last executing test programs:

8m28.87408989s ago: executing program 0 (id=2396):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000003f40)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000f80)="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", 0x15b}, {&(0x7f0000000180)="6242870f0e6b4396205a2c501f10b0601e64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489a8ddc2b21909092ab24a155c0285968950c5d57e08533c7216e8dd6ccabae10c2", 0xb3}, {&(0x7f0000000580)="7d1455a2eefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b0658fe289beff381c455f37c2b1c71e0e98f34a344141f9996f71a6c32cd9e930f86b9aa8d31e566b300"/146, 0x92}, {&(0x7f0000000e00)="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", 0x154}, {&(0x7f00000008c0)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b9285a4590cd7ac862a4efeb27a62f1dac53434cb036335931f77b80f43fef6f7d01fcc8ef21a3611c200d37fba4b86c11fad0395115bf2414e311c5072016f851461ee4cd792f20c97617793b8604ab6ad654960779bed9c68fed82cfe4a5b41caab29552ef9e3eacee6e2d0628d474cb9455cc7a853c4dd2e0961f0c13a424789b26b8e2bc500e65da26e5e618ec40b4f", 0xd5}, {&(0x7f0000001100)="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", 0x105}, {&(0x7f0000000440)="eea9faf55d74298a0274e5b0c1eccf100684c6f55d2b4d131eb8a7ba7a83226db746190b9877481ce2e33350bc3500fecfc7147ccc0215a082ef8d625346323d1c0153f706e4a660d049", 0x4a}, {&(0x7f0000002780)="a80703000000000000009bd961c07ea5421acf0be365820ff0b8aba451eb0f334f4c2f7906a44af10c567997c5248dfb783cf3ed8c45d5f322fa264eeb86f30868372582fc6e62d80a103d1b5c6ccd", 0x4f}, {&(0x7f0000000b00)="fc402c5f1e637f12513b2e3e760298bb6489ee2d9d58018d0c54d5bfcafe87b5403d57451dcbdf293287a3ff2aa6e1c7cbbae0180cb5bb6a430700e4a9fcdc3c30c54fcd6c0250bc8706f1e0e6da0dd4fb89f3e83b7218e336fa972d07b8fcc785575d7c14a84a89c7c0d25e3d19d14976b5397d19109e5ff80cfc", 0x7b}], 0x9}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="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", 0xfe}], 0x1, &(0x7f0000002f80)=ANY=[], 0x290}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000cc0)="1443b99d980516019c0c2c9ac2355c43cfb50353cb42e652533eab2fdb290a646ff9bda81f780f36eb9b09eec8cb75ead3ea227e91fc0d1e80a85f25af588ae166278d79bcaeeb27f5f2681eb1cbef6026caa85eb9634e506403678abe19cb720713148d67237615b49b18caa5e5dd3aa50b4ea671291138e01f487e56cb08212fc77453fa3669560a2d2c32312e094c3896bfa3e7879e577042afe55a3f12324d33dfe281e18c20f6610327ea31dde6e75c69013b4456f3314f0238a2cd966ac28f1e7f4ad6f686fc0520524566fe", 0xcf}, {&(0x7f0000001240)="18c2c1bf6fc58ee3145175d198d450785a80a5dbc068943a864528654d4c991bb7fbc3fa02592fc68c078260a4658c2c6a48ebcfdaf80e2a30828d2bedf2d86b8603e3ab90ad10650533694115e75d4d394a508bbd1f715f92ce61452636f3d2c96c1e592e89c947a8979e0a48ebdbeb3886f2aea8a9833b1bf49a72ce403d4917e7331296d000d0f0709999cf6403e9e50732ed33b34a914bae352225b265e336dd9dc60733bd6e0a6f5d8b2c9eee3ae3cecc618353d952f24bab98eea5e7d5bd38dbfc64428e884ce970b37163e955d0cd8d7aa0e4f5b7fef8c85aa4cd55917d5ea9d70551055d43ee3bdff660d6bca5d58246c8f699be3684e2994aa8bebc27dc2cc32ca65302652b99cc856d46432a01c794c2478d9685952b87b0f0d18d49e760a19215dc6364caa016f31584499e3a71e1a66923f0a02caf448eca5a26341405cebde8ade877247971706860d395df68ebf8fb21e7046b4e64fee1c67d2a9e47548a28bc8a15ddcfdadccd51e05d4dcd044b9ec5c9471e0b73fd4a8a5b41e23a2671119c1ed89ae44642e384f6e7afec491332dc2d6bb2a5f6dd9f1a073db049194087f1f5c027d7408695ab238c5656adfdf2cec65dd33ad276008911b875cbd97f03fb3977a2a3367955cc754e7ae6c6235934f6a6feb45f13972e92b48931dbca04e75c41bc1194ccace16a1fe58220ecb9ed1e27e9d319199c6b246216fe937fa815e23c8c4feaba7970320f2212961a37d380359759a318bd0306e6128865eb328a3d7cdfd43ebafd23b170cbc8ecc28976e08a4ffc7efcdb72ed4bda7fc7d4d8b9262943f945ae505978a57febfb55b9eece3b", 0x259}], 0x2}}], 0x4, 0x2000c044)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000c40)="b4207053c783", 0x6}], 0x1)

8m27.725276002s ago: executing program 0 (id=2402):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

8m27.597179273s ago: executing program 0 (id=2405):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080001000000000008"], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$eJzs3c9vFNcdAPDvW//AxqheUNWWHoqlqgKpxcYGKlT1ANcKWfSHeumlLjaUYsDCrlqTSBiJXCJFuURRpJxyCPkvEhSunJJTDrnkFCGhJOISKRITze6M8Y9Z45+7yPv5SMvOvLfj9wb7u+/N2/dmA+haI/k/tYijETGXIobT0nJebxSZI83XPfvu9cv5I0WW/fWbFKlIK1+fiueh4uCBiPjs0xRHetaXO7945/rU7OzM7WJ/bOHG3Nj84p2T125MXZ25OnNz4vcT586eOXtu/NS2zutuRdrF+//53/Cbk//48P0f0vhHX06mOB9/Kl648jx2y0iMNP5P0vqsoXO7XViH9BR/J1mWZWVa6u1sndi88vfXFxE/j+HoiRe/vOF4488drRywp7LUfO8GulES/9Clyn5AeW2/9jq41pFeCdAOTy80BwDWx39vc2wwBhpjAwefpVg5rJMiYnsjc6sdiojHjybvX3k0eT/2aBwOqLZ0L5bH8VfHf2rEfz0Got6I/9qq+M/7BZeK5zz9L83kA1stf+1QsfiH9snjP34xsGH8R4v4/2f+fLcZw//aZvn1F5v/HlwV/4Nleqr4/AwAAAAAAACo8PBCRPyu6vP/2vL8n6iY/zMUEed3ofyRNfvrP/+vPdmFYoAKTy9E/LFy/k+tnP1b71mxhLUefenKtdmZUxHxk4g4EX0H8v3xDco4+daR91rljRTz/8pHXv7jYi5gUY8nvWtmFU1PLUzt4JSBwtN7Eb+snP+bltv/VNH+5+8Mc5ss48hvHlxqlffy+N+AxQmwI9kHEcdbzP8tpYgDG9yfY6zRHxgrewXr/eq1tz9uVf52498tJmDn8vb/4MbxX08r79czv/UyTi/2Zq3yttv/709/a9xVqL9I+//UwsLt8Yj+dLEnT12VPrH1OsN+VMZDGS95/J/49cbjf1X9/8GIWFrzs9O3WZYNZuti/WfPh75qVZ8d9f+BHcnjf3pL7f/WNyYe1D9pVf7m2v8zjbb+RJFi/A+a3i3DtH91ekU49lZltbu+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAf1CLiUKTa6PJ2rTY6GjEUET+Ng7XZW/MLv71y6783p/O8xvf/18pv+h1u7qfy+//rK/Yn1uyfjojDEfFOz2Bjf/TyrdnpTp88AAAAAAAAAAAAAAAAAAAAvCKGWqz/z33d0+naAXuut1XG91l7KwK0XUX8f96JegDt17L9B/Y98Q/dazPxbywQ9iftP3Qv8Q/dS/xD9xL/0L3EPwAAAAAA7CuHjz38IkXE0h8GG49cf5HX1/Ko/jbVDthLtU5XAOgYy3qge5n6A92r9TU+0C1SuZE9z6pu+jfQ8qC0g1LnLu/gYAAAAAAAAAAAAADoOsePbmf9P7AfWP8P3cv6f+he5fr/Yx2uB9B+rvGBeMlK/sr1/y89CgAAAAAAAAAAAADYTfOLd65Pzc7O3Lbx91ejGnu3cW9dSpZld/O/glelhru/kYoZ6m0ptJwK3/4z7d/MCZZr/Tb3kzv3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKz2YwAAAP//RI0p+g==")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r4, 0x80084523, &(0x7f0000001f40)=""/231)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r8, 0x8008af26, 0xffffffffffffffff)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r9, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000000c0)=[0x7, 0x8], 0x2, 0x8, 0x98f, 0xffff}})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x88, 0x30, 0xfff7, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x0, 0x10000000, 0x800, 0x6}, 0x2, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

8m20.381720222s ago: executing program 0 (id=2412):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_PDEATHSIG(0x1, 0x38)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x18}}, 0xc001)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
timer_create(0x6, 0x0, 0x0)

8m16.704548143s ago: executing program 0 (id=2417):
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$kcm(0x29, 0x5, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
set_mempolicy(0x4005, &(0x7f0000000280)=0x103, 0x4)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

8m11.48146658s ago: executing program 0 (id=2420):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket(0x11, 0xa, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={<r6=>r0})
ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000400)={r1, &(0x7f0000000280)='/-]^$*#/\xea\x00', 0x500, &(0x7f00000002c0)={@_ha_fsid={[0x8001, 0x22]}, {0x2, 0x3ff, 0x5, 0x9}}, 0x0, &(0x7f0000000300)={@_ha_fsid}, &(0x7f00000003c0)=0xbf2})
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000141, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
getgid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, 0x0, 0x7, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r5, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x101d0)

7m53.312768438s ago: executing program 32 (id=2420):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket(0x11, 0xa, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={<r6=>r0})
ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000400)={r1, &(0x7f0000000280)='/-]^$*#/\xea\x00', 0x500, &(0x7f00000002c0)={@_ha_fsid={[0x8001, 0x22]}, {0x2, 0x3ff, 0x5, 0x9}}, 0x0, &(0x7f0000000300)={@_ha_fsid}, &(0x7f00000003c0)=0xbf2})
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000141, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
getgid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, 0x0, 0x7, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r5, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x101d0)

4m4.014943151s ago: executing program 1 (id=2769):
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
recvmsg(r6, &(0x7f0000003580)={&(0x7f0000000240)=@tipc=@id, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/210, 0xd2}], 0x5, &(0x7f0000002580)=""/4096, 0x1000}, 0x0)
read$alg(0xffffffffffffffff, 0x0, 0x0)

3m58.942284512s ago: executing program 1 (id=2777):
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$eJzs3c9vFNcdAPDvW//AxqheUNWWHoqlqgKpxcYGKlT1ANcKWfSHeumlLjaUYsDCrlqTSBiJXCJFuURRpJxyCPkvEhSunJJTDrnkFCGhJOISKRITze6M8Y9Z45+7yPv5SMvOvLfj9wb7u+/N2/dmA+haI/k/tYijETGXIobT0nJebxSZI83XPfvu9cv5I0WW/fWbFKlIK1+fiueh4uCBiPjs0xRHetaXO7945/rU7OzM7WJ/bOHG3Nj84p2T125MXZ25OnNz4vcT586eOXtu/NS2zutuRdrF+//53/Cbk//48P0f0vhHX06mOB9/Kl648jx2y0iMNP5P0vqsoXO7XViH9BR/J1mWZWVa6u1sndi88vfXFxE/j+HoiRe/vOF4488drRywp7LUfO8GulES/9Clyn5AeW2/9jq41pFeCdAOTy80BwDWx39vc2wwBhpjAwefpVg5rJMiYnsjc6sdiojHjybvX3k0eT/2aBwOqLZ0L5bH8VfHf2rEfz0Got6I/9qq+M/7BZeK5zz9L83kA1stf+1QsfiH9snjP34xsGH8R4v4/2f+fLcZw//aZvn1F5v/HlwV/4Nleqr4/AwAAAAAAACo8PBCRPyu6vP/2vL8n6iY/zMUEed3ofyRNfvrP/+vPdmFYoAKTy9E/LFy/k+tnP1b71mxhLUefenKtdmZUxHxk4g4EX0H8v3xDco4+daR91rljRTz/8pHXv7jYi5gUY8nvWtmFU1PLUzt4JSBwtN7Eb+snP+bltv/VNH+5+8Mc5ss48hvHlxqlffy+N+AxQmwI9kHEcdbzP8tpYgDG9yfY6zRHxgrewXr/eq1tz9uVf52498tJmDn8vb/4MbxX08r79czv/UyTi/2Zq3yttv/709/a9xVqL9I+//UwsLt8Yj+dLEnT12VPrH1OsN+VMZDGS95/J/49cbjf1X9/8GIWFrzs9O3WZYNZuti/WfPh75qVZ8d9f+BHcnjf3pL7f/WNyYe1D9pVf7m2v8zjbb+RJFi/A+a3i3DtH91ekU49lZltbu+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAf1CLiUKTa6PJ2rTY6GjEUET+Ng7XZW/MLv71y6783p/O8xvf/18pv+h1u7qfy+//rK/Yn1uyfjojDEfFOz2Bjf/TyrdnpTp88AAAAAAAAAAAAAAAAAAAAvCKGWqz/z33d0+naAXuut1XG91l7KwK0XUX8f96JegDt17L9B/Y98Q/dazPxbywQ9iftP3Qv8Q/dS/xD9xL/0L3EPwAAAAAA7CuHjz38IkXE0h8GG49cf5HX1/Ko/jbVDthLtU5XAOgYy3qge5n6A92r9TU+0C1SuZE9z6pu+jfQ8qC0g1LnLu/gYAAAAAAAAAAAAADoOsePbmf9P7AfWP8P3cv6f+he5fr/Yx2uB9B+rvGBeMlK/sr1/y89CgAAAAAAAAAAAADYTfOLd65Pzc7O3Lbx91ejGnu3cW9dSpZld/O/glelhru/kYoZ6m0ptJwK3/4z7d/MCZZr/Tb3kzv3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKz2YwAAAP//RI0p+g==")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r3, 0x80084523, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r7, 0x8008af26, 0xffffffffffffffff)
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgoh4Rl96D8odGMWnU0ANRIKYHRCVEkSJOFQcqLpRKKVKRQJWqqKe2p1a99YR6oVKVSkE9tJESV1m/We8+e7rrsT1r7/5+0rdv37zZ+b7xRs7MePZtAIZWrfl4+PBsFsJ7n1859trJ7NM7yx5prbGv+ZjFXiOEUG/rZ8n2vogLbt24dGKtNgsHm495Pzx/vfXayRDCYtgXroVG+Hh+4auP3n9u/ydvTtz3zsWzr2/R7rek+wEAAIPo6p8W/vbEP/741MzNq3uPhvHW8pXj9WWT8bj/QFyQL6+Fzn7WFu3GkvVGYtSS9UaS9UaTPKMF+erJduoF6411yTfStmyt/QQAAICdKD+vbYSsNtfRr9Xm5pbP++/4Ynosmzt3ZuH0hT4VCgAAAJT278vNm26FEEIIIYQQQggxwLE03e8rEAAAAMCwSecLW2Vxc2fqam2t0Vv+68/W1n49bIKq//3Lv7Pyf/iG3zgAAJQ3qEeT+X7lx9H5PAbpPIIjyevWe/xfS7Yzus46i+YV7Fiebd+3qaj+9Oe6XRXVv973sV+K6k/nw9yuiupP5+ncrorqH6+4jrKK6p+ouI6yiurfVXEdZRXVv7viOsoqqn+y4jrKKqp/quI6yiqq/66K6yirqP49FddRVlH9O+W22qL6GxXXUVZR/TMV11FWUf13V1xHWUX131NxHWUV1X9vxXX0y8OxzX8Oe5Px9vPn9Jxup5zjAQAAwLD7r/n/hBBCiFXRvA9iG9QhxGBHtg1qEEKI4YnL/b4AAQAAAPRd/rmA/APoS1E+PtJlfLR9fGJlhXy83uX1Y13Gx7uMAwAAACH89q3TD7ybrXzOf6Pz4eXzRu0Kn94OJeYxSie6W2/+jc57ttH865i3zPQJAAAAVCb73rXbTx774JWZm1f3Hm07+70dz3fzeUBH4wnrZ7Gf3xcwlfSz/Bz6aGeeWsF66fWBu4q298IGdxQAAACGWH7+3ghZba7tvLsRarW5uZXz8dlQz06fWTh1IPbz72f5w3R9/M7yZyquGwAAAOjdyvn+2uf/+ff4zoaxbO7cmYXTF5b7U63l9Vr7dYHpleVZ+3WBRrL8YMHyQ7Gff3/nD6Z3NZfPnfjhwsnN3nkAAAAYEhdevXj2xYWFUz/yxBNPPGk96fdvJgAAYLN9+eWV+o8PTf1u+fP/K/Pf5Z//3xf7jTi335/jCvl9AvnnAFZ9Xv94Z57povXOd67XSNYbiTGe1D3Rtp3QnG+w83UzRfkandsZK8g3meSbSvKl8xSMJuvn+fYky9P5CfP1ppPl6eSAo0mOLMn/aAAAAIBi86+8fH7+wqsXnz7z8osvnXrp1LlDB49898iRA89855n55n398+139wMAAAA70cpNv/2uBAAAAAAAAAAAAAAAAAAAAIZXFV8n1u99BAAAgGH3r8shhEUhhCgdS+P9r0GILjG2DWoQQgghhFiO5ne7V5+31u/rDwAAAMDwuXXj0on2dpXFbFPztbbWWG5ux7x5O/X0X2fuRL7a9WdHOl6/e1OrYdhV/e9f/p2V/8M3Njf/RP6k599/ySXjo+XyPj7/y9n2/A+O9pg/3f8XyuXfn+R/PPSWf+mDJP/xcvmfSPLv7jH/qv0/Xy7/kzH/bOzvf6zX/J3v/3hs8/3Y1WP+byf7fzL0mj/Z/0aPCRNPxfwAMIwG9QaA/CghP46ejP18f+PhZhhJXrfe4/9asp3RDVfeud38OOj+2M+Pl6aSvLn11j+ZbO+uknWm0rq2q6L6N+t93GpF9dcrrqOsovrHKq6jrKL6xyuuo6yi+icqrqOsovp7PQ/tt6L6d8p15aL6Jyuuo6yi+qcqrqOsovrX+/94vxTVv6fiOsoqqn+64jrKKqq/5GW1yhXVP1NxHWUV1X93xXWUVVT/PRXXUVZR/fdWXEe/PBTbovPh/PxzOo7l/UbSH1/jZzmo1xYAAABgp/mn+f+EEEIIIUpF836ZbVBHf6Ltbrm+1yI2I/6ztKzfdQghti6Wlvp48YG+29pPMwOwXfn9P9y8/8PN+z/cvP/8P/k9/FnSz410GR/tMl7vMj6WjKf/Xse7jN+TbHcpv64Z3dtl/Gtdxvd0Gb+/y/hsl/EHuow/2GX8oS7jAAAADIf7Yuv8EAAAAAbXa7/67O3fPH78xszNq3uPhrFV884fiP3x+Lf1t2I/nfc+V49/8/9J7P8itr+P7d+T9d1/AgAAAFsv/54Yf/8HAACAwZV/T6nzfwAAABhcM7F1/g8AAACD6+7YOv8HAACAAZZNrL04tvl1gUdj2+u8fgDA9vf12D4c272xfSS234htfhzwWGy/WVF9AMDm+fn3f3rk3Wxlvv9DyfituDxvV1lcvlKQ1Tpn8t8V292x/VaP9aTfB9Br/tyeHvNsVf7pDeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZHrfl4+PBsFsJ7n1859rOxt/9yZ9kjrTX2NR+z2GuEEOqt1+WjK/1fxxVv3bh0or29HdssHAxZyFrLw/PXW5kmQwiLYV+4Fhrh4/mFrz56/7n9n7w5cd87F8++voU/go79AwAAgEH0vwAAAP//cFQjcg==")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r8, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000000c0)=[0x7, 0x8], 0x2, 0x8, 0x98f, 0xffff}})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x88, 0x30, 0xfff7, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x0, 0x10000000, 0x800, 0x6}, 0x2, r6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

3m52.768800425s ago: executing program 1 (id=2782):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000100), 0x10)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512)
syz_open_procfs(0x0, &(0x7f0000000380)='loginuid\x00')
sendto(r2, &(0x7f0000000000), 0x0, 0x4000080, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0)

3m47.630216797s ago: executing program 1 (id=2784):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000100), 0x10)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512)
syz_open_procfs(0x0, &(0x7f0000000380)='loginuid\x00')
sendto(r2, &(0x7f0000000000)="7cd1e89831ce6aab8f22ae2de8", 0xd, 0x4000080, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0)

3m46.457518038s ago: executing program 1 (id=2789):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_PDEATHSIG(0x1, 0x38)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x18}}, 0xc001)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000801}, 0x48800)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="65010000"], 0x188}}, 0x0)
timer_create(0x6, 0x0, 0x0)

3m45.197993371s ago: executing program 1 (id=2793):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080001000000000008"], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r4, 0x80084523, &(0x7f0000001f40)=""/231)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r8, 0x8008af26, 0xffffffffffffffff)
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r9, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000000c0)=[0x7, 0x8], 0x2, 0x8, 0x98f, 0xffff}})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x88, 0x30, 0xfff7, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x0, 0x10000000, 0x800, 0x6}, 0x2, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

3m27.829451877s ago: executing program 33 (id=2793):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080001000000000008"], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r4, 0x80084523, &(0x7f0000001f40)=""/231)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r8, 0x8008af26, 0xffffffffffffffff)
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r9, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000000c0)=[0x7, 0x8], 0x2, 0x8, 0x98f, 0xffff}})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x88, 0x30, 0xfff7, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x0, 0x10000000, 0x800, 0x6}, 0x2, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

3m7.011054838s ago: executing program 4 (id=2852):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000100), 0x10)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512)
syz_open_procfs(0x0, &(0x7f0000000380)='loginuid\x00')
sendto(r2, &(0x7f0000000000)="7cd1e89831ce6aab8f22ae2de8da", 0xe, 0x4000080, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0)

3m5.234423056s ago: executing program 4 (id=2855):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000001600)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_type={0x1}]}, 0x58}, 0x1, 0x7}, 0x0)

3m5.107817167s ago: executing program 4 (id=2856):
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$eJzs3c9vFNcdAPDvW//AxqheUNWWHoqlqgKpxcYGKlT1ANcKWfSHeumlLjaUYsDCrlqTSBiJXCJFuURRpJxyCPkvEhSunJJTDrnkFCGhJOISKRITze6M8Y9Z45+7yPv5SMvOvLfj9wb7u+/N2/dmA+haI/k/tYijETGXIobT0nJebxSZI83XPfvu9cv5I0WW/fWbFKlIK1+fiueh4uCBiPjs0xRHetaXO7945/rU7OzM7WJ/bOHG3Nj84p2T125MXZ25OnNz4vcT586eOXtu/NS2zutuRdrF+//53/Cbk//48P0f0vhHX06mOB9/Kl648jx2y0iMNP5P0vqsoXO7XViH9BR/J1mWZWVa6u1sndi88vfXFxE/j+HoiRe/vOF4488drRywp7LUfO8GulES/9Clyn5AeW2/9jq41pFeCdAOTy80BwDWx39vc2wwBhpjAwefpVg5rJMiYnsjc6sdiojHjybvX3k0eT/2aBwOqLZ0L5bH8VfHf2rEfz0Got6I/9qq+M/7BZeK5zz9L83kA1stf+1QsfiH9snjP34xsGH8R4v4/2f+fLcZw//aZvn1F5v/HlwV/4Nleqr4/AwAAAAAAACo8PBCRPyu6vP/2vL8n6iY/zMUEed3ofyRNfvrP/+vPdmFYoAKTy9E/LFy/k+tnP1b71mxhLUefenKtdmZUxHxk4g4EX0H8v3xDco4+daR91rljRTz/8pHXv7jYi5gUY8nvWtmFU1PLUzt4JSBwtN7Eb+snP+bltv/VNH+5+8Mc5ss48hvHlxqlffy+N+AxQmwI9kHEcdbzP8tpYgDG9yfY6zRHxgrewXr/eq1tz9uVf52498tJmDn8vb/4MbxX08r79czv/UyTi/2Zq3yttv/709/a9xVqL9I+//UwsLt8Yj+dLEnT12VPrH1OsN+VMZDGS95/J/49cbjf1X9/8GIWFrzs9O3WZYNZuti/WfPh75qVZ8d9f+BHcnjf3pL7f/WNyYe1D9pVf7m2v8zjbb+RJFi/A+a3i3DtH91ekU49lZltbu+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAf1CLiUKTa6PJ2rTY6GjEUET+Ng7XZW/MLv71y6783p/O8xvf/18pv+h1u7qfy+//rK/Yn1uyfjojDEfFOz2Bjf/TyrdnpTp88AAAAAAAAAAAAAAAAAAAAvCKGWqz/z33d0+naAXuut1XG91l7KwK0XUX8f96JegDt17L9B/Y98Q/dazPxbywQ9iftP3Qv8Q/dS/xD9xL/0L3EPwAAAAAA7CuHjz38IkXE0h8GG49cf5HX1/Ko/jbVDthLtU5XAOgYy3qge5n6A92r9TU+0C1SuZE9z6pu+jfQ8qC0g1LnLu/gYAAAAAAAAAAAAADoOsePbmf9P7AfWP8P3cv6f+he5fr/Yx2uB9B+rvGBeMlK/sr1/y89CgAAAAAAAAAAAADYTfOLd65Pzc7O3Lbx91ejGnu3cW9dSpZld/O/glelhru/kYoZ6m0ptJwK3/4z7d/MCZZr/Tb3kzv3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKz2YwAAAP//RI0p+g==")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r3, 0x80084523, &(0x7f0000001f40)=""/231)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
getsockname$packet(r5, 0x0, &(0x7f0000000400))
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r6, 0x8008af26, 0xffffffffffffffff)
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r7, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000000c0)=[0x7, 0x8], 0x2, 0x8, 0x98f, 0xffff}})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x88, 0x30, 0xfff7, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x0, 0x10000000, 0x800, 0x6}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

3m1.577811563s ago: executing program 4 (id=2860):
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$kcm(0x29, 0x5, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
set_mempolicy(0x4005, &(0x7f0000000280)=0x103, 0x4)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

2m51.798482492s ago: executing program 4 (id=2873):
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c000280050001000000000018"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328"], 0xa4}}, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
recvmsg(r6, &(0x7f0000003580)={&(0x7f0000000240)=@tipc=@id, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/210, 0xd2}], 0x5, &(0x7f0000002580)=""/4096, 0x1000}, 0x0)
read$alg(0xffffffffffffffff, 0x0, 0x0)

2m46.810392822s ago: executing program 4 (id=2886):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080001000000000008"], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r4, 0x80084523, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r8 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r8, 0x8008af26, 0xffffffffffffffff)
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r9, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000000c0)=[0x7, 0x8], 0x2, 0x8, 0x98f, 0xffff}})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x88, 0x30, 0xfff7, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x0, 0x10000000, 0x800, 0x6}, 0x2, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

1m52.68152741s ago: executing program 5 (id=2949):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_PDEATHSIG(0x1, 0x38)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x18}}, 0xc001)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
timer_create(0x6, 0x0, 0x0)

1m48.557217892s ago: executing program 5 (id=2952):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080001000000000008"], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r4, 0x80084523, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r8, 0x8008af26, 0xffffffffffffffff)
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r9, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000000c0)=[0x7, 0x8], 0x2, 0x8, 0x98f, 0xffff}})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x88, 0x30, 0xfff7, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x0, 0x10000000, 0x800, 0x6}, 0x2, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

1m46.455900303s ago: executing program 5 (id=2954):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000140)=0x1)
read(r3, &(0x7f00000006c0)=""/102, 0x66)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
r4 = socket(0x23, 0x5, 0x0)
listen(r4, 0x0)
gettid()
syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x28, 0x800000000004, @thr={0x0, &(0x7f00000005c0)="f4e74f7008d65db0722805926e72deb15cded1fe109af2b8267d6e52835b4c02a767212b9dec22c6c4c1fc785c9e4008a334d6f1515693054df5837b74f5ae668613f8b10b209e97d61aa9307db0233a3215fde1bd47b270554bce90b00d4a0d78883e1830d03204d4d8f44d15"}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x7, 0xa, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f0000000340)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc4d}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x42, &(0x7f0000000440)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000340000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100004251f9be8c"], 0x0)

1m45.197494596s ago: executing program 5 (id=2958):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080001000000000008"], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r4, 0x80084523, &(0x7f0000001f40)=""/231)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r8, 0x8008af26, 0xffffffffffffffff)
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgoh4Rl96D8odGMWnU0ANRIKYHRCVEkSJOFQcqLpRKKVKRQJWqqKe2p1a99YR6oVKVSkE9tJESV1m/We8+e7rrsT1r7/5+0rdv37zZ+b7xRs7MePZtAIZWrfl4+PBsFsJ7n1859trJ7NM7yx5prbGv+ZjFXiOEUG/rZ8n2vogLbt24dGKtNgsHm495Pzx/vfXayRDCYtgXroVG+Hh+4auP3n9u/ydvTtz3zsWzr2/R7rek+wEAAIPo6p8W/vbEP/741MzNq3uPhvHW8pXj9WWT8bj/QFyQL6+Fzn7WFu3GkvVGYtSS9UaS9UaTPKMF+erJduoF6411yTfStmyt/QQAAICdKD+vbYSsNtfRr9Xm5pbP++/4Ynosmzt3ZuH0hT4VCgAAAJT278vNm26FEEIIIYQQQggxwLE03e8rEAAAAMCwSecLW2Vxc2fqam2t0Vv+68/W1n49bIKq//3Lv7Pyf/iG3zgAAJQ3qEeT+X7lx9H5PAbpPIIjyevWe/xfS7Yzus46i+YV7Fiebd+3qaj+9Oe6XRXVv973sV+K6k/nw9yuiupP5+ncrorqH6+4jrKK6p+ouI6yiurfVXEdZRXVv7viOsoqqn+y4jrKKqp/quI6yiqq/66K6yirqP49FddRVlH9O+W22qL6GxXXUVZR/TMV11FWUf13V1xHWUX131NxHWUV1X9vxXX0y8OxzX8Oe5Px9vPn9Jxup5zjAQAAwLD7r/n/hBBCiFXRvA9iG9QhxGBHtg1qEEKI4YnL/b4AAQAAAPRd/rmA/APoS1E+PtJlfLR9fGJlhXy83uX1Y13Gx7uMAwAAACH89q3TD7ybrXzOf6Pz4eXzRu0Kn94OJeYxSie6W2/+jc57ttH865i3zPQJAAAAVCb73rXbTx774JWZm1f3Hm07+70dz3fzeUBH4wnrZ7Gf3xcwlfSz/Bz6aGeeWsF66fWBu4q298IGdxQAAACGWH7+3ghZba7tvLsRarW5uZXz8dlQz06fWTh1IPbz72f5w3R9/M7yZyquGwAAAOjdyvn+2uf/+ff4zoaxbO7cmYXTF5b7U63l9Vr7dYHpleVZ+3WBRrL8YMHyQ7Gff3/nD6Z3NZfPnfjhwsnN3nkAAAAYEhdevXj2xYWFUz/yxBNPPGk96fdvJgAAYLN9+eWV+o8PTf1u+fP/K/Pf5Z//3xf7jTi335/jCvl9AvnnAFZ9Xv94Z57povXOd67XSNYbiTGe1D3Rtp3QnG+w83UzRfkandsZK8g3meSbSvKl8xSMJuvn+fYky9P5CfP1ppPl6eSAo0mOLMn/aAAAAIBi86+8fH7+wqsXnz7z8osvnXrp1LlDB49898iRA89855n55n398+139wMAAAA70cpNv/2uBAAAAAAAAAAAAAAAAAAAAIZXFV8n1u99BAAAgGH3r8shhEUhhCgdS+P9r0GILjG2DWoQQgghhFiO5ne7V5+31u/rDwAAAMDwuXXj0on2dpXFbFPztbbWWG5ux7x5O/X0X2fuRL7a9WdHOl6/e1OrYdhV/e9f/p2V/8M3Njf/RP6k599/ySXjo+XyPj7/y9n2/A+O9pg/3f8XyuXfn+R/PPSWf+mDJP/xcvmfSPLv7jH/qv0/Xy7/kzH/bOzvf6zX/J3v/3hs8/3Y1WP+byf7fzL0mj/Z/0aPCRNPxfwAMIwG9QaA/CghP46ejP18f+PhZhhJXrfe4/9asp3RDVfeud38OOj+2M+Pl6aSvLn11j+ZbO+uknWm0rq2q6L6N+t93GpF9dcrrqOsovrHKq6jrKL6xyuuo6yi+icqrqOsovp7PQ/tt6L6d8p15aL6Jyuuo6yi+qcqrqOsovrX+/94vxTVv6fiOsoqqn+64jrKKqq/5GW1yhXVP1NxHWUV1X93xXWUVVT/PRXXUVZR/fdWXEe/PBTbovPh/PxzOo7l/UbSH1/jZzmo1xYAAABgp/mn+f+EEEIIIUpF836ZbVBHf6Ltbrm+1yI2I/6ztKzfdQghti6Wlvp48YG+29pPMwOwXfn9P9y8/8PN+z/cvP/8P/k9/FnSz410GR/tMl7vMj6WjKf/Xse7jN+TbHcpv64Z3dtl/Gtdxvd0Gb+/y/hsl/EHuow/2GX8oS7jAAAADIf7Yuv8EAAAAAbXa7/67O3fPH78xszNq3uPhrFV884fiP3x+Lf1t2I/nfc+V49/8/9J7P8itr+P7d+T9d1/AgAAAFsv/54Yf/8HAACAwZV/T6nzfwAAABhcM7F1/g8AAACD6+7YOv8HAACAAZZNrL04tvl1gUdj2+u8fgDA9vf12D4c272xfSS234htfhzwWGy/WVF9AMDm+fn3f3rk3Wxlvv9DyfituDxvV1lcvlKQ1Tpn8t8V292x/VaP9aTfB9Br/tyeHvNsVf7pDeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZHrfl4+PBsFsJ7n1859rOxt/9yZ9kjrTX2NR+z2GuEEOqt1+WjK/1fxxVv3bh0or29HdssHAxZyFrLw/PXW5kmQwiLYV+4Fhrh4/mFrz56/7n9n7w5cd87F8++voU/go79AwAAgEH0vwAAAP//cFQjcg==")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r9, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x88, 0x30, 0xfff7, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x0, 0x10000000, 0x800, 0x6}, 0x2, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

1m34.86921596s ago: executing program 5 (id=2963):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080001000000000008"], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r4, 0x80084523, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r7, 0x8008af26, 0xffffffffffffffff)
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r8, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}})
sendmsg$nl_route_sched(r5, 0x0, 0x0)

1m29.991289519s ago: executing program 5 (id=2969):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080001000000000008"], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r4, 0x80084523, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r7, 0x8008af26, 0xffffffffffffffff)
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r8, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x18, 0x30, 0xfff7, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

1m13.549342046s ago: executing program 34 (id=2969):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080001000000000008"], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$eJzs3c9vFNcdAPDvW//AxqheUNWWHoqlqgKpxcYGKlT1ANcKWfSHeumlLjaUYsDCrlqTSBiJXCJFuURRpJxyCPkvEhSunJJTDrnkFCGhJOISKRITze6M8Y9Z45+7yPv5SMvOvLfj9wb7u+/N2/dmA+haI/k/tYijETGXIobT0nJebxSZI83XPfvu9cv5I0WW/fWbFKlIK1+fiueh4uCBiPjs0xRHetaXO7945/rU7OzM7WJ/bOHG3Nj84p2T125MXZ25OnNz4vcT586eOXtu/NS2zutuRdrF+//53/Cbk//48P0f0vhHX06mOB9/Kl648jx2y0iMNP5P0vqsoXO7XViH9BR/J1mWZWVa6u1sndi88vfXFxE/j+HoiRe/vOF4488drRywp7LUfO8GulES/9Clyn5AeW2/9jq41pFeCdAOTy80BwDWx39vc2wwBhpjAwefpVg5rJMiYnsjc6sdiojHjybvX3k0eT/2aBwOqLZ0L5bH8VfHf2rEfz0Got6I/9qq+M/7BZeK5zz9L83kA1stf+1QsfiH9snjP34xsGH8R4v4/2f+fLcZw//aZvn1F5v/HlwV/4Nleqr4/AwAAAAAAACo8PBCRPyu6vP/2vL8n6iY/zMUEed3ofyRNfvrP/+vPdmFYoAKTy9E/LFy/k+tnP1b71mxhLUefenKtdmZUxHxk4g4EX0H8v3xDco4+daR91rljRTz/8pHXv7jYi5gUY8nvWtmFU1PLUzt4JSBwtN7Eb+snP+bltv/VNH+5+8Mc5ss48hvHlxqlffy+N+AxQmwI9kHEcdbzP8tpYgDG9yfY6zRHxgrewXr/eq1tz9uVf52498tJmDn8vb/4MbxX08r79czv/UyTi/2Zq3yttv/709/a9xVqL9I+//UwsLt8Yj+dLEnT12VPrH1OsN+VMZDGS95/J/49cbjf1X9/8GIWFrzs9O3WZYNZuti/WfPh75qVZ8d9f+BHcnjf3pL7f/WNyYe1D9pVf7m2v8zjbb+RJFi/A+a3i3DtH91ekU49lZltbu+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAf1CLiUKTa6PJ2rTY6GjEUET+Ng7XZW/MLv71y6783p/O8xvf/18pv+h1u7qfy+//rK/Yn1uyfjojDEfFOz2Bjf/TyrdnpTp88AAAAAAAAAAAAAAAAAAAAvCKGWqz/z33d0+naAXuut1XG91l7KwK0XUX8f96JegDt17L9B/Y98Q/dazPxbywQ9iftP3Qv8Q/dS/xD9xL/0L3EPwAAAAAA7CuHjz38IkXE0h8GG49cf5HX1/Ko/jbVDthLtU5XAOgYy3qge5n6A92r9TU+0C1SuZE9z6pu+jfQ8qC0g1LnLu/gYAAAAAAAAAAAAADoOsePbmf9P7AfWP8P3cv6f+he5fr/Yx2uB9B+rvGBeMlK/sr1/y89CgAAAAAAAAAAAADYTfOLd65Pzc7O3Lbx91ejGnu3cW9dSpZld/O/glelhru/kYoZ6m0ptJwK3/4z7d/MCZZr/Tb3kzv3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKz2YwAAAP//RI0p+g==")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r4, 0x80084523, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r7, 0x8008af26, 0xffffffffffffffff)
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r8, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x18, 0x30, 0xfff7, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

13.774502491s ago: executing program 6 (id=3069):
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket$kcm(0x29, 0x5, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
set_mempolicy(0x4005, &(0x7f0000000280)=0x103, 0x4)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

13.074345978s ago: executing program 2 (id=3080):
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
recvmsg(r6, &(0x7f0000003580)={&(0x7f0000000240)=@tipc=@id, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/210, 0xd2}], 0x5, &(0x7f0000002580)=""/4096, 0x1000}, 0x0)
read$alg(0xffffffffffffffff, 0x0, 0x0)

12.295875686s ago: executing program 6 (id=3072):
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
recvmsg(r6, &(0x7f0000003580)={&(0x7f0000000240)=@tipc=@id, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/210, 0xd2}], 0x5, &(0x7f0000002580)=""/4096, 0x1000}, 0x0)
read$alg(0xffffffffffffffff, 0x0, 0x0)

9.615344713s ago: executing program 2 (id=3076):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x800)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b92010024001280090001", @ANYRES16=r1], 0x44}}, 0x8000)

9.387157205s ago: executing program 6 (id=3078):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000100), 0x10)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512)
syz_open_procfs(0x0, &(0x7f0000000380)='loginuid\x00')
sendto(r2, &(0x7f0000000000)="7cd1e89831ce6aab8f22ae2de8da", 0xe, 0x4000080, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0)

9.386247005s ago: executing program 2 (id=3079):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r4, 0x80084523, &(0x7f0000001f40)=""/231)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r8, 0x8008af26, 0xffffffffffffffff)
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgoh4Rl96D8odGMWnU0ANRIKYHRCVEkSJOFQcqLpRKKVKRQJWqqKe2p1a99YR6oVKVSkE9tJESV1m/We8+e7rrsT1r7/5+0rdv37zZ+b7xRs7MePZtAIZWrfl4+PBsFsJ7n1859trJ7NM7yx5prbGv+ZjFXiOEUG/rZ8n2vogLbt24dGKtNgsHm495Pzx/vfXayRDCYtgXroVG+Hh+4auP3n9u/ydvTtz3zsWzr2/R7rek+wEAAIPo6p8W/vbEP/741MzNq3uPhvHW8pXj9WWT8bj/QFyQL6+Fzn7WFu3GkvVGYtSS9UaS9UaTPKMF+erJduoF6411yTfStmyt/QQAAICdKD+vbYSsNtfRr9Xm5pbP++/4Ynosmzt3ZuH0hT4VCgAAAJT278vNm26FEEIIIYQQQggxwLE03e8rEAAAAMCwSecLW2Vxc2fqam2t0Vv+68/W1n49bIKq//3Lv7Pyf/iG3zgAAJQ3qEeT+X7lx9H5PAbpPIIjyevWe/xfS7Yzus46i+YV7Fiebd+3qaj+9Oe6XRXVv973sV+K6k/nw9yuiupP5+ncrorqH6+4jrKK6p+ouI6yiurfVXEdZRXVv7viOsoqqn+y4jrKKqp/quI6yiqq/66K6yirqP49FddRVlH9O+W22qL6GxXXUVZR/TMV11FWUf13V1xHWUX131NxHWUV1X9vxXX0y8OxzX8Oe5Px9vPn9Jxup5zjAQAAwLD7r/n/hBBCiFXRvA9iG9QhxGBHtg1qEEKI4YnL/b4AAQAAAPRd/rmA/APoS1E+PtJlfLR9fGJlhXy83uX1Y13Gx7uMAwAAACH89q3TD7ybrXzOf6Pz4eXzRu0Kn94OJeYxSie6W2/+jc57ttH865i3zPQJAAAAVCb73rXbTx774JWZm1f3Hm07+70dz3fzeUBH4wnrZ7Gf3xcwlfSz/Bz6aGeeWsF66fWBu4q298IGdxQAAACGWH7+3ghZba7tvLsRarW5uZXz8dlQz06fWTh1IPbz72f5w3R9/M7yZyquGwAAAOjdyvn+2uf/+ff4zoaxbO7cmYXTF5b7U63l9Vr7dYHpleVZ+3WBRrL8YMHyQ7Gff3/nD6Z3NZfPnfjhwsnN3nkAAAAYEhdevXj2xYWFUz/yxBNPPGk96fdvJgAAYLN9+eWV+o8PTf1u+fP/K/Pf5Z//3xf7jTi335/jCvl9AvnnAFZ9Xv94Z57povXOd67XSNYbiTGe1D3Rtp3QnG+w83UzRfkandsZK8g3meSbSvKl8xSMJuvn+fYky9P5CfP1ppPl6eSAo0mOLMn/aAAAAIBi86+8fH7+wqsXnz7z8osvnXrp1LlDB49898iRA89855n55n398+139wMAAAA70cpNv/2uBAAAAAAAAAAAAAAAAAAAAIZXFV8n1u99BAAAgGH3r8shhEUhhCgdS+P9r0GILjG2DWoQQgghhFiO5ne7V5+31u/rDwAAAMDwuXXj0on2dpXFbFPztbbWWG5ux7x5O/X0X2fuRL7a9WdHOl6/e1OrYdhV/e9f/p2V/8M3Njf/RP6k599/ySXjo+XyPj7/y9n2/A+O9pg/3f8XyuXfn+R/PPSWf+mDJP/xcvmfSPLv7jH/qv0/Xy7/kzH/bOzvf6zX/J3v/3hs8/3Y1WP+byf7fzL0mj/Z/0aPCRNPxfwAMIwG9QaA/CghP46ejP18f+PhZhhJXrfe4/9asp3RDVfeud38OOj+2M+Pl6aSvLn11j+ZbO+uknWm0rq2q6L6N+t93GpF9dcrrqOsovrHKq6jrKL6xyuuo6yi+icqrqOsovp7PQ/tt6L6d8p15aL6Jyuuo6yi+qcqrqOsovrX+/94vxTVv6fiOsoqqn+64jrKKqq/5GW1yhXVP1NxHWUV1X93xXWUVVT/PRXXUVZR/fdWXEe/PBTbovPh/PxzOo7l/UbSH1/jZzmo1xYAAABgp/mn+f+EEEIIIUpF836ZbVBHf6Ltbrm+1yI2I/6ztKzfdQghti6Wlvp48YG+29pPMwOwXfn9P9y8/8PN+z/cvP/8P/k9/FnSz410GR/tMl7vMj6WjKf/Xse7jN+TbHcpv64Z3dtl/Gtdxvd0Gb+/y/hsl/EHuow/2GX8oS7jAAAADIf7Yuv8EAAAAAbXa7/67O3fPH78xszNq3uPhrFV884fiP3x+Lf1t2I/nfc+V49/8/9J7P8itr+P7d+T9d1/AgAAAFsv/54Yf/8HAACAwZV/T6nzfwAAABhcM7F1/g8AAACD6+7YOv8HAACAAZZNrL04tvl1gUdj2+u8fgDA9vf12D4c272xfSS234htfhzwWGy/WVF9AMDm+fn3f3rk3Wxlvv9DyfituDxvV1lcvlKQ1Tpn8t8V292x/VaP9aTfB9Br/tyeHvNsVf7pDeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZHrfl4+PBsFsJ7n1859rOxt/9yZ9kjrTX2NR+z2GuEEOqt1+WjK/1fxxVv3bh0or29HdssHAxZyFrLw/PXW5kmQwiLYV+4Fhrh4/mFrz56/7n9n7w5cd87F8++voU/go79AwAAgEH0vwAAAP//cFQjcg==")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r9, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000000c0)=[0x7, 0x8], 0x2, 0x8, 0x98f, 0xffff}})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x88, 0x30, 0xfff7, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x0, 0x10000000, 0x800, 0x6}, 0x2, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

9.020248899s ago: executing program 3 (id=3081):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de)
r0 = memfd_create(&(0x7f0000000280)='-E\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2va}knh\x02\x00)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xdde)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN.%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x6)
fallocate(r0, 0x11, 0xef, 0x6)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$pppoe(0x18, 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40010060, 0x0, 0x0)
close(0x3)
socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_udp(0x2, 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x56, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000002, 0x20000000, 0x6, 0xe, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x31, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x1, 0x4, 0x5, 0x3, 0x800, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x846, 0x8071, 0x7, 0x200, 0xffffffff, 0x7, 0x5, 0x4, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x7, 0x5, 0x4, 0x200001, 0x40], [0x10, 0x9, 0x8000012d, 0x8004, 0x8000005, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x10, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0xcf1, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x8, 0x401, 0x6, 0x2ae, 0xff, 0x3, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x89, 0x3, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0x7f, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x0, 0x3, 0xbc45, 0x3, 0x42, 0x401], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xd, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x2, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xb, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x3, 0x200, 0xffffff6a, 0x3, 0x1, 0x2950bfaf, 0x80001000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120201, 0x3, 0x1, 0x80a2ed, 0x4, 0x29], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xf41, 0x0, 0xb9, 0xce7, 0x1ff, 0xf0f6, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0xa620, 0x200001, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0xd4cf, 0x4, 0x4, 0xcc, 0x1, 0xfffff000, 0x5, 0x3, 0x8, 0x100, 0x3, 0x7, 0x3, 0x8, 0x6, 0x226, 0x5, 0x4005, 0x8, 0x30b1d694, 0xa1f, 0x9, 0x7, 0x5b, 0x6c1b, 0x0, 0x4, 0x5, 0xb0e, 0xd7, 0x3f6, 0xffff343f, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000001600)={0x2, 0x3, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)

8.262433757s ago: executing program 7 (id=3082):
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
recvmsg(r6, &(0x7f0000003580)={&(0x7f0000000240)=@tipc=@id, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/210, 0xd2}], 0x5, &(0x7f0000002580)=""/4096, 0x1000}, 0x0)
read$alg(0xffffffffffffffff, 0x0, 0x0)

7.285356707s ago: executing program 2 (id=3083):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000"], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$eJzs3c9vFNcdAPDvW//AxqheUNWWHoqlqgKpxcYGKlT1ANcKWfSHeumlLjaUYsDCrlqTSBiJXCJFuURRpJxyCPkvEhSunJJTDrnkFCGhJOISKRITze6M8Y9Z45+7yPv5SMvOvLfj9wb7u+/N2/dmA+haI/k/tYijETGXIobT0nJebxSZI83XPfvu9cv5I0WW/fWbFKlIK1+fiueh4uCBiPjs0xRHetaXO7945/rU7OzM7WJ/bOHG3Nj84p2T125MXZ25OnNz4vcT586eOXtu/NS2zutuRdrF+//53/Cbk//48P0f0vhHX06mOB9/Kl648jx2y0iMNP5P0vqsoXO7XViH9BR/J1mWZWVa6u1sndi88vfXFxE/j+HoiRe/vOF4488drRywp7LUfO8GulES/9Clyn5AeW2/9jq41pFeCdAOTy80BwDWx39vc2wwBhpjAwefpVg5rJMiYnsjc6sdiojHjybvX3k0eT/2aBwOqLZ0L5bH8VfHf2rEfz0Got6I/9qq+M/7BZeK5zz9L83kA1stf+1QsfiH9snjP34xsGH8R4v4/2f+fLcZw//aZvn1F5v/HlwV/4Nleqr4/AwAAAAAAACo8PBCRPyu6vP/2vL8n6iY/zMUEed3ofyRNfvrP/+vPdmFYoAKTy9E/LFy/k+tnP1b71mxhLUefenKtdmZUxHxk4g4EX0H8v3xDco4+daR91rljRTz/8pHXv7jYi5gUY8nvWtmFU1PLUzt4JSBwtN7Eb+snP+bltv/VNH+5+8Mc5ss48hvHlxqlffy+N+AxQmwI9kHEcdbzP8tpYgDG9yfY6zRHxgrewXr/eq1tz9uVf52498tJmDn8vb/4MbxX08r79czv/UyTi/2Zq3yttv/709/a9xVqL9I+//UwsLt8Yj+dLEnT12VPrH1OsN+VMZDGS95/J/49cbjf1X9/8GIWFrzs9O3WZYNZuti/WfPh75qVZ8d9f+BHcnjf3pL7f/WNyYe1D9pVf7m2v8zjbb+RJFi/A+a3i3DtH91ekU49lZltbu+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAf1CLiUKTa6PJ2rTY6GjEUET+Ng7XZW/MLv71y6783p/O8xvf/18pv+h1u7qfy+//rK/Yn1uyfjojDEfFOz2Bjf/TyrdnpTp88AAAAAAAAAAAAAAAAAAAAvCKGWqz/z33d0+naAXuut1XG91l7KwK0XUX8f96JegDt17L9B/Y98Q/dazPxbywQ9iftP3Qv8Q/dS/xD9xL/0L3EPwAAAAAA7CuHjz38IkXE0h8GG49cf5HX1/Ko/jbVDthLtU5XAOgYy3qge5n6A92r9TU+0C1SuZE9z6pu+jfQ8qC0g1LnLu/gYAAAAAAAAAAAAADoOsePbmf9P7AfWP8P3cv6f+he5fr/Yx2uB9B+rvGBeMlK/sr1/y89CgAAAAAAAAAAAADYTfOLd65Pzc7O3Lbx91ejGnu3cW9dSpZld/O/glelhru/kYoZ6m0ptJwK3/4z7d/MCZZr/Tb3kzv3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKz2YwAAAP//RI0p+g==")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r4, 0x80084523, &(0x7f0000001f40)=""/231)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r8, 0x8008af26, 0xffffffffffffffff)
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r9, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000000c0)=[0x7, 0x8], 0x2, 0x8, 0x98f, 0xffff}})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x88, 0x30, 0xfff7, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x0, 0x10000000, 0x800, 0x6}, 0x2, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

7.284984927s ago: executing program 3 (id=3084):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket(0x11, 0xa, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={<r6=>r0})
ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000400)={r1, &(0x7f0000000280)='/-]^$*#/\xea\x00', 0x500, &(0x7f00000002c0)={@_ha_fsid={[0x8001, 0x22]}, {0x2, 0x3ff, 0x5, 0x9}}, 0x0, &(0x7f0000000300)={@_ha_fsid}, &(0x7f00000003c0)=0xbf2})
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000141, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
getgid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, 0x0, 0x7, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x20040010)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x101d0)

5.469802975s ago: executing program 7 (id=3085):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_PDEATHSIG(0x1, 0x38)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x18}}, 0xc001)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000801}, 0x48800)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="65010000"], 0x188}}, 0x0)
timer_create(0x6, 0x0, 0x0)

5.469266875s ago: executing program 3 (id=3086):
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
recvmsg(r6, &(0x7f0000003580)={&(0x7f0000000240)=@tipc=@id, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/210, 0xd2}], 0x5, &(0x7f0000002580)=""/4096, 0x1000}, 0x0)
read$alg(0xffffffffffffffff, 0x0, 0x0)

3.285349387s ago: executing program 7 (id=3087):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r4, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x16)
accept(r4, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_skb=0x26}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
sendmsg$nl_route_sched(r5, 0x0, 0x24040084)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0xfffffffffffffffe}, 0x4)
socket$key(0xf, 0x3, 0x2)

2.780597882s ago: executing program 2 (id=3088):
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
recvmsg(r6, &(0x7f0000003580)={&(0x7f0000000240)=@tipc=@id, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/210, 0xd2}], 0x5, &(0x7f0000002580)=""/4096, 0x1000}, 0x0)
read$alg(0xffffffffffffffff, 0x0, 0x0)

2.239350878s ago: executing program 3 (id=3089):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000100), 0x10)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512)
syz_open_procfs(0x0, &(0x7f0000000380)='loginuid\x00')
sendto(r2, 0x0, 0x0, 0x4000080, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0)

2.182669898s ago: executing program 7 (id=3090):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_PDEATHSIG(0x1, 0x38)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x18}}, 0xc001)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000801}, 0x48800)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="65010000"], 0x188}}, 0x0)
timer_create(0x6, 0x0, 0x0)

2.123643569s ago: executing program 6 (id=3091):
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$kcm(0x29, 0x5, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
set_mempolicy(0x4005, &(0x7f0000000280)=0x103, 0x4)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

1.370735807s ago: executing program 2 (id=3092):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_PDEATHSIG(0x1, 0x38)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x18}}, 0xc001)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
timer_create(0x6, 0x0, 0x0)

1.178825578s ago: executing program 7 (id=3093):
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c000280050001000000"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
recvmsg(r6, &(0x7f0000003580)={&(0x7f0000000240)=@tipc=@id, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/210, 0xd2}], 0x5, &(0x7f0000002580)=""/4096, 0x1000}, 0x0)
read$alg(0xffffffffffffffff, 0x0, 0x0)

1.086557159s ago: executing program 6 (id=3094):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000001600)={0x2, 0x3, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x38}, 0x1, 0x7}, 0x0)

1.067387259s ago: executing program 3 (id=3095):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0)

634.202354ms ago: executing program 6 (id=3096):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r5})
syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0)

634.023604ms ago: executing program 3 (id=3097):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
getgroups(0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0)
mount$9p_rdma(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x200800, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e20,fscontext=\"'])
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'user.', '.\xba\x00'}, &(0x7f0000000200)=""/16, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x62, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 7 (id=3098):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x20000014})
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000200)=[@ioring_restriction_sqe_op={0x1, 0x3}, @ioring_restriction_register_op={0x0, 0x22}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1f}, @ioring_restriction_register_op={0x0, 0x11}], 0x4)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x404e40)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
read$FUSE(r7, &(0x7f0000003f00)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

r -101
[  805.179556][ T4500] libceph: mon0 (1)[c::]:6789 connect error
[  805.182885][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2750'.
[  805.190261][T14931] loop3: detected capacity change from 0 to 1024
[  805.199298][T14930] loop2: detected capacity change from 0 to 1024
[  805.218253][T14931] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  805.220108][T14931] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  805.227346][T14931] EXT4-fs (loop3): mount failed
[  805.228702][T14930] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  805.230419][T14930] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  805.240735][T14930] EXT4-fs (loop2): mount failed
[  805.259566][T14935] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2749'.
[  805.306950][T14919] ceph: No mds server is up or the cluster is laggy
[  805.402884][T14921] ceph: No mds server is up or the cluster is laggy
[  805.416433][T14516] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  805.505900][ T4498] libceph: connect (1)[c::]:6789 error -101
[  805.507118][ T4498] libceph: mon0 (1)[c::]:6789 connect error
[  805.508318][ T4498] libceph: connect (1)[c::]:6789 error -101
[  805.509393][ T4498] libceph: mon0 (1)[c::]:6789 connect error
[  806.188763][ T4381] libceph: connect (1)[c::]:6789 error -101
[  806.189967][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  806.191168][ T4381] libceph: connect (1)[c::]:6789 error -101
[  806.193280][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  806.199418][T13597] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  806.320552][T14931] loop3: detected capacity change from 0 to 4096
[  806.374327][T14940] loop2: detected capacity change from 0 to 4096
[  806.978070][T14942] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  807.086200][T14940] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[  807.087629][T14940] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[  807.138528][T14941] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  807.388654][T14931] NILFS (loop3): nilfs_sufile_do_free: segment 7 is already clean
[  807.390016][T14931] NILFS (loop3): nilfs_sufile_do_free: segment 8 is already clean
[  807.489378][T14948] ieee802154 phy0 wpan0: encryption failed: -22
[  807.998220][T14950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2752'.
[  808.484108][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'.
[  808.498496][T14961] loop1: detected capacity change from 0 to 1024
[  808.640819][T14963] netlink: 173 bytes leftover after parsing attributes in process `syz.3.2755'.
[  810.795453][T14970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2754'.
[  811.174441][T14961] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=1
[  811.176028][T14961] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  811.178979][T14961] EXT4-fs (loop1): mount failed
[  811.319594][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2761'.
[  811.332039][T14980] loop2: detected capacity change from 0 to 1024
[  811.733968][T14986] loop1: detected capacity change from 0 to 4096
[  812.263395][T14986] NILFS (loop1): nilfs_sufile_do_free: segment 7 is already clean
[  812.264803][T14986] NILFS (loop1): nilfs_sufile_do_free: segment 8 is already clean
[  812.392512][T14991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2760'.
[  812.828296][T14990] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  813.117607][T14980] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  813.119390][T14980] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  813.122522][T14980] EXT4-fs (loop2): mount failed
[  813.230449][T14988] ceph: No mds server is up or the cluster is laggy
[  813.231953][T12044] libceph: connect (1)[c::]:6789 error -101
[  813.233096][T12044] libceph: mon0 (1)[c::]:6789 connect error
[  813.292941][T13597] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  814.016985][T15003] loop2: detected capacity change from 0 to 4096
[  814.172522][T15003] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[  814.174336][T15003] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[  814.334884][T15006] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  815.227571][T12404] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  815.229372][T12404] CPU: 0 PID: 12404 Comm: kworker/u5:0 Not tainted syzkaller #0
[  815.230588][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  815.232253][T12404] Workqueue: hci1 hci_rx_work
[  815.233071][T12404] Call trace:
[  815.233592][T12404]  dump_backtrace+0x1c0/0x1ec
[  815.234501][T12404]  show_stack+0x2c/0x3c
[  815.235249][T12404]  __dump_stack+0x30/0x40
[  815.236032][T12404]  dump_stack_lvl+0xf4/0x15c
[  815.236879][T12404]  dump_stack+0x1c/0x5c
[  815.237565][T12404]  sysfs_create_dir_ns+0x244/0x264
[  815.238380][T12404]  kobject_add_internal+0x598/0xb08
[  815.239306][T12404]  kobject_add+0x140/0x20c
[  815.240104][T12404]  device_add+0x3f0/0xf90
[  815.240928][T12404]  hci_conn_add_sysfs+0xbc/0x1c8
[  815.241807][T12404]  le_conn_complete_evt+0xcc8/0x1244
[  815.242797][T12404]  hci_le_conn_complete_evt+0x114/0x3f4
[  815.243816][T12404]  hci_le_meta_evt+0x2c0/0x4a0
[  815.244592][T12404]  hci_event_packet+0x6b8/0xf18
[  815.245412][T12404]  hci_rx_work+0x328/0xa84
[  815.246227][T12404]  process_one_work+0x7f8/0x13a4
[  815.247104][T12404]  worker_thread+0x8c4/0xfec
[  815.247976][T12404]  kthread+0x250/0x2d8
[  815.248691][T12404]  ret_from_fork+0x10/0x20
[  815.253456][T12404] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  815.255696][T12404] Bluetooth: hci1: failed to register connection device
[  815.485580][T15015] loop4: detected capacity change from 0 to 1024
[  815.496220][T15015] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=1
[  815.497952][T15015] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  815.500941][T15015] EXT4-fs (loop4): mount failed
[  816.142536][T15021] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2767'.
[  816.174577][T15027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2768'.
[  816.262512][ T4381] libceph: connect (1)[c::]:6789 error -101
[  816.263644][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  816.266672][ T4381] libceph: connect (1)[c::]:6789 error -101
[  816.267710][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  816.878698][T15038] loop4: detected capacity change from 0 to 4096
[  818.144747][T12404] Bluetooth: hci1: command 0x2016 tx timeout
[  818.278852][T15022] ceph: No mds server is up or the cluster is laggy
[  818.303075][T15024] ceph: No mds server is up or the cluster is laggy
[  818.886612][T15043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2769'.
[  818.889585][T12964] libceph: connect (1)[c::]:6789 error -101
[  818.894043][T12964] libceph: mon0 (1)[c::]:6789 connect error
[  818.896416][T12964] libceph: connect (1)[c::]:6789 error -101
[  818.896649][T12631] libceph: connect (1)[c::]:6789 error -101
[  818.899118][T12631] libceph: mon0 (1)[c::]:6789 connect error
[  818.899839][T12964] libceph: mon0 (1)[c::]:6789 connect error
[  818.914139][T15044] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  818.945188][T15037] NILFS (loop4): nilfs_sufile_do_free: segment 7 is already clean
[  818.946737][T15037] NILFS (loop4): nilfs_sufile_do_free: segment 8 is already clean
[  819.194905][T15039] ceph: No mds server is up or the cluster is laggy
[  819.200783][T12631] libceph: connect (1)[c::]:6789 error -101
[  819.202010][T12631] libceph: mon0 (1)[c::]:6789 connect error
[  820.971321][T15063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2772'.
[  821.066464][ T4377] libceph: connect (1)[c::]:6789 error -101
[  821.067512][ T4377] libceph: mon0 (1)[c::]:6789 connect error
[  821.084752][ T4495] libceph: connect (1)[c::]:6789 error -101
[  821.085886][ T4495] libceph: mon0 (1)[c::]:6789 connect error
[  821.242992][T15062] ceph: No mds server is up or the cluster is laggy
[  821.319558][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2774'.
[  821.339738][T15072] loop3: detected capacity change from 0 to 1024
[  821.359105][ T4495] libceph: connect (1)[c::]:6789 error -101
[  821.360284][ T4495] libceph: mon0 (1)[c::]:6789 connect error
[  821.441859][T15075] loop1: detected capacity change from 0 to 1024
[  821.460745][T15072] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  821.462478][T15072] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  821.465341][T15072] EXT4-fs (loop3): mount failed
[  821.466358][T15075] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=1
[  821.467893][T15075] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  821.470857][T15075] EXT4-fs (loop1): mount failed
[  824.147462][T15090] loop1: detected capacity change from 0 to 4096
[  826.380628][T15096] loop3: detected capacity change from 0 to 4096
[  826.398504][T15097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2778'.
[  826.730321][T15090] NILFS (loop1): error -4 creating segctord thread
[  827.382728][T15096] NILFS (loop3): error -4 creating segctord thread
[  827.695871][T15113] ieee802154 phy0 wpan0: encryption failed: -22
[  827.985672][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2783'.
[  828.309391][T15121] loop3: detected capacity change from 0 to 4096
[  830.703275][T15124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2780'.
[  830.707064][T15125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2781'.
[  832.626667][T15131] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  832.706310][T15135] loop5: detected capacity change from 0 to 1024
[  832.715391][T15123] ceph: No mds server is up or the cluster is laggy
[  832.720722][ T4495] libceph: connect (1)[c::]:6789 error -101
[  832.721784][ T4495] libceph: mon0 (1)[c::]:6789 connect error
[  832.927781][T15143] ieee802154 phy0 wpan0: encryption failed: -22
[  833.167126][T15135] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=1
[  833.168828][T15135] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  833.171748][T15135] EXT4-fs (loop5): mount failed
[  833.303044][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2787'.
[  833.319722][T15149] loop2: detected capacity change from 0 to 1024
[  833.396851][T15145] loop5: detected capacity change from 0 to 4096
[  833.501629][T15145] NILFS (loop5): nilfs_sufile_do_free: segment 7 is already clean
[  833.503056][T15145] NILFS (loop5): nilfs_sufile_do_free: segment 8 is already clean
[  833.511130][T15151] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  833.521301][T15149] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  833.523064][T15149] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  833.526000][T15149] EXT4-fs (loop2): mount failed
[  834.257286][T15159] netlink: 173 bytes leftover after parsing attributes in process `syz.4.2790'.
[  834.298458][T15163] netlink: 173 bytes leftover after parsing attributes in process `syz.1.2789'.
[  834.685520][T15165] loop2: detected capacity change from 0 to 4096
[  835.850512][T15166] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  835.860405][T15174] loop1: detected capacity change from 0 to 1024
[  835.935808][T15174] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=1
[  835.937729][T15174] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  835.940767][T15174] EXT4-fs (loop1): mount failed
[  836.946645][T15180] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2792'.
[  836.946869][T15179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2791'.
[  836.954886][T15165] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[  836.956283][T15165] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[  836.963073][ T4377] libceph: connect (1)[c::]:6789 error -101
[  836.964095][ T4377] libceph: mon0 (1)[c::]:6789 connect error
[  836.966026][ T4497] libceph: connect (1)[c::]:6789 error -101
[  836.966263][ T4377] libceph: connect (1)[c::]:6789 error -101
[  836.967147][ T4497] libceph: mon0 (1)[c::]:6789 connect error
[  836.968553][ T4377] libceph: mon0 (1)[c::]:6789 connect error
[  837.001151][T15183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2794'.
[  837.131637][T15195] loop2: detected capacity change from 0 to 1024
[  837.147601][T15195] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  837.149351][T15195] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  837.152517][T15195] EXT4-fs (loop2): mount failed
[  837.162810][T15175] ceph: No mds server is up or the cluster is laggy
[  837.177841][T15182] ceph: No mds server is up or the cluster is laggy
[  837.234630][T12268] libceph: connect (1)[c::]:6789 error -101
[  837.235703][T12268] libceph: mon0 (1)[c::]:6789 connect error
[  837.247430][T12268] libceph: connect (1)[c::]:6789 error -101
[  837.248536][T12268] libceph: mon0 (1)[c::]:6789 connect error
[  837.285082][T15178] ceph: No mds server is up or the cluster is laggy
[  837.291592][ T4495] libceph: connect (1)[c::]:6789 error -101
[  837.292624][ T4495] libceph: mon0 (1)[c::]:6789 connect error
[  837.658175][T15200] loop2: detected capacity change from 0 to 4096
[  838.240174][ T4377] libceph: connect (1)[c::]:6789 error -101
[  838.241247][ T4377] libceph: mon0 (1)[c::]:6789 connect error
[  838.258802][T15201] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  838.462238][T15200] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[  838.463724][T15200] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[  839.777562][T12404] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  839.779534][T12404] CPU: 0 PID: 12404 Comm: kworker/u5:0 Not tainted syzkaller #0
[  839.790971][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  839.792787][T12404] Workqueue: hci5 hci_rx_work
[  839.793588][T12404] Call trace:
[  839.794180][T12404]  dump_backtrace+0x1c0/0x1ec
[  839.795040][T12404]  show_stack+0x2c/0x3c
[  839.795790][T12404]  __dump_stack+0x30/0x40
[  839.796663][T12404]  dump_stack_lvl+0xf4/0x15c
[  839.797546][T12404]  dump_stack+0x1c/0x5c
[  839.798299][T12404]  sysfs_create_dir_ns+0x244/0x264
[  839.799232][T12404]  kobject_add_internal+0x598/0xb08
[  839.800062][T12404]  kobject_add+0x140/0x20c
[  839.800817][T12404]  device_add+0x3f0/0xf90
[  839.801590][T12404]  hci_conn_add_sysfs+0xbc/0x1c8
[  839.802471][T12404]  le_conn_complete_evt+0xcc8/0x1244
[  839.803499][T12404]  hci_le_conn_complete_evt+0x114/0x3f4
[  839.804482][T12404]  hci_le_meta_evt+0x2c0/0x4a0
[  839.805331][T12404]  hci_event_packet+0x6b8/0xf18
[  839.806263][T12404]  hci_rx_work+0x328/0xa84
[  839.807061][T12404]  process_one_work+0x7f8/0x13a4
[  839.807933][T12404]  worker_thread+0x8c4/0xfec
[  839.808805][T12404]  kthread+0x250/0x2d8
[  839.809576][T12404]  ret_from_fork+0x10/0x20
[  839.890159][T12404] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  839.892791][T12404] Bluetooth: hci5: failed to register connection device
[  840.421876][T15226] loop3: detected capacity change from 0 to 1024
[  840.682112][T15226] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  840.683894][T15226] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  840.686794][T15226] EXT4-fs (loop3): mount failed
[  841.038027][T14516] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  841.423283][T15237] loop3: detected capacity change from 0 to 4096
[  842.538793][T12404] Bluetooth: hci5: command 0x2016 tx timeout
[  843.646926][T15241] loop2: detected capacity change from 0 to 4096
[  844.398132][T15239] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  844.440163][T15245] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  844.488965][T15240] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[  844.490340][T15240] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[  844.637640][T15249] loop5: detected capacity change from 0 to 1024
[  844.654214][T15249] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=1
[  844.655970][T15249] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  844.658733][T15249] EXT4-fs (loop5): mount failed
[  845.308747][T15253] loop5: detected capacity change from 0 to 4096
[  845.743597][T15253] NILFS (loop5): nilfs_sufile_do_free: segment 7 is already clean
[  845.745122][T15253] NILFS (loop5): nilfs_sufile_do_free: segment 8 is already clean
[  845.836330][T15255] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  846.166684][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2806'.
[  846.275688][T15259] device syzkaller0 entered promiscuous mode
[  846.428691][T15263] loop3: detected capacity change from 0 to 4096
[  846.582685][T15266] ieee802154 phy0 wpan0: encryption failed: -22
[  846.943198][T15267] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  847.000758][T15263] NILFS (loop3): nilfs_sufile_do_free: segment 7 is already clean
[  847.003917][T15263] NILFS (loop3): nilfs_sufile_do_free: segment 8 is already clean
[  847.826009][T15270] loop4: detected capacity change from 0 to 1024
[  847.839380][T15270] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=1
[  847.841004][T15270] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  847.843997][T15270] EXT4-fs (loop4): mount failed
[  852.212915][T15291] ieee802154 phy0 wpan0: encryption failed: -22
[  852.262177][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  852.264076][ T4330] CPU: 1 PID: 4330 Comm: kworker/u5:2 Not tainted syzkaller #0
[  852.265370][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  852.267130][ T4330] Workqueue: hci4 hci_rx_work
[  852.267964][ T4330] Call trace:
[  852.268535][ T4330]  dump_backtrace+0x1c0/0x1ec
[  852.269333][ T4330]  show_stack+0x2c/0x3c
[  852.270084][ T4330]  __dump_stack+0x30/0x40
[  852.270854][ T4330]  dump_stack_lvl+0xf4/0x15c
[  852.271674][ T4330]  dump_stack+0x1c/0x5c
[  852.272405][ T4330]  sysfs_create_dir_ns+0x244/0x264
[  852.273320][ T4330]  kobject_add_internal+0x598/0xb08
[  852.274187][ T4330]  kobject_add+0x140/0x20c
[  852.274947][ T4330]  device_add+0x3f0/0xf90
[  852.275725][ T4330]  hci_conn_add_sysfs+0xbc/0x1c8
[  852.276735][ T4330]  le_conn_complete_evt+0xcc8/0x1244
[  852.277634][ T4330]  hci_le_conn_complete_evt+0x114/0x3f4
[  852.278606][ T4330]  hci_le_meta_evt+0x2c0/0x4a0
[  852.279476][ T4330]  hci_event_packet+0x6b8/0xf18
[  852.280338][ T4330]  hci_rx_work+0x328/0xa84
[  852.281098][ T4330]  process_one_work+0x7f8/0x13a4
[  852.281974][ T4330]  worker_thread+0x8c4/0xfec
[  852.282789][ T4330]  kthread+0x250/0x2d8
[  852.283486][ T4330]  ret_from_fork+0x10/0x20
[  852.285135][ T4330] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  852.287501][ T4330] Bluetooth: hci4: failed to register connection device
[  852.446126][T15293] loop5: detected capacity change from 0 to 1024
[  852.615412][T15293] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=1
[  852.617235][T15293] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  852.620189][T15293] EXT4-fs (loop5): mount failed
[  852.943904][T12404] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  853.716664][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  853.719338][ T4330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  853.721220][ T4330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  853.722859][ T4330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  853.728466][ T4330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  853.730863][ T4330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  853.857233][T15324] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2818'.
[  854.178805][T13597] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  854.406246][T15332] ieee802154 phy0 wpan0: encryption failed: -22
[  854.683282][T12404] Bluetooth: hci4: command 0x2016 tx timeout
[  854.720402][T15333] loop5: detected capacity change from 0 to 4096
[  855.009810][T15339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2819'.
[  856.841224][T12404] Bluetooth: hci2: command 0x0409 tx timeout
[  856.862399][T15333] NILFS (loop5): error -4 creating segctord thread
[  857.126971][T15318] lo speed is unknown, defaulting to 1000
[  857.343947][T15352] ieee802154 phy0 wpan0: encryption failed: -22
[  857.415933][T15351] ieee802154 phy0 wpan0: encryption failed: -22
[  857.488766][ T4343] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  857.685890][T15318] chnl_net:caif_netlink_parms(): no params data found
[  857.716194][T15318] bridge0: port 1(bridge_slave_0) entered blocking state
[  857.718311][T15318] bridge0: port 1(bridge_slave_0) entered disabled state
[  857.985942][T15318] device bridge_slave_0 entered promiscuous mode
[  857.988495][T15318] bridge0: port 2(bridge_slave_1) entered blocking state
[  858.030188][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  858.031107][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  858.032601][T15318] bridge0: port 2(bridge_slave_1) entered disabled state
[  858.034056][T15318] device bridge_slave_1 entered promiscuous mode
[  858.108230][T15318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  858.110684][T15318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  858.256886][T15318] team0: Port device team_slave_0 added
[  858.497070][T15375] ieee802154 phy0 wpan0: encryption failed: -22
[  858.556562][T15379] ieee802154 phy0 wpan0: encryption failed: -22
[  859.100788][ T4343] Bluetooth: hci2: command 0x041b tx timeout
[  859.246536][T15318] team0: Port device team_slave_1 added
[  859.286167][T15318] batman_adv: batadv0: Adding interface: batadv_slave_0
[  859.287492][T15318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  859.353132][T15318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  859.356416][T15318] batman_adv: batadv0: Adding interface: batadv_slave_1
[  859.357560][T15318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  859.361929][T15318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  859.473604][T15399] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2831'.
[  859.476682][T15394] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2832'.
[  859.581245][T15318] device hsr_slave_0 entered promiscuous mode
[  859.744989][T15403] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2829'.
[  859.925931][T15318] device hsr_slave_1 entered promiscuous mode
[  859.938535][ T4381] libceph: connect (1)[c::]:6789 error -101
[  859.939699][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  859.966799][T15409] loop4: detected capacity change from 0 to 1024
[  859.968586][T15318] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  859.970916][T15318] Cannot create hsr debugfs directory
[  859.982132][T15396] device syzkaller0 entered promiscuous mode
[  859.990333][T15409] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=1
[  859.992145][T15409] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  859.995148][T15409] EXT4-fs (loop4): mount failed
[  860.529779][T15418] loop4: detected capacity change from 0 to 4096
[  860.817379][T15418] NILFS (loop4): nilfs_sufile_do_free: segment 7 is already clean
[  860.818757][T15418] NILFS (loop4): nilfs_sufile_do_free: segment 8 is already clean
[  860.830860][T15401] ceph: No mds server is up or the cluster is laggy
[  860.836870][ T4381] libceph: connect (1)[c::]:6789 error -101
[  860.838043][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  861.247107][ T4343] Bluetooth: hci2: command 0x040f tx timeout
[  861.386294][ T4381] libceph: connect (1)[c::]:6789 error -101
[  861.387746][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  861.717472][T15419] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  861.868043][T15422] loop3: detected capacity change from 0 to 1024
[  861.868047][T15423] loop5: detected capacity change from 0 to 1024
[  861.906170][T15423] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=1
[  861.907286][T15422] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  861.907828][T15423] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  861.909516][T15422] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  861.912354][T15423] EXT4-fs (loop5): mount failed
[  861.914816][T15422] EXT4-fs (loop3): mount failed
[  862.865354][T15423] loop5: detected capacity change from 0 to 4096
[  862.942136][T15431] loop4: detected capacity change from 0 to 4096
[  863.896955][ T4343] Bluetooth: hci2: command 0x0419 tx timeout
[  865.532025][T15433] loop3: detected capacity change from 0 to 4096
[  865.647897][T15423] NILFS (loop5): error -4 creating segctord thread
[  865.922942][T15436] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  866.012608][T15437] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  866.034788][T15318] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  866.087722][T15429] NILFS (loop4): nilfs_sufile_do_free: segment 7 is already clean
[  866.089196][T15429] NILFS (loop4): nilfs_sufile_do_free: segment 8 is already clean
[  866.098245][T15432] NILFS (loop3): nilfs_sufile_do_free: segment 7 is already clean
[  866.099123][T15318] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  866.099463][T15432] NILFS (loop3): nilfs_sufile_do_free: segment 8 is already clean
[  866.119251][T12404] Bluetooth: hci2: command 0x0406 tx timeout
[  866.386823][T15445] ieee802154 phy0 wpan0: encryption failed: -22
[  866.565512][T15318] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  867.823863][T15318] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  869.253844][T15318] 8021q: adding VLAN 0 to HW filter on device bond0
[  869.259064][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  869.264764][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  869.340927][T15461] loop5: detected capacity change from 0 to 1024
[  869.369284][T15318] 8021q: adding VLAN 0 to HW filter on device team0
[  869.428546][T15318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  869.430498][T15318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  869.474217][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  869.476653][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  869.478430][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state
[  869.479638][ T5265] bridge0: port 1(bridge_slave_0) entered forwarding state
[  869.484120][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  869.489431][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  869.492058][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state
[  869.493366][ T5265] bridge0: port 2(bridge_slave_1) entered forwarding state
[  869.500004][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  869.507495][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  869.512882][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  869.520022][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  869.525689][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  869.547097][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  869.558015][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  869.608162][T15461] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=1
[  869.609876][T15461] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  869.612849][T15461] EXT4-fs (loop5): mount failed
[  869.616765][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  869.648959][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  869.651145][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  869.652954][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  869.654526][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  869.656318][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  872.387083][T15192] bond0: (slave syz_tun): Releasing backup interface
[  872.855354][T15482] device syzkaller0 entered promiscuous mode
[  872.857345][T12964] libceph: connect (1)[c::]:6789 error -101
[  872.858510][T12964] libceph: mon0 (1)[c::]:6789 connect error
[  872.883804][ T8249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  872.885299][ T8249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  872.889229][T15318] 8021q: adding VLAN 0 to HW filter on device batadv0
[  872.993029][T15497] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2850'.
[  873.088547][T15505] loop2: detected capacity change from 0 to 1024
[  873.103949][T15505] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  873.105647][T15505] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  873.108660][T15505] EXT4-fs (loop2): mount failed
[  873.112698][T15508] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2849'.
[  873.133088][ T4498] libceph: connect (1)[c::]:6789 error -101
[  873.134646][ T4498] libceph: mon0 (1)[c::]:6789 connect error
[  873.576021][T15511] loop2: detected capacity change from 0 to 4096
[  873.999843][T15512] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  874.212615][T15511] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[  874.213925][T15511] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[  874.811710][T15488] ceph: No mds server is up or the cluster is laggy
[  874.815227][T13542] libceph: connect (1)[c::]:6789 error -101
[  874.816327][T13542] libceph: mon0 (1)[c::]:6789 connect error
[  874.909097][T15514] ieee802154 phy0 wpan0: encryption failed: -22
[  874.915457][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  874.917382][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  874.924734][T15318] device veth0_vlan entered promiscuous mode
[  874.928198][T15318] device veth1_vlan entered promiscuous mode
[  874.930900][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  874.935684][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  874.960479][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  875.144417][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  875.146054][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  875.147466][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  875.175927][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  875.177735][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  875.179507][T15524] loop4: detected capacity change from 0 to 1024
[  875.561375][T15524] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=1
[  875.563033][T15524] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  875.565998][T15524] EXT4-fs (loop4): mount failed
[  876.346160][T15318] device veth0_macvtap entered promiscuous mode
[  876.348974][T15318] device veth1_macvtap entered promiscuous mode
[  876.382074][T14516] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  876.388746][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  876.390513][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.450385][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  876.466034][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.467699][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  876.469602][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.471294][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  876.473026][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.485148][T15318] batman_adv: batadv0: Interface activated: batadv_slave_0
[  876.489080][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  876.491647][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  876.731332][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  876.733089][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.734664][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  876.736328][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.737891][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  876.739671][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.741945][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  876.743635][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.746116][T15318] batman_adv: batadv0: Interface activated: batadv_slave_1
[  876.748731][T15318] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  876.750179][T15318] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  876.797570][T15534] loop4: detected capacity change from 0 to 4096
[  877.553783][T15533] NILFS (loop4): nilfs_sufile_do_free: segment 7 is already clean
[  877.555200][T15533] NILFS (loop4): nilfs_sufile_do_free: segment 8 is already clean
[  877.622002][T15536] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  877.790018][T15318] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  877.791510][T15318] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  877.808730][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  877.811124][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  878.105517][T15540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2857'.
[  878.151745][ T4378] libceph: connect (1)[c::]:6789 error -101
[  878.152927][ T4378] libceph: mon0 (1)[c::]:6789 connect error
[  878.253894][T15545] ieee802154 phy0 wpan0: encryption failed: -22
[  878.558462][T15548] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2858'.
[  878.594157][ T4377] libceph: connect (1)[c::]:6789 error -101
[  878.656815][T15535] ceph: No mds server is up or the cluster is laggy
[  878.676609][ T4377] libceph: mon0 (1)[c::]:6789 connect error
[  878.948877][T12576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  878.950303][T12576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  878.951819][ T4859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  878.954514][ T4859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  878.975766][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  878.977466][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  879.052615][T15559] device syzkaller0 entered promiscuous mode
[  879.054553][T15558] loop2: detected capacity change from 0 to 1024
[  879.059739][ T4652] tipc: Left network mode
[  879.067347][T15560] loop3: detected capacity change from 0 to 1024
[  879.078764][T15558] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  879.080537][T15558] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  879.083601][T15558] EXT4-fs (loop2): mount failed
[  879.162531][T15560] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  879.164107][T15560] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  879.167643][T15560] EXT4-fs (loop3): mount failed
[  879.770481][T15577] loop2: detected capacity change from 0 to 4096
[  881.820019][T15579] loop3: detected capacity change from 0 to 4096
[  884.322335][T15579] NILFS (loop3): error -4 creating segctord thread
[  884.328543][T15577] NILFS (loop2): error -4 creating segctord thread
[  884.376932][T15590] loop6: detected capacity change from 0 to 1024
[  884.411178][T15590] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=1
[  884.412933][T15590] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  884.416052][T15590] EXT4-fs (loop6): mount failed
[  884.554413][T15597] ieee802154 phy0 wpan0: encryption failed: -22
[  884.785531][T15602] loop6: detected capacity change from 0 to 4096
[  885.015843][T15603] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  885.953915][T15607] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2867'.
[  886.048981][T15609] loop2: detected capacity change from 0 to 1024
[  886.121216][T15609] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  886.122882][T15609] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  886.125825][T15609] EXT4-fs (loop2): mount failed
[  886.374217][T15619] ieee802154 phy0 wpan0: encryption failed: -22
[  887.295946][T15631] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2870'.
[  887.309354][T15621] libceph: connect (1)[c::]:6789 error -101
[  887.310409][T15621] libceph: mon0 (1)[c::]:6789 connect error
[  887.740933][T15621] libceph: connect (1)[c::]:6789 error -101
[  887.762895][T15621] libceph: mon0 (1)[c::]:6789 connect error
[  888.331945][T15621] libceph: connect (1)[c::]:6789 error -101
[  888.333332][T15621] libceph: mon0 (1)[c::]:6789 connect error
[  888.445254][T15626] ceph: No mds server is up or the cluster is laggy
[  888.748638][T15647] ieee802154 phy0 wpan0: encryption failed: -22
[  889.285457][T15652] loop5: detected capacity change from 0 to 1024
[  889.339039][T15652] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=1
[  889.340893][T15652] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  889.343606][T15652] EXT4-fs (loop5): mount failed
[  889.459025][T15621] libceph: connect (1)[c::]:6789 error -101
[  889.460185][T15621] libceph: mon0 (1)[c::]:6789 connect error
[  889.801429][ T4504] libceph: connect (1)[c::]:6789 error -101
[  889.802678][ T4504] libceph: mon0 (1)[c::]:6789 connect error
[  889.994679][T15670] loop5: detected capacity change from 0 to 4096
[  890.403753][T15670] NILFS (loop5): nilfs_sufile_do_free: segment 7 is already clean
[  890.405157][T15670] NILFS (loop5): nilfs_sufile_do_free: segment 8 is already clean
[  890.502944][T15672] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  891.599480][ T4504] libceph: connect (1)[c::]:6789 error -101
[  891.601963][ T4504] libceph: mon0 (1)[c::]:6789 connect error
[  891.735858][T15659] ceph: No mds server is up or the cluster is laggy
[  891.738678][T15678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2876'.
[  891.886374][ T4504] libceph: connect (1)[c::]:6789 error -101
[  891.893109][ T4504] libceph: mon0 (1)[c::]:6789 connect error
[  891.928160][T15677] loop3: detected capacity change from 0 to 1024
[  892.026950][T15683] ieee802154 phy0 wpan0: encryption failed: -22
[  892.051355][T15674] ceph: No mds server is up or the cluster is laggy
[  892.081248][T15677] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  892.082958][T15677] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  892.085839][T15677] EXT4-fs (loop3): mount failed
[  892.243233][T15690] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2879'.
[  892.432205][ T4504] libceph: connect (1)[c::]:6789 error -101
[  892.435709][ T4504] libceph: mon0 (1)[c::]:6789 connect error
[  892.785132][T15705] ieee802154 phy0 wpan0: encryption failed: -22
[  893.207379][ T4343] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  893.209290][ T4343] CPU: 1 PID: 4343 Comm: kworker/u5:8 Not tainted syzkaller #0
[  893.210652][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  893.212353][ T4343] Workqueue: hci5 hci_rx_work
[  893.213263][ T4343] Call trace:
[  893.213832][ T4343]  dump_backtrace+0x1c0/0x1ec
[  893.214660][ T4343]  show_stack+0x2c/0x3c
[  893.215533][ T4343]  __dump_stack+0x30/0x40
[  893.216281][ T4343]  dump_stack_lvl+0xf4/0x15c
[  893.217060][ T4343]  dump_stack+0x1c/0x5c
[  893.217850][ T4343]  sysfs_create_dir_ns+0x244/0x264
[  893.218765][ T4343]  kobject_add_internal+0x598/0xb08
[  893.219679][ T4343]  kobject_add+0x140/0x20c
[  893.220447][ T4343]  device_add+0x3f0/0xf90
[  893.221126][ T4343]  hci_conn_add_sysfs+0xbc/0x1c8
[  893.222136][ T4343]  le_conn_complete_evt+0xcc8/0x1244
[  893.223044][ T4343]  hci_le_conn_complete_evt+0x114/0x3f4
[  893.223966][ T4343]  hci_le_meta_evt+0x2c0/0x4a0
[  893.224732][ T4343]  hci_event_packet+0x6b8/0xf18
[  893.225609][ T4343]  hci_rx_work+0x328/0xa84
[  893.226335][ T4343]  process_one_work+0x7f8/0x13a4
[  893.227180][ T4343]  worker_thread+0x8c4/0xfec
[  893.227939][ T4343]  kthread+0x250/0x2d8
[  893.228655][ T4343]  ret_from_fork+0x10/0x20
[  893.231117][ T4343] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  893.233638][ T4343] Bluetooth: hci5: failed to register connection device
[  893.563849][T15726] ieee802154 phy0 wpan0: encryption failed: -22
[  893.790467][T15728] loop4: detected capacity change from 0 to 1024
[  893.814864][T15728] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=1
[  893.816491][T15728] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  893.819342][T15728] EXT4-fs (loop4): mount failed
[  894.009565][T15736] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2887'.
[  894.343950][T15740] loop4: detected capacity change from 0 to 4096
[  894.512342][T15741] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  894.638071][T15740] NILFS (loop4): nilfs_sufile_do_free: segment 7 is already clean
[  894.639536][T15740] NILFS (loop4): nilfs_sufile_do_free: segment 8 is already clean
[  895.255878][T15743] loop3: detected capacity change from 0 to 1024
[  895.423660][T15743] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  895.425410][T15743] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  895.428391][T15743] EXT4-fs (loop3): mount failed
[  895.441581][ T4343] Bluetooth: hci5: command 0x2016 tx timeout
[  895.774477][T15755] ieee802154 phy0 wpan0: encryption failed: -22
[  895.840396][T15762] ieee802154 phy0 wpan0: encryption failed: -22
[  896.013642][T15614] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  896.046231][ T4343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  896.049582][ T4343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  896.052135][ T4343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  896.056141][ T4343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  896.057878][ T4343] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  896.059249][ T4343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  896.390716][T15771] loop3: detected capacity change from 0 to 4096
[  896.771765][T15771] NILFS (loop3): nilfs_sufile_do_free: segment 7 is already clean
[  896.773242][T15771] NILFS (loop3): nilfs_sufile_do_free: segment 8 is already clean
[  896.867113][T15772] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  897.517176][T15779] loop2: detected capacity change from 0 to 1024
[  897.566664][T15779] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  897.568297][T15779] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  897.571082][T15779] EXT4-fs (loop2): mount failed
[  898.018074][T15787] loop2: detected capacity change from 0 to 4096
[  898.022477][ T4343] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  898.024089][ T4343] CPU: 0 PID: 4343 Comm: kworker/u5:8 Not tainted syzkaller #0
[  898.025090][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  898.026826][ T4343] Workqueue: hci5 hci_rx_work
[  898.027783][ T4343] Call trace:
[  898.028249][ T4343]  dump_backtrace+0x1c0/0x1ec
[  898.028955][ T4343]  show_stack+0x2c/0x3c
[  898.029651][ T4343]  __dump_stack+0x30/0x40
[  898.030427][ T4343]  dump_stack_lvl+0xf4/0x15c
[  898.031185][ T4343]  dump_stack+0x1c/0x5c
[  898.031899][ T4343]  sysfs_create_dir_ns+0x244/0x264
[  898.032765][ T4343]  kobject_add_internal+0x598/0xb08
[  898.033621][ T4343]  kobject_add+0x140/0x20c
[  898.034360][ T4343]  device_add+0x3f0/0xf90
[  898.035189][ T4343]  hci_conn_add_sysfs+0xbc/0x1c8
[  898.036032][ T4343]  le_conn_complete_evt+0xcc8/0x1244
[  898.036896][ T4343]  hci_le_conn_complete_evt+0x114/0x3f4
[  898.037841][ T4343]  hci_le_meta_evt+0x2c0/0x4a0
[  898.038654][ T4343]  hci_event_packet+0x6b8/0xf18
[  898.039565][ T4343]  hci_rx_work+0x328/0xa84
[  898.040307][ T4343]  process_one_work+0x7f8/0x13a4
[  898.041174][ T4343]  worker_thread+0x8c4/0xfec
[  898.042019][ T4343]  kthread+0x250/0x2d8
[  898.042651][ T4343]  ret_from_fork+0x10/0x20
[  898.051255][ T4343] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  898.053393][ T4343] Bluetooth: hci5: failed to register connection device
[  898.319049][ T4343] Bluetooth: hci1: command 0x0409 tx timeout
[  898.373811][T15787] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[  898.375145][T15787] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[  898.423008][T15788] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  899.063173][T15793] loop5: detected capacity change from 0 to 1024
[  899.144808][T15793] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=1
[  899.146402][T15793] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  899.149470][T15793] EXT4-fs (loop5): mount failed
[  899.311314][T15763] lo speed is unknown, defaulting to 1000
[  901.684946][T15807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2898'.
[  901.961756][ T4343] Bluetooth: hci5: command 0x2016 tx timeout
[  901.962308][T12404] Bluetooth: hci1: command 0x041b tx timeout
[  903.895336][T15803] loop5: detected capacity change from 0 to 4096
[  903.914684][ T4652] device hsr_slave_0 left promiscuous mode
[  903.937980][T15814] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  904.074843][ T4652] device hsr_slave_1 left promiscuous mode
[  904.157706][ T4497] libceph: connect (1)[c::]:6789 error -101
[  904.158899][ T4497] libceph: mon0 (1)[c::]:6789 connect error
[  904.161516][T12404] Bluetooth: hci1: command 0x040f tx timeout
[  904.170347][T15826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2902'.
[  904.193490][ T4652] batman_adv: batadv0: Removing interface: batadv_slave_0
[  904.201079][ T4652] batman_adv: batadv0: Removing interface: batadv_slave_1
[  904.202659][ T4652] device bridge_slave_1 left promiscuous mode
[  904.283633][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.487870][T15832] loop5: detected capacity change from 0 to 4096
[  905.543890][ T4497] libceph: connect (1)[c::]:6789 error -101
[  905.545024][ T4497] libceph: mon0 (1)[c::]:6789 connect error
[  905.549236][T15833] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  905.552748][ T4652] device bridge_slave_0 left promiscuous mode
[  905.553843][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state
[  905.771753][T15838] ieee802154 phy0 wpan0: encryption failed: -22
[  905.876811][T15837] NILFS (loop5): nilfs_sufile_do_free: segment 7 is already clean
[  905.878177][T15837] NILFS (loop5): nilfs_sufile_do_free: segment 8 is already clean
[  906.324350][ T4497] libceph: connect (1)[c::]:6789 error -101
[  906.324996][ T4652] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[  906.326022][ T4497] libceph: mon0 (1)[c::]:6789 connect error
[  906.328952][ T4652] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[  906.384262][ T4330] Bluetooth: hci1: command 0x0419 tx timeout
[  906.433842][T15819] ceph: No mds server is up or the cluster is laggy
[  906.750697][T15848] ieee802154 phy0 wpan0: encryption failed: -22
[  906.922321][T15849] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2906'.
[  907.369491][ T4652] bond1 (unregistering): Released all slaves
[  907.479184][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  907.480907][ T4330] CPU: 1 PID: 4330 Comm: kworker/u5:2 Not tainted syzkaller #0
[  907.482169][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  907.483957][ T4330] Workqueue: hci4 hci_rx_work
[  907.484852][ T4330] Call trace:
[  907.485441][ T4330]  dump_backtrace+0x1c0/0x1ec
[  907.486326][ T4330]  show_stack+0x2c/0x3c
[  907.486967][ T4330]  __dump_stack+0x30/0x40
[  907.487769][ T4330]  dump_stack_lvl+0xf4/0x15c
[  907.488640][ T4330]  dump_stack+0x1c/0x5c
[  907.489446][ T4330]  sysfs_create_dir_ns+0x244/0x264
[  907.490359][ T4330]  kobject_add_internal+0x598/0xb08
[  907.491293][ T4330]  kobject_add+0x140/0x20c
[  907.492074][ T4330]  device_add+0x3f0/0xf90
[  907.492815][ T4330]  hci_conn_add_sysfs+0xbc/0x1c8
[  907.493738][ T4330]  le_conn_complete_evt+0xcc8/0x1244
[  907.494730][ T4330]  hci_le_conn_complete_evt+0x114/0x3f4
[  907.495658][ T4330]  hci_le_meta_evt+0x2c0/0x4a0
[  907.496524][ T4330]  hci_event_packet+0x6b8/0xf18
[  907.497403][ T4330]  hci_rx_work+0x328/0xa84
[  907.498144][ T4330]  process_one_work+0x7f8/0x13a4
[  907.499203][ T4330]  worker_thread+0x8c4/0xfec
[  907.500057][ T4330]  kthread+0x250/0x2d8
[  907.500824][ T4330]  ret_from_fork+0x10/0x20
[  907.502213][ T4330] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  907.504760][ T4330] Bluetooth: hci4: failed to register connection device
[  908.492496][T15857] loop2: detected capacity change from 0 to 1024
[  908.509033][T15857] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  908.510956][T15857] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  908.514020][T15857] EXT4-fs (loop2): mount failed
[  908.981104][T15861] loop2: detected capacity change from 0 to 4096
[  909.233709][T15861] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[  909.235113][T15861] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[  909.395735][T15862] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  909.719189][ T4330] Bluetooth: hci4: command 0x2016 tx timeout
[  910.899085][ T4652] team0 (unregistering): Port device team_slave_1 removed
[  911.089357][ T4652] team0 (unregistering): Port device team_slave_0 removed
[  911.280963][ T4652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  911.503718][ T4652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  913.117968][ T4652] bond0 (unregistering): Released all slaves
[  913.683912][T15763] chnl_net:caif_netlink_parms(): no params data found
[  914.965644][T15891] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2911'.
[  916.354458][T15893] fuse: Unknown parameter 'default_permissio'
[  916.433893][ T4497] libceph: connect (1)[c::]:6789 error -101
[  916.435167][ T4497] libceph: mon0 (1)[c::]:6789 connect error
[  916.531399][T15886] ceph: No mds server is up or the cluster is laggy
[  916.551555][T15763] bridge0: port 1(bridge_slave_0) entered blocking state
[  916.552823][T15763] bridge0: port 1(bridge_slave_0) entered disabled state
[  916.554965][T15763] device bridge_slave_0 entered promiscuous mode
[  916.557945][T15763] bridge0: port 2(bridge_slave_1) entered blocking state
[  916.566790][T15763] bridge0: port 2(bridge_slave_1) entered disabled state
[  916.591682][T15763] device bridge_slave_1 entered promiscuous mode
[  916.598724][T15763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  916.638666][T15763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  916.707579][T15913] loop2: detected capacity change from 0 to 1024
[  916.739519][T15763] team0: Port device team_slave_0 added
[  916.742275][T15763] team0: Port device team_slave_1 added
[  916.767212][T15913] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  916.769089][T15913] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  916.772441][T15913] EXT4-fs (loop2): mount failed
[  916.804460][T15763] batman_adv: batadv0: Adding interface: batadv_slave_0
[  916.805549][T15763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  916.806448][T15929] loop3: detected capacity change from 0 to 1024
[  916.809876][T15763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  916.810562][T15763] batman_adv: batadv0: Adding interface: batadv_slave_1
[  916.825663][T15929] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  916.827320][T15929] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  916.830473][T15929] EXT4-fs (loop3): mount failed
[  916.832193][T15931] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2917'.
[  916.834675][T15763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  916.853392][T15763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  916.869331][T15880] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  917.509718][T15939] loop2: detected capacity change from 0 to 4096
[  920.302461][T15939] NILFS (loop2): error -4 creating segctord thread
[  920.462370][T15763] device hsr_slave_0 entered promiscuous mode
[  920.513198][T15763] device hsr_slave_1 entered promiscuous mode
[  920.521801][T15942] loop3: detected capacity change from 0 to 1024
[  920.553788][T15763] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  920.555144][T15763] Cannot create hsr debugfs directory
[  920.561446][T15942] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  920.563124][T15942] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  920.566179][T15942] EXT4-fs (loop3): mount failed
[  920.959675][T15948] loop3: detected capacity change from 0 to 4096
[  924.178456][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  924.179627][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  924.440755][T15948] NILFS (loop3): error -4 creating segctord thread
[  924.563735][T15763] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  924.954926][T15962] loop2: detected capacity change from 0 to 4096
[  928.657712][T15962] NILFS (loop2): error -4 creating segctord thread
[  928.714857][T15763] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.056704][T15763] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.142178][T15990] loop5: detected capacity change from 0 to 1024
[  930.158658][T15994] loop6: detected capacity change from 0 to 1024
[  930.228023][T15994] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=1
[  930.229737][T15994] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  930.232568][T15994] EXT4-fs (loop6): mount failed
[  930.299334][T15990] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=1
[  930.301144][T15990] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  930.303855][T15990] EXT4-fs (loop5): mount failed
[  936.656422][T16010] loop6: detected capacity change from 0 to 4096
[  937.023411][T15763] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.037412][T16010] NILFS (loop6): error -4 creating segctord thread
[  937.470713][T16024] loop5: detected capacity change from 0 to 4096
[  937.636701][T16025] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  937.652466][T16024] NILFS (loop5): nilfs_sufile_do_free: segment 7 is already clean
[  937.655621][T16024] NILFS (loop5): nilfs_sufile_do_free: segment 8 is already clean
[  938.584981][T16028] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2933'.
[  938.656456][T16030] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2934'.
[  938.900643][ T4652] tipc: Left network mode
[  939.577648][T15763] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  939.618782][T15763] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  939.900791][T16061] fuse: Unknown parameter 'grou00000000000000000000'
[  940.849772][T16065] loop6: detected capacity change from 0 to 1024
[  940.892348][T15763] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  940.920721][T16065] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=1
[  940.922549][T16065] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  940.925436][T16065] EXT4-fs (loop6): mount failed
[  940.934404][T16070] loop3: detected capacity change from 0 to 1024
[  940.935064][T15763] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  940.941056][T16070] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  940.942842][T16070] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  940.945885][T16070] EXT4-fs (loop3): mount failed
[  941.580653][T16080] loop6: detected capacity change from 0 to 4096
[  943.590214][T16082] loop3: detected capacity change from 0 to 4096
[  947.345851][T16082] NILFS (loop3): error -4 creating segctord thread
[  947.345851][T16080] NILFS (loop6): error -4 creating segctord thread
[  947.529933][T16090] loop2: detected capacity change from 0 to 1024
[  947.544107][T15875] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  947.553674][T16090] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  947.555369][T16090] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  947.621916][T16090] EXT4-fs (loop2): mount failed
[  947.678290][T15763] 8021q: adding VLAN 0 to HW filter on device bond0
[  947.816214][T16105] loop6: detected capacity change from 0 to 4096
[  947.830900][T15916] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  948.787459][T15880] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  950.376024][T16107] loop2: detected capacity change from 0 to 4096
[  951.246326][T16105] NILFS (loop6): error -4 creating segctord thread
[  951.558324][T16107] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[  951.559740][T16107] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[  951.581561][T15763] 8021q: adding VLAN 0 to HW filter on device team0
[  951.582954][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  951.584285][T16114] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  951.584760][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  951.595936][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  951.605859][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  951.612166][T15480] bridge0: port 1(bridge_slave_0) entered blocking state
[  951.613433][T15480] bridge0: port 1(bridge_slave_0) entered forwarding state
[  951.721178][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  951.722889][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  951.722961][T16119] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2950'.
[  951.724525][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  951.728900][T15480] bridge0: port 2(bridge_slave_1) entered blocking state
[  951.730101][T15480] bridge0: port 2(bridge_slave_1) entered forwarding state
[  951.731788][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  951.734773][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  951.742017][T15763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  951.743824][T15763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  951.758299][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  951.761421][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  951.763078][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  951.764737][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  951.766313][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  951.779476][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  951.782653][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  951.782972][T16123] loop5: detected capacity change from 0 to 1024
[  951.785471][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  951.813880][T16123] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=1
[  951.815428][T16123] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  951.818463][T16123] EXT4-fs (loop5): mount failed
[  952.278613][T16132] loop5: detected capacity change from 0 to 4096
[  952.986347][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  952.988025][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  953.015896][T16133] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  953.829426][ T4497] libceph: connect (1)[c::]:6789 error -101
[  953.830623][ T4497] libceph: mon0 (1)[c::]:6789 connect error
[  953.884106][T16153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2953'.
[  953.972393][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  953.973859][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  953.977028][T15763] 8021q: adding VLAN 0 to HW filter on device batadv0
[  954.357265][ T4497] libceph: connect (1)[c::]:6789 error -101
[  954.360749][ T4497] libceph: mon0 (1)[c::]:6789 connect error
[  954.374409][T16139] ceph: No mds server is up or the cluster is laggy
[  954.547043][T16171] loop3: detected capacity change from 0 to 1024
[  954.567937][T16171] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  954.569579][T16171] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  954.572526][T16171] EXT4-fs (loop3): mount failed
[  955.068362][T16178] loop6: detected capacity change from 0 to 1024
[  955.074838][T16178] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=1
[  955.076428][T16178] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  955.079470][T16178] EXT4-fs (loop6): mount failed
[  955.336117][T16182] loop3: detected capacity change from 0 to 4096
[  956.181554][T16183] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  956.202895][T16182] NILFS (loop3): nilfs_sufile_do_free: segment 7 is already clean
[  956.204308][T16182] NILFS (loop3): nilfs_sufile_do_free: segment 8 is already clean
[  956.265573][T16186] loop5: detected capacity change from 0 to 1024
[  956.521394][T16186] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=1
[  956.523182][T16186] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  956.526077][T16186] EXT4-fs (loop5): mount failed
[  956.720307][T16192] loop6: detected capacity change from 0 to 4096
[  956.803812][T16193] fuse: Bad value for 'user_id'
[  958.921843][T16192] NILFS (loop6): error -4 creating segctord thread
[  959.741209][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  959.854801][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  960.026283][T16204] loop2: detected capacity change from 0 to 1024
[  960.037600][T16205] loop3: detected capacity change from 0 to 1024
[  960.054100][T16205] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  960.055755][T16205] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  960.058594][T16205] EXT4-fs (loop3): mount failed
[  960.094642][T16204] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  960.096367][T16204] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  960.099335][T16204] EXT4-fs (loop2): mount failed
[  960.647384][T16215] loop3: detected capacity change from 0 to 4096
[  965.070812][T16219] loop2: detected capacity change from 0 to 4096
[  965.195362][T16225] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2962'.
[  965.268246][T16227] fuse: Unknown parameter 'default_permissio'
[  965.353748][T16215] NILFS (loop3): error -4 creating segctord thread
[  965.426063][T16219] NILFS (loop2): error -4 creating segctord thread
[  965.480587][T12404] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  965.484095][T16231] loop5: detected capacity change from 0 to 1024
[  965.486527][T12404] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  965.501261][T12404] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  965.517198][T12404] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  965.519122][T12404] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  965.522292][T16231] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=1
[  965.524085][T16231] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  965.527031][T16231] EXT4-fs (loop5): mount failed
[  965.556286][T12404] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  965.803793][T16240] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2964'.
[  966.323498][T16243] loop5: detected capacity change from 0 to 4096
[  966.351733][T16244] fuse: Unknown parameter 'default_permission'
[  968.065874][ T4330] Bluetooth: hci3: command 0x0409 tx timeout
[  968.669310][T16253] loop3: detected capacity change from 0 to 4096
[  969.317895][T16249] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  969.523718][T16253] NILFS (loop3): nilfs_sufile_do_free: segment 7 is already clean
[  969.525084][T16253] NILFS (loop3): nilfs_sufile_do_free: segment 8 is already clean
[  969.585082][T16255] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  970.046487][T16257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2966'.
[  970.082494][T16257] fuse: Unknown parameter 'default_p'
[  970.244595][ T4330] Bluetooth: hci3: command 0x041b tx timeout
[  971.173020][T16267] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2967'.
[  971.423794][T16268] fuse: Unknown parameter 'default_permis'
[  972.990605][T12404] Bluetooth: hci3: command 0x040f tx timeout
[  973.103428][ T4652] device hsr_slave_0 left promiscuous mode
[  973.197977][T16278] fuse: Bad value for 'user_id'
[  975.310330][ T4330] Bluetooth: hci3: command 0x0419 tx timeout
[  975.415125][ T4652] device hsr_slave_1 left promiscuous mode
[  975.429494][T16283] loop2: detected capacity change from 0 to 1024
[  975.435992][T16282] loop3: detected capacity change from 0 to 1024
[  975.471618][T16283] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  975.473180][T16283] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  975.476113][T16283] EXT4-fs (loop2): mount failed
[  975.581327][T16290] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2971'.
[  975.776716][T16282] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  975.778423][T16282] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  975.781402][T16282] EXT4-fs (loop3): mount failed
[  975.799500][ T4500] libceph: connect (1)[c::]:6789 error -101
[  975.800704][ T4500] libceph: mon0 (1)[c::]:6789 connect error
[  975.816821][T15880] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  975.897708][ T4652] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  975.899218][ T4652] batman_adv: batadv0: Removing interface: batadv_slave_0
[  975.902274][ T4652] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  975.903553][ T4652] batman_adv: batadv0: Removing interface: batadv_slave_1
[  975.906634][ T4652] device bridge_slave_1 left promiscuous mode
[  975.909523][T15916] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  975.915766][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state
[  975.915824][T16288] ceph: No mds server is up or the cluster is laggy
[  978.897346][T16296] loop2: detected capacity change from 0 to 4096
[  979.204806][T16297] loop3: detected capacity change from 0 to 4096
[  979.260204][ T4495] libceph: connect (1)[c::]:6789 error -101
[  979.336628][ T4495] libceph: mon0 (1)[c::]:6789 connect error
[  979.672879][ T4652] device bridge_slave_0 left promiscuous mode
[  979.674861][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state
[  979.925985][T16294] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[  979.927412][T16294] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[  979.940369][T16300] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  979.961309][T16299] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  980.189909][T16301] libceph: connect (1)[c::]:6789 error -101
[  980.191635][T16301] libceph: mon0 (1)[c::]:6789 connect error
[  980.234120][T16308] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2974'.
[  980.395653][ T4652] device veth1_macvtap left promiscuous mode
[  980.396828][ T4652] device veth0_macvtap left promiscuous mode
[  980.397927][ T4652] device veth1_vlan left promiscuous mode
[  980.398989][ T4652] device veth0_vlan left promiscuous mode
[  980.481285][T16301] libceph: connect (1)[c::]:6789 error -101
[  980.483432][T16301] libceph: mon0 (1)[c::]:6789 connect error
[  980.722662][T16301] libceph: connect (1)[c::]:6789 error -101
[  980.729114][T16301] libceph: mon0 (1)[c::]:6789 connect error
[  980.785213][T16316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2975'.
[  980.959631][T16305] ceph: No mds server is up or the cluster is laggy
[  981.004849][ T4381] libceph: connect (1)[c::]:6789 error -101
[  981.006014][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  981.344455][T16323] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2976'.
[  981.506153][T16320] fuse: Bad value for 'group_id'
[  981.511552][T16313] ceph: No mds server is up or the cluster is laggy
[  981.514604][ T4381] libceph: connect (1)[c::]:6789 error -101
[  981.516297][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  981.549839][ T4500] libceph: connect (1)[c::]:6789 error -101
[  981.551073][ T4500] libceph: mon0 (1)[c::]:6789 connect error
[  981.615662][T16326] loop3: detected capacity change from 0 to 1024
[  981.624864][T16326] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  981.626552][T16326] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  981.629544][T16326] EXT4-fs (loop3): mount failed
[  981.945440][T16330] loop3: detected capacity change from 0 to 4096
[  982.138783][T16330] NILFS (loop3): nilfs_sufile_do_free: segment 8 is already clean
[  982.204831][T16331] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  982.981759][ T4381] libceph: connect (1)[c::]:6789 error -101
[  982.982801][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  983.167004][T16321] ceph: No mds server is up or the cluster is laggy
[  983.277027][T16333] loop6: detected capacity change from 0 to 1024
[  983.284342][T16333] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=1
[  983.286020][T16333] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  983.288791][T16333] EXT4-fs (loop6): mount failed
[  983.756029][T16336] loop6: detected capacity change from 0 to 4096
[  983.949592][T16336] NILFS (loop6): nilfs_sufile_do_free: segment 7 is already clean
[  983.950988][T16336] NILFS (loop6): nilfs_sufile_do_free: segment 8 is already clean
[  984.061155][T16337] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  985.881263][ T4652] team0 (unregistering): Port device team_slave_1 removed
[  986.071185][ T4652] team0 (unregistering): Port device team_slave_0 removed
[  986.252680][ T4652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  986.465898][ T4652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  986.760591][T12404] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  986.763623][T12404] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  986.765708][T12404] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  986.767303][T12404] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  986.768858][T12404] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  986.770171][T12404] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  986.914010][ T4330] Bluetooth: hci2: command 0x0406 tx timeout
[  988.123122][ T4652] bond0 (unregistering): Released all slaves
[  988.609774][T16351] loop3: detected capacity change from 0 to 1024
[  988.633936][T16356] loop2: detected capacity change from 0 to 1024
[  988.647931][T16340] lo speed is unknown, defaulting to 1000
[  988.656979][T16351] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[  988.658689][T16351] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  988.661654][T16351] EXT4-fs (loop3): mount failed
[  988.691065][T16356] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  988.692662][T16356] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  988.695854][T16356] EXT4-fs (loop2): mount failed
[  988.704023][T16360] loop6: detected capacity change from 0 to 1024
[  988.788556][T16360] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=1
[  988.790309][T16360] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  988.793336][T16360] EXT4-fs (loop6): mount failed
[  988.818485][T16213] lo speed is unknown, defaulting to 1000
[  990.505726][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  990.506872][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  990.508764][ T4330] Bluetooth: hci1: command 0x0409 tx timeout
[  992.018615][T16370] loop3: detected capacity change from 0 to 4096
[  993.783321][T12404] Bluetooth: hci1: command 0x041b tx timeout
[  994.825624][T15916] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  994.902283][T16370] NILFS (loop3): error -4 creating segctord thread
[  995.132621][T16387] loop2: detected capacity change from 0 to 1024
[  995.243658][T16387] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[  995.245323][T16387] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  995.248322][T16387] EXT4-fs (loop2): mount failed
[  998.052855][T16405] loop2: detected capacity change from 0 to 4096
[  998.059634][ T4330] Bluetooth: hci1: command 0x040f tx timeout
[  999.745648][T16407] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  999.887642][T16340] chnl_net:caif_netlink_parms(): no params data found
[  999.968160][T16413] fuse: Bad value for 'fd'
[ 1000.253826][ T4330] Bluetooth: hci1: command 0x0419 tx timeout
[ 1000.259773][T16415] loop3: detected capacity change from 0 to 1024
[ 1000.282690][T16415] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[ 1000.284314][T16415] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[ 1000.287346][T16415] EXT4-fs (loop3): mount failed
[ 1001.513169][T16213] chnl_net:caif_netlink_parms(): no params data found
[ 1001.626144][T16340] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1001.627657][T16340] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1001.632155][T16340] device bridge_slave_0 entered promiscuous mode
[ 1001.656332][T16340] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1001.657673][T16340] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1001.659279][T16340] device bridge_slave_1 entered promiscuous mode
[ 1001.707654][T16213] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1001.717202][T16213] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1001.721544][T16213] device bridge_slave_0 entered promiscuous mode
[ 1001.734702][T16340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1001.747796][T16340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1001.753043][T16213] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1001.756584][T16213] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1001.761088][T16213] device bridge_slave_1 entered promiscuous mode
[ 1001.774868][T16340] team0: Port device team_slave_0 added
[ 1001.787088][T16213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1001.793554][T16213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1001.795878][T16340] team0: Port device team_slave_1 added
[ 1001.814909][T16213] team0: Port device team_slave_0 added
[ 1001.816544][T16340] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1001.817914][T16340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1001.825492][T16340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1001.828793][T16340] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1001.829988][T16340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1001.836427][T16340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1001.839006][T16213] team0: Port device team_slave_1 added
[ 1001.849201][T16213] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1001.850343][T16213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1001.856172][T16213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1001.905398][T16435] loop3: detected capacity change from 0 to 1024
[ 1001.914086][T16435] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[ 1001.915778][T16435] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[ 1001.924604][T16435] EXT4-fs (loop3): mount failed
[ 1001.953376][T16438] loop6: detected capacity change from 0 to 1024
[ 1002.534276][T16438] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=1
[ 1002.536060][T16438] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[ 1002.539071][T16438] EXT4-fs (loop6): mount failed
[ 1003.438139][T16213] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1003.439351][T16213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1003.443780][T16213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1003.466196][T16446] ieee802154 phy0 wpan0: encryption failed: -22
[ 1003.532660][T16340] device hsr_slave_0 entered promiscuous mode
[ 1003.574174][T16340] device hsr_slave_1 entered promiscuous mode
[ 1003.908700][T16448] loop6: detected capacity change from 0 to 4096
[ 1004.002737][T16340] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1004.004337][T16340] Cannot create hsr debugfs directory
[ 1004.417525][T16449] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1004.888330][T16451] loop3: detected capacity change from 0 to 1024
[ 1004.890733][ T4652] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1004.923257][T16451] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[ 1004.924894][T16451] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[ 1004.927877][T16451] EXT4-fs (loop3): mount failed
[ 1005.064189][T16460] loop6: detected capacity change from 0 to 1024
[ 1005.395763][T16466] loop3: detected capacity change from 0 to 4096
[ 1005.608093][T16466] NILFS (loop3): nilfs_sufile_do_free: segment 7 is already clean
[ 1005.609300][T16466] NILFS (loop3): nilfs_sufile_do_free: segment 8 is already clean
[ 1005.691738][T16467] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1005.738043][T16460] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=1
[ 1005.739679][T16460] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[ 1005.742481][T16460] EXT4-fs (loop6): mount failed
[ 1006.363919][T16213] device hsr_slave_0 entered promiscuous mode
[ 1006.441537][T16213] device hsr_slave_1 entered promiscuous mode
[ 1006.567498][T16213] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1006.568939][T16213] Cannot create hsr debugfs directory
[ 1006.601482][T16474] loop6: detected capacity change from 0 to 4096
[ 1006.628434][T16476] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1006.799318][T16474] NILFS (loop6): nilfs_sufile_do_free: segment 7 is already clean
[ 1006.800588][T16474] NILFS (loop6): nilfs_sufile_do_free: segment 8 is already clean
[ 1007.705550][ T4652] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.253055][ T4500] libceph: connect (1)[c::]:6789 error -101
[ 1008.254241][ T4500] libceph: mon0 (1)[c::]:6789 connect error
[ 1008.283995][T16469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2992'.
[ 1008.478212][ T4652] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.804935][T16501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2993'.
[ 1008.825602][ T4381] libceph: connect (1)[c::]:6789 error -101
[ 1008.836236][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[ 1008.943584][T16464] ceph: No mds server is up or the cluster is laggy
[ 1009.091698][ T4381] libceph: connect (1)[c::]:6789 error -101
[ 1009.096881][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[ 1009.154051][ T4652] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1009.187514][T16498] ceph: No mds server is up or the cluster is laggy
[ 1010.284402][T16518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2997'.
[ 1010.523803][ T4498] libceph: connect (1)[c::]:6789 error -101
[ 1010.524967][ T4498] libceph: mon0 (1)[c::]:6789 connect error
[ 1010.660745][T16516] ceph: No mds server is up or the cluster is laggy
[ 1010.809435][T16530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2998'.
[ 1010.860218][ T4498] libceph: connect (1)[c::]:6789 error -101
[ 1010.925433][ T4498] libceph: mon0 (1)[c::]:6789 connect error
[ 1010.955729][ T4652] tipc: Left network mode
[ 1011.047083][ T4495] libceph: connect (1)[c::]:6789 error -101
[ 1011.048187][ T4495] libceph: mon0 (1)[c::]:6789 connect error
[ 1011.322863][ T4500] libceph: connect (1)[c::]:6789 error -101
[ 1011.328656][ T4500] libceph: mon0 (1)[c::]:6789 connect error
[ 1011.614806][T16545] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2999'.
[ 1011.614904][T16527] ceph: No mds server is up or the cluster is laggy
[ 1011.675905][T16553] fuse: Bad value for 'fd'
[ 1011.797944][T16556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3000'.
[ 1011.957148][T16301] libceph: connect (1)[c::]:6789 error -101
[ 1011.958404][T16301] libceph: mon0 (1)[c::]:6789 connect error
[ 1012.055149][T16555] ceph: No mds server is up or the cluster is laggy
[ 1012.369226][T16582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3002'.
[ 1012.530603][ T4500] libceph: connect (1)[c::]:6789 error -101
[ 1012.531812][ T4500] libceph: mon0 (1)[c::]:6789 connect error
[ 1012.609366][T16588] ieee802154 phy0 wpan0: encryption failed: -22
[ 1012.817837][T16591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3003'.
[ 1012.837920][ T4381] libceph: connect (1)[c::]:6789 error -101
[ 1012.856729][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[ 1012.889168][T16592] fuse: Bad value for 'fd'
[ 1013.001797][T16580] ceph: No mds server is up or the cluster is laggy
[ 1013.021108][T15621] libceph: connect (1)[c::]:6789 error -101
[ 1013.022205][T15621] libceph: mon0 (1)[c::]:6789 connect error
[ 1013.174215][T16340] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1013.225037][T16340] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1013.312271][T16600] fuse: Unknown parameter '0x0000000000000007'
[ 1013.347896][T16301] libceph: connect (1)[c::]:6789 error -101
[ 1013.364490][T16301] libceph: mon0 (1)[c::]:6789 connect error
[ 1013.541839][T16589] ceph: No mds server is up or the cluster is laggy
[ 1013.752370][T16340] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1013.801176][T16606] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3005'.
[ 1013.965995][T16619] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3006'.
[ 1014.137595][T16340] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1014.149547][T16301] libceph: connect (1)[c::]:6789 error -101
[ 1014.150717][T16301] libceph: mon0 (1)[c::]:6789 connect error
[ 1014.332018][T16213] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1014.788050][T16617] ceph: No mds server is up or the cluster is laggy
[ 1014.797607][T15621] libceph: connect (1)[c::]:6789 error -101
[ 1014.799554][T15621] libceph: mon0 (1)[c::]:6789 connect error
[ 1014.866420][T16633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3008'.
[ 1014.920616][T16633] fuse: Bad value for 'fd'
[ 1015.158614][T16631] ceph: No mds server is up or the cluster is laggy
[ 1015.161847][ T4500] libceph: connect (1)[c::]:6789 error -101
[ 1015.162902][ T4500] libceph: mon0 (1)[c::]:6789 connect error
[ 1015.195905][T16213] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1015.475627][T15621] libceph: connect (1)[c::]:6789 error -101
[ 1015.476727][T15621] libceph: mon0 (1)[c::]:6789 connect error
[ 1015.565633][T16213] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1015.661109][T16213] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1016.112228][T16652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3014'.
[ 1016.363804][T16301] libceph: connect (1)[c::]:6789 error -101
[ 1016.365050][T16301] libceph: mon0 (1)[c::]:6789 connect error
[ 1016.487278][T16650] ceph: No mds server is up or the cluster is laggy
[ 1016.658560][T16663] ieee802154 phy0 wpan0: encryption failed: -22
[ 1017.142600][T16668] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3018'.
[ 1017.170837][T16340] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1017.337470][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1017.339199][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1017.358344][T16340] 8021q: adding VLAN 0 to HW filter on device team0
[ 1017.488558][T16686] loop2: detected capacity change from 0 to 4096
[ 1018.336817][T16687] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1018.344927][T16686] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[ 1018.346364][T16686] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[ 1018.750681][T16213] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1018.776571][T16213] 8021q: adding VLAN 0 to HW filter on device team0
[ 1018.853656][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1018.855950][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1018.857489][  T105] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1018.858561][  T105] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1018.863991][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1018.867654][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1018.869686][  T105] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1018.871002][  T105] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1018.872738][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1018.874452][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1018.880831][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1018.883747][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1018.885678][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1018.890256][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1018.891826][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1018.893953][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1018.896174][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1018.905087][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1018.914589][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1018.916320][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1018.917907][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1018.920256][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1018.922353][T16340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1019.338770][T16221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1019.340901][T16221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1019.342534][T16221] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1019.343765][T16221] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1019.449387][T16221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1019.453303][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1019.456050][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1019.457610][  T105] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1019.458849][  T105] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1019.468205][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1019.473164][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1019.475961][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1019.484757][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1019.502466][T16213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1019.505550][T16213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1019.513200][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1019.514996][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1019.516787][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1019.522256][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1019.524395][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1019.526267][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1019.528928][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1019.533822][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1019.537867][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1019.541768][  T105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1019.547698][T16340] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1020.312102][T16748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3027'.
[ 1020.406880][T16754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3028'.
[ 1020.454442][T16751] fuse: Bad value for 'fd'
[ 1020.540440][ T4500] libceph: connect (1)[c::]:6789 error -101
[ 1020.541764][ T4500] libceph: mon0 (1)[c::]:6789 connect error
[ 1020.543546][ T4500] libceph: connect (1)[c::]:6789 error -101
[ 1020.544842][ T4500] libceph: mon0 (1)[c::]:6789 connect error
[ 1020.580604][T16749] ceph: No mds server is up or the cluster is laggy
[ 1020.914780][T16752] ceph: No mds server is up or the cluster is laggy
[ 1020.941065][ T4495] libceph: connect (1)[c::]:6789 error -101
[ 1020.942884][ T4495] libceph: mon0 (1)[c::]:6789 connect error
[ 1021.062092][T16213] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1021.101312][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1021.109211][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1021.736298][T16789] loop2: detected capacity change from 0 to 4096
[ 1021.918075][T16789] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[ 1021.919496][T16789] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[ 1022.044025][T16790] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1022.951078][T16804] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3035'.
[ 1023.300115][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1023.302150][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1023.342937][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1023.346758][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1023.350218][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1023.352806][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1023.458018][T16821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3037'.
[ 1023.521938][T16822] fuse: Bad value for 'fd'
[ 1023.623617][T15621] libceph: connect (1)[c::]:6789 error -101
[ 1023.625133][T15621] libceph: mon0 (1)[c::]:6789 connect error
[ 1023.752584][T16340] device veth0_vlan entered promiscuous mode
[ 1023.805299][T16340] device veth1_vlan entered promiscuous mode
[ 1023.818946][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1023.820793][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1023.822849][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1023.853552][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1024.471077][T16818] ceph: No mds server is up or the cluster is laggy
[ 1024.526984][ T4500] libceph: connect (1)[c::]:6789 error -101
[ 1024.538013][ T4500] libceph: mon0 (1)[c::]:6789 connect error
[ 1024.600281][T16340] device veth0_macvtap entered promiscuous mode
[ 1024.606321][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1024.611784][T16340] device veth1_macvtap entered promiscuous mode
[ 1024.658461][T16340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1024.666104][T16340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.674243][T16340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1024.676272][T16340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.682351][T16340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1024.684185][T16340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.687200][T16340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1024.714552][T16340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.717248][T16340] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1024.725500][T16221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1024.727459][T16221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1025.200261][T16340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1025.212105][T16340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.218369][T16340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1025.220106][T16340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.221843][T16340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1025.229129][T16340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.230823][T16340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1025.239950][T16340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.245504][T16340] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1025.537696][ T4330] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1025.543297][ T4652] device hsr_slave_0 left promiscuous mode
[ 1025.546982][ T4330] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1025.549520][ T4330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1025.551208][ T4330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1025.552603][ T4330] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1025.559588][ T4330] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1025.621641][ T4652] device hsr_slave_1 left promiscuous mode
[ 1025.810860][ T4652] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1025.815343][ T4652] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1025.837102][ T4652] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1025.838675][ T4652] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1025.850604][ T4652] device bridge_slave_1 left promiscuous mode
[ 1025.851970][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1025.928124][ T4652] device bridge_slave_0 left promiscuous mode
[ 1025.932152][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1026.000009][ T4652] device hsr_slave_0 left promiscuous mode
[ 1026.126137][T16872] loop3: detected capacity change from 0 to 1024
[ 1026.129641][T16872] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1
[ 1026.131335][T16872] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[ 1026.134538][T16872] EXT4-fs (loop3): mount failed
[ 1026.149498][ T4652] device hsr_slave_1 left promiscuous mode
[ 1026.260196][ T4652] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1026.261986][ T4652] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1026.263678][ T4652] device bridge_slave_1 left promiscuous mode
[ 1026.264763][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1026.432906][T16880] loop3: detected capacity change from 0 to 4096
[ 1026.776480][T16880] NILFS (loop3): nilfs_sufile_do_free: segment 7 is already clean
[ 1026.777792][T16880] NILFS (loop3): nilfs_sufile_do_free: segment 8 is already clean
[ 1026.814089][T16881] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1026.820055][ T4652] device bridge_slave_0 left promiscuous mode
[ 1026.822900][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1027.938903][ T4330] Bluetooth: hci5: command 0x0409 tx timeout
[ 1028.030655][T16885] loop2: detected capacity change from 0 to 1024
[ 1028.048914][T16885] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[ 1028.050555][T16885] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[ 1028.053545][T16885] EXT4-fs (loop2): mount failed
[ 1028.091889][ T4652] device veth1_macvtap left promiscuous mode
[ 1028.092964][ T4652] device veth0_macvtap left promiscuous mode
[ 1028.095860][ T4652] device veth1_vlan left promiscuous mode
[ 1028.097008][ T4652] device veth0_vlan left promiscuous mode
[ 1028.203680][T16888] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3048'.
[ 1028.615025][T16890] loop2: detected capacity change from 0 to 4096
[ 1028.704602][T16891] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1028.777075][T16890] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[ 1028.780248][T16890] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[ 1029.646319][T16895] loop6: detected capacity change from 0 to 4096
[ 1029.788127][T16895] NILFS (loop6): nilfs_sufile_do_free: segment 7 is already clean
[ 1029.789829][T16895] NILFS (loop6): nilfs_sufile_do_free: segment 8 is already clean
[ 1029.824922][T16896] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1030.085787][ T4330] Bluetooth: hci5: command 0x041b tx timeout
[ 1032.308556][T12404] Bluetooth: hci5: command 0x040f tx timeout
[ 1033.019591][ T4652] team0 (unregistering): Port device team_slave_1 removed
[ 1033.239256][ T4652] team0 (unregistering): Port device team_slave_0 removed
[ 1033.409921][ T4652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1033.666458][ T4652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1034.531070][T12404] Bluetooth: hci5: command 0x0419 tx timeout
[ 1035.356546][ T4652] bond0 (unregistering): Released all slaves
[ 1036.405018][ T4652] team0 (unregistering): Port device team_slave_1 removed
[ 1036.594380][ T4652] team0 (unregistering): Port device team_slave_0 removed
[ 1036.765460][ T4652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1036.989699][ T4652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1038.400839][ T4652] bond0 (unregistering): Released all slaves
[ 1038.722541][T16221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1038.724474][T16221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1038.728120][T16340] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1038.729507][T16340] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1038.731489][T16340] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1038.733072][T16340] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1038.855720][T16855] lo speed is unknown, defaulting to 1000
[ 1039.066262][T11665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1039.067787][T11665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1039.069649][T11665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1039.071009][T11665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1039.100188][T11665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1039.101909][T11665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1039.468565][T16931] loop7: detected capacity change from 0 to 1024
[ 1039.497122][T16931] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=1
[ 1039.498892][T16931] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[ 1039.502816][T16931] EXT4-fs (loop7): mount failed
[ 1041.832865][T16940] loop7: detected capacity change from 0 to 4096
[ 1041.843856][T16855] chnl_net:caif_netlink_parms(): no params data found
[ 1041.877082][T16943] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1042.763348][T16855] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1042.764663][T16855] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1042.766420][T16855] device bridge_slave_0 entered promiscuous mode
[ 1042.768927][T16855] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1042.770665][T16855] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1042.772421][T16855] device bridge_slave_1 entered promiscuous mode
[ 1042.783103][T16855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1042.785920][T16855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1042.983107][T16967] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3059'.
[ 1043.191770][T16855] team0: Port device team_slave_0 added
[ 1043.200823][T16855] team0: Port device team_slave_1 added
[ 1043.206536][T16855] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1043.225380][ T4504] libceph: connect (1)[c::]:6789 error -101
[ 1043.226553][ T4504] libceph: mon0 (1)[c::]:6789 connect error
[ 1043.247447][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1043.252541][T16855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1043.255384][T16855] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1043.256748][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1043.261356][T16855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1043.384731][T16855] device hsr_slave_0 entered promiscuous mode
[ 1043.423831][T16855] device hsr_slave_1 entered promiscuous mode
[ 1043.744348][T16987] loop2: detected capacity change from 0 to 4096
[ 1043.816525][T16855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1043.828487][T16855] Cannot create hsr debugfs directory
[ 1044.032196][T16987] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[ 1044.033402][T16987] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[ 1044.057728][T16988] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1045.011522][T16965] ceph: No mds server is up or the cluster is laggy
[ 1045.013053][ T4504] libceph: connect (1)[c::]:6789 error -101
[ 1045.013978][ T4504] libceph: mon0 (1)[c::]:6789 connect error
[ 1045.579463][ T4504] libceph: connect (1)[c::]:6789 error -101
[ 1045.580529][ T4504] libceph: mon0 (1)[c::]:6789 connect error
[ 1046.189772][T17007] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3065'.
[ 1046.354827][T16301] libceph: connect (1)[c::]:6789 error -101
[ 1046.356225][T16301] libceph: mon0 (1)[c::]:6789 connect error
[ 1046.464102][T17003] ceph: No mds server is up or the cluster is laggy
[ 1047.877949][T17040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3071'.
[ 1047.953847][T17049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3080'.
[ 1048.030298][ T4504] libceph: connect (1)[c::]:6789 error -101
[ 1048.031871][ T4504] libceph: mon0 (1)[c::]:6789 connect error
[ 1048.033125][ T4504] libceph: connect (1)[c::]:6789 error -101
[ 1048.034080][ T4504] libceph: mon0 (1)[c::]:6789 connect error
[ 1048.046318][T17056] loop7: detected capacity change from 0 to 1024
[ 1048.123101][T17044] ceph: No mds server is up or the cluster is laggy
[ 1048.131552][T17056] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=1
[ 1048.133170][T17056] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[ 1048.136274][T17056] EXT4-fs (loop7): mount failed
[ 1048.450160][T17046] ceph: No mds server is up or the cluster is laggy
[ 1048.545225][T17064] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3072'.
[ 1048.592193][T15621] libceph: connect (1)[c::]:6789 error -101
[ 1048.593373][T15621] libceph: mon0 (1)[c::]:6789 connect error
[ 1049.000680][T17067] loop7: detected capacity change from 0 to 4096
[ 1049.353273][T17067] NILFS (loop7): nilfs_sufile_do_free: segment 7 is already clean
[ 1049.354699][T17067] NILFS (loop7): nilfs_sufile_do_free: segment 8 is already clean
[ 1049.453475][T17069] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1050.196123][T16855] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1050.523730][ T4495] libceph: connect (1)[c::]:6789 error -101
[ 1050.524899][ T4495] libceph: mon0 (1)[c::]:6789 connect error
[ 1050.530299][T16855] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1050.621281][T16855] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1050.623200][ T4500] libceph: connect (1)[c::]:6789 error -101
[ 1050.624654][ T4500] libceph: mon0 (1)[c::]:6789 connect error
[ 1050.679903][T16855] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1050.720510][T17085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3076'.
[ 1050.744760][T17062] ceph: No mds server is up or the cluster is laggy
[ 1050.796470][T16855] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1050.803417][T16855] 8021q: adding VLAN 0 to HW filter on device team0
[ 1050.849013][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1050.851334][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1050.852970][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1050.854667][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1050.857219][ T4488] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1050.858417][ T4488] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1050.860733][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1050.862389][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1050.864078][ T4488] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1050.865317][ T4488] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1050.866856][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1050.869463][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1050.871323][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1050.876183][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1050.878151][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1050.952066][T17092] netlink: 277 bytes leftover after parsing attributes in process `syz.7.3077'.
[ 1051.047427][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1051.254833][T17094] loop2: detected capacity change from 0 to 1024
[ 1051.289618][T17094] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[ 1051.291323][T17094] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[ 1051.294352][T17094] EXT4-fs (loop2): mount failed
[ 1051.646619][T17105] loop2: detected capacity change from 0 to 4096
[ 1051.669432][T17106] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1051.728643][T17105] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[ 1051.731731][T17105] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[ 1051.801949][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1051.806784][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1052.661757][T16855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1052.671903][T16855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1052.689252][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1052.700408][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1052.713090][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1052.735951][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1052.770674][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1052.994057][T17111] ieee802154 phy0 wpan0: encryption failed: -22
[ 1052.996169][T17117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3083'.
[ 1053.151321][T17119] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3082'.
[ 1053.400257][ T4495] libceph: connect (1)[c::]:6789 error -101
[ 1053.406982][ T4495] libceph: mon0 (1)[c::]:6789 connect error
[ 1053.418287][T17117] loop2: detected capacity change from 0 to 1024
[ 1053.462519][T17117] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1
[ 1053.464198][T17117] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[ 1053.467160][T17117] EXT4-fs (loop2): mount failed
[ 1054.138036][T17118] ceph: No mds server is up or the cluster is laggy
[ 1054.186599][T15621] libceph: connect (1)[c::]:6789 error -101
[ 1054.190679][T15621] libceph: mon0 (1)[c::]:6789 connect error
[ 1054.771013][T15813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1054.772451][T15813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1054.787217][T16855] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1055.133148][T17146] netlink: 173 bytes leftover after parsing attributes in process `syz.7.3085'.
[ 1055.398575][T17145] loop2: detected capacity change from 0 to 4096
[ 1055.457197][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.458375][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.602086][T17145] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean
[ 1055.603485][T17145] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean
[ 1055.648431][T17148] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1056.994545][T12631] libceph: connect (1)[c::]:6789 error -101
[ 1056.995651][T12631] libceph: mon0 (1)[c::]:6789 connect error
[ 1057.071699][T17159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3086'.
[ 1057.272744][T15101] libceph: connect (1)[c::]:6789 error -101
[ 1057.274185][T15101] libceph: mon0 (1)[c::]:6789 connect error
[ 1057.616404][T17147] ceph: No mds server is up or the cluster is laggy
[ 1057.946398][T17176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3088'.
[ 1058.122327][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1058.124227][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1058.137476][ T4504] libceph: connect (1)[c::]:6789 error -101
[ 1058.138660][ T4504] libceph: mon0 (1)[c::]:6789 connect error
[ 1058.532527][T17185] netlink: 173 bytes leftover after parsing attributes in process `syz.7.3090'.
[ 1058.834896][T17175] ceph: No mds server is up or the cluster is laggy
[ 1058.836737][ T4495] libceph: connect (1)[c::]:6789 error -101
[ 1058.837796][ T4495] libceph: mon0 (1)[c::]:6789 connect error
[ 1058.988192][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1058.990092][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1058.992981][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1058.994471][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1058.999523][T16855] device veth0_vlan entered promiscuous mode
[ 1059.004839][T16855] device veth1_vlan entered promiscuous mode
[ 1059.103159][T16855] device veth0_macvtap entered promiscuous mode
[ 1059.104724][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1059.106825][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1059.108534][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1059.111101][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1059.116940][T16855] device veth1_macvtap entered promiscuous mode
[ 1059.203643][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1059.207644][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1059.220281][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1059.222023][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1059.223721][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1059.225703][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1059.401616][T17217] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3093'.
[ 1059.563046][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1059.572830][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1059.575788][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1059.582256][T17208] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3092'.
[ 1059.586565][ T4500] libceph: connect (1)[c::]:6789 error -101
[ 1059.587731][ T4500] libceph: mon0 (1)[c::]:6789 connect error
[ 1059.594904][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1059.598698][T16855] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1059.606207][ T4652] device hsr_slave_0 left promiscuous mode
[ 1059.628228][ T4652] device hsr_slave_1 left promiscuous mode
[ 1059.750460][ T4652] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1059.752655][ T4652] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1059.754320][ T4652] device bridge_slave_1 left promiscuous mode
[ 1059.755448][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1059.797393][ T4652] device bridge_slave_0 left promiscuous mode
[ 1059.800215][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1059.930524][ T4504] libceph: connect (1)[c::]:6789 error -101
[ 1059.932727][ T4504] libceph: mon0 (1)[c::]:6789 connect error
[ 1060.155375][T17216] ceph: No mds server is up or the cluster is laggy
[ 1060.449469][T17238] loop7: detected capacity change from 0 to 16
[ 1060.518976][T17238] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1060.727377][T17238] syz.7.3098: attempt to access beyond end of device
[ 1060.727377][T17238] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16
[ 1060.730462][T17238] syz.7.3098: attempt to access beyond end of device
[ 1060.730462][T17238] loop7: rw=524288, sector=8, nr_sectors = 16 limit=16
[ 1060.739218][T17238] ==================================================================
[ 1060.740502][T17238] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a4/0x490
[ 1060.741923][T17238] Read of size 4096 at addr ffff0000da008000 by task syz.7.3098/17238
[ 1060.743268][T17238] 
[ 1060.743662][T17238] CPU: 1 PID: 17238 Comm: syz.7.3098 Not tainted syzkaller #0
[ 1060.744932][T17238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1060.746742][T17238] Call trace:
[ 1060.747356][T17238]  dump_backtrace+0x1c0/0x1ec
[ 1060.748174][T17238]  show_stack+0x2c/0x3c
[ 1060.749069][T17238]  __dump_stack+0x30/0x40
[ 1060.749852][T17238]  dump_stack_lvl+0xf4/0x15c
[ 1060.750673][T17238]  print_address_description+0x88/0x218
[ 1060.751703][T17238]  print_report+0x50/0x68
[ 1060.752541][T17238]  kasan_report+0xa8/0xfc
[ 1060.753297][T17238]  kasan_check_range+0x258/0x290
[ 1060.754144][T17238]  memcpy+0x48/0x90
[ 1060.754885][T17238]  z_erofs_transform_plain+0x3a4/0x490
[ 1060.755849][T17238]  z_erofs_decompress+0x9c/0xd4
[ 1060.756692][T17238]  z_erofs_decompress_queue+0x100c/0x1b40
[ 1060.757630][T17238]  z_erofs_runqueue+0x152c/0x16cc
[ 1060.758517][T17238]  z_erofs_read_folio+0x2d8/0x5c8
[ 1060.759462][T17238]  filemap_read_folio+0x134/0x384
[ 1060.760324][T17238]  filemap_read+0x12cc/0x2104
[ 1060.761146][T17238]  generic_file_read_iter+0xf8/0x5c4
[ 1060.762146][T17238]  vfs_read+0x3d4/0x7f0
[ 1060.762843][T17238]  ksys_read+0x12c/0x224
[ 1060.763532][T17238]  __arm64_sys_read+0x7c/0x90
[ 1060.764330][T17238]  invoke_syscall+0x98/0x2b4
[ 1060.765084][T17238]  el0_svc_common+0x138/0x258
[ 1060.765796][T17238]  do_el0_svc+0x58/0x130
[ 1060.766540][T17238]  el0_svc+0x58/0x128
[ 1060.767224][T17238]  el0t_64_sync_handler+0x84/0xf0
[ 1060.768045][T17238]  el0t_64_sync+0x18c/0x190
[ 1060.768822][T17238] 
[ 1060.769215][T17238] Allocated by task 17125:
[ 1060.770007][T17238]  kasan_set_track+0x4c/0x80
[ 1060.770827][T17238]  kasan_save_alloc_info+0x24/0x30
[ 1060.771688][T17238]  __kasan_slab_alloc+0x70/0x88
[ 1060.772655][T17238]  slab_post_alloc_hook+0x74/0x430
[ 1060.773550][T17238]  kmem_cache_alloc_bulk+0x41c/0x4e4
[ 1060.774429][T17238]  mas_alloc_nodes+0x484/0x754
[ 1060.775256][T17238]  mas_preallocate+0x13c/0x310
[ 1060.776026][T17238]  __vma_adjust+0x25c/0x1724
[ 1060.776845][T17238]  __split_vma+0x324/0x444
[ 1060.777598][T17238]  do_mas_align_munmap+0x2ec/0xf38
[ 1060.778468][T17238]  __vm_munmap+0x25c/0x38c
[ 1060.779161][T17238]  vm_munmap+0x2c/0x3c
[ 1060.779870][T17238]  elf_map+0x148/0x224
[ 1060.780684][T17238]  load_elf_interp+0x3c4/0x924
[ 1060.781497][T17238]  load_elf_binary+0x124c/0x1b5c
[ 1060.782360][T17238]  bprm_execve+0x804/0x1558
[ 1060.783198][T17238]  kernel_execve+0x6c0/0x7b8
[ 1060.784065][T17238]  call_usermodehelper_exec_async+0x1f8/0x39c
[ 1060.784925][T17238]  ret_from_fork+0x10/0x20
[ 1060.785555][T17238] 
[ 1060.785997][T17238] Freed by task 17125:
[ 1060.786713][T17238]  kasan_set_track+0x4c/0x80
[ 1060.787435][T17238]  kasan_save_free_info+0x38/0x5c
[ 1060.788241][T17238]  ____kasan_slab_free+0x148/0x1b0
[ 1060.789057][T17238]  __kasan_slab_free+0x18/0x28
[ 1060.789954][T17238]  slab_free_freelist_hook+0x16c/0x1e8
[ 1060.790897][T17238]  kmem_cache_free_bulk+0x33c/0x3d0
[ 1060.791780][T17238]  mas_destroy+0x1bfc/0x22dc
[ 1060.792607][T17238]  mas_store_prealloc+0x284/0x354
[ 1060.793520][T17238]  vma_mas_store+0x194/0x430
[ 1060.794317][T17238]  __vma_adjust+0xf18/0x1724
[ 1060.795150][T17238]  __split_vma+0x324/0x444
[ 1060.795926][T17238]  do_mas_align_munmap+0x2ec/0xf38
[ 1060.796860][T17238]  __vm_munmap+0x25c/0x38c
[ 1060.797628][T17238]  vm_munmap+0x2c/0x3c
[ 1060.798371][T17238]  elf_map+0x148/0x224
[ 1060.799077][T17238]  load_elf_interp+0x3c4/0x924
[ 1060.799927][T17238]  load_elf_binary+0x124c/0x1b5c
[ 1060.800825][T17238]  bprm_execve+0x804/0x1558
[ 1060.801616][T17238]  kernel_execve+0x6c0/0x7b8
[ 1060.802455][T17238]  call_usermodehelper_exec_async+0x1f8/0x39c
[ 1060.803546][T17238]  ret_from_fork+0x10/0x20
[ 1060.804345][T17238] 
[ 1060.804715][T17238] The buggy address belongs to the object at ffff0000da008000
[ 1060.804715][T17238]  which belongs to the cache maple_node of size 256
[ 1060.807107][T17238] The buggy address is located 0 bytes inside of
[ 1060.807107][T17238]  256-byte region [ffff0000da008000, ffff0000da008100)
[ 1060.809439][T17238] 
[ 1060.809799][T17238] The buggy address belongs to the physical page:
[ 1060.810903][T17238] page:000000008706ce41 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a008
[ 1060.812644][T17238] head:000000008706ce41 order:1 compound_mapcount:0 compound_pincount:0
[ 1060.814114][T17238] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff)
[ 1060.815483][T17238] raw: 05ffc00000010200 fffffc0003397b80 dead000000000002 ffff0000c000d680
[ 1060.816979][T17238] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 1060.818553][T17238] page dumped because: kasan: bad access detected
[ 1060.819648][T17238] 
[ 1060.820033][T17238] Memory state around the buggy address:
[ 1060.820974][T17238]  ffff0000da007f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1060.822321][T17238]  ffff0000da007f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1060.823681][T17238] >ffff0000da008000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1060.825067][T17238]                    ^
[ 1060.825777][T17238]  ffff0000da008080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1060.827118][T17238]  ffff0000da008100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1060.828468][T17238] ==================================================================
[ 1060.829991][T17238] Disabling lock debugging due to kernel taint
[ 1060.831202][T17238] syz.7.3098: attempt to access beyond end of device
[ 1060.831202][T17238] loop7: rw=0, sector=1056, nr_sectors = 8 limit=16
[ 1061.332493][ T4652] team0 (unregistering): Port device team_slave_1 removed
[ 1061.503961][ T4652] team0 (unregistering): Port device team_slave_0 removed
[ 1061.674573][ T4652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1061.888210][ T4652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1063.192230][ T4652] bond0 (unregistering): Released all slaves
[ 1063.492453][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1063.494325][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1063.497069][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.498937][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.500575][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.504578][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.506314][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.507967][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.509490][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.511233][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.513683][T16855] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1063.518948][T16855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1063.520497][T16855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1063.522121][T16855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1063.525526][T16855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1063.540890][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1063.542775][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1063.555256][ T4912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1063.556589][ T4912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1063.558021][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1063.574004][ T4912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1063.575414][ T4912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1063.578586][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready