sctp_sack_info instead
[   63.466164][ T6722] lo: entered allmulticast mode
[   63.470830][ T6722] netlink: 'syz.3.477': attribute type 39 has an invalid length.
[   63.501969][ T6721] lo: left allmulticast mode
[   63.563729][ T6726] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.479: corrupted in-inode xattr: invalid ea_ino
[   63.564077][ T6726] EXT4-fs (loop1): Remounting filesystem read-only
[   64.174752][ T6801] Soft offlining pfn 0x21d0b2 at process virtual address 0x20ffc000
[   64.183156][ T6801] Memory failure: 0x21d0b2: unhandlable page.
[   64.224804][ T6809] EXT4-fs (nbd2): unable to read superblock
[   64.282019][ T6818] netlink: 'syz.4.505': attribute type 3 has an invalid length.
[   64.340724][ T6818] EXT4-fs error (device loop4): ext4_readdir:265: inode #12: block 32: comm syz.4.505: path /107/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=8, size=2048 fake=0
[   64.423015][ T6827] netlink: 'syz.5.508': attribute type 1 has an invalid length.
[   64.434113][ T6827] bond2: entered promiscuous mode
[   64.435359][ T6827] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.490476][   T11] cfg80211: failed to load regulatory.db
[   64.501161][ T1576] ieee802154 phy0 wpan0: encryption failed: -22
[   64.501207][ T1576] ieee802154 phy1 wpan1: encryption failed: -22
[   64.523461][ T6841] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   64.523486][ T6841] unable to read xattr id index table
[   64.526590][ T6841] SQUASHFS error: zlib decompression failed, data probably corrupt
[   64.526617][ T6841] SQUASHFS error: Failed to read block 0x9b: -5
[   64.526639][ T6841] SQUASHFS error: Unable to read metadata cache entry [99]
[   64.526654][ T6841] SQUASHFS error: Unable to read inode 0x127
[   64.555105][ T6846] EXT4-fs: Ignoring removed bh option
[   64.596778][ T6849] ext4: Bad value for 'resuid'
[   64.605132][ T6849] ext4: Bad value for 'resuid'
[   64.692480][ T6853]  loop5: AHDI p3
[   64.709250][ T6857] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0002]
[   64.709311][ T6857] System zones: 0-2, 18-18, 34-35
[   64.891339][ T6864] syzkaller0: entered promiscuous mode
[   64.892498][ T6864] syzkaller0: entered allmulticast mode
[   64.910889][ T6861]  loop5: p1 p2 p3 p4[EZD]
[   64.910914][ T6861] loop5: partition table partially beyond EOD, truncated
[   64.911043][ T6861] loop5: p1 start 16384 is beyond EOD, truncated
[   64.911062][ T6861] loop5: p2 size 150994944 extends beyond EOD, truncated
[   64.911672][ T6861] loop5: p3 start 67108864 is beyond EOD, truncated
[   64.911696][ T6861] loop5: p4 size 33555584 extends beyond EOD, truncated
[   64.997578][ T5351] udevd[5351]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   64.998523][ T4660] udevd[4660]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[   65.223912][ T6879] netlink: 'syz.3.527': attribute type 12 has an invalid length.
[   65.313912][ T6884] set_capacity_and_notify: 20 callbacks suppressed
[   65.313957][ T6884] loop5: detected capacity change from 0 to 512
[   65.314307][ T6884] EXT4-fs: Ignoring removed mblk_io_submit option
[   65.319713][ T6884] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   65.330094][ T6884] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   65.330224][ T6884] EXT4-fs (loop5): orphan cleanup on readonly fs
[   65.330929][ T6884] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.528: Invalid block bitmap block 0 in block_group 0
[   65.330944][ T6884] fserror_report: 5 callbacks suppressed
[   65.330949][ T6884] loop5: lost filesystem error report for type 5 error -117
[   65.331813][ T6884] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.528: Invalid block bitmap block 0 in block_group 0
[   65.331830][ T6884] loop5: lost filesystem error report for type 5 error -117
[   65.331965][ T6884] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.528: Invalid block bitmap block 0 in block_group 0
[   65.331979][ T6884] loop5: lost filesystem error report for type 5 error -117
[   65.332120][ T6884] __quota_error: 7 callbacks suppressed
[   65.332126][ T6884] Quota error (device loop5): write_blk: dquota write failed
[   65.332151][ T6884] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[   65.332163][ T6884] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.528: Failed to acquire dquot type 1
[   65.332172][ T6884] loop5: lost filesystem error report for type 5 error -28
[   65.332708][ T6884] EXT4-fs (loop5): 1 orphan inode deleted
[   65.333418][ T4827] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5
[   65.333448][ T4827] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1
[   65.333459][ T4827] loop5: lost filesystem error report for type 5 error -117
[   65.509589][ T6884] EXT4-fs mount: 37 callbacks suppressed
[   65.545911][ T6884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   65.604104][ T6884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.643764][ T4668] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.678309][ T6897] syzkaller0: entered promiscuous mode
[   65.679984][ T6897] syzkaller0: entered allmulticast mode
[   65.703326][ T6902] loop4: detected capacity change from 0 to 512
[   65.722571][ T6902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.732312][ T6902] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.533: corrupted inode contents
[   65.737490][ T6902] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #2: comm syz.4.533: mark_inode_dirty error
[   65.742075][ T6902] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.533: corrupted inode contents
[   65.744879][ T6902] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.533: mark_inode_dirty error
[   65.752848][ T6902] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.533: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18]
[   65.752848][ T6902] 
[   65.758859][ T6908] __nla_validate_parse: 5 callbacks suppressed
[   65.759008][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.537'.
[   65.762395][ T6902] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.533: corrupted inode contents
[   65.765717][ T6902] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.533: mark_inode_dirty error
[   65.769144][ T6902] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem
[   65.779858][ T6902] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.533: corrupted inode contents
[   65.783653][ T6902] EXT4-fs error (device loop4): add_dirent_to_buf:2151: inode #2: comm syz.4.533: mark_inode_dirty error
[   65.788547][ T6902] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.533: corrupted inode contents
[   65.842498][ T4667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.860329][ T6919] netlink: 'syz.1.538': attribute type 1 has an invalid length.
[   65.860359][ T6919] netlink: 108 bytes leftover after parsing attributes in process `syz.1.538'.
[   65.895581][ T6922] loop4: detected capacity change from 0 to 256
[   65.899240][ T6922] vfat: Unknown parameter ']ni_xlate'
[   66.022920][ T6939] loop5: detected capacity change from 0 to 128
[   66.025367][ T6933] loop2: detected capacity change from 0 to 512
[   66.031810][ T6939] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   66.182941][ T6942] bridge0: port 3(netdevsim1) entered blocking state
[   66.182991][ T6942] bridge0: port 3(netdevsim1) entered disabled state
[   66.183340][ T6942] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[   66.185017][ T6942] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[   66.185334][ T6942] bridge0: port 3(netdevsim1) entered blocking state
[   66.185367][ T6942] bridge0: port 3(netdevsim1) entered forwarding state
[   66.190608][ T6942] loop1: detected capacity change from 0 to 128
[   66.203228][ T6942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[   66.203278][ T6942] System zones: 1-3, 19-19, 35-36
[   66.203873][ T6942] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   66.670311][ T6957] overlayfs: failed to resolve './bus': -2
[   66.673269][ T6958] netlink: 28 bytes leftover after parsing attributes in process `syz.5.549'.
[   66.673375][ T6957] netlink: 28 bytes leftover after parsing attributes in process `syz.5.549'.
[   66.701712][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.550'.
[   66.820497][ T6971] loop4: detected capacity change from 0 to 512
[   66.834061][ T6972] netlink: 112 bytes leftover after parsing attributes in process `syz.4.554'.
[   66.894055][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.557'.
[   66.933721][ T4668] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   66.967323][ T6986] loop5: detected capacity change from 0 to 512
[   66.975880][ T6986] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   66.984232][ T6986] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.561: bad orphan inode 131083
[   66.984272][ T6986] loop5: lost filesystem error report for type 5 error -117
[   66.985208][ T6986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.064176][ T5299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.081056][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.564'.
[   67.096635][ T6995] overlayfs: overlapping lowerdir path
[   67.138360][ T7008] loop3: detected capacity change from 0 to 4096
[   67.178171][ T4682] Bluetooth: unknown link type 128
[   67.186339][ T7008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   67.214542][ T4679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.245431][ T7016] loop3: detected capacity change from 0 to 256
[   67.246511][ T7016] vfat: Unknown parameter '0x0000000000000000'
[   67.310031][ T7011] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   67.310105][ T7011] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   67.319585][ T7011] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   67.328090][ T7011] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   67.328135][ T7011] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   67.332592][ T7011] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   67.334956][ T7011] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   67.335979][ T7011] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   67.337742][ T7011] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   67.341659][ T7011] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   67.342976][ T7011] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   67.346019][ T7011] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   67.348073][ T7011] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   67.348139][ T7011] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   67.351776][ T7011] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   67.511088][ T7035] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   67.573499][ T7041] netlink: 120 bytes leftover after parsing attributes in process `syz.1.579'.
[   68.794380][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.584'.
[   68.859358][ T4682] Bluetooth: hci2: unexpected subevent 0x10 length: 11 > 2
[   68.932149][ T7076] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   68.932190][ T7076] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   69.018283][ T7093] capability: warning: `syz.3.595' uses 32-bit capabilities (legacy support in use)
[   69.039311][ T7093] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   69.044394][ T7093] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[   69.047040][ T7091] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   69.049375][ T7098] EXT4-fs (loop1): unable to read superblock
[   69.052664][ T7091] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   69.056104][ T7091] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[   69.136668][ T7103] futex_wake_op: syz.4.598 tries to shift op by 32; fix this program
[   69.159216][ T7114] fuse: Bad value for 'fd'
[   69.173650][ T7113] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   69.173691][ T7113] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[   69.183802][ T7113] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   69.183875][ T7113] System zones: 0-2, 18-18, 34-34
[   69.188182][ T7113] EXT4-fs (loop5): 1 truncate cleaned up
[   69.189176][ T7113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.290423][ T4682] Bluetooth: hci0: command 0x0c1a tx timeout
[   69.370586][ T4683] Bluetooth: hci4: command 0x0c1a tx timeout
[   69.370600][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[   69.370636][ T4683] Bluetooth: hci1: command 0x0c1a tx timeout
[   69.373415][ T4682] Bluetooth: hci3: command 0x0c1a tx timeout
[   69.418190][ T5299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.728687][ T7150] EXT4-fs: Ignoring removed mblk_io_submit option
[   69.728782][ T7150] EXT4-fs: inline encryption not supported
[   69.734280][ T7150] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   69.751166][ T7150] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.613: lblock 2 mapped to illegal pblock 2 (length 1)
[   69.751203][ T7150] fserror_report: 3 callbacks suppressed
[   69.751210][ T7150] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   69.754587][ T7150] EXT4-fs (loop1): Remounting filesystem read-only
[   69.754629][ T7150] Quota error (device loop1): qtree_write_dquot: dquota write failed
[   69.754654][ T7150] Quota error (device loop1): v2_write_file_info: Can't write info structure
[   69.754705][ T7150] EXT4-fs (loop1): 1 orphan inode deleted
[   69.755156][ T7150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.757814][ T7150] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.900810][ T7155] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   70.055990][ T7167] 
[   70.056461][ T7167] ======================================================
[   70.057785][ T7167] WARNING: possible circular locking dependency detected
[   70.058992][ T7167] syzkaller #0 Not tainted
[   70.059852][ T7167] ------------------------------------------------------
[   70.061295][ T7167] syz.1.615/7167 is trying to acquire lock:
[   70.062483][ T7167] ffff0000f2449ce0 (&ei->xattr_sem){++++}-{4:4}, at: ext4_xattr_set_handle+0x138/0xe00
[   70.064428][ T7167] 
[   70.064428][ T7167] but task is already holding lock:
[   70.065972][ T7167] ffff0000c704ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc58
[   70.067987][ T7167] 
[   70.067987][ T7167] which lock already depends on the new lock.
[   70.067987][ T7167] 
[   70.070084][ T7167] 
[   70.070084][ T7167] the existing dependency chain (in reverse order) is:
[   70.071861][ T7167] 
[   70.071861][ T7167] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[   70.073469][ T7167]        percpu_down_read_internal+0x5c/0x294
[   70.074607][ T7167]        ext4_writepages+0x16c/0x2d8
[   70.075569][ T7167]        do_writepages+0x270/0x468
[   70.076477][ T7167]        __writeback_single_inode+0x144/0x1808
[   70.077674][ T7167]        writeback_single_inode+0x3b8/0xaa0
[   70.078811][ T7167]        write_inode_now+0x170/0x208
[   70.079725][ T7167]        iput+0x6bc/0xb90
[   70.080475][ T7167]        ext4_xattr_block_set+0x1aac/0x2188
[   70.081647][ T7167]        ext4_expand_extra_isize_ea+0xb18/0x13a0
[   70.082775][ T7167]        __ext4_expand_extra_isize+0x29c/0x370
[   70.083968][ T7167]        __ext4_mark_inode_dirty+0x3a4/0x810
[   70.085108][ T7167]        ext4_evict_inode+0x7a0/0xfc4
[   70.086209][ T7167]        evict+0x4b8/0x740
[   70.087027][ T7167]        iput+0x858/0xb90
[   70.087802][ T7167]        ext4_process_orphan+0x240/0x2b4
[   70.088860][ T7167]        ext4_orphan_cleanup+0x7b8/0xd30
[   70.089880][ T7167]        ext4_fill_super+0x45a4/0x4d60
[   70.090841][ T7167]        get_tree_bdev_flags+0x380/0x434
[   70.091933][ T7167]        get_tree_bdev+0x2c/0x3c
[   70.092852][ T7167]        ext4_get_tree+0x28/0x38
[   70.093741][ T7167]        vfs_get_tree+0x90/0x28c
[   70.094593][ T7167]        fc_mount+0x24/0xac
[   70.095411][ T7167]        do_new_mount+0x2a4/0x540
[   70.096333][ T7167]        path_mount+0x5d0/0xa68
[   70.097273][ T7167]        do_mount+0xe8/0x148
[   70.098150][ T7167]        __arm64_sys_mount+0x334/0x380
[   70.099131][ T7167]        invoke_syscall+0x98/0x244
[   70.100117][ T7167]        el0_svc_common+0xe8/0x23c
[   70.101115][ T7167]        do_el0_svc+0x48/0x58
[   70.101949][ T7167]        el0_svc+0x64/0x260
[   70.102805][ T7167]        el0t_64_sync_handler+0x48/0x148
[   70.103806][ T7167]        el0t_64_sync+0x198/0x19c
[   70.104782][ T7167] 
[   70.104782][ T7167] -> #0 (&ei->xattr_sem){++++}-{4:4}:
[   70.106318][ T7167]        __lock_acquire+0x1780/0x2f44
[   70.107409][ T7167]        lock_acquire+0x140/0x368
[   70.108362][ T7167]        down_write+0x50/0xc0
[   70.109242][ T7167]        ext4_xattr_set_handle+0x138/0xe00
[   70.110424][ T7167]        ext4_initxattrs+0xa4/0x118
[   70.111421][ T7167]        security_inode_init_security+0x24c/0x378
[   70.112711][ T7167]        ext4_init_security+0x44/0x58
[   70.113859][ T7167]        __ext4_new_inode+0x28dc/0x3390
[   70.114973][ T7167]        ext4_ext_migrate+0x56c/0xc58
[   70.116043][ T7167]        ext4_ioctl+0x1cd4/0x4234
[   70.117077][ T7167]        __arm64_sys_ioctl+0x14c/0x1c4
[   70.118132][ T7167]        invoke_syscall+0x98/0x244
[   70.119098][ T7167]        el0_svc_common+0xe8/0x23c
[   70.120061][ T7167]        do_el0_svc+0x48/0x58
[   70.120960][ T7167]        el0_svc+0x64/0x260
[   70.121882][ T7167]        el0t_64_sync_handler+0x48/0x148
[   70.123006][ T7167]        el0t_64_sync+0x198/0x19c
[   70.123966][ T7167] 
[   70.123966][ T7167] other info that might help us debug this:
[   70.123966][ T7167] 
[   70.125856][ T7167]  Possible unsafe locking scenario:
[   70.125856][ T7167] 
[   70.127279][ T7167]        CPU0                    CPU1
[   70.128276][ T7167]        ----                    ----
[   70.129326][ T7167]   lock(&sbi->s_writepages_rwsem);
[   70.130307][ T7167]                                lock(&ei->xattr_sem);
[   70.131627][ T7167]                                lock(&sbi->s_writepages_rwsem);
[   70.133118][ T7167]   lock(&ei->xattr_sem);
[   70.134059][ T7167] 
[   70.134059][ T7167]  *** DEADLOCK ***
[   70.134059][ T7167] 
[   70.135522][ T7167] 3 locks held by syz.1.615/7167:
[   70.136613][ T7167]  #0: ffff0000c704a410 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0xdc
[   70.138359][ T7167]  #1: ffff0000f68a9f98 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: ext4_ioctl+0x1ccc/0x4234
[   70.140357][ T7167]  #2: ffff0000c704ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc58
[   70.142462][ T7167] 
[   70.142462][ T7167] stack backtrace:
[   70.143573][ T7167] CPU: 0 UID: 0 PID: 7167 Comm: syz.1.615 Not tainted syzkaller #0 PREEMPT 
[   70.145217][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   70.147026][ T7167] Call trace:
[   70.147541][ T7167]  show_stack+0x2c/0x3c (C)
[   70.148205][ T7167]  __dump_stack+0x30/0x40
[   70.148970][ T7167]  dump_stack_lvl+0xd8/0x12c
[   70.149849][ T7167]  dump_stack+0x1c/0x28
[   70.150618][ T7167]  print_circular_bug+0x328/0x330
[   70.151539][ T7167]  check_noncircular+0x158/0x174
[   70.152458][ T7167]  __lock_acquire+0x1780/0x2f44
[   70.153352][ T7167]  lock_acquire+0x140/0x368
[   70.154157][ T7167]  down_write+0x50/0xc0
[   70.154900][ T7167]  ext4_xattr_set_handle+0x138/0xe00
[   70.155915][ T7167]  ext4_initxattrs+0xa4/0x118
[   70.156771][ T7167]  security_inode_init_security+0x24c/0x378
[   70.157866][ T7167]  ext4_init_security+0x44/0x58
[   70.158854][ T7167]  __ext4_new_inode+0x28dc/0x3390
[   70.159867][ T7167]  ext4_ext_migrate+0x56c/0xc58
[   70.160764][ T7167]  ext4_ioctl+0x1cd4/0x4234
[   70.161558][ T7167]  __arm64_sys_ioctl+0x14c/0x1c4
[   70.162573][ T7167]  invoke_syscall+0x98/0x244
[   70.163523][ T7167]  el0_svc_common+0xe8/0x23c
[   70.164375][ T7167]  do_el0_svc+0x48/0x58
[   70.165179][ T7167]  el0_svc+0x64/0x260
[   70.165977][ T7167]  el0t_64_sync_handler+0x48/0x148
[   70.166905][ T7167]  el0t_64_sync+0x198/0x19c
[   70.234938][ T4668] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   70.286125][ T7175] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   70.286166][ T7175] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[   70.288130][ T7175] EXT4-fs (loop4): 1 truncate cleaned up
[   70.288361][ T7175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.981905][ T4667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.369826][ T4682] Bluetooth: hci0: command 0x0c1a tx timeout
[   71.449852][ T4682] Bluetooth: hci3: command 0x0c1a tx timeout
[   71.449862][ T4671] Bluetooth: hci2: command 0x0c1a tx timeout
[   71.449889][ T4671] Bluetooth: hci1: command 0x0c1a tx timeout
[   71.449903][ T4671] Bluetooth: hci4: command 0x0c1a tx timeout
[   71.529455][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[   71.529521][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[   73.449716][ T4682] Bluetooth: hci0: command 0x0c1a tx timeout
[   73.529815][ T4683] Bluetooth: hci3: command 0x0c1a tx timeout
[   73.529826][ T4682] Bluetooth: hci4: command 0x0c1a tx timeout
[   73.529852][ T4683] Bluetooth: hci1: command 0x0c1a tx timeout
[   73.529853][ T4682] Bluetooth: hci2: command 0x0c1a tx timeout