last executing test programs:

1m46.045778765s ago: executing program 3 (id=95):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bridge\x00', 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6400000010000d042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="000000001000000044001280110001006272696467655f736c613065000000002c000580050005000179620005000a00"], 0x64}, 0x1, 0x0, 0x0, 0x4000800}, 0x40e0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="25538b281d007e972b953a000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', r3, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r5 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, r6, 0x16, 0x0, @void}, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0x66, &(0x7f0000000240)=0x1, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@deltaction={0x18, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)

1m45.969805712s ago: executing program 3 (id=99):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x6, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r1, 0x0, 0x0, 0x32, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18)
sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}, 0x2}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0)

1m45.106411076s ago: executing program 3 (id=111):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080)=0x1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
pselect6(0x9a, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000140)={0x1f, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000180)={0x0, 0x3938700}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x1)
r3 = fsmount(r2, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=<r4=>r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, r4, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, 0x0, &(0x7f00000003c0)=0x21)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x80000040}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000ec0)={'filter\x00', 0xb001, 0xff03, 0x3e8, 0x218, 0x218, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x2}}}, {{@arp={@local, @multicast2, 0x0, 0xffffff00, 0xb, 0x11, {@empty, {[0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xfff6, 0x85, 0x200, 0x100, 0x7fe, 0x6, 'bond_slave_0\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x108, 0x0, {0x0, 0x1e03}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xffff, 'syz1\x00', {0x7}}}}, {{@arp={@broadcast, @broadcast, 0xffffffff, 0x0, 0x5, 0xf, {@empty, {[0xff, 0xff, 0x0, 0x100, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0xfff8, 0x7, 0x8, 0x9, 0x7fff, 0x5, 'syzkaller0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x0, 0x164}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x8, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x438)

1m45.020019512s ago: executing program 3 (id=113):
mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000000c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4f2040d2}}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbd0, &(0x7f0000000c80)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000001880)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r0 = socket$netlink(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x5c5842, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a00)={0x0, 0x30b5, 0x3400, 0xa, 0x15d}, &(0x7f0000000a80)=<r3=>0x0, &(0x7f0000000ac0)=<r4=>0x0, &(0x7f0000000b00)=<r5=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000b40)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000bc0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000c00)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f00000018c0)={0x0, 0x741a, 0x1000, 0xa, 0x255}, &(0x7f0000001940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x400, 0x2000, 0x27c, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x2, 0x3df, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9268, 0x801, 0x1, 0x23b}}], 0x1, &(0x7f0000001bc0)={0x2e, 0x6, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x11, 0x3, 0x0, &(0x7f0000001d00)='syzkaller\x00'}, 0x94)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c000000090601010000000000000000000000000900020073797a3100000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r9 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='@\x00', r9)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x5)
r11 = eventfd2(0x0, 0x0)
io_setup(0x4, &(0x7f0000000c40)=<r12=>0x0)
io_pgetevents(r12, 0x2, 0x2, &(0x7f0000001d40)=[{}, {}], 0x0, 0x0)
io_submit(r12, 0x2, &(0x7f0000001d80)=[&(0x7f0000001dc0)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r10, 0x0, 0x0, 0x0, 0x0, 0x3, r11}, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}])
io_getevents(r12, 0x2, 0x2, &(0x7f0000001e40)=[{}, {}], 0x0)
shutdown(r10, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsopen(&(0x7f0000000580)='cgroup2\x00', 0x0)

1m44.052177417s ago: executing program 3 (id=127):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc41a, &(0x7f0000000080)={[], [{@smackfshat={'smackfshat', 0x3d, '{'}}], 0x2c}, 0x1, 0x477, &(0x7f0000000600)="$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")
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0x11b4b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)

1m43.415347208s ago: executing program 3 (id=139):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xeb891000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_adv_tx_power={{0x5}, {0x0, 0x4}}}}, 0x8)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private1, 0x10000}, 0x1c)

1m43.411741008s ago: executing program 32 (id=139):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xeb891000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_adv_tx_power={{0x5}, {0x0, 0x4}}}}, 0x8)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private1, 0x10000}, 0x1c)

19.722137602s ago: executing program 5 (id=405):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1405, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0xffffff00], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[0x0, 0xfffd], [0x10], 0xfe, 0x0, 0x2, 0x5}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x0, 0x401}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350)

19.677121071s ago: executing program 5 (id=406):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, r1, r2, 0x0, 0x0, 0x0, 0x9b, &(0x7f0000000100)="8a62bc974814dadbd4c3359ff78ac2a0203c7b164bd5c73d61d8157836c3bcabb3d9b98ef4140ef252850f429b7dea7b5fe1ea6e7582634957dc4791ad396f5c20a520fe1ca250d98c9a0ed2c1343070925e71830ac2db35b0f6b3dd3630472ececcaec631d09620c0083c17466a89d5ba49d44dcf0d6d00f8aec54f4062bd81ef424c1d8749cda3c244a95214fad22a7bae6ed4fd5947412ba8a8"})
r3 = syz_open_dev$mtd(&(0x7f0000000000), 0x48a99fbe, 0x10b241)
ioctl$MEMWRITEOOB64(r3, 0xc0184d15, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x280, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x370, 0x3a8, 0x3a8, 0x370, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x238, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'vxcan1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@time={{0x38}, {0x400, 0x101, 0x20000ea0, 0x9ab3, 0xfffffffd, 0x5, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@ipv6={@empty, @private1, [0xffffff00, 0xff, 0x0, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'pimreg0\x00', 'bridge0\x00', {0xff}, {}, 0x33, 0xa, 0x0, 0x4d}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x62ff, 0x7fff, 0x6, '\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48}) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, r1, r2, 0x0, 0x0, 0x0, 0x9b, &(0x7f0000000100)="8a62bc974814dadbd4c3359ff78ac2a0203c7b164bd5c73d61d8157836c3bcabb3d9b98ef4140ef252850f429b7dea7b5fe1ea6e7582634957dc4791ad396f5c20a520fe1ca250d98c9a0ed2c1343070925e71830ac2db35b0f6b3dd3630472ececcaec631d09620c0083c17466a89d5ba49d44dcf0d6d00f8aec54f4062bd81ef424c1d8749cda3c244a95214fad22a7bae6ed4fd5947412ba8a8"}) (async)
syz_open_dev$mtd(&(0x7f0000000000), 0x48a99fbe, 0x10b241) (async)
ioctl$MEMWRITEOOB64(r3, 0xc0184d15, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x280, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x370, 0x3a8, 0x3a8, 0x370, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x238, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'vxcan1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@time={{0x38}, {0x400, 0x101, 0x20000ea0, 0x9ab3, 0xfffffffd, 0x5, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@ipv6={@empty, @private1, [0xffffff00, 0xff, 0x0, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'pimreg0\x00', 'bridge0\x00', {0xff}, {}, 0x33, 0xa, 0x0, 0x4d}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x62ff, 0x7fff, 0x6, '\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) (async)

19.561390177s ago: executing program 5 (id=408):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0xecdf, 0xfffc, 0x0, 0xa, 0x0, 0x20}, {@in=@multicast2, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x54, 0xffffffff}, 0x70bd2a, 0x800003, 0x2, 0x2, 0x0, 0x57}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x0, 0x70bd2a, 0x0, 0xfffffffc}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x4004004)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
r1 = syz_io_uring_setup(0x2a37, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x19, 0x20000000, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000140)=0x80000001, 0x4)

19.535981974s ago: executing program 5 (id=411):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x3810744, &(0x7f0000000340)={[{@nombcache}, {@inlinecrypt}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x562c}}, {@i_version}]}, 0x1, 0x46b, &(0x7f00000003c0)="$eJzs3M1vVFUbAPDn3s4AL/AyFfEDBK2isfGjpQWVhS40mrjQxEQXuKxtIchADa2JEKLVGFwaEvfGpYl/gStXRl2ZuNW9ISFKTEA3jrkz99LOMFOmMO1A5/dLLpwz98w958k953LmnBkCGFgj2R9JxPaI+DUiKo1sc4GRxl9XL5+b/vvyuekkarU3/0jq5a5cPjddFC3ety3PjKYR6adJXkmz+TNnT0xVq7On8/z4wsn3xufPnH36+MmpY7PHZk9NHj586ODEc89OPtOTOLM2Xdnz4dze3a++feH16SMX3vnxm6y99+5rnF8eRze2d1FmJAv8z1pd67nHVlPZHeDf2lKcSanfraFbQxGR3a5yffxXYiiWbl4lXvmkr40D1lT2zN7c+fRiDdjAkuh3C4D+KP6hzz7/Fsc6TT1uC5debHwAyuK+mh+NM6VI8zLlNax/JCKOLP7zZXZEyzpErc26AQDArfoum/88df38r7430ijywra8bCUihiPirojYGRF3R8SuiLgnL3tfRNy/yvpbt4aun3+mF282tm5k87/n872t5vlfMfuL4aE89/96/OXk6PHq7IGI2BERo1HenOUn2l28uMTLv3zeqf7l87/syOov5oL5RS6WWhboZqYWpno1Kb30ccSeUrv4k2s7AVlf2B0Re1Z36R1F4vgTX+/tVOjG8a+gB/tMta8iHm/c/8Voib+QrLw/Ob4lqrMHxotecb2ffj7/Rqf6byn+Hsju/9bm/t9SovJXsny/dn71dZz/7bOOnylLN9n/NyVv1fdgN+WvfTC1sHB6ImJT8lo93/T65NJ7i3xRPot/dP9S/BFL439n/p4s/gciIuvE+yLiwYh4KL93D0fEIxGxf4X4f3jp0Xc7nbsd7v9M2+fftf4/3Hz/V58YOvH9t53q7+75d6ieGs1fqT//bqBzc7bkJW62NwMAAMCdJ61/lz1Jx66l03RsrPF9+V2xNa3OzS88eXTu/VMzje+8D0c5LVa6KsvWQyeSxfyKjfxkvlZcnD+Yrxt/MfS/en5seq460+fYYdBt6zD+M78P9bt1wJq70T6a5wBsXK3jP+1TO4D15/faMLiMfxhc3Y7/Q2vcDmD9tRv/H7XkrQHCxmT+D4PL+IfBZfzD4DL+YSDdyu/61ypRWuHX++uWKK/4nwhInI30tmiGRJtEqQeju88PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB75LwAA//+MOu7f")
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000840)={0x0, 0x400, 0x3, 0xb})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xfc}]}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r2, {0xe, 0x1}, {}, {0x0, 0x4}}}, 0x24}}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r3=>r0}, './file1\x00'})
ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ptrace$poke(0x5, r4, &(0x7f0000000b40), 0x6)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140), 0x4)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r5, r6, 0x4, r7}, 0x10)
r8 = inotify_init1(0x0)
ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000b80))
syz_clone(0x200a00, &(0x7f0000000880)="a5c3788440f9e0e882391bc375fde2e17a293ee6d38e2aa781aceed2a281b7cfe293a8e500b94128c31742e3d7af541028239ee105411baaffafc28d7f8ce113c26d5cfb1783a871b6dc06a30463dad6c8b925276e6519d455d8d1bc2a1f04fd69138a27b996dd76d7031ff6cf0b4cec5539bf76d135fda81e8d461ab55279d6ddb3f892ab9936aa51", 0x89, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="d958af8999ae28944a21faff57ae6fadc185e4c5c0ba")

19.385330456s ago: executing program 5 (id=414):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0xff7a)
mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x20)
mount(0x0, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x40800, 0x0)
getdents64(r1, &(0x7f0000001580)=""/79, 0x4f)
r2 = socket$netlink(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000d80)='./proc\x00', &(0x7f0000000dc0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000e40)='7', 0x1)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x128}}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000001540)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x60, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x108}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x25, 0x8, "b02e5f5a866b70247bcff898a560b19a8080063d34245af88965025425469c893b"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x11c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x9, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xf8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc5}]}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}]}]}, @NFT_MSG_NEWCHAIN={0x68, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5695491f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1036f0f3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x190, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x158, 0x3, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x140, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}, {0x38, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x78ab}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}]}}}, {0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x4c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5a6}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4bb}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}]}}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}]}]}, @NFT_MSG_DELRULE={0xd0, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0xaa, 0x7, 0x1, 0x0, "ed77a481b2ad9707bc3f8c7b46c6d2424ef0046d3c9377d8e526546a11b09d051985d87f8c203561a3a1dbaafed697f23763e18277c585548d6a627ed2805b2ca4307b4f4d5dc900a32a0b963165f9750d9928e7c1ac3760bbcea250f7076c92b60fe1ed3b829febf2556e912627deb62210e8c2526cb9ad3db7a450f46a0b08fc5a8beb04504f9f4ac645945d0aa8c66daa0a62bd67b972671935bc991b095763760d76b7f0"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x50, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x2f, 0x6, "4339dfcdf78e135a98d8708b9fbf10efaab363beaecec0f33317969afe072288d9932edae8219451d18ac8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x4f8}}, 0x4000010)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000480)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x841, 0x4)
sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000b40)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24004800)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/mm/ksm/sleep_millisecs\x00', 0x1, 0x0)
write$ppp(r5, &(0x7f00000001c0)="f2c9a8b26d1a2137d8184f8c7037fbb6c55090def3ced8643a4d5061116f6b7c8d8c80db6276da29c81f0587eb28117b16155f7b6d3175537e4f693f554c07b3a8c75dc571a20fd614c39ce9ca6658d7d1e7ef0dc8f1c13b71abd1de6af1f35db81bf4f734ba5da92e41e66693f4ea1f5b0e1a5b150cd9bc7df3c364c69ade3b26723d017d014c95bb9b28b50400b1c96ab9f286b67b7f523c81a5b29b3739", 0x9f)

19.106943679s ago: executing program 5 (id=420):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000004c0)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257, 0x0, r5}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x557, 0x0, 0x0}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r6 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r6, &(0x7f0000000940)={0x14, &(0x7f0000000140)={0x40, 0x10, 0x82, {0x82, 0x22, "eee004f9ca041a01f98b48612a41f6d7f2d83b223c4c2b1b03e82f0b72db9e6e410d35cbcccb7235df9feceeebe9a1724dc3e4d0fda0bc7e8039559b7b2072f2ac08a01cc8b877b34456192ceb8d0a945e9521386d99bd35cc1355440337b6b7ccdaa391661bb42690a4d36cbe97c6d7079dcccabcf4953018b493d30a22c715"}}, &(0x7f0000000800)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)={0x40, 0x0, 0x54, "1110e01d68b5d2e0ebe66c0da5b63a0f145a2fa06ea955bec8284469cefbcd19b4c81bd827a61a2b42eb08ab6b96e03d28b44287b4a3eb8e9a41fc5911840d9984d502f1d2f8d369edc256d799ac193e61d8c329"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x97}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000a80)={0xc0, 0x5, 0x4, "b86a37c1"}, &(0x7f0000000ac0)={0x40, 0x5, 0x6, "191329030005"}})
syz_usb_disconnect(0xffffffffffffffff)
syz_clone(0x9000, 0x0, 0x43, 0x0, 0x0, 0x0)

19.09848147s ago: executing program 33 (id=420):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000004c0)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257, 0x0, r5}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x557, 0x0, 0x0}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r6 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r6, &(0x7f0000000940)={0x14, &(0x7f0000000140)={0x40, 0x10, 0x82, {0x82, 0x22, "eee004f9ca041a01f98b48612a41f6d7f2d83b223c4c2b1b03e82f0b72db9e6e410d35cbcccb7235df9feceeebe9a1724dc3e4d0fda0bc7e8039559b7b2072f2ac08a01cc8b877b34456192ceb8d0a945e9521386d99bd35cc1355440337b6b7ccdaa391661bb42690a4d36cbe97c6d7079dcccabcf4953018b493d30a22c715"}}, &(0x7f0000000800)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "c007ac5e6118235b187243328cd69bede8792dd868949696dbf560bef676094b65f1c23972e99f0c1a6de92538a4e2e5ce6e020aa67405ea4b75e5d7f35b100d74685899c73d48ded007e19393f1efd4bd8065eb027481c7534a24376f43a3e9a503d5293563503ba0b19b1890e69046ef1443c10b49737e0a468b10b15bcd746593aa852438ed1b294d6db3d9df3dbc65454f03aebe13a29c4e9971df9f5a3ada08f6506e2059733c3839442a53557b3912a2584529e9f4b294baa146b98e36d33f8657d68fe55783327eca51aff9d9949d1975a7a189cf14a4b59729fb1aa6a666c3513e80b6b7132961839f1d2add5bb3c5b6d1d66994c872cb"}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)={0x40, 0x0, 0x54, "1110e01d68b5d2e0ebe66c0da5b63a0f145a2fa06ea955bec8284469cefbcd19b4c81bd827a61a2b42eb08ab6b96e03d28b44287b4a3eb8e9a41fc5911840d9984d502f1d2f8d369edc256d799ac193e61d8c329"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x97}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000a80)={0xc0, 0x5, 0x4, "b86a37c1"}, &(0x7f0000000ac0)={0x40, 0x5, 0x6, "191329030005"}})
syz_usb_disconnect(0xffffffffffffffff)
syz_clone(0x9000, 0x0, 0x43, 0x0, 0x0, 0x0)

16.875384214s ago: executing program 0 (id=443):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x8f, [{0x1, 0x5, 0xa}]}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x2e, 0x30]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2}, 0x8, 0x10, &(0x7f0000000800), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x702, 0x36, 0x0, &(0x7f00000008c0)="e460334470b8d480eb20010086ddf80c39e7d34ed50ffb4def8474246fae5bd7fd7fc979c18b04cc038cf6825bc8379d1232f0bf7a53", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000006000000000000000a20000000c40a010180000000000000000b9900030900010073797a31000000004c000000030a010400000000000000000100ffff0900030073797a3100000000200004800800014000000005140003006272690800655f736c6176655f3000000900010073797a3100000000140000001100010000000000000000000100000a"], 0x94}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000006000000000000000a20000000c40a010180000000000000000b9900030900010073797a31000000004c000000030a010400000000000000000100ffff0900030073797a3100000000200004800800014000000005140003006272690800655f736c6176655f3000000900010073797a3100000000140000001100010000000000000000000100000a"], 0x94}}, 0x0)
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
close(r2)

16.786125498s ago: executing program 0 (id=444):
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000240))
ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2023c0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="1600250000000000"], 0x24}}, 0x0) (async)
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, &(0x7f0000000300)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) (async)
connect$pptp(r5, &(0x7f0000000340)={0x18, 0x2, {0xfff8, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1e)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000400)=0xffffffbd)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000f00), 0x800, 0x0) (async)
dup3(r6, r2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0xd, 0xd, &(0x7f0000001140)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8bcd5ffb7020000083f1800cf03000000000000850000000800000095"], &(0x7f00000011c0)='GPL\x00', 0x2, 0x5c, &(0x7f0000001200)=""/92, 0x41000}, 0x94) (async)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000ec0)=0x1) (async)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = dup(r7)
sendmsg$inet(r8, &(0x7f0000000f40)={&(0x7f0000000f80)={0x2, 0xefe, @multicast1}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000001000)="be", 0x1}], 0x1, &(0x7f0000001280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x10}, 0x0)
r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x0, 0xc801, 0x0, 0xffffffffffffffff}], 0x1})
r10 = syz_open_dev$evdev(&(0x7f0000001040), 0x0, 0x2002)
ioctl$EVIOCSCLOCKID(r10, 0x400445a0, &(0x7f0000001300)=0x1) (async)
ioctl$EVIOCSCLOCKID(r10, 0x400445a0, &(0x7f0000001340)=0x1)
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000480)={0x0, 0x2dd1, @status={[0x8001, 0x2000000000007, 0x0, 0xfffffffffffffff9, 0x9, 0x5]}, [0x7, 0x9, 0x4, 0xd1be, 0x37, 0x322a, 0xa713, 0x3, 0x2, 0x67, 0x90f, 0x400, 0x8, 0x5b45, 0x3, 0x100000000, 0x800, 0x2f, 0x4, 0x75, 0xfffffffffffffffe, 0x100000000005, 0xc6, 0x6, 0x10, 0xa, 0x5, 0xfffffffffffffe0c, 0x0, 0x100000000, 0x93, 0x8, 0xa, 0x8, 0x9, 0x0, 0x8, 0x6, 0x7ff, 0x3, 0x5, 0x100000002, 0x1, 0x7, 0xfffffffffffffff7, 0x10001, 0x2ab, 0x1000, 0xa7b, 0x1ff, 0xffffffffffffff01, 0x9, 0x392, 0x8, 0x10, 0x1ff, 0x3, 0x9, 0x20, 0x80000000, 0x0, 0x2, 0x6, 0x6]})
unshare(0x22020600) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x169802, 0x0)
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$BLKBSZGET(r11, 0x80081270, &(0x7f00000012c0))

16.607376659s ago: executing program 0 (id=447):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000900)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', &(0x7f0000000940)='afs\x00', 0x20, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000980))
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000009c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000a40)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a80)={0x0, &(0x7f0000000ac0)})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000b40)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000bc0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000c00), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000c40)=0x6)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000cc0)='./proc\x00', &(0x7f0000000d00)='proc\x00', 0x4000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r5, &(0x7f0000000d80)='27', 0x2)
mount$9p_unix(&(0x7f0000000dc0)='./proc/file0\x00', &(0x7f0000000e00)='./proc\x00', &(0x7f0000000e40), 0x48, &(0x7f0000000e80)=ANY=[@ANYBLOB="10"])
sendmsg$key(r4, &(0x7f0000000ec0)={0x500, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
mincore(&(0x7f000052e000/0x1000)=nil, 0x1000, &(0x7f0000000fc0)=""/205)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000010c0)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r6 = syz_open_dev$vim2m(&(0x7f00000011c0), 0xf7f, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000001200)={0xf0f003, 0x6})
connect$inet6(r3, &(0x7f0000001240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)

15.456093101s ago: executing program 0 (id=460):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x800714, &(0x7f0000000080)={[{@user_xattr}]}, 0x1, 0x4d9, &(0x7f00000007c0)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x800714, &(0x7f0000000080)={[{@user_xattr}]}, 0x1, 0x4d9, &(0x7f00000007c0)="$eJzs3ctrXNUfAPDvnTR9pk1+/dVqa6vRKhYfSZM+7MKFioKggqCLuoxJWmunjTQR2hI0FanrgntxKbh05c6NqAvxD1BwKYWiQWgqCJH7ymMySSd1kkmTzwemc869595zzr3nTM69Z+40gA2rO/0nieiIiF8iojOPzk/Qnb9NTY4P3p4cH0xievrNP5Is3a3J8cEyabndjiJyuBJR+SSJ55OF+Y5evnJuoFodvljEe8fOv987mobOD5wZPjN8of/kyWNH+5490X983nZ1drXAtjrL0nrd2v/hyIF9r7x9/fXBU9ff+eGrdF97D+bri3psbmD3EbcXlOLVesm606P253Smdt3jDWV079g5J5xsamFBWJa2iEhPV3vW/zujLWZPXme8/HFLCwesqPRv05bFV09MA+tYEq0uAdAa5R/69Pq3fMU/qzT4WANuvjB70T81OT44ld0H2JJdFVWK5e0rmH93RJya+Pvz9BU191MAAFZCNrZ5umb8l6nE3uw9n+vYVcyhdEXE/yJid0T8PyL2RMR9EVna+yPigXzj6c4G8++uiS8c/1Ru1C1zk6Tjv+fmjP2m5tS/eOtqK2I7s/q3J6fPVoePFMfkcLRvSeN9S+Tx7UuLTyvNHf+lrzT/cixYFODGpvwG3cxOhgbGBpp1EG5ejdi/qV79k5mZgLQF7IuI/cvb9a4ycPbJLw8slujO9V9CE+aZpr+IeCI//xNRU/9SMjM/efnKM2dn5yfTNn6i/3jv1qgOH+ktW8VCP/587Y3F8r9T/evNZTZTev63z2//NSk6/0ry+dr2qFaHL44uP49rv3666DXNMtr/jLT9b07eyuasf3o3X3ZpYGzsYl/E5uS1LF50lq2RLu+f3fZSES/Tp/U/fKh+/99dbJPW/8GISBvxwYhdD0XEw0XZH4mIRyPi0BL1//7Fx95bov5JJHF37b8J0voP1f38m2n/Xcnc+fp5gfaoXVIv0Hbuu28Wm7dv7Pwfi4nsszaXff7dQSPlurvWDAAAAPeeSkR0RFLpycPdHVGp9PTk3+HfE9sr1ZHRsadOj3xwYSh/RqAr2ivlna7OOfdD+5KJYo95vL+4V1yuP1rcN/6sbVsW7xkcqQ61uO6w0e2Y3/+j7P+p39taXTpgxS0+j7bEowHAulDb/ystKgew+hr5Ho1rAVif6vT/lf7eGbBG1PT/q60qB7D66o3/P6qJLxj/GyHAurCw//9W5yfrgPXI7zXCxqX/w8al/8OG1NBD8k0PlA8LLJm4LGLdNFsbfsJ/owTKn4dZyby2xeySqGSBjlgDdb+bQGcjiSPi6/+cV1sTypz2mNU9Po3+ZxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABr278BAAD//+3d3fE=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000007500)='.\x00', 0x101000, 0x108)
mkdirat(0xffffffffffffff9c, &(0x7f0000007540)='A\x00', 0x1ff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$poke(0x4, r4, &(0x7f0000000340), 0x10001)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x88}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x88}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0)
getdents64(r0, &(0x7f0000007580)=""/4096, 0x1000)

15.267374022s ago: executing program 0 (id=461):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {0x95, 0x0, 0x2c}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000380)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @mcast1, 0x7}}}, 0x108)
setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

14.8376587s ago: executing program 0 (id=471):
sendmmsg(0xffffffffffffffff, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000001740)="ceb81d89d6", 0x5}, {0x0}], 0x2}}], 0x1, 0x20000004)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x100}, 0x18, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_DELSET={0x164, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_USERDATA={0x7b, 0xd, 0x1, 0x0, "e92ea2a7d4b194b4b80d4eb36769b182c85cef560beaa355f6de14962341ccd7fdd88ef88a61edf9aa017ae0ca4fc676d0d996612130babc14d3e663004ceb193c261cedf07bcf833b3d7318d349367aa8955c7009e30d669e31faf5023bb773d592a013f8dd07b328f60f2b8a777745dc9ef7d45f6baf"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x9c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}], {0x14}}, 0x18c}}, 0xd0000)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x1f0f, r1}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)

14.363048439s ago: executing program 34 (id=471):
sendmmsg(0xffffffffffffffff, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000001740)="ceb81d89d6", 0x5}, {0x0}], 0x2}}], 0x1, 0x20000004)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x100}, 0x18, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_DELSET={0x164, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_USERDATA={0x7b, 0xd, 0x1, 0x0, "e92ea2a7d4b194b4b80d4eb36769b182c85cef560beaa355f6de14962341ccd7fdd88ef88a61edf9aa017ae0ca4fc676d0d996612130babc14d3e663004ceb193c261cedf07bcf833b3d7318d349367aa8955c7009e30d669e31faf5023bb773d592a013f8dd07b328f60f2b8a777745dc9ef7d45f6baf"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x9c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}], {0x14}}, 0x18c}}, 0xd0000)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x1f0f, r1}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)

7.766626765s ago: executing program 1 (id=529):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000300)=[{0x28, 0x2, 0x1, 0x5ae9}, {0x6, 0x0, 0x80, 0x7}]}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)={[{@usrquota}, {@min_batch_time}, {@nombcache}]}, 0x1, 0x4c0, &(0x7f00000004c0)="$eJzs3c1rXOUaAPBnZpo0SdPbj3u5tL1wW+iF3g+aTy5N7r2bu1IXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLOzLTJJBMHTTM25/eD07znY+Z53w7Py3veOWdOAJl1JvknFzEYEZ9ExJH66uYDztT/rN+7MZ0suajVLn2dS49L1pcP1w9tvu5QRKxFRF9EPPVYxPO5rXErK6tzU6VScamxPlydXxyurKyevzo/NVucLS6MTlyYnJwYGR+b3LW23nr1xVsX33+i973vX7l757UPP0iqNdjYl7Rj1wJtUG96TxzbsO1ARPzvYQTrgkKjPf3drgi/SvL5/TEizqb5fyQK6acJZEGtVqv9VDvYbvdaDdi38ukYOJcfioh6OZ8fGqqP4f8UA/lSuVL915Xy8sJMfax8NHryV66WiiNRSM8VjkZPLlkfTcsP1sda1scj0jHw64X+dH1oulya2duuDmhxqCX/vyvU8x/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+QyY9efFistSa97/PXFtZnitfOz9TrMwNzS9PD02XlxaHZsvl2fSenflfer9Subw4+u9Yvj5cLVaqw5WV1cvz5eWF6uX0vv7LxZ49aRXQiWOnb3+Wi4i1//SnS6K3sU+uwv5Wq+Wi2/cgA91R6HYHBHSNqT/ILuf4QOtP9LaOC/ravXDxwXwh8GjJd7sCQNecO+n7P8gq8/+QXeb/IbuM8YFtHtG3yU7z/8Cjyfw/ZNdgm+d/Hd7w7K6RiPhDRHxa6DnYfNYXsB/kv8w1xv/njvxtsHVvb+6H9CuC3oh46e1Lb16fqlaXRpPt39zfXn2rsX1swwvbnjAA3dLM02YeAwDZtX7vxnRz2cu4X/2/fhHC1vgHGnOTfel3lAPruU3XKuR26dqFtZsRcWK7+LnG887rJzID64Ut8Y83/ubqb5HW90D63PS9iX9yQ/y/boh/6jf/r0A23E76n5Ht8i+f5nTcz7/N/c/gLl070b7/y9/v/wpt+r/THcZ44Z2Xv2gb/2bEqW3jN+P1pbFa4yd1O9dh/LvPPv3ndvtq79bfZ7v4TUmprzq/OFxZWT2f/o7cbHFhdOLC5OTEyPjY5HA6Rz3cnKne6r8nPr6zU/sH2sTfqf3Jtn902P4f//LRM2d2iP/3s9t//sd3iN8fEf/sMP63Y58/125fEn+mTfvzO8RPto13GL/yxuMHOzwUANgDlZXVualSqbikoKDQlcLN30c1Wgrd7pmAh62ykpyaJ0nf7ZoAAAAAAAAAAAAAndqLy4m73UYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP3g5wAAAP//WvrVLg==")
syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f00000001c0)='./file1\x00', 0x21081e, &(0x7f0000000a40)={[{@dax_never}, {@data_journal}], [{@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@euid_eq}]}, 0x1, 0x4fa, &(0x7f00000021c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) (async, rerun: 32)
r2 = openat(0xffffffffffffff9c, &(0x7f00000026c0)='./file1\x00', 0x101242, 0x97) (rerun: 32)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000002700)=0x20) (async, rerun: 64)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x181441, 0x148) (rerun: 64)
openat(r3, &(0x7f00000009c0)='./file1\x00', 0x42042, 0x1cb) (async, rerun: 32)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e64, 0x2eb, @dev={0xfe, 0x80, '\x00', 0xc}, 0xc}, 0x1c) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/kernel/kernel_sys_info\x00', 0x0, 0x0) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x8, 0x88}, 0x0) (rerun: 32)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCADDRT(r4, 0x890b, 0x0) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001180)={0xc, {"a2e3ad204fc752f91b5d30f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9b5522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x7) (async, rerun: 32)
r7 = getpid() (rerun: 32)
sched_setscheduler(r7, 0x2, &(0x7f0000000d40)=0x7) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
io_uring_enter(r2, 0x451, 0xf38a, 0x62, &(0x7f0000000240)={[0x4]}, 0x8)
connect$unix(r8, &(0x7f0000000dc0)=@abs, 0x6e) (async)
sendmmsg$unix(r9, &(0x7f0000000e40), 0x651, 0x0) (async, rerun: 64)
recvmmsg(r8, &(0x7f0000000e80), 0x10106, 0x2, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x6) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0xe, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000000000000085100000010000009500000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000000000a500000095000000000000000000"], &(0x7f0000001080)='GPL\x00', 0x6, 0x9b, &(0x7f00000010c0)=""/155}, 0x94)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8)

6.972101729s ago: executing program 6 (id=534):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYBLOB="ae84ef165bbce247285a1e003a9d777b66e94599a0131fddc870412e2cd10c4ed59c6e0c96675fe570a004738d76494e61d2101c5fe611a640df754f09175685d094c78e34a285a42c77b188496e566c482c3617310b57f4bbfb2fec78edc25726bacdd0a33f9dae7a8ca40ddb1a36825e8187f5abd635f7e0a64d0caf12397ded3b8c3a2a3b4e7d39ca897e77eab81feaccbcd8bbd1605dc22240c8c6517b03a62e569ebc9767d758405c2d5c3ec9ca3b2b363966214c8395fa946d86b526af3377a09fe26d17205c", @ANYBLOB="71234d74b048b2078472c0939253f056028931567842efcbc6888cab56ebcc4b2d813f2e4a6d352cb4e4e9fc1675bf8056f4e0c9446acb43de9f48cca29d7b9b1ad25a711f492bc9d103594f2ab58f3847fe19a79a3aa8018c30d252df76859279218ff608307df03a91f4901f8c72f9777c89bba6bf0394754b99379cee5dfb8c673ee5b52229b3e38d45b8fefa29663b24fbd66907028bf269c9401494fce6c3159c1a9c2be811a19718032705e647547401"], 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x80)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004007, &(0x7f00000000c0)={[{@dax_inode}, {@nouid32}, {@max_batch_time={'max_batch_time', 0x3d, 0x7fffffffffffffff}}, {@nouid32}, {@nogrpid}]}, 0x1, 0x576, &(0x7f0000000ac0)="$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") (async, rerun: 64)
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)={0x0, 0x6, 0x98f6796a80869a65, 0x7}) (rerun: 64)

6.058744461s ago: executing program 6 (id=542):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0xfffffffd}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async)
shutdown(r0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e22, 0x0, @loopback, 0x1c32}]}, &(0x7f0000000140)=0x10)

5.931437547s ago: executing program 4 (id=543):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000080)={0x8005, 0x1, 0x1, "0000087abac53051a300fcb56f0bbaec91eaffffff00", 0x3136564e}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/oops_count', 0x1, 0x51) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x40}, [@jmp={0x5, 0x1, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

5.928970287s ago: executing program 6 (id=544):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
socket$xdp(0x2c, 0x3, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
listen(r0, 0x6)
syz_emit_ethernet(0x18, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@generic={0x6001, "9e9961dba3b8"}}}, 0x0)
syz_clone3(&(0x7f0000000240)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58)

5.913243925s ago: executing program 4 (id=545):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40042, 0x1)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f0000019ac0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000019b00)=0x7) (async)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000019b40)=0x2) (async, rerun: 32)
sched_setscheduler(r2, 0x2, &(0x7f0000019b80)=0x4) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (rerun: 32)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x13, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019bc0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000019c00)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000019c80), 0x400000000000041, 0x0) (async)
sched_setaffinity(r2, 0x8, &(0x7f0000019cc0)=0x80000006) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmmsg(r4, &(0x7f0000019d00), 0x10106, 0x2, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000019d40), 0x200002, 0x0)
openat$cgroup_devices(r6, &(0x7f0000019d80)='devices.deny\x00', 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf257300000008000300", @ANYRES32=r7, @ANYBLOB="0c0099210500ee0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x24004000}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000019e40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000019e80)={0x17, 0x6, &(0x7f0000019f40)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x66}, @exit]}, &(0x7f0000019f80)='GPL\x00', 0x4, 0xc3, &(0x7f0000019fc0)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70)
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x800)
ioprio_set$uid(0x3, r8, 0x4000) (async)
wait4(r2, 0x0, 0x2, &(0x7f0000000100)) (async)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYBLOB="0e756ae02c8b41209e0e3a0b59f9397944d77072f565944f5227713955b4b5bbb44d89f444a9a9f51b088506be4cd6372c721e6505e6954a4514c0f17ba2ef8a56dd23416184b1c3675e0fdd0e6f4e426adcb7f88cb62f2123bd58c827ab8c9c821dad2bf93eebc0a1d2fb541e8a3aceb362c808eb3e9ac4e7ed9c3c125e411d5ace0322d664dd43", @ANYBLOB="1e34977fb940b621f1027adf57815383e481095721051406ca38cc662b86ba6a3218c1af2501108307056ac650593219beddc8e575ecc1ba409ba2e2ee38d0b4fc1535d143e80f8fac173535c39b4c13b1ea3d7217032f472201d57abc4dd43e31ec8b4a229a5e7dae5e74db003f3f35d89748bdd4c53d5df2e3889c34e80ababf474b4ac2b8e0d67208593f082a6b2007cef12279cc61c8f54c5ff5082c52ca6d64f54c81b11273c29611d9f8b33586a826d81aaae74455b7a924637f39b9169a7de41cfdfcc10305503807c374fc63bf1019604d984d165e029387389bde59d9de895bf11fe476fc0831", @ANYRESOCT], 0x4, 0x2cc, &(0x7f0000000600)="$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") (async)
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)

2.032789218s ago: executing program 6 (id=546):
ioprio_set$pid(0x2, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
listen(r0, 0x5)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB], 0x11) (async)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000006c0)={[], [{@obj_user={'obj_user', 0x3d, '\\.*-'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@uid_eq}], 0x2c}) (rerun: 32)
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0xe0c11, &(0x7f00000000c0)=ANY=[], 0x1, 0x0, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async)
sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000200)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="13", 0x1}], 0x1}, 0x48043) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x11, 0x30}, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = dup(r1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000300)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c)
accept4$bt_l2cap(r2, 0x0, &(0x7f0000000640), 0x80000) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000400)={0x7, 0x200, 0x57, 0x7, 0x2}, 0x10) (async)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x101, @loopback, 0x7}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) (async)
pipe2$9p(&(0x7f0000000500)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r5, &(0x7f0000000540)={0x7, 0x1b, 0x2}, 0xffffff9a) (async)
splice(r4, 0x0, r1, 0x0, 0xffff, 0x2) (async, rerun: 64)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async, rerun: 64)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) (async, rerun: 32)
r7 = openat(r2, &(0x7f0000004400)='./bus\x00', 0x1c1042, 0x0) (rerun: 32)
write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000000340)=ANY=[], 0x21) (async)
close(r3) (async)
sendfile(r7, r6, 0x0, 0x40001)

1.859471572s ago: executing program 1 (id=547):
capset(&(0x7f0000000800)={0x20071026}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000b00)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff000000001f61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f0000000800)={0x20071026}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000b00)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff000000001f61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)

1.815300404s ago: executing program 4 (id=549):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400000000a882, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x0)
r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000100)=0x80)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x2)
mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil)
ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040))

1.737970962s ago: executing program 4 (id=550):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000000)={0x0, 0xed83, 0x400, 0x2, 0x2e3}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000140)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) (async)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000140)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="10134eab8aa0677d032ba8cc", 0xc}], 0x7}}], 0x1, 0x4008c50)
io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) (async)
io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000300)=0xd, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0)
setresuid(0x0, 0xee00, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) (async)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
r5 = syz_open_dev$usbfs(&(0x7f0000000380), 0x205, 0x2581)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000400)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="050427bd7000020000000008000100", @ANYRES32=r7, @ANYBLOB="4400010000000000000001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400000000c495ba91fc", @ANYRES32=r7, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4004c90}, 0x4084) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="050427bd7000020000000008000100", @ANYRES32=r7, @ANYBLOB="4400010000000000000001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400000000c495ba91fc", @ANYRES32=r7, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4004c90}, 0x4084)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000680)={'wg0\x00', <r9=>0x0})
setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f00000006c0)={@loopback, @remote, r9}, 0xc)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'team_slave_0\x00', <r10=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000ac0)={'tunl0\x00', 0x0, 0x7800, 0x20, 0x5, 0x6, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast1, @private=0xa010100, {[@generic={0x94, 0x10, "effbefe46aaa000046d57d6e97b4"}, @cipso={0x86, 0x6, 0x3}, @lsrr={0x83, 0xb, 0x48, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x1c, 0x1b, 0x3, 0x8, [{@multicast1}, {@private=0xa010100, 0x200}, {@empty, 0x5e2}]}, @timestamp_prespec={0x44, 0x3c, 0x69, 0x3, 0xa, [{@multicast2, 0x1}, {@rand_addr=0x64010101, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast1, 0x1}, {@loopback, 0x8c}, {@private=0xa010100, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', <r11=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) (async)
sendmsg$nl_route_sched(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084)
sendmsg$nl_route_sched(r12, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x44, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0x6, 0x1, 0x6}}]}}]}, 0x44}}, 0x40000)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000f00)=ANY=[@ANYBLOB="640100cc4dc5c3fc44701ab02ad60b9164a06202883710fea61cc6e39bf03c14886b8efec4f746df2965c90ce683a5972f167336ff6501000000ad76fe5bcfd73f3f97ed02a92d24d2fa3912bb18c360eeb8f7cc5d919a31fb5de60b8899a6c8debbcadaa2cb2487de8775af6c80a07ac4ed58b1dafd26142b2fd8fab6040fddc049aded139564f3db0f6ab89e1dc0df67399711117defe51753345ca7f7c0f0eb7bdb17267f595a8524e031f5429683872f2f4c849b6bfe", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250d0000001c00018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0800030001000000300001800800030000000000140002006970365f76746930000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000300010000003c00018008000100", @ANYRESDEC=r1, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000300000008000300020000000800030003000000040001800c00018008000300010000000c000180080003000000000018000180140002007767310000000000000000000000000094000180140002006970365f76746930000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265670000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="1400020069703665727370616e300000000000001400020077673200000000000000000000000000140002006772657461703000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="1400020070696d72656700"/20], 0x164}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008000)
ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r15 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r15, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x328, 0x20a, 0x278, 0x328, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {0xff}, 0x3c, 0x0, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x8638, [0x6, 0x4], 0x4, 0x0, 0xa, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @private0, @remote, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x1, 0x4}, {0xfffd, 0x2, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)

1.691411155s ago: executing program 2 (id=551):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0)
r1 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x3}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004200817a00000025a0c2bfac8a97"], 0x14}}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={<r2=>0x1, @in={{0x2, 0x4e20, @loopback}}, 0x2, 0x0, 0x6, 0x8001, 0xc8, 0x4}, &(0x7f0000000200)=0x9c)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={r2, 0x5, 0x30, 0x136360000003, 0x9ad}, &(0x7f0000000280)=0x18)
r3 = syz_open_dev$video(&(0x7f0000000340), 0x7, 0x800)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000400)=0x7)
syz_open_procfs(r4, &(0x7f0000000440)='mounts\x00')
ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000380)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x980915, 0x7, '\x00', @p_u32=0x0}})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)

1.691145422s ago: executing program 1 (id=552):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00')
preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000011c0)=""/4104, 0x1008}], 0x1, 0x96, 0x0) (async)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000011c0)=""/4104, 0x1008}], 0x1, 0x96, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000080000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000080000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0) (async)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000480)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) (async)
sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x101, 0x2) (async)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x101, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x22801, 0x0)
write$P9_RLERRORu(r9, 0x0, 0x13)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r9, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

1.618855485s ago: executing program 2 (id=553):
mmap$IORING_OFF_SQ_RING(0x7ffff7ffe000, 0x9000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_ublk_setup_io_uring(0x22e9, &(0x7f0000000000)={0x0, 0x3bc1, 0x0, 0x1, 0x4a}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
mmap$IORING_OFF_PBUF_RING(0x0, 0x40, 0x1000000, 0x2010, r0, 0x80e0202f)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x4, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0x1, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x975, 0x4, 0x99, 0x4000009, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x3, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7ffffffc, 0xff, 0x9, 0x7fffffff, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x0, 0x8, 0xc9cd, 0x7f, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x1, 0x2, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0x9, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x400, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0x1417, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0xf, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0xe, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0xffffffff, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0xa, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x3, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x270, 0x2, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff6, 0x80000000, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffc, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r8 = socket(0x8000000010, 0x2, 0x0)
write(r8, &(0x7f0000000f00)="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", 0xfc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="9feb0100180000000080000018000000180000ef020000000200000000000008020000000f00000000000009030000000000"], 0x0, 0x32}, 0x28)
r9 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r9, &(0x7f0000001080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r9, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r10 = syz_open_dev$evdev(0x0, 0x40, 0x0)
ioctl$EVIOCGKEYCODE(r10, 0x80084504, &(0x7f0000001100)=""/241)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000001200)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000c00)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c40)={'syzkaller0\x00', <r12=>0x0})
sendmsg$kcm(r3, &(0x7f0000000c80)={&(0x7f0000000cc0)=@xdp={0x2c, 0xdd86, r12, 0x3e}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000d80)="80", 0x1}], 0x1}, 0x4)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000dc0)={'syzkaller0\x00'})

1.478982041s ago: executing program 4 (id=554):
r0 = socket(0x8, 0x800, 0xffff)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x840, 0x4)
bind(r0, &(0x7f0000000080)=@can={0x1d, 0x0, 0x1, 0x2}, 0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={<r1=>0x1, 0x1309, 0x4}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r0, 0x84, 0x80, &(0x7f0000000380)={r1, 0xa}, 0x8)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r2, &(0x7f0000000040)={&(0x7f0000000140), 0x10, &(0x7f0000000180)={&(0x7f0000000300)=@canfd={{0x0, 0x1}, 0x2c, 0x0, 0x0, 0x0, "d5b8c2c92db5f63de8c4caf6c69a0cb360c03c44fdd611135fea06daf866b5ebe2a6c3e27d1b8379276303a987b986eb21fa8a56c65383d37b2fcbe9985c5064"}, 0x48}}, 0x20004004)
recvmsg$inet_nvme(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/119, 0x77}, {0x0}], 0x2}, 0x60)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3)

1.419238002s ago: executing program 4 (id=555):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000cc0), 0x2000010, &(0x7f0000000d40)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32=r0])
read$FUSE(r0, &(0x7f0000001980)={0x2020, 0x0, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000007e00)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}], [{@context={'context', 0x3d, 'system_u'}}, {@euid_lt={'euid<', r1}}, {@obj_user={'obj_user', 0x3d, 'ext3\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'fuse\x00'}}, {@subj_user={'subj_user', 0x3d, 'usrjquota='}}]}, 0xff, 0x44d, &(0x7f0000000540)="$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")
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f00000009c0)='debugfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./debug/ubifs/chk_general\x00', 0x1, 0x0)
write(r3, &(0x7f0000000bc0)='1', 0x1)
gettid()
prlimit64(r2, 0xe, &(0x7f0000000a00)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000a80)=0x7)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x260, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, 0x2d3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000c40)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000b80), 0x651, 0x0)
recvmmsg(r6, &(0x7f0000000bc0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001880)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010004000200000000006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b7"], 0x30}}, 0x0)
r10 = openat(0xffffffffffffffff, &(0x7f0000000100)='./debug/ubifs/chk_general\x00', 0xa042, 0x0)
write(r10, &(0x7f0000000140)='100', 0x3)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000180)=0x19, 0x4)

1.375974645s ago: executing program 1 (id=556):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x7ff, 0x0, 0x0, 0x9})
r0 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)='}', 0x1}], 0x1)
r1 = syz_create_resource$futex(&(0x7f0000000b40)=0x1)
r2 = syz_create_resource$futex(&(0x7f0000000b80)=0x1)
futex(r2, 0xb, 0x1, 0x0, r1, 0x403)
r3 = syz_create_resource$futex(&(0x7f0000000000)=0x2)
futex(r3, 0x6, 0x2004, 0x0, r1, 0x82)
futex(r1, 0x5, 0x2, 0x0, r1, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9bb759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be9b0220836729028b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb3596b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb6ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b784d392645d013d1424c6e7f141f67ef620df8a8bac03489bf70423fa9f2c79c41d5b6496ae17718b5044c5cadb43264b290ebfcd9d5236d0b14e280fd3fcbb2fa330dcc58f44ed0b12c9299e74ea56ffefb003034230e20886f502e6df00aa138e9c8761d107bdea8d57b64345f91e055c6f52356aec1ce68e612e94224407bcf7b1df9f2aec27d44b0b9a944d16236"], &(0x7f00000018c0)='syzkaller\x00'}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x1, 0xe, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0), 0x0, 0x10, &(0x7f0000001f00), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001f40)=r5, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f80)={r4, 0x18000000000002a0, 0x26, 0x300, &(0x7f0000002000)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000002100), &(0x7f0000002140)}, 0x2c)
futex(r2, 0xc, 0x1, 0x0, r1, 0x1)

1.365851673s ago: executing program 7 (id=557):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000003100)=[{{&(0x7f00000000c0)=@ieee802154, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000340)=""/78, 0x4e}, 0x2f331ec2}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000003c0)=""/12, 0xc}, {&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f0000000180)=""/175, 0xaf}, {&(0x7f00000004c0)=""/107, 0x64}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/167, 0xa7}, {&(0x7f0000002900)=""/225, 0xe1}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x8, &(0x7f0000002840)=""/39, 0x27}, 0xa}, {{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x0, &(0x7f0000002e40)=[{&(0x7f00000002c0)=""/6}, {&(0x7f0000002d00)=""/193}, {&(0x7f0000002e00)}], 0x0, &(0x7f0000002e80)=""/225}, 0x3}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/106}], 0x0, &(0x7f0000003040)=""/191}, 0x6}], 0x4000000000000b1, 0x40000022, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.315410139s ago: executing program 2 (id=558):
r0 = inotify_init1(0x800)
r1 = inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000540)='./bus\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x24, 0x1)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MAX={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480), 0x2)
r5 = memfd_create(&(0x7f00000004c0)='%&\x00', 0x4)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000500)={r5, 0x1, 0x100000000, 0xfb583f83e8d920fe})
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955f070009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x20040842)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1.271071313s ago: executing program 1 (id=559):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write(r0, &(0x7f0000000200)='transport=rdma,nqn=nqn.2014-08.org.nvmexpress:NVMf:uuid:12345678-1234-1234-1234-123456789abc,host_traddr=127.0.0.1,traddr=127.0.0.1,trsvcid=4', 0x8d)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) (async)
syz_clone3(&(0x7f0000000100)={0xa690b000, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64)
futex(0x0, 0x6, 0x3d, 0x0, 0x0, 0x2) (async, rerun: 64)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) (async)
renameat2(r1, &(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000480)='./file3\x00', 0x2)
r2 = fsopen(&(0x7f00000002c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async)
r3 = fsmount(r2, 0x0, 0x80)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r3, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000040), &(0x7f00000000c0)=0x8)

1.262894778s ago: executing program 7 (id=560):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000022c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x5, 0x9, 0x195be}]}]}]}, 0x3c}}, 0x0)
read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2024)
setns(0xc9, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=ANY=[@ANYBLOB='K'], 0x14}, 0x1, 0x0, 0x0, 0x20804}, 0x44800)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002300)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x3}, 0x24008088)
getsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
write(r0, &(0x7f0000000200)="abf8f9", 0x3)

1.150320902s ago: executing program 2 (id=561):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8001, @loopback, 0x1}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000000c0)="ec2e5d3245d92fc82c92bde0f26a6e96430a4d", 0x13}], 0x1}}, {{&(0x7f0000000dc0)={0xa, 0x4e20, 0x2, @remote, 0x5a21}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000e00)="73d2", 0x2}], 0x1}}], 0x2, 0x40008c0)

1.148884176s ago: executing program 7 (id=562):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) (async)
mount(&(0x7f00000001c0)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x500c0, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:00.0/device\x00', 0x0, 0x0)
read(r0, &(0x7f00000002c0)=""/16, 0x10) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:00.0/vendor\x00', 0x0, 0x0)
read(r1, &(0x7f0000000340)=""/16, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r2, &(0x7f0000000140)="1b000000080011aaaaaaaaaa0100", 0xe) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x24) (async)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200013, 0xfffffffe, 0x8000, 0x525, 0x9}) (async)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_null}]})

1.067399119s ago: executing program 7 (id=563):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pS    \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x9, &(0x7f00000000c0)=@raw=[@generic={0x4, 0x7, 0x5, 0x0, 0xdac0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x0, 0x8, 0x1, 0x30, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000080)='syzkaller\x00'}, 0x94)

1.050066157s ago: executing program 2 (id=564):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000015c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001600)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001640)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000016c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001740), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000001780), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c0012802200010062078000000000000000fb80050011009bb39a595b00000014003500626f6e6f3000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000017c0)=0x6)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000013c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000001480)={0x18, r6, 0x2, 0x0, &(0x7f00000014c0)=[{0xffffffffffffedca, 0xfffffffffffffff9}, {0x7ff, 0x107e}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001500)={0x1, &(0x7f0000001540)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
syz_mount_image$ext4(&(0x7f0000001b80)='ext4\x00', &(0x7f0000001bc0)='./bus\x00', 0x80000b, &(0x7f0000001c00)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@debug}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0x10}}]}, 0x1, 0x46e, &(0x7f0000001c80)="$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")
syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x40010)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0)
recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x20000003}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001400)=""/97, 0x61}, {&(0x7f0000001580)=""/58, 0x3a}], 0x5}, 0x518}], 0x4, 0x40010000, 0x0)

1.046098416s ago: executing program 7 (id=565):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000015c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001600)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001640)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000016c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001740), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000001780), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c0012802200010062078000000000000000fb80050011009bb39a595b00000014003500626f6e6f3000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000017c0)=0x6)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000013c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000001480)={0x18, r7, 0x2, 0x0, &(0x7f00000014c0)=[{0xffffffffffffedca, 0xfffffffffffffff9}, {0x7ff, 0x107e}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001500)={0x1, &(0x7f0000001540)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
syz_mount_image$ext4(&(0x7f0000001b80)='ext4\x00', &(0x7f0000001bc0)='./bus\x00', 0x80000b, &(0x7f0000001c00)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@debug}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0x10}}]}, 0x1, 0x46e, &(0x7f0000001c80)="$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")
syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x40010)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0)
recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x20000003}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001400)=""/97, 0x61}, {&(0x7f0000001580)=""/58, 0x3a}], 0x5}, 0x518}], 0x4, 0x40010000, 0x0)

133.458555ms ago: executing program 2 (id=566):
r0 = socket$kcm(0x10, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x5e, @empty, 0x4e21, 0x1, 'wlc\x00', 0x42, 0x8, 0x3}, 0x2c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1c0)
linkat(0xffffffffffffffff, &(0x7f0000000440)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./cgroup\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000680))
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001100)={r2, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540), 0x8, &(0x7f00000008c0)={[{@redirect_dir_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000005c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x4)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f00000003c0)=0x2000027b, 0x4)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x40880}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, &(0x7f0000000080), 0x3, 0x618, &(0x7f0000000a80)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'dummy0\x00', <r5=>0x0})
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001180)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4048004)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002480)={@cgroup=r9, r9, 0x2e}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000024c0)={0x0, <r10=>0x0}, 0x0)
r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002500)=r10, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000002540)=r11, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002580)={r11, r8, 0x4, r9}, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000006c0), 0xffffffffffffffff)

27.349202ms ago: executing program 6 (id=567):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c40)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x5, 0x2, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x0, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}, 0x1a8)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000bc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x10, 0x3, 0x4, 0x6c, 0x505c], 0x0, &(0x7f0000000c80)}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034001680300001802c000c"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800)
r4 = add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000580)="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", 0x559, 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000b00)={r4}, &(0x7f00000004c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d726d6431363000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cab7cedb1a5c8e29e4c91e741aac379bab4dfa1bfea4a3168d9e8f7198fba66db0ae96a4daff7c3eea886353f7050d867aa9bce4f7cd6e9025e6e3cb3fe0e3a8694cf81187d4337cd71b64f1da9e89fd47b311eab328c264b67bc658b9218cf1b3358e46de3c32e562"], 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

3.034841ms ago: executing program 7 (id=568):
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000980)=""/4096, &(0x7f0000001980)=0x1000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7, 0x0, 0xfffffffb}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa, 0x1f}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180), 0x1, 0x5a8, &(0x7f0000000280)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x14b442, 0x82)
fchown(r1, 0xee01, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0)
lseek(r2, 0x80800000000000b1, 0x3)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000080)={0x1})

2.747778ms ago: executing program 1 (id=569):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4f20, @empty}, 0x10)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000180)={0x1, 0x2, 0x1, 0x8})
ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000001c0)={0x37, 0x0})
rt_sigprocmask(0x2, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x0, 0x8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000000)={0x3, 0x2, 0x3f57, 0x6})
rt_sigtimedwait(&(0x7f0000000080)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8)

0s ago: executing program 6 (id=570):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002a00)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x108, 0x0, 0x108, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x2, 0x6, 0x3, 0x0, 0x6], 0x3, 0x2}, {0x3, [0x3, 0x2, 0x2, 0x4, 0x4], 0x6, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x108}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x2f8)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000002880)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8)
r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140)={0xc, "693002"}, 0x6)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000540)=0x5a6, 0x4)
bind$inet(r3, &(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000001600), 0x800001d, 0x300)
setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000001640)=0x5, 0x4)
setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000001680)=0x2a5, 0x54)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003200)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x9f, 0x4e23, 0x1000, 0xa, 0xa0, 0x20, 0x33}, {0xf4, 0x6, 0xe042, 0x2, 0x4, 0x9, 0x8, 0x5}, {0x3b, 0x3, 0x1, 0x821}, 0xfffffffd, 0x6e6bc0, 0x3, 0x1, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4d2, 0x3c}, 0x2, @in=@private=0xa010102, 0x3504, 0x4, 0x1, 0x3, 0xe85, 0x81, 0xa}}, 0xe8)
recvmmsg(r3, &(0x7f0000003300), 0x291962b, 0x45833af92e4b39ff, 0x0)
recvmmsg(r0, &(0x7f0000003100)=[{{&(0x7f00000000c0)=@ieee802154, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000340)=""/78, 0x4e}, 0x2f331ec2}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000003c0)=""/12, 0xc}, {&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f0000000180)=""/175, 0xaf}, {&(0x7f00000004c0)=""/107, 0x64}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/167, 0xa7}, {&(0x7f0000002900)=""/225, 0xe1}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x8, &(0x7f0000002840)=""/39, 0x27}, 0xa}, {{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x0, &(0x7f0000002e40)=[{&(0x7f00000002c0)=""/6}, {&(0x7f0000002d00)=""/193}, {&(0x7f0000002e00)}], 0x0, &(0x7f0000002e80)=""/225}, 0x3}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/106}], 0x0, &(0x7f0000003040)=""/191}, 0x6}], 0x4000000000000b1, 0x40000022, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)

kernel console output (not intermixed with test programs):

to invalid handle, 1
[   35.114757][ T5111] binder: 5110:5111 cannot find target node
[   35.114769][ T5111] binder: 5110:5111 transaction call to 0:0 failed 8/29201/-22, code 0 size 112-4280 line 3253
[   35.116736][ T4720] binder: undelivered TRANSACTION_ERROR: 29201
[   35.131364][ T5113] netlink: 27 bytes leftover after parsing attributes in process `syz.2.56'.
[   35.137730][ T4724] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   35.229580][ T5130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.230179][ T5130] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.61: corrupted xattr block 33: bad e_name length
[   35.239251][ T5130] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.61: corrupted xattr block 33: bad e_name length
[   35.245511][ T5130] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.61: corrupted xattr block 33: bad e_name length
[   35.253104][ T5130] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2933: inode #15: comm syz.2.61: corrupted xattr block 33: bad e_name length
[   35.253888][ T5130] EXT4-fs warning (device loop2): ext4_evict_inode:288: xattr delete (err -117)
[   35.293300][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.306100][ T4724] Bluetooth: hci2: command tx timeout
[   35.306129][ T4724] Bluetooth: hci3: command tx timeout
[   35.306138][ T4722] Bluetooth: hci1: command tx timeout
[   35.306146][ T4724] Bluetooth: hci4: command tx timeout
[   35.306221][ T4709] Bluetooth: hci0: command tx timeout
[   35.442553][ T5153] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[   35.459414][ T4720] hid-generic 0006:046D:FFFFFFFB.0001: hidraw0: VIRTUAL HID v0.01 Device [syz1] on syz0
[   35.515328][ T5155] fido_id[5155]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   35.621746][ T5165] netlink: 104 bytes leftover after parsing attributes in process `syz.2.66'.
[   35.662488][ T5169] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.68: Unimplemented hash flags: 0x0001
[   35.662509][ T5169] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.68: Corrupt directory, running e2fsck is recommended
[   35.662887][ T5169] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   35.662989][ T5169] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.68: corrupted in-inode xattr: invalid ea_ino
[   35.663139][ T5169] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.68: couldn't read orphan inode 15 (err -117)
[   35.663653][ T5169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.710993][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.793917][ T5180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[   35.873852][ T5186] process 'syz.2.73' launched './file1' with NULL argv: empty string added
[   35.886672][ T5188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'.
[   35.886693][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'.
[   35.890275][ T1309] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   35.905718][ T1195] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   35.906481][ T1309] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   35.906505][ T1309] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   35.925505][ T5193] si4713 0-0063: IRQ not configured. Using timeouts.
[   35.925570][ T5193] si4713 0-0063: Error while sending command 0x01
[   35.925577][ T5193] si4713 0-0063: Failed to probe device information.
[   35.932617][ T5193] si4713 0-0063: probe with driver si4713 failed with error -5
[   35.932900][ T5193] i2c i2c-0: new_device: Instantiated device si4713 at 0x63
[   35.944391][ T5195] FAULT_INJECTION: forcing a failure.
[   35.944391][ T5195] name failslab, interval 1, probability 0, space 0, times 0
[   35.944408][ T5195] CPU: 1 UID: 0 PID: 5195 Comm: syz.1.76 Not tainted syzkaller #0 PREEMPT 
[   35.944418][ T5195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   35.944423][ T5195] Call trace:
[   35.944426][ T5195]  show_stack+0x2c/0x3c (C)
[   35.944447][ T5195]  __dump_stack+0x30/0x40
[   35.944459][ T5195]  dump_stack_lvl+0xd8/0x12c
[   35.944470][ T5195]  dump_stack+0x1c/0x28
[   35.944482][ T5195]  should_fail_ex+0x418/0x58c
[   35.944490][ T5195]  should_failslab+0xc4/0x120
[   35.944499][ T5195]  __kmalloc_cache_noprof+0x94/0x5fc
[   35.944509][ T5195]  cuse_channel_open+0x70/0x6c0
[   35.944519][ T5195]  misc_open+0x2dc/0x338
[   35.944527][ T5195]  chrdev_open+0x398/0x3e8
[   35.944539][ T5195]  do_dentry_open+0x5c4/0xfbc
[   35.944550][ T5195]  vfs_open+0x44/0x2dc
[   35.944561][ T5195]  path_openat+0x1084/0x18f0
[   35.944572][ T5195]  do_file_open+0x1c8/0x2e8
[   35.944582][ T5195]  do_sys_openat2+0x114/0x1e8
[   35.944594][ T5195]  do_sys_open+0xb0/0xe0
[   35.944605][ T5195]  __arm64_sys_openat+0xa8/0xc4
[   35.944616][ T5195]  invoke_syscall+0x98/0x244
[   35.944628][ T5195]  el0_svc_common+0xec/0x23c
[   35.944640][ T5195]  do_el0_svc+0x4c/0x5c
[   35.944651][ T5195]  el0_svc+0x60/0x1d8
[   35.944660][ T5195]  el0t_64_sync_handler+0x44/0x104
[   35.944668][ T5195]  el0t_64_sync+0x198/0x19c
[   36.128786][ T5221] set_capacity_and_notify: 10 callbacks suppressed
[   36.128802][ T5221] loop1: detected capacity change from 0 to 128
[   36.131021][ T5221] FAT-fs (loop1): bogus number of reserved sectors
[   36.131037][ T5221] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors)
[   36.131047][ T5221] FAT-fs (loop1): Can't find a valid FAT filesystem
[   36.161454][ T5223] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0]
[   36.161468][ T5223] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[   36.161475][ T5223] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[   36.161480][ T5223] One or more global auth toks could not properly register; rc = [-22]
[   36.161494][ T5223] Error validating options; rc = [-22]
[   36.163393][ T5223] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0]
[   36.163402][ T5223] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[   36.163408][ T5223] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[   36.163413][ T5223] One or more global auth toks could not properly register; rc = [-22]
[   36.163423][ T5223] Error validating options; rc = [-22]
[   36.227414][ T5229] pimreg3: entered allmulticast mode
[   36.251740][ T5237] loop1: detected capacity change from 0 to 256
[   36.252200][ T5237] vfat: Unknown parameter 'iocèarset'
[   36.304083][ T5240] netlink: 'syz.4.87': attribute type 4 has an invalid length.
[   36.368756][ T5254] overlay: filesystem on ./file0 not supported as upperdir
[   36.369662][ T5251] loop0: detected capacity change from 0 to 128
[   36.373975][ T5251] FAT-fs (loop0): bogus number of reserved sectors
[   36.374004][ T5251] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   36.374021][ T5251] FAT-fs (loop0): Can't find a valid FAT filesystem
[   36.398061][ T5253] loop1: detected capacity change from 0 to 256
[   36.457803][ T5264] fuse: Bad value for 'fd'
[   36.502345][ T5275] 9p: Bad value for 'rfdno'
[   36.519564][ T5279] loop1: detected capacity change from 0 to 512
[   36.521609][ T5279] EXT4-fs: Ignoring removed oldalloc option
[   36.523357][ T5279] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   36.523373][ T5279] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   36.523382][ T5279] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   36.532723][ T5279] EXT4-fs (loop1): 1 truncate cleaned up
[   36.533192][ T5279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.544980][ T5261] overlayfs: statfs failed on './file0'
[   36.561011][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.569601][ T5286] vxcan0: tx address claim with dlc 0
[   36.600889][ T5294] loop0: detected capacity change from 0 to 512
[   36.603003][ T5294] EXT4-fs (loop0): unsupported inode size: 3456
[   36.603047][ T5294] EXT4-fs (loop0): blocksize: 4096
[   36.619653][ T5289] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   36.619954][ T5291] Illegal XDP return value 2234621919 on prog  (id 9) dev syz_tun, expect packet loss!
[   36.869777][ T5320] Cannot find add_set index 0 as target
[   36.870519][ T5320] loop2: detected capacity change from 0 to 8
[   36.870878][ T5320] squashfs: Unknown parameter '00000000000000000000000'
[   36.913201][ T4709] Bluetooth: hci2: unexpected cc 0x041a length: 8 > 7
[   36.914305][ T5324] loop0: detected capacity change from 0 to 128
[   37.376350][ T4715] Bluetooth: hci0: command tx timeout
[   37.376378][ T4715] Bluetooth: hci4: command tx timeout
[   37.376396][ T4715] Bluetooth: hci3: command tx timeout
[   37.376434][ T4709] Bluetooth: hci1: command tx timeout
[   37.418034][ T5330] xt_ecn: cannot match TCP bits for non-tcp packets
[   37.443075][ T5335] loop3: detected capacity change from 0 to 4096
[   37.448973][ T5335] EXT4-fs: Ignoring removed orlov option
[   37.480113][ T5335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.513350][ T5342] rxe_eth0 speed is unknown, defaulting to 1000
[   37.558791][ T5347] gtp0: entered allmulticast mode
[   37.609661][ T5354] netlink: 'syz.4.118': attribute type 3 has an invalid length.
[   37.652939][ T5337] infiniband syz2: set active
[   37.652954][ T5337] infiniband syz2: added bond_slave_0
[   37.663045][ T5337] RDS/IB: syz2: added
[   37.663069][ T5337] smc: adding ib device syz2 with port count 1
[   37.663080][ T5337] smc:    ib device syz2 port 1 has no pnetid
[   37.842158][ T5351] binder: 5339:5351 tried to acquire reference to desc 0, got 1 instead
[   37.882307][ T5351] binder: 5339:5351 ioctl c0306201 200002c0 returned -14
[   37.912962][ T5367] loop0: detected capacity change from 0 to 512
[   38.000746][ T5367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.031799][ T5375] EXT4-fs: Ignoring removed bh option
[   38.031823][ T5375] EXT4-fs: Ignoring removed mblk_io_submit option
[   38.045000][ T5375] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   38.048400][ T5375] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   38.048506][ T5375] EXT4-fs (loop1): orphan cleanup on readonly fs
[   38.049785][ T5375] __quota_error: 1 callbacks suppressed
[   38.049795][ T5375] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4
[   38.049821][ T5375] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[   38.049849][ T5375] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.122: Failed to acquire dquot type 1
[   38.049859][ T5375] fserror_report: 5 callbacks suppressed
[   38.049863][ T5375] loop1: lost filesystem error report for type 5 error -5
[   38.051659][ T5375] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.122: Invalid block bitmap block 0 in block_group 0
[   38.051677][ T5375] loop1: lost filesystem error report for type 5 error -117
[   38.055645][    C0] EXT4-fs (loop1): error count since last fsck: 2
[   38.055662][    C0] EXT4-fs (loop1): last error at time 38: ext4_read_block_bitmap_nowait:487
[   38.064314][ T5375] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.122: Invalid block bitmap block 0 in block_group 0
[   38.064332][ T5375] loop1: lost filesystem error report for type 5 error -117
[   38.067808][ T5375] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.122: Invalid block bitmap block 0 in block_group 0
[   38.067830][ T5375] loop1: lost filesystem error report for type 5 error -117
[   38.087860][ T5375] Quota error (device loop1): write_blk: dquota write failed
[   38.087899][ T5375] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[   38.087914][ T5375] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.122: Failed to acquire dquot type 1
[   38.087945][ T5375] loop1: lost filesystem error report for type 5 error -28
[   38.089489][ T5375] Quota error (device loop1): write_blk: dquota write failed
[   38.089527][ T5375] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[   38.089541][ T5375] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.122: Failed to acquire dquot type 1
[   38.089550][ T5375] loop1: lost filesystem error report for type 5 error -28
[   38.103244][ T5375] EXT4-fs (loop1): 1 orphan inode deleted
[   38.119078][ T5375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   38.218791][ T5386] input: syz1 as /devices/virtual/input/input2
[   38.273168][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.294826][ T5385] Injecting memory failure for pfn 0x135fc1 at process virtual address 0x20000000
[   38.301879][ T5385] Memory failure: 0x135fc1: Sending SIGBUS to syz.4.123:5385 due to hardware memory corruption
[   38.302021][ T5385] Memory failure: 0x135fc1: recovery action for dirty LRU page: Recovered
[   38.302045][ T5385] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20001000
[   38.302077][ T5385] Memory failure: 0x216bf1: unhandlable page.
[   38.302084][ T5385] Memory failure: 0x216bf1: recovery action for reserved kernel page: Ignored
[   38.317504][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.392156][ T4711] EXT4-fs error (device loop3): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extra_isize 2336 (inode size 256)
[   38.394193][ T4711] EXT4-fs error (device loop3): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extra_isize 2336 (inode size 256)
[   38.406640][ T5390] vfat: Unknown parameter 'utõÖ×<Bå
-xEwf8'
[   38.537450][ T5405] vfat: Unknown parameter 'gidJ0x0000000000000000'
[   38.732563][ T5401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   38.760261][ T5401] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.129: bg 0: block 112: padding at end of block bitmap is not set
[   38.794376][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   38.823624][ T5414] __nla_validate_parse: 9 callbacks suppressed
[   38.823640][ T5414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'.
[   38.918051][ T5424] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   38.942754][ T5430] 8021q: VLANs not supported on ip_vti0
[   38.954639][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.988321][   T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.045177][   T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.063724][ T5431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'.
[   39.063818][ T5431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.136'.
[   39.087634][ T5446] 9p: Bad value for 'rfdno'
[   39.088311][ T5446] netlink: 17 bytes leftover after parsing attributes in process `syz.2.143'.
[   39.105439][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   39.108431][ T5446] netlink: 17 bytes leftover after parsing attributes in process `syz.2.143'.
[   39.108562][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   39.108974][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   39.109287][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   39.109741][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   39.123077][   T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.139190][ T5453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'.
[   39.190147][ T5459] EXT4-fs: Ignoring removed oldalloc option
[   39.191667][ T5459] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   39.191686][ T5459] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   39.209743][ T5459] EXT4-fs (loop1): 1 orphan inode deleted
[   39.209760][ T5459] EXT4-fs (loop1): 1 truncate cleaned up
[   39.210207][ T5459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.226420][ T5459] EXT4-fs error (device loop1): empty_inline_dir:1796: inode #12: block 7: comm syz.1.146: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0
[   39.239076][ T5459] EXT4-fs (loop1): Remounting filesystem read-only
[   39.239099][ T5459] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60
[   39.253420][ T5463] netlink: 14 bytes leftover after parsing attributes in process `syz.4.145'.
[   39.270601][ T5459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.146'.
[   39.293680][   T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.302412][ T5459] tipc: Started in network mode
[   39.302433][ T5459] tipc: Node identity ac1414aa, cluster identity 4711
[   39.303203][ T5459] tipc: New replicast peer: 172.20.20.187
[   39.303593][ T5459] tipc: Enabled bearer <udp:syz0>, priority 10
[   39.320246][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.385406][ T5447] rxe_eth0 speed is unknown, defaulting to 1000
[   39.486192][ T5487] Bluetooth: MGMT ver 1.23
[   39.486226][ T5487] Bluetooth: hci0: unsupported parameter 5161
[   39.486234][ T5487] Bluetooth: hci0: unsupported parameter 8192
[   39.486240][ T5487] Bluetooth: hci0: unsupported parameter 5161
[   39.486246][ T5487] Bluetooth: hci0: unsupported parameter 8192
[   39.827748][ T5447] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.827825][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.828035][ T5447] bridge_slave_0: entered allmulticast mode
[   39.830262][ T5447] bridge_slave_0: entered promiscuous mode
[   39.839299][ T5447] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.839678][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.839739][ T5447] bridge_slave_1: entered allmulticast mode
[   39.841461][ T5447] bridge_slave_1: entered promiscuous mode
[   39.868662][ T5447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.872592][ T5447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.897472][ T5447] team0: Port device team_slave_0 added
[   39.899592][ T5447] team0: Port device team_slave_1 added
[   39.922084][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1
[   39.928342][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.928893][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.928929][ T5447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.931201][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.931214][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.931229][ T5447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.979095][ T5447] hsr_slave_0: entered promiscuous mode
[   39.979429][ T5447] hsr_slave_1: entered promiscuous mode
[   39.981499][ T5447] debugfs: 'hsr0' already exists in 'hsr'
[   39.981513][ T5447] Cannot create hsr debugfs directory
[   40.115479][ T5447] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   40.161066][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   40.161490][ T5447] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   40.163023][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   40.163315][ T5447] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   40.164654][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   40.165365][ T5447] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   40.209049][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   40.210599][   T58] bridge_slave_1: left allmulticast mode
[   40.210618][   T58] bridge_slave_1: left promiscuous mode
[   40.211021][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.213204][   T58] bridge_slave_0: left allmulticast mode
[   40.213218][   T58] bridge_slave_0: left promiscuous mode
[   40.213284][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.362770][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   40.362937][ T5542] FAULT_INJECTION: forcing a failure.
[   40.362937][ T5542] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   40.362957][ T5542] CPU: 0 UID: 0 PID: 5542 Comm: syz.0.150 Not tainted syzkaller #0 PREEMPT 
[   40.362970][ T5542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   40.362975][ T5542] Call trace:
[   40.362978][ T5542]  show_stack+0x2c/0x3c (C)
[   40.362996][ T5542]  __dump_stack+0x30/0x40
[   40.363006][ T5542]  dump_stack_lvl+0xd8/0x12c
[   40.363016][ T5542]  dump_stack+0x1c/0x28
[   40.363025][ T5542]  should_fail_ex+0x418/0x58c
[   40.363033][ T5542]  should_fail+0x14/0x24
[   40.363040][ T5542]  should_fail_usercopy+0x20/0x30
[   40.363047][ T5542]  put_timespec64+0xc8/0x208
[   40.363057][ T5542]  __arm64_sys_clock_gettime+0x1f0/0x260
[   40.363065][ T5542]  invoke_syscall+0x98/0x244
[   40.363076][ T5542]  el0_svc_common+0xec/0x23c
[   40.363085][ T5542]  do_el0_svc+0x4c/0x5c
[   40.363094][ T5542]  el0_svc+0x60/0x1d8
[   40.363102][ T5542]  el0t_64_sync_handler+0x44/0x104
[   40.363109][ T5542]  el0t_64_sync+0x198/0x19c
[   40.390327][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   40.426653][   T58] bond0 (unregistering): Released all slaves
[   40.431336][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3
[   40.431495][ T5547] syz_tun: entered allmulticast mode
[   40.433980][ T4807] tipc: Node number set to 2886997162
[   40.437817][   T10] rxe_eth0 speed is unknown, defaulting to 1000
[   40.443805][ T5534] syz_tun: left allmulticast mode
[   40.477384][ T5447] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.491381][ T5447] 8021q: adding VLAN 0 to HW filter on device team0
[   40.509075][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.509109][ T1195] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.518789][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.518816][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.613797][ T5579] syzkaller0: entered promiscuous mode
[   40.613814][ T5579] syzkaller0: entered allmulticast mode
[   40.742724][ T5589] fuse: root generation should be zero
[   40.775284][ T5604] netlink: 'syz.1.159': attribute type 1 has an invalid length.
[   40.777167][ T5603] netlink: 'syz.1.159': attribute type 1 has an invalid length.
[   41.049551][ T5603] 8021q: adding VLAN 0 to HW filter on device bond1
[   41.145946][ T4709] Bluetooth: hci3: command tx timeout
[   41.165382][ T5623] netlink: 52 bytes leftover after parsing attributes in process `syz.1.162'.
[   41.197740][ T5623] mmap: syz.1.162 (5623) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   41.237509][ T5632] netlink: 'syz.0.163': attribute type 16 has an invalid length.
[   41.237526][ T5632] netlink: 'syz.0.163': attribute type 17 has an invalid length.
[   41.263576][ T5447] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.342515][ T5632] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[   41.361566][ T5651] fuse: Bad value for 'fd'
[   41.364000][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.367183][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.394621][   T58] hsr_slave_0: left promiscuous mode
[   41.398856][   T58] hsr_slave_1: left promiscuous mode
[   41.401059][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   41.401080][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[   41.401621][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   41.401632][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[   41.416645][   T58] veth1_macvtap: left promiscuous mode
[   41.416685][   T58] veth0_macvtap: left promiscuous mode
[   41.416732][   T58] veth1_vlan: left promiscuous mode
[   41.416778][   T58] veth0_vlan: left promiscuous mode
[   41.528657][   T58] team0 (unregistering): Port device team_slave_1 removed
[   41.532387][   T58] team0 (unregistering): Port device team_slave_0 removed
[   41.599159][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0
[   41.667157][ T5678] set_capacity_and_notify: 8 callbacks suppressed
[   41.667170][ T5678] loop1: detected capacity change from 0 to 2048
[   41.702721][ T5678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.703347][ T5447] veth0_vlan: entered promiscuous mode
[   41.705311][ T5447] veth1_vlan: entered promiscuous mode
[   41.729060][ T5447] veth0_macvtap: entered promiscuous mode
[   41.730496][ T5447] veth1_macvtap: entered promiscuous mode
[   41.734325][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.737568][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.793642][ T5693] loop0: detected capacity change from 0 to 8192
[   41.801865][ T5693] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   41.826540][ T1195] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.826739][ T1195] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.826864][ T1195] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.826897][ T1195] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.849808][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.849816][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.869846][ T5693] trusted_key: encrypted_key: insufficient parameters specified
[   41.870756][ T5693] Could not find key with description: [syz]
[   41.870764][ T5693] process_request_key_err: No key
[   41.870769][ T5693] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[   41.870774][ T5693] One or more global auth toks could not properly register; rc = [-2]
[   41.870786][ T5693] Error validating options; rc = [-2]
[   41.903630][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.903647][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.947463][ T5678] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   41.976867][ T5709] syz.0.175 (5709): attempted to duplicate a private mapping with mremap.  This is not supported.
[   42.051694][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.072480][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'.
[   42.117588][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2
[   42.131786][ T5722] FAULT_INJECTION: forcing a failure.
[   42.131786][ T5722] name failslab, interval 1, probability 0, space 0, times 0
[   42.131802][ T5722] CPU: 0 UID: 0 PID: 5722 Comm: syz.5.140 Not tainted syzkaller #0 PREEMPT 
[   42.131812][ T5722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   42.131817][ T5722] Call trace:
[   42.131820][ T5722]  show_stack+0x2c/0x3c (C)
[   42.131837][ T5722]  __dump_stack+0x30/0x40
[   42.131847][ T5722]  dump_stack_lvl+0xd8/0x12c
[   42.131857][ T5722]  dump_stack+0x1c/0x28
[   42.131866][ T5722]  should_fail_ex+0x418/0x58c
[   42.131874][ T5722]  should_failslab+0xc4/0x120
[   42.131882][ T5722]  kmem_cache_alloc_noprof+0x94/0x5d4
[   42.131890][ T5722]  dup_fd+0x68/0x848
[   42.131898][ T5722]  __arm64_sys_close_range+0x194/0x808
[   42.131906][ T5722]  invoke_syscall+0x98/0x244
[   42.131916][ T5722]  el0_svc_common+0xec/0x23c
[   42.131933][ T5722]  do_el0_svc+0x4c/0x5c
[   42.131942][ T5722]  el0_svc+0x60/0x1d8
[   42.131951][ T5722]  el0t_64_sync_handler+0x44/0x104
[   42.131958][ T5722]  el0t_64_sync+0x198/0x19c
[   42.203472][ T5729] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   42.203491][ T5729] overlayfs: failed to set xattr on upper
[   42.203497][ T5729] overlayfs: ...falling back to redirect_dir=nofollow.
[   42.203502][ T5729] overlayfs: ...falling back to uuid=null.
[   42.203828][ T5729] overlay: filesystem on ./bus not supported as upperdir
[   42.212990][ T5729] overlay: filesystem on ./bus not supported as upperdir
[   42.218388][ T5722] loop5: detected capacity change from 0 to 8
[   42.220329][ T5722] squashfs: Unknown parameter '0x0000000000000004'
[   42.228205][ T5731] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers
[   42.228311][ T5731] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers
[   42.228374][ T5731] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers
[   42.228422][ T5731] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers
[   42.228469][ T5731] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers
[   42.228514][ T5731] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers
[   42.228570][ T5731] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers
[   42.228613][ T5731] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers
[   42.228656][ T5731] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers
[   42.228699][ T5731] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers
[   42.249574][ T5722] FAULT_INJECTION: forcing a failure.
[   42.249574][ T5722] name failslab, interval 1, probability 0, space 0, times 0
[   42.249592][ T5722] CPU: 0 UID: 0 PID: 5722 Comm: syz.5.140 Not tainted syzkaller #0 PREEMPT 
[   42.249605][ T5722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   42.249611][ T5722] Call trace:
[   42.249614][ T5722]  show_stack+0x2c/0x3c (C)
[   42.249636][ T5722]  __dump_stack+0x30/0x40
[   42.249647][ T5722]  dump_stack_lvl+0xd8/0x12c
[   42.249657][ T5722]  dump_stack+0x1c/0x28
[   42.249666][ T5722]  should_fail_ex+0x418/0x58c
[   42.249674][ T5722]  should_failslab+0xc4/0x120
[   42.249682][ T5722]  kmem_cache_alloc_noprof+0x94/0x5d4
[   42.249691][ T5722]  do_getname+0x48/0x234
[   42.249698][ T5722]  getname_flags+0x2c/0x3c
[   42.249706][ T5722]  do_sys_openat2+0xd0/0x1e8
[   42.249716][ T5722]  do_sys_open+0xb0/0xe0
[   42.249725][ T5722]  __arm64_sys_openat+0xa8/0xc4
[   42.249735][ T5722]  invoke_syscall+0x98/0x244
[   42.249745][ T5722]  el0_svc_common+0xec/0x23c
[   42.249754][ T5722]  do_el0_svc+0x4c/0x5c
[   42.249763][ T5722]  el0_svc+0x60/0x1d8
[   42.249772][ T5722]  el0t_64_sync_handler+0x44/0x104
[   42.249779][ T5722]  el0t_64_sync+0x198/0x19c
[   42.265664][ T5742] loop5: detected capacity change from 0 to 8
[   42.430446][ T5755] vhci_hcd vhci_hcd.0: failed to lookup sock
[   42.431128][ T5755] FAULT_INJECTION: forcing a failure.
[   42.431128][ T5755] name failslab, interval 1, probability 0, space 0, times 0
[   42.431142][ T5755] CPU: 1 UID: 0 PID: 5755 Comm: syz.0.180 Not tainted syzkaller #0 PREEMPT 
[   42.431153][ T5755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   42.431158][ T5755] Call trace:
[   42.431161][ T5755]  show_stack+0x2c/0x3c (C)
[   42.431182][ T5755]  __dump_stack+0x30/0x40
[   42.431194][ T5755]  dump_stack_lvl+0xd8/0x12c
[   42.431205][ T5755]  dump_stack+0x1c/0x28
[   42.431216][ T5755]  should_fail_ex+0x418/0x58c
[   42.431225][ T5755]  should_failslab+0xc4/0x120
[   42.431234][ T5755]  kmem_cache_alloc_lru_noprof+0x98/0x5d8
[   42.431243][ T5755]  sock_alloc_inode+0x30/0x180
[   42.431252][ T5755]  alloc_inode+0x68/0x198
[   42.431264][ T5755]  sock_alloc+0x4c/0x204
[   42.431274][ T5755]  __sock_create+0x108/0x670
[   42.431284][ T5755]  __sys_socket_create+0xc0/0x11c
[   42.431294][ T5755]  __sys_socket+0x44/0xec
[   42.431305][ T5755]  __arm64_sys_socket+0x84/0x9c
[   42.431315][ T5755]  invoke_syscall+0x98/0x244
[   42.431328][ T5755]  el0_svc_common+0xec/0x23c
[   42.431339][ T5755]  do_el0_svc+0x4c/0x5c
[   42.431350][ T5755]  el0_svc+0x60/0x1d8
[   42.431359][ T5755]  el0t_64_sync_handler+0x44/0x104
[   42.431367][ T5755]  el0t_64_sync+0x198/0x19c
[   42.431379][ T5755] socket: no more sockets
[   42.434229][ T5753] loop5: detected capacity change from 0 to 8192
[   42.495529][ T5755] bridge_slave_0: left allmulticast mode
[   42.495552][ T5755] bridge_slave_0: left promiscuous mode
[   42.495760][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.502486][ T5755] bridge_slave_1: left allmulticast mode
[   42.502503][ T5755] bridge_slave_1: left promiscuous mode
[   42.502570][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.508922][ T5755] bond0: (slave bond_slave_0): Releasing backup interface
[   42.530594][ T5755] bond0: (slave bond_slave_1): Releasing backup interface
[   42.558802][ T5755] team0: Failed to send options change via netlink (err -105)
[   42.558869][ T5755] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   42.558999][ T5755] team0: Port device team_slave_0 removed
[   42.560430][ T5755] team0: Failed to send options change via netlink (err -105)
[   42.560479][ T5755] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   42.560586][ T5755] team0: Port device team_slave_1 removed
[   42.560886][ T5755] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.560897][ T5755] batman_adv: batadv0: Removing interface: batadv_slave_0
[   42.561670][ T5755] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.561681][ T5755] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.562330][ T5755] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   42.601174][ T5764] No control pipe specified
[   42.965702][ T5781] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   42.966883][ T5781] bond1 (unregistering): Released all slaves
[   43.215858][ T4709] Bluetooth: hci3: command tx timeout
[   45.297703][ T4709] Bluetooth: hci3: command tx timeout
[   47.375728][ T4709] Bluetooth: hci3: command tx timeout
[   48.725337][ T5788] loop0: detected capacity change from 0 to 256
[   48.735431][ T5790] fuse: Bad value for 'fd'
[   48.818967][ T5818] loop1: detected capacity change from 0 to 4096
[   48.819370][ T5818] EXT4-fs: Ignoring removed orlov option
[   48.848654][ T5820] loop5: detected capacity change from 0 to 512
[   48.861762][ T5818] EXT4-fs (loop1): Test dummy encryption mode enabled
[   48.874057][ T5818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.885174][ T5820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.887556][ T5818] fscrypt: AES-256-XTS using blk-crypto-fallback
[   48.889584][ T5827] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   49.041965][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.128420][ T5846] __nla_validate_parse: 4 callbacks suppressed
[   49.128436][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'.
[   49.389209][ T5869] scsi_nl_rcv_msg: discarding partial message
[   49.724928][ T5447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.736547][ T5875] vlan2: entered allmulticast mode
[   49.736563][ T5875] bond0: entered allmulticast mode
[   49.736572][ T5875] bond_slave_0: entered allmulticast mode
[   49.736584][ T5875] bond_slave_1: entered allmulticast mode
[   49.764643][ T5881] loop2: detected capacity change from 0 to 512
[   49.775271][ T5881] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.210: bad orphan inode 17
[   49.775301][ T5881] loop2: lost filesystem error report for type 5 error -117
[   49.775412][ T5881] ext4_test_bit(bit=16, block=4) = 1
[   49.775436][ T5881] is_bad_inode(inode)=0
[   49.775441][ T5881] NEXT_ORPHAN(inode)=0
[   49.775445][ T5881] max_ino=32
[   49.775449][ T5881] i_nlink=1
[   49.776083][ T5881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.792202][ T5884] loop0: detected capacity change from 0 to 8
[   49.793769][ T5885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.208'.
[   49.804241][ T5885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.208'.
[   49.808231][ T5880] loop5: detected capacity change from 0 to 512
[   49.825916][ T5880] EXT4-fs error (device loop5) in ext4_process_orphan:346: Corrupt filesystem
[   49.825945][ T5880] loop5: lost filesystem error report for type 5 error -117
[   49.835649][    C0] EXT4-fs (loop5): error count since last fsck: 1
[   49.835670][    C0] EXT4-fs (loop5): initial error at time 49: ext4_process_orphan:346
[   49.835684][    C0] EXT4-fs (loop5): last error at time 49: ext4_process_orphan:346
[   49.850674][ T5880] EXT4-fs (loop5): Remounting filesystem read-only
[   49.850864][ T5880] EXT4-fs (loop5): 2 truncates cleaned up
[   49.851322][ T5880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.919267][ T5447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.963568][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.999486][ T5895] syz.5.213 uses obsolete (PF_INET,SOCK_PACKET)
[   50.009345][ T4720] hid (null): unknown global tag 0xd
[   50.010089][ T4720] hid-generic 0009:000F:0001.0002: unknown global tag 0xd
[   50.010098][ T4720] hid-generic 0009:000F:0001.0002: item 0 1 1 13 parsing failed
[   50.010219][ T4720] hid-generic 0009:000F:0001.0002: probe with driver hid-generic failed with error -22
[   50.024795][ T5899] loop2: detected capacity change from 0 to 2048
[   50.050565][ T5899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.052023][ T5899] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.261985][ T5940] nvme_fcloop: unknown parameter or missing value 'lpwwnn'
[   51.147348][ T5958] X.509: Couldn't decode AuthKeyIdentifier
[   51.159225][ T5931] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   51.159243][ T5931] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   51.455482][ T5971] FAULT_INJECTION: forcing a failure.
[   51.455482][ T5971] name failslab, interval 1, probability 0, space 0, times 0
[   51.455501][ T5971] CPU: 1 UID: 0 PID: 5971 Comm: syz.2.226 Not tainted syzkaller #0 PREEMPT 
[   51.455511][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   51.455517][ T5971] Call trace:
[   51.455520][ T5971]  show_stack+0x2c/0x3c (C)
[   51.455541][ T5971]  __dump_stack+0x30/0x40
[   51.455553][ T5971]  dump_stack_lvl+0xd8/0x12c
[   51.455564][ T5971]  dump_stack+0x1c/0x28
[   51.455576][ T5971]  should_fail_ex+0x418/0x58c
[   51.455585][ T5971]  should_failslab+0xc4/0x120
[   51.455597][ T5971]  __kmalloc_cache_noprof+0x94/0x5fc
[   51.455608][ T5971]  __arm64_sys_memfd_create+0x258/0x3ec
[   51.455620][ T5971]  invoke_syscall+0x98/0x244
[   51.455632][ T5971]  el0_svc_common+0xec/0x23c
[   51.455644][ T5971]  do_el0_svc+0x4c/0x5c
[   51.455655][ T5971]  el0_svc+0x60/0x1d8
[   51.455663][ T5971]  el0t_64_sync_handler+0x44/0x104
[   51.455672][ T5971]  el0t_64_sync+0x198/0x19c
[   51.460727][   T30] audit: type=1400 audit(51.430:3): lsm=SMACK fn=smack_inode_link action=denied subject="_" object="lowerdir" requested=w pid=5959 comm="syz.1.222" name="file1" dev="tmpfs" ino=275
[   51.483203][ T5931] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   51.483226][ T5931] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   51.522793][ T5982] loop5: detected capacity change from 0 to 1024
[   51.529808][ T5982] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   51.537704][ T5985] trusted_key: encrypted_key: insufficient parameters specified
[   51.539800][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'.
[   51.542770][ T5982] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[   51.561639][ T5984] gre1: entered promiscuous mode
[   51.595947][ T5984] loop1: detected capacity change from 0 to 256
[   51.613144][ T5984] FAT-fs (loop1): bogus sectors per cluster 255
[   51.613169][ T5984] FAT-fs (loop1): Can't find a valid FAT filesystem
[   51.640142][ T5931] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   51.640160][ T5931] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[   51.971850][ T5984] loop1: detected capacity change from 0 to 2048
[   51.999612][ T5931] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   51.999629][ T5931] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   52.005086][ T5984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   52.030662][ T6001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.231'.
[   52.060737][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[   52.126854][ T6017] erspan0: entered promiscuous mode
[   52.303296][ T6052] netlink: 'syz.4.243': attribute type 2 has an invalid length.
[   52.304479][ T6049] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   52.304535][ T6049] System zones: 1-12
[   52.305071][ T6049] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.244: missing EA_INODE flag
[   52.305088][ T6049] fserror_report: 4 callbacks suppressed
[   52.305095][ T6049] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   52.305651][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   52.305665][    C0] EXT4-fs (loop2): initial error at time 52: ext4_xattr_inode_iget:437: inode 12
[   52.305682][    C0] EXT4-fs (loop2): last error at time 52: ext4_xattr_inode_iget:437: inode 12
[   52.306958][ T6049] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.244: error while reading EA inode 12 err=-117
[   52.306977][ T6049] loop2: lost filesystem error report for type 5 error -117
[   52.307108][ T6049] EXT4-fs (loop2): 1 orphan inode deleted
[   52.307564][ T6049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.571153][ T6066] EXT4-fs: Ignoring removed oldalloc option
[   53.571169][ T6066] EXT4-fs: Ignoring removed orlov option
[   53.597158][ T6066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   53.668231][ T5447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   53.789485][ T6091] netlink: 'syz.5.255': attribute type 10 has an invalid length.
[   53.789692][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.789867][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.792145][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.792180][ T6091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.792264][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.792295][ T6091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.793504][ T6091] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   53.903917][ T6099] netlink: 40 bytes leftover after parsing attributes in process `syz.5.257'.
[   53.909162][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.968311][ T6110] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[   53.995479][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.256'.
[   54.025229][ T6122] netlink: 32 bytes leftover after parsing attributes in process `syz.5.263'.
[   54.043881][ T6132] pimreg: entered allmulticast mode
[   54.045038][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'.
[   54.045269][ T6132] netlink: 'syz.0.264': attribute type 5 has an invalid length.
[   54.073417][ T6134] set_capacity_and_notify: 3 callbacks suppressed
[   54.073431][ T6134] loop2: detected capacity change from 0 to 512
[   54.080869][ T6134] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   54.084162][ T6134] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   54.084960][ T6136] loop0: detected capacity change from 0 to 2048
[   54.085982][ T6134] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.265: Invalid block bitmap block 0 in block_group 0
[   54.086000][ T6134] loop2: lost filesystem error report for type 5 error -117
[   54.095667][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   54.095683][    C0] EXT4-fs (loop2): initial error at time 54: ext4_read_block_bitmap_nowait:487
[   54.095697][    C0] EXT4-fs (loop2): last error at time 54: ext4_read_block_bitmap_nowait:487
[   54.097811][ T6136] EXT4-fs: Ignoring removed mblk_io_submit option
[   54.104483][ T6134] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   54.104511][ T6134] loop2: lost filesystem error report for type 5 error -117
[   54.105558][ T6134] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.265: attempt to clear invalid blocks 983261 len 1
[   54.105586][ T6134] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   54.125274][ T6136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.125876][ T6134] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.265: Invalid inode table block 0 in block_group 0
[   54.125891][ T6134] loop2: lost filesystem error report for type 5 error -117
[   54.132414][ T6145] overlayfs: failed to clone upperpath
[   54.133003][ T6134] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem
[   54.133022][ T6134] loop2: lost filesystem error report for type 5 error -117
[   54.134088][ T6134] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem
[   54.134111][ T6134] loop2: lost filesystem error report for type 5 error -117
[   54.134285][ T6134] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.265: Invalid inode table block 0 in block_group 0
[   54.134297][ T6134] loop2: lost filesystem error report for type 5 error -117
[   54.135311][ T6134] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem
[   54.135336][ T6134] loop2: lost filesystem error report for type 5 error -117
[   54.150935][ T6134] EXT4-fs error (device loop2): ext4_truncate:4721: inode #11: comm syz.2.265: mark_inode_dirty error
[   54.150972][ T6134] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   54.151169][ T6134] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem
[   54.151287][ T6134] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.265: Invalid inode table block 0 in block_group 0
[   54.151425][ T6134] EXT4-fs (loop2): 1 truncate cleaned up
[   54.151835][ T6134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.169010][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.179760][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.235021][ T6150] loop2: detected capacity change from 0 to 3
[   54.268415][ T6165] loop5: detected capacity change from 0 to 512
[   54.268648][ T6154] fuse: Bad value for 'user_id'
[   54.268658][ T6154] fuse: Bad value for 'user_id'
[   54.268716][ T6165] EXT4-fs: Ignoring removed oldalloc option
[   54.269881][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'.
[   54.278794][ T6165] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   54.278820][ T6165] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   54.294080][ T6165] EXT4-fs (loop5): 1 truncate cleaned up
[   54.294484][ T6165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.415358][ T6165] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 2. Delete some EAs or run e2fsck.
[   54.427938][ T5447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.522228][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'.
[   64.497304][ T1568] ieee802154 phy1 wpan1: encryption failed: -22
[   64.513823][  T865] cfg80211: failed to load regulatory.db
[  115.946184][ T6227] binder: 6225:6227 DecRefs 0 refcount change on invalid ref 1 ret -22
[  115.960184][ T6227] binder: 6225:6227 ioctl d000943d 200e9500 returned -22
[  115.960720][   T40] nvme nvme1: rdma_resolve_route failed (-110).
[  115.962319][ T6229] nvme nvme1: rdma connection establishment failed (-19)
[  115.967257][ T6227] binder: 6225:6227 ioctl d000943d 200ec500 returned -22
[  116.190457][ T6261] Cannot find add_set index 0 as target
[  117.167234][ T6268] comedi comedi0: bad chanlist[0]=0x00200004 chan=4 range length=2
[  117.208593][ T6271] ip_tables: iptables: counters copy to user failed while replacing table
[  117.242051][ T6275] loop0: detected capacity change from 0 to 1024
[  117.262806][   T58] nvme nvme1: rdma_resolve_route failed (-110).
[  117.265315][ T6273] nvme nvme1: rdma connection establishment failed (-19)
[  117.289718][ T6275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  117.355378][ T6290] loop5: detected capacity change from 0 to 512
[  117.357820][ T6290] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  117.357832][ T6290] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  117.360978][ T6290] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.299: bg 0: block 104: invalid block bitmap
[  117.360995][ T6290] fserror_report: 2 callbacks suppressed
[  117.361000][ T6290] loop5: lost filesystem error report for type 5 error -117
[  117.361407][ T6290] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  117.361418][ T6290] loop5: lost filesystem error report for type 5 error -117
[  117.361545][ T6290] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.299: invalid indirect mapped block 1 (level 1)
[  117.361558][ T6290] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  117.362212][ T6290] EXT4-fs (loop5): 1 truncate cleaned up
[  117.368527][ T6269] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.284: bg 0: block 112: padding at end of block bitmap is not set
[  117.368947][ T6290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.414163][ T5447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.414701][ T6296] loop2: detected capacity change from 0 to 128
[  117.457561][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'.
[  117.521858][ T6307] overlayfs: failed to clone upperpath
[  117.530663][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  117.734154][ T6324] loop5: detected capacity change from 0 to 8192
[  118.869481][ T6338] nfs4: Unknown parameter 'clÃ
OÉñientaddr'
[  118.993723][ T6350] loop0: detected capacity change from 0 to 2048
[  119.016143][ T6354] vlan2: entered allmulticast mode
[  119.016163][ T6354] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  119.024340][ T6350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.100725][ T6350] overlayfs: missing 'workdir'
[  119.116743][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.182004][ T6368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.322'.
[  119.193204][ T6370] loop1: detected capacity change from 0 to 512
[  119.194705][ T6370] EXT4-fs: Ignoring removed oldalloc option
[  119.204000][ T6370] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.323: Parent and EA inode have the same ino 15
[  119.204023][ T6370] loop1: lost filesystem error report for type 5 error -117
[  119.204260][ T6370] EXT4-fs (loop1): Remounting filesystem read-only
[  119.204300][ T6370] EXT4-fs (loop1): 1 orphan inode deleted
[  119.204757][ T6370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.219914][ T6373] loop0: detected capacity change from 0 to 2048
[  119.231099][ T6373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.245232][ T6373] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size.
[  119.263329][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.301442][ T6377] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  119.302451][ T6377] FAULT_INJECTION: forcing a failure.
[  119.302451][ T6377] name fail_futex, interval 1, probability 0, space 0, times 0
[  119.302469][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.1.325 Not tainted syzkaller #0 PREEMPT 
[  119.302484][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  119.302491][ T6377] Call trace:
[  119.302495][ T6377]  show_stack+0x2c/0x3c (C)
[  119.302520][ T6377]  __dump_stack+0x30/0x40
[  119.302534][ T6377]  dump_stack_lvl+0xd8/0x12c
[  119.302547][ T6377]  dump_stack+0x1c/0x28
[  119.302559][ T6377]  should_fail_ex+0x418/0x58c
[  119.302568][ T6377]  should_fail+0x14/0x24
[  119.302576][ T6377]  get_futex_key+0x1ec/0x12b0
[  119.302588][ T6377]  futex_wake+0x10c/0x594
[  119.302599][ T6377]  do_futex+0x2c4/0x378
[  119.302610][ T6377]  __arm64_sys_futex+0x2e4/0x418
[  119.302621][ T6377]  invoke_syscall+0x98/0x244
[  119.302633][ T6377]  el0_svc_common+0xec/0x23c
[  119.302644][ T6377]  do_el0_svc+0x4c/0x5c
[  119.302656][ T6377]  el0_svc+0x60/0x1d8
[  119.302665][ T6377]  el0t_64_sync_handler+0x44/0x104
[  119.302673][ T6377]  el0t_64_sync+0x198/0x19c
[  119.326714][ T6373] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.352627][ T6379] netlink: 'syz.0.326': attribute type 15 has an invalid length.
[  119.358595][ T6379] netlink: 'syz.0.326': attribute type 15 has an invalid length.
[  119.375749][ T1309] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  119.376861][ T1138] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  119.376885][ T1138] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  119.376901][ T1138] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  119.476698][ T6398] overlayfs: workdir and upperdir must be separate subtrees
[  119.506931][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'.
[  119.512460][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.521737][ T6402] bridge_slave_1 (unregistering): left allmulticast mode
[  119.521757][ T6402] bridge_slave_1 (unregistering): left promiscuous mode
[  119.521797][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.532815][ T6405] loop0: detected capacity change from 0 to 512
[  119.540809][ T6405] EXT4-fs (loop0): Test dummy encryption mode enabled
[  119.546281][ T6405] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.334: inode has both inline data and extents flags
[  119.546300][ T6405] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  119.547577][ T6405] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.334: couldn't read orphan inode 15 (err -117)
[  119.547596][ T6405] loop0: lost filesystem error report for type 5 error -117
[  119.548785][ T6405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.632044][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.707791][ T6419] warning: `syz.0.337' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  119.731629][ T6421] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  119.732890][ T6421] batman_adv: batadv0: Adding interface: gretap1
[  119.732898][ T6421] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.733187][ T6421] batman_adv: batadv0: Interface activated: gretap1
[  119.755513][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'.
[  119.852487][ T6433] netlink: 'syz.2.343': attribute type 1 has an invalid length.
[  119.852503][ T6433] netlink: 232 bytes leftover after parsing attributes in process `syz.2.343'.
[  119.905693][ T6438] loop0: detected capacity change from 0 to 1024
[  120.097876][  T865] atkbd serio0: keyboard reset failed on 
[  120.176889][ T6438] loop0: detected capacity change from 0 to 1024
[  120.299064][ T6457] 9p: Bad value for 'version'
[  120.349181][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.349'.
[  120.529665][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'.
[  120.625519][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'.
[  120.742315][ T6472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.751863][ T6474] 9p: Bad value for 'rfdno'
[  120.760828][ T6474] fuse: Bad value for 'fd'
[  120.777265][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.353'.
[  120.777285][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.353'.
[  120.837341][ T6474] netlink: 'syz.4.353': attribute type 1 has an invalid length.
[  120.853916][ T6474] bond1: entered promiscuous mode
[  120.854063][ T6474] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.869436][ T6475] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.869616][ T6475] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  120.869628][ T6475] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  120.871542][ T6475] bond1: (slave ip6gre1): making interface the new active one
[  120.871553][ T6475] ip6gre1: entered promiscuous mode
[  120.872662][ T6475] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  120.934230][ T6503] FAULT_INJECTION: forcing a failure.
[  120.934230][ T6503] name failslab, interval 1, probability 0, space 0, times 0
[  120.934250][ T6503] CPU: 1 UID: 0 PID: 6503 Comm: syz.5.360 Not tainted syzkaller #0 PREEMPT 
[  120.934261][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  120.934267][ T6503] Call trace:
[  120.934269][ T6503]  show_stack+0x2c/0x3c (C)
[  120.934289][ T6503]  __dump_stack+0x30/0x40
[  120.934301][ T6503]  dump_stack_lvl+0xd8/0x12c
[  120.934312][ T6503]  dump_stack+0x1c/0x28
[  120.934323][ T6503]  should_fail_ex+0x418/0x58c
[  120.934332][ T6503]  should_failslab+0xc4/0x120
[  120.934341][ T6503]  __kmalloc_cache_noprof+0x94/0x5fc
[  120.934351][ T6503]  reuseport_alloc+0x11c/0x458
[  120.934360][ T6503]  udp_lib_get_port+0xc4c/0x1734
[  120.934371][ T6503]  udp_v4_get_port+0x190/0x23c
[  120.934383][ T6503]  inet_autobind+0xa8/0x16c
[  120.934394][ T6503]  inet_send_prepare+0xa0/0x118
[  120.934404][ T6503]  inet_sendmsg+0x54/0xd8
[  120.934414][ T6503]  __sock_sendmsg+0xc8/0x17c
[  120.934425][ T6503]  sock_write_iter+0x220/0x310
[  120.934437][ T6503]  vfs_write+0x51c/0xa0c
[  120.934445][ T6503]  ksys_write+0x12c/0x228
[  120.934453][ T6503]  __arm64_sys_write+0x84/0x98
[  120.934461][ T6503]  invoke_syscall+0x98/0x244
[  120.934473][ T6503]  el0_svc_common+0xec/0x23c
[  120.934484][ T6503]  do_el0_svc+0x4c/0x5c
[  120.934495][ T6503]  el0_svc+0x60/0x1d8
[  120.934504][ T6503]  el0t_64_sync_handler+0x44/0x104
[  120.934512][ T6503]  el0t_64_sync+0x198/0x19c
[  120.976344][ T6503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.982396][ T6503] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #12: block 2: comm syz.5.360: lblock 0 mapped to illegal pblock 2 (length 1)
[  120.986964][ T6508] netlink: 'syz.4.361': attribute type 25 has an invalid length.
[  121.012841][ T5447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.088603][ T6523] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  121.088615][ T6523] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  121.089947][ T6523] EXT4-fs (loop2): 1 truncate cleaned up
[  121.090386][ T6523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.130659][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.262255][ T6540] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  121.531607][   T40] IPVS: starting estimator thread 0...
[  121.568326][ T6556] ip_tables: iptables: counters copy to user failed while replacing table
[  121.573275][ T6555] capability: warning: `syz.0.375' uses 32-bit capabilities (legacy support in use)
[  121.615693][ T6548] IPVS: using max 60 ests per chain, 144000 per kthread
[  121.700577][ T6578] FAULT_INJECTION: forcing a failure.
[  121.700577][ T6578] name failslab, interval 1, probability 0, space 0, times 0
[  121.700601][ T6578] CPU: 0 UID: 0 PID: 6578 Comm: syz.0.378 Not tainted syzkaller #0 PREEMPT 
[  121.700612][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  121.700618][ T6578] Call trace:
[  121.700621][ T6578]  show_stack+0x2c/0x3c (C)
[  121.700642][ T6578]  __dump_stack+0x30/0x40
[  121.700655][ T6578]  dump_stack_lvl+0xd8/0x12c
[  121.700666][ T6578]  dump_stack+0x1c/0x28
[  121.700677][ T6578]  should_fail_ex+0x418/0x58c
[  121.700687][ T6578]  should_failslab+0xc4/0x120
[  121.700695][ T6578]  __kmalloc_noprof+0x108/0x6c8
[  121.700706][ T6578]  sk_prot_alloc+0xc4/0x1e8
[  121.700716][ T6578]  sk_alloc+0x44/0x320
[  121.700725][ T6578]  xsk_create+0x104/0x644
[  121.700735][ T6578]  __sock_create+0x31c/0x670
[  121.700746][ T6578]  __sys_socket_create+0xc0/0x11c
[  121.700757][ T6578]  __sys_socket+0x44/0xec
[  121.700767][ T6578]  __arm64_sys_socket+0x84/0x9c
[  121.700778][ T6578]  invoke_syscall+0x98/0x244
[  121.700791][ T6578]  el0_svc_common+0xec/0x23c
[  121.700802][ T6578]  do_el0_svc+0x4c/0x5c
[  121.700813][ T6578]  el0_svc+0x60/0x1d8
[  121.700821][ T6578]  el0t_64_sync_handler+0x44/0x104
[  121.700829][ T6578]  el0t_64_sync+0x198/0x19c
[  121.761380][ T6586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.765522][ T6584] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:337: inode #15: comm syz.0.379: verity file corrupted; can't find descriptor
[  121.767189][ T6584] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size
[  121.808665][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.848771][ T6598] No control pipe specified
[  121.899034][ T6619] ieee802154 phy1 wpan1: encryption failed: -90
[  122.088657][ T6651] FAULT_INJECTION: forcing a failure.
[  122.088657][ T6651] name failslab, interval 1, probability 0, space 0, times 0
[  122.088680][ T6651] CPU: 1 UID: 0 PID: 6651 Comm: syz.0.389 Not tainted syzkaller #0 PREEMPT 
[  122.088690][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  122.088696][ T6651] Call trace:
[  122.088699][ T6651]  show_stack+0x2c/0x3c (C)
[  122.088723][ T6651]  __dump_stack+0x30/0x40
[  122.088736][ T6651]  dump_stack_lvl+0xd8/0x12c
[  122.088748][ T6651]  dump_stack+0x1c/0x28
[  122.088760][ T6651]  should_fail_ex+0x418/0x58c
[  122.088769][ T6651]  should_failslab+0xc4/0x120
[  122.088778][ T6651]  __kmalloc_noprof+0x108/0x6c8
[  122.088787][ T6651]  sk_prot_alloc+0xc4/0x1e8
[  122.088797][ T6651]  sk_alloc+0x44/0x320
[  122.088805][ T6651]  xsk_create+0x104/0x644
[  122.088816][ T6651]  __sock_create+0x31c/0x670
[  122.088827][ T6651]  __sys_socket_create+0xc0/0x11c
[  122.088837][ T6651]  __sys_socket+0x44/0xec
[  122.088848][ T6651]  __arm64_sys_socket+0x84/0x9c
[  122.088858][ T6651]  invoke_syscall+0x98/0x244
[  122.088871][ T6651]  el0_svc_common+0xec/0x23c
[  122.088882][ T6651]  do_el0_svc+0x4c/0x5c
[  122.088893][ T6651]  el0_svc+0x60/0x1d8
[  122.088901][ T6651]  el0t_64_sync_handler+0x44/0x104
[  122.088909][ T6651]  el0t_64_sync+0x198/0x19c
[  122.129507][ T6659] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4707] was attempted by ""[6659]
[  122.198254][ T6682] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  122.214304][ T6682] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.391: bad orphan inode 16
[  122.214325][ T6682] loop2: lost filesystem error report for type 5 error -117
[  122.214512][ T6682] ext4_test_bit(bit=15, block=18) = 1
[  122.214520][ T6682] is_bad_inode(inode)=0
[  122.214525][ T6682] NEXT_ORPHAN(inode)=83886080
[  122.214530][ T6682] max_ino=32
[  122.214535][ T6682] i_nlink=0
[  122.215656][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  122.215673][    C0] EXT4-fs (loop2): initial error at time 122: ext4_orphan_get:1429
[  122.215688][    C0] EXT4-fs (loop2): last error at time 122: ext4_orphan_get:1429
[  122.237604][ T6682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.250812][   T54] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  122.250843][   T54] EXT4-fs error (device loop2): ext4_release_dquot:7106: comm kworker/u8:3: Failed to release dquot type 1
[  122.252973][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.367775][ T6711] set_capacity_and_notify: 16 callbacks suppressed
[  122.367788][ T6711] loop2: detected capacity change from 0 to 8
[  122.374229][ T6711] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[  122.374240][ T6711] unable to read xattr id index table
[  122.384393][ T6711] SQUASHFS error: zlib decompression failed, data probably corrupt
[  122.384414][ T6711] SQUASHFS error: Failed to read block 0x9b: -5
[  122.384423][ T6711] SQUASHFS error: Unable to read metadata cache entry [99]
[  122.384431][ T6711] SQUASHFS error: Unable to read inode 0x127
[  122.385570][ T6691] fuse: Bad value for 'fd'
[  122.449458][ T6717] bond1: entered allmulticast mode
[  122.450587][ T6717] 8021q: adding VLAN 0 to HW filter on device bond1
[  122.487939][ T6721] veth0: entered promiscuous mode
[  122.488233][ T6721] __nla_validate_parse: 4 callbacks suppressed
[  122.488240][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'.
[  122.514285][ T6727] overlayfs: failed to resolve 'pcr=00000000000000000023': -2
[  122.562419][ T6730] loop2: detected capacity change from 0 to 2048
[  122.583521][ T6730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.590873][ T6730] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.401: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  122.594672][ T6730] EXT4-fs (loop2): Remounting filesystem read-only
[  122.597574][ T6719] veth0: left promiscuous mode
[  122.604794][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.652093][ T6734] FAULT_INJECTION: forcing a failure.
[  122.652093][ T6734] name failslab, interval 1, probability 0, space 0, times 0
[  122.652117][ T6734] CPU: 1 UID: 0 PID: 6734 Comm: syz.2.402 Not tainted syzkaller #0 PREEMPT 
[  122.652130][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  122.652136][ T6734] Call trace:
[  122.652140][ T6734]  show_stack+0x2c/0x3c (C)
[  122.652161][ T6734]  __dump_stack+0x30/0x40
[  122.652173][ T6734]  dump_stack_lvl+0xd8/0x12c
[  122.652184][ T6734]  dump_stack+0x1c/0x28
[  122.652196][ T6734]  should_fail_ex+0x418/0x58c
[  122.652205][ T6734]  should_failslab+0xc4/0x120
[  122.652213][ T6734]  __kmalloc_noprof+0x108/0x6c8
[  122.652223][ T6734]  sk_prot_alloc+0xc4/0x1e8
[  122.652233][ T6734]  sk_alloc+0x44/0x320
[  122.652241][ T6734]  xsk_create+0x104/0x644
[  122.652252][ T6734]  __sock_create+0x31c/0x670
[  122.652263][ T6734]  __sys_socket_create+0xc0/0x11c
[  122.652274][ T6734]  __sys_socket+0x44/0xec
[  122.652284][ T6734]  __arm64_sys_socket+0x84/0x9c
[  122.652295][ T6734]  invoke_syscall+0x98/0x244
[  122.652308][ T6734]  el0_svc_common+0xec/0x23c
[  122.652319][ T6734]  do_el0_svc+0x4c/0x5c
[  122.652330][ T6734]  el0_svc+0x60/0x1d8
[  122.652338][ T6734]  el0t_64_sync_handler+0x44/0x104
[  122.652346][ T6734]  el0t_64_sync+0x198/0x19c
[  122.719677][ T6740] tap0: tun_chr_ioctl cmd 1074025677
[  122.719740][ T6740] tap0: linktype set to 0
[  122.721761][ T6739] tap0: tun_chr_ioctl cmd 1074025673
[  122.754791][ T6743] xt_TCPMSS: Only works on TCP SYN packets
[  122.798285][ T6745] xt_time: invalid argument - start or stop time greater than 23:59:59
[  122.800465][ T6751] xt_time: invalid argument - start or stop time greater than 23:59:59
[  122.886704][ T6760] loop2: detected capacity change from 0 to 512
[  122.887049][ T6760] EXT4-fs: Ignoring removed oldalloc option
[  122.888174][ T6760] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  122.888189][ T6760] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  122.891665][ T6760] EXT4-fs (loop2): 1 truncate cleaned up
[  122.892162][ T6760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.911751][ T6760] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  122.911767][ T6760] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  122.911772][ T6760] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  122.911778][ T6760] overlayfs: missing 'lowerdir'
[  122.930491][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.933684][ T6764] loop5: detected capacity change from 0 to 512
[  122.935282][ T6764] EXT4-fs: Ignoring removed i_version option
[  122.950229][ T6764] EXT4-fs (loop5): 1 orphan inode deleted
[  122.951330][ T6764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.965009][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.411'.
[  122.965096][ T6764] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.976856][ T6764] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.056296][ T5447] EXT4-fs error (device loop5): htree_dirblock_to_tree:1051: inode #2: comm syz-executor: Directory hole found for htree leaf block 0
[  123.189902][ T6779] syzkaller0: entered promiscuous mode
[  123.189919][ T6779] syzkaller0: entered allmulticast mode
[  123.234792][ T6782] loop0: detected capacity change from 0 to 4096
[  123.235087][ T6782] ext4: Unknown parameter 'fowner<00000000000000000000'
[  123.278612][ T6774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.341627][   T54] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.375244][ T6797] netlink: 'syz.1.423': attribute type 5 has an invalid length.
[  123.391939][ T6795] vlan2: entered allmulticast mode
[  123.391955][ T6795] macsec0: entered allmulticast mode
[  123.391963][ T6795] veth1_macvtap: entered allmulticast mode
[  123.393206][ T4709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  123.394427][ T4709] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  123.394789][ T4709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  123.395563][ T4709] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  123.404982][ T4709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  123.406975][ T6797] FAULT_INJECTION: forcing a failure.
[  123.406975][ T6797] name failslab, interval 1, probability 0, space 0, times 0
[  123.406993][ T6797] CPU: 1 UID: 0 PID: 6797 Comm: syz.1.423 Not tainted syzkaller #0 PREEMPT 
[  123.407003][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  123.407010][ T6797] Call trace:
[  123.407013][ T6797]  show_stack+0x2c/0x3c (C)
[  123.407034][ T6797]  __dump_stack+0x30/0x40
[  123.407048][ T6797]  dump_stack_lvl+0xd8/0x12c
[  123.407059][ T6797]  dump_stack+0x1c/0x28
[  123.407071][ T6797]  should_fail_ex+0x418/0x58c
[  123.407080][ T6797]  should_failslab+0xc4/0x120
[  123.407089][ T6797]  __kmalloc_noprof+0x108/0x6c8
[  123.407099][ T6797]  tomoyo_encode2+0x10c/0x330
[  123.407111][ T6797]  tomoyo_encode+0x34/0x50
[  123.407122][ T6797]  tomoyo_realpath_from_path+0x488/0x4dc
[  123.407135][ T6797]  tomoyo_path_number_perm+0x1f0/0x500
[  123.407145][ T6797]  tomoyo_file_ioctl+0x2c/0x3c
[  123.407158][ T6797]  security_file_ioctl+0xdc/0x2b0
[  123.407168][ T6797]  __arm64_sys_ioctl+0xb0/0x1cc
[  123.407177][ T6797]  invoke_syscall+0x98/0x244
[  123.407189][ T6797]  el0_svc_common+0xec/0x23c
[  123.407201][ T6797]  do_el0_svc+0x4c/0x5c
[  123.407212][ T6797]  el0_svc+0x60/0x1d8
[  123.407221][ T6797]  el0t_64_sync_handler+0x44/0x104
[  123.407229][ T6797]  el0t_64_sync+0x198/0x19c
[  123.407469][ T6797] ERROR: Out of memory at tomoyo_realpath_from_path.
[  123.415439][   T54] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.435136][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  123.436484][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  123.437035][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  123.437576][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  123.437904][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  123.438712][ T6800] ip_tables: iptables: counters copy to user failed while replacing table
[  123.495153][   T54] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.549813][ T6798] rxe_eth0 speed is unknown, defaulting to 1000
[  123.585216][   T54] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.751868][   T54] bridge_slave_1: left allmulticast mode
[  123.751887][   T54] bridge_slave_1: left promiscuous mode
[  123.751971][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.752905][   T54] bridge_slave_0: left allmulticast mode
[  123.752915][   T54] bridge_slave_0: left promiscuous mode
[  123.752986][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.827222][   T54] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  123.851287][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.869897][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.897682][   T54] bond0 (unregistering): Released all slaves
[  123.989735][ T6835] FAULT_INJECTION: forcing a failure.
[  123.989735][ T6835] name failslab, interval 1, probability 0, space 0, times 0
[  123.989758][ T6835] CPU: 1 UID: 0 PID: 6835 Comm: syz.2.430 Not tainted syzkaller #0 PREEMPT 
[  123.989771][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  123.989777][ T6835] Call trace:
[  123.989780][ T6835]  show_stack+0x2c/0x3c (C)
[  123.989799][ T6835]  __dump_stack+0x30/0x40
[  123.989811][ T6835]  dump_stack_lvl+0xd8/0x12c
[  123.989822][ T6835]  dump_stack+0x1c/0x28
[  123.989833][ T6835]  should_fail_ex+0x418/0x58c
[  123.989842][ T6835]  should_failslab+0xc4/0x120
[  123.989851][ T6835]  __kmalloc_noprof+0x108/0x6c8
[  123.989860][ T6835]  sk_prot_alloc+0xc4/0x1e8
[  123.989871][ T6835]  sk_alloc+0x44/0x320
[  123.989879][ T6835]  xsk_create+0x104/0x644
[  123.989890][ T6835]  __sock_create+0x31c/0x670
[  123.989900][ T6835]  __sys_socket_create+0xc0/0x11c
[  123.989911][ T6835]  __sys_socket+0x44/0xec
[  123.989921][ T6835]  __arm64_sys_socket+0x84/0x9c
[  123.989941][ T6835]  invoke_syscall+0x98/0x244
[  123.989954][ T6835]  el0_svc_common+0xec/0x23c
[  123.989965][ T6835]  do_el0_svc+0x4c/0x5c
[  123.989977][ T6835]  el0_svc+0x60/0x1d8
[  123.989984][ T6835]  el0t_64_sync_handler+0x44/0x104
[  123.989993][ T6835]  el0t_64_sync+0x198/0x19c
[  124.032248][ T6839] netlink: 36 bytes leftover after parsing attributes in process `syz.4.431'.
[  124.169407][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4
[  124.169605][ T6798] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.169661][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.169716][ T6798] bridge_slave_0: entered allmulticast mode
[  124.170178][ T6798] bridge_slave_0: entered promiscuous mode
[  124.171493][ T6798] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.171549][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.171604][ T6798] bridge_slave_1: entered allmulticast mode
[  124.172011][ T6798] bridge_slave_1: entered promiscuous mode
[  124.179483][ T6798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.180312][ T6798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.186237][ T6798] team0: Port device team_slave_0 added
[  124.186968][ T6798] team0: Port device team_slave_1 added
[  124.192944][ T6798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.192954][ T6798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  124.192968][ T6798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.193455][ T6798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.193462][ T6798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  124.193475][ T6798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.202821][ T6798] hsr_slave_0: entered promiscuous mode
[  124.203115][ T6798] hsr_slave_1: entered promiscuous mode
[  124.203295][ T6798] debugfs: 'hsr0' already exists in 'hsr'
[  124.203306][ T6798] Cannot create hsr debugfs directory
[  124.345202][  T865] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  124.345220][  T865] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  124.345229][  T865] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  124.345238][  T865] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  124.345246][  T865] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  124.388001][  T865] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  124.423998][ T6798] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  124.447991][ T6798] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  124.448346][ T6798] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  124.461710][ T6798] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  124.471343][ T6798] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  124.489643][ T6798] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  124.490827][ T6798] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  124.493894][ T6798] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  124.524818][ T6798] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.524854][ T6798] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.524934][ T6798] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.524965][ T6798] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.559495][   T54] hsr_slave_0: left promiscuous mode
[  124.560576][   T54] hsr_slave_1: left promiscuous mode
[  124.560863][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.560874][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.572631][   T54] veth1_macvtap: left promiscuous mode
[  124.572725][   T54] veth0_macvtap: left promiscuous mode
[  124.572770][   T54] veth1_vlan: left promiscuous mode
[  124.572804][   T54] veth0_vlan: left promiscuous mode
[  124.843348][   T54] team0 (unregistering): Port device team_slave_1 removed
[  124.859216][   T54] team0 (unregistering): Port device team_slave_0 removed
[  124.935582][ T6902] loop1: detected capacity change from 0 to 4096
[  124.936088][ T6902] EXT4-fs: Ignoring removed i_version option
[  124.936106][ T6902] EXT4-fs: Ignoring removed orlov option
[  124.936122][ T6902] ext3: Bad value for 'resuid'
[  124.936128][ T6902] ext3: Bad value for 'resuid'
[  125.022518][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5
[  125.024642][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.025090][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.114511][ T6798] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.129519][ T6798] 8021q: adding VLAN 0 to HW filter on device team0
[  125.139578][ T6869] 9pnet_fd: p9_fd_create_tcp (6869): problem connecting socket to 127.0.0.1
[  125.152192][ T6908] netlink: 'syz.2.438': attribute type 13 has an invalid length.
[  125.160407][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.160435][ T6613] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.169997][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.170025][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.174219][ T6908] bridge0: port 3(hsr0) entered blocking state
[  125.174305][ T6908] bridge0: port 3(hsr0) entered disabled state
[  125.174390][ T6908] hsr0: entered allmulticast mode
[  125.174399][ T6908] hsr_slave_0: entered allmulticast mode
[  125.174410][ T6908] hsr_slave_1: entered allmulticast mode
[  125.175016][ T6908] hsr0: entered promiscuous mode
[  125.181097][ T6908] bridge0: port 3(hsr0) entered blocking state
[  125.181129][ T6908] bridge0: port 3(hsr0) entered forwarding state
[  125.213391][ T6798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  125.213409][ T6798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  125.218679][ T6913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.440'.
[  125.232463][ T6917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.441'.
[  125.325579][ T6932] loop0: detected capacity change from 0 to 512
[  125.332546][ T6932] loop0: detected capacity change from 0 to 512
[  125.337979][ T6932] loop0: detected capacity change from 0 to 512
[  125.343223][ T6932] loop0: detected capacity change from 0 to 512
[  125.381925][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7
[  125.455588][ T6798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.456418][ T4722] Bluetooth: hci3: command tx timeout
[  125.586671][ T6960] /dev/loop0: Can't open blockdev
[  125.603572][ T6798] veth0_vlan: entered promiscuous mode
[  125.609823][ T6798] veth1_vlan: entered promiscuous mode
[  125.634112][ T6798] veth0_macvtap: entered promiscuous mode
[  125.636235][ T6798] veth1_macvtap: entered promiscuous mode
[  125.651598][ T6798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.663945][ T6798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.671918][ T6623] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.672125][ T6623] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.672370][ T6623] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.712044][ T6613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.712060][ T6613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.727426][   T54] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.728223][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.728232][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.732570][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'.
[  125.749518][ T6972] netlink: 'syz.1.445': attribute type 9 has an invalid length.
[  125.782255][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6
[  125.923903][ T6987] netlink: 96 bytes leftover after parsing attributes in process `syz.4.446'.
[  125.938273][ T1568] ieee802154 phy1 wpan1: encryption failed: -22
[  126.017412][ T6995] 9pnet_virtio: no channels available for device ./proc/file0
[  126.018502][ T6995] FAULT_INJECTION: forcing a failure.
[  126.018502][ T6995] name failslab, interval 1, probability 0, space 0, times 0
[  126.018530][ T6995] CPU: 0 UID: 0 PID: 6995 Comm: syz.0.447 Not tainted syzkaller #0 PREEMPT 
[  126.018541][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  126.018546][ T6995] Call trace:
[  126.018549][ T6995]  show_stack+0x2c/0x3c (C)
[  126.018570][ T6995]  __dump_stack+0x30/0x40
[  126.018582][ T6995]  dump_stack_lvl+0xd8/0x12c
[  126.018594][ T6995]  dump_stack+0x1c/0x28
[  126.018605][ T6995]  should_fail_ex+0x418/0x58c
[  126.018614][ T6995]  should_failslab+0xc4/0x120
[  126.018623][ T6995]  kmem_cache_alloc_noprof+0x94/0x5d4
[  126.018632][ T6995]  xfrm_state_alloc+0x2c/0x270
[  126.018642][ T6995]  pfkey_add+0x554/0x22b4
[  126.018656][ T6995]  pfkey_sendmsg+0x9f4/0xdf8
[  126.018667][ T6995]  __sock_sendmsg+0xc8/0x17c
[  126.018679][ T6995]  ____sys_sendmsg+0x3d0/0x6c8
[  126.018690][ T6995]  ___sys_sendmsg+0x198/0x224
[  126.018701][ T6995]  __sys_sendmsg+0x158/0x204
[  126.018712][ T6995]  __arm64_sys_sendmsg+0x88/0x9c
[  126.018724][ T6995]  invoke_syscall+0x98/0x244
[  126.018736][ T6995]  el0_svc_common+0xec/0x23c
[  126.018747][ T6995]  do_el0_svc+0x4c/0x5c
[  126.018759][ T6995]  el0_svc+0x60/0x1d8
[  126.018767][ T6995]  el0t_64_sync_handler+0x44/0x104
[  126.018775][ T6995]  el0t_64_sync+0x198/0x19c
[  126.253554][ T7003] netlink: 'syz.1.450': attribute type 10 has an invalid length.
[  126.253612][ T7003] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  126.270476][ T7008] netlink: 'syz.1.450': attribute type 10 has an invalid length.
[  126.270506][ T7008] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  126.362511][ T7025] sch_fq: defrate 3 ignored.
[  126.364517][ T7027] netlink: 44 bytes leftover after parsing attributes in process `syz.2.454'.
[  126.364533][ T7027] netlink: 43 bytes leftover after parsing attributes in process `syz.2.454'.
[  126.364545][ T7027] netlink: 'syz.2.454': attribute type 5 has an invalid length.
[  126.364553][ T7027] netlink: 43 bytes leftover after parsing attributes in process `syz.2.454'.
[  126.435265][ T7032] FAULT_INJECTION: forcing a failure.
[  126.435265][ T7032] name failslab, interval 1, probability 0, space 0, times 0
[  126.435286][ T7032] CPU: 1 UID: 0 PID: 7032 Comm: syz.2.455 Not tainted syzkaller #0 PREEMPT 
[  126.435296][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  126.435301][ T7032] Call trace:
[  126.435304][ T7032]  show_stack+0x2c/0x3c (C)
[  126.435324][ T7032]  __dump_stack+0x30/0x40
[  126.435335][ T7032]  dump_stack_lvl+0xd8/0x12c
[  126.435344][ T7032]  dump_stack+0x1c/0x28
[  126.435354][ T7032]  should_fail_ex+0x418/0x58c
[  126.435362][ T7032]  should_failslab+0xc4/0x120
[  126.435370][ T7032]  __kmalloc_noprof+0x108/0x6c8
[  126.435379][ T7032]  tomoyo_encode2+0x10c/0x330
[  126.435390][ T7032]  tomoyo_encode+0x34/0x50
[  126.435399][ T7032]  tomoyo_realpath_from_path+0x488/0x4dc
[  126.435409][ T7032]  tomoyo_mount_permission+0x3b4/0x7e4
[  126.435418][ T7032]  tomoyo_sb_mount+0x48/0x60
[  126.435428][ T7032]  security_sb_mount+0xfc/0x308
[  126.435436][ T7032]  path_mount+0xb8/0xa88
[  126.435446][ T7032]  do_mount+0xe8/0x148
[  126.435454][ T7032]  __arm64_sys_mount+0x33c/0x388
[  126.435464][ T7032]  invoke_syscall+0x98/0x244
[  126.435474][ T7032]  el0_svc_common+0xec/0x23c
[  126.435484][ T7032]  do_el0_svc+0x4c/0x5c
[  126.435493][ T7032]  el0_svc+0x60/0x1d8
[  126.435501][ T7032]  el0t_64_sync_handler+0x44/0x104
[  126.435508][ T7032]  el0t_64_sync+0x198/0x19c
[  126.435520][ T7032] ERROR: Out of memory at tomoyo_realpath_from_path.
[  126.492514][ T7033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.048546][ T7061] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.460: inode has both inline data and extents flags
[  127.048570][ T7061] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  127.048705][ T7061] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.460: couldn't read orphan inode 15 (err -117)
[  127.048719][ T7061] loop0: lost filesystem error report for type 5 error -117
[  127.049928][ T7061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.344910][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.400149][ T1090] bridge0: entered promiscuous mode
[  127.464058][ T7049] nvme nvme1: failed to connect socket: -512
[  127.536257][ T4722] Bluetooth: hci3: command tx timeout
[  127.543587][ T7067] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.666270][ T7103] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[  127.719306][ T6623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  127.719332][ T6623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.766142][ T7103] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  127.803819][ T7106] set_capacity_and_notify: 14 callbacks suppressed
[  127.803832][ T7106] loop6: detected capacity change from 0 to 8192
[  127.876697][ T7106]  loop6: p1 < > p3 p4 < >
[  127.876714][ T7106] loop6: partition table partially beyond EOD, truncated
[  127.876812][ T7106] loop6: p1 start 51379968 is beyond EOD, truncated
[  127.876821][ T7106] loop6: p3 size 100663552 extends beyond EOD, truncated
[  127.981050][ T6278] udevd[6278]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  127.984233][ T6375] udevd[6375]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  128.053938][ T6623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  128.053966][ T6623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.193247][ T7115] loop2: detected capacity change from 0 to 1024
[  128.312597][ T7115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.320895][ T6623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  128.320918][ T6623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.334955][ T4709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  128.348823][ T4709] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  128.349885][ T4709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  128.351921][ T4709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  128.352164][ T4709] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  128.573451][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.652903][ T6623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  128.652929][ T6623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.686035][ T7142] __nla_validate_parse: 1 callbacks suppressed
[  128.686049][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'.
[  128.691398][ T7125] rxe_eth0 speed is unknown, defaulting to 1000
[  128.886876][ T7154] bond2: entered promiscuous mode
[  128.953437][ T7135] loop6: detected capacity change from 0 to 128
[  128.958829][ T7135] FAT-fs (loop6): Directory bread(block 1048) failed
[  128.958845][ T7135] FAT-fs (loop6): Directory bread(block 1049) failed
[  128.958856][ T7135] FAT-fs (loop6): Directory bread(block 1050) failed
[  128.958866][ T7135] FAT-fs (loop6): Directory bread(block 1051) failed
[  128.958877][ T7135] FAT-fs (loop6): Directory bread(block 1052) failed
[  128.958887][ T7135] FAT-fs (loop6): Directory bread(block 1053) failed
[  128.958897][ T7135] FAT-fs (loop6): Directory bread(block 1054) failed
[  128.958906][ T7135] FAT-fs (loop6): Directory bread(block 1055) failed
[  129.019904][ T7135] FAT-fs (loop6): FAT read failed (blocknr 128)
[  129.021845][ T7162] pim6reg9: entered allmulticast mode
[  129.039006][ T7135] FAT-fs (loop6): Directory bread(block 1048) failed
[  129.191350][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'.
[  129.191401][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'.
[  129.238866][ T7173] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  129.262778][ T7173] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  129.274009][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.485'.
[  129.274042][ T7177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.485'.
[  129.365577][ T7192] FAULT_INJECTION: forcing a failure.
[  129.365577][ T7192] name failslab, interval 1, probability 0, space 0, times 0
[  129.369646][ T7192] CPU: 1 UID: 0 PID: 7192 Comm: syz.2.489 Not tainted syzkaller #0 PREEMPT 
[  129.369666][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  129.369673][ T7192] Call trace:
[  129.369676][ T7192]  show_stack+0x2c/0x3c (C)
[  129.369698][ T7192]  __dump_stack+0x30/0x40
[  129.369711][ T7192]  dump_stack_lvl+0xd8/0x12c
[  129.369723][ T7192]  dump_stack+0x1c/0x28
[  129.369734][ T7192]  should_fail_ex+0x418/0x58c
[  129.369743][ T7192]  should_failslab+0xc4/0x120
[  129.369752][ T7192]  __kmalloc_cache_noprof+0x94/0x5fc
[  129.369762][ T7192]  pkcs7_parse_message+0x68/0x5c8
[  129.369774][ T7192]  verify_pkcs7_signature+0x4c/0xb4
[  129.369785][ T7192]  pkcs7_preparse+0xa0/0xd0
[  129.369797][ T7192]  __key_create_or_update+0x264/0x7fc
[  129.369807][ T7192]  key_create_or_update+0x60/0x7c
[  129.369816][ T7192]  __arm64_sys_add_key+0x384/0x43c
[  129.369826][ T7192]  invoke_syscall+0x98/0x244
[  129.369839][ T7192]  el0_svc_common+0xec/0x23c
[  129.369850][ T7192]  do_el0_svc+0x4c/0x5c
[  129.369862][ T7192]  el0_svc+0x60/0x1d8
[  129.369870][ T7192]  el0t_64_sync_handler+0x44/0x104
[  129.369879][ T7192]  el0t_64_sync+0x198/0x19c
[  129.507240][ T6623] pimreg: left allmulticast mode
[  129.508749][ T6623] batman_adv: batadv0: Interface deactivated: gretap1
[  129.540790][ T7196] loop6: detected capacity change from 0 to 2048
[  129.616711][ T4722] Bluetooth: hci3: command tx timeout
[  129.779217][ T7196]  loop6: p2 < > p3 < >
[  129.815152][ T4342]  loop6: p2 < > p3 < >
[  129.973260][ T6623] batman_adv: batadv0: Removing interface: gretap1
[  129.999174][ T6623] bond0 (unregistering): Released all slaves
[  130.153679][ T7224] netlink: 'syz.1.496': attribute type 1 has an invalid length.
[  130.208028][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.496'.
[  130.354236][ T7247] netlink: 16 bytes leftover after parsing attributes in process `syz.6.497'.
[  130.354252][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.6.497'.
[  130.415966][ T4722] Bluetooth: hci2: command tx timeout
[  130.512121][ T7224] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.526773][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'.
[  130.527285][ T7231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  130.599301][ T7232] bond2: (slave veth0_to_bond): making interface the new active one
[  130.614792][ T7232] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  130.774285][ T7263] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  130.887233][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.890320][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.890400][ T7125] bridge_slave_0: entered allmulticast mode
[  130.893904][ T7125] bridge_slave_0: entered promiscuous mode
[  130.914513][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.914986][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.915109][ T7125] bridge_slave_1: entered allmulticast mode
[  130.924158][ T7125] bridge_slave_1: entered promiscuous mode
[  130.961135][ T7274] loop2: detected capacity change from 0 to 512
[  131.024743][ T7274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.040387][ T7125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.102063][ T7125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.120595][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8
[  131.131043][ T7280] overlayfs: failed to resolve './file1': -2
[  131.167605][ T7125] team0: Port device team_slave_0 added
[  131.388226][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.514900][ T7284] netlink: 32 bytes leftover after parsing attributes in process `syz.2.503'.
[  131.621204][ T7125] team0: Port device team_slave_1 added
[  131.696024][ T4722] Bluetooth: hci3: command tx timeout
[  131.897490][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.897506][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  131.897520][ T7125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.898222][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.898229][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  131.898259][ T7125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.128799][ T7125] hsr_slave_0: entered promiscuous mode
[  132.129098][ T7125] hsr_slave_1: entered promiscuous mode
[  132.129277][ T7125] debugfs: 'hsr0' already exists in 'hsr'
[  132.129288][ T7125] Cannot create hsr debugfs directory
[  132.277327][ T6623] hsr_slave_0: left promiscuous mode
[  132.312651][ T6623] hsr_slave_1: left promiscuous mode
[  132.333650][ T6623] veth1_macvtap: left promiscuous mode
[  132.333689][ T6623] veth0_macvtap: left promiscuous mode
[  132.333765][ T6623] veth1_vlan: left promiscuous mode
[  132.333798][ T6623] veth0_vlan: left promiscuous mode
[  132.462825][ T7329] loop1: detected capacity change from 0 to 1024
[  132.495795][ T4722] Bluetooth: hci2: command tx timeout
[  132.512256][ T7329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.767867][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.782731][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9
[  132.868278][ T7125] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  132.872285][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  132.872576][ T7125] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  132.879680][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  132.881803][ T7125] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  132.897743][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  132.904343][ T7125] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  132.924481][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  132.958872][ T7354] netlink: 'syz.1.512': attribute type 1 has an invalid length.
[  133.332340][ T7381] loop1: detected capacity change from 0 to 1024
[  133.383036][ T7384] binder: 7382:7384 ioctl c0306201 20000680 returned -14
[  133.401142][ T7389] binder_alloc: binder_alloc_mmap_handler: 7382 20ffd000-21000000 already mapped failed -16
[  133.403863][ T7381] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  133.412346][ T7381] JBD2: no valid journal superblock found
[  133.413584][ T7384] binder: 7382:7384 tried to acquire reference to desc 0, got 1 instead
[  133.418718][ T7384] binder: 7382:7384 DecRefs 0 refcount change on invalid ref 2 ret -22
[  133.418819][ T7384] binder_alloc: 7382: binder_alloc_buf, no vma
[  133.418826][ T7384] binder: cannot allocate buffer: vma cleared, target dead or dying
[  133.418847][ T7384] binder: 7382:7384 transaction call to 7382:0 failed 17/29189/-3, code 2 size 104-0 line 3409
[  133.418961][ T7384] binder: 7382:7384 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  133.418974][ T7384] binder: 7384 RLIMIT_NICE not set
[  133.441540][ T7381] EXT4-fs (loop1): Could not load journal inode
[  133.470150][ T7385] binder: 7382:7385 got reply transaction with no transaction stack
[  133.470174][ T7385] binder: 7382:7385 transaction reply to 0:0 failed 18/29201/-71, code 0 size 0-0 line 3156
[  133.470277][ T7385] binder: 7382:7385 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  133.470287][ T7385] binder: 7385 RLIMIT_NICE not set
[  133.470754][ T7385] binder: 7382:7385 BC_ACQUIRE_DONE u0000000000000000 no match
[  133.501881][ T7385] Bluetooth: MGMT ver 1.23
[  133.611371][ T7392] bond0: (slave bond_slave_1): Releasing backup interface
[  133.645211][ T4399] 8021q: adding VLAN 0 to HW filter on device eth11
[  133.784511][ T7125] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.812602][ T7125] 8021q: adding VLAN 0 to HW filter on device team0
[  133.826662][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.826689][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.865168][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.865197][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.161518][ T7429] overlayfs: failed to clone upperpath
[  134.189232][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10
[  134.241887][ T4820] binder: undelivered TRANSACTION_ERROR: 29201
[  134.246975][ T7125] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.412391][ T4858] binder: undelivered TRANSACTION_ERROR: 29189
[  134.454604][ T7450] gre1: left promiscuous mode
[  134.464834][ T7450] 8021q: adding VLAN 0 to HW filter on device bond3
[  134.536528][   T30] audit: type=1326 audit(134.397:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7456 comm="syz.4.526" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579e28 code=0x0
[  134.561779][ T7463] loop2: detected capacity change from 0 to 128
[  134.562818][ T7463] FAT-fs (loop2): data area starts beyond volume (33 > 0)
[  134.562837][ T7463] FAT-fs (loop2): Can't find a valid FAT filesystem
[  134.575877][ T4722] Bluetooth: hci2: command tx timeout
[  134.649102][ T7463] loop2: detected capacity change from 0 to 256
[  134.671097][ T7125] veth0_vlan: entered promiscuous mode
[  134.678773][ T7470] netlink: 'syz.6.528': attribute type 39 has an invalid length.
[  134.763417][ T7125] veth1_vlan: entered promiscuous mode
[  134.780514][ T7125] veth0_macvtap: entered promiscuous mode
[  134.794436][ T7125] veth1_macvtap: entered promiscuous mode
[  134.807136][ T7477] loop1: detected capacity change from 0 to 512
[  134.812986][ T7125] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.827178][ T7477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.832787][ T7125] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.163088][   T54] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.163476][   T54] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.163532][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.163541][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.164561][   T54] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.198137][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.198151][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.216765][ T1309] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.316138][ T7488] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  135.434697][ T7493] __nla_validate_parse: 1 callbacks suppressed
[  135.434712][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.7.531'.
[  135.441758][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz.7.531'.
[  135.447791][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz.7.531'.
[  135.464012][ T7497] netlink: 72 bytes leftover after parsing attributes in process `syz.2.532'.
[  135.556160][ T7501] loop6: detected capacity change from 0 to 1024
[  135.559011][ T7501] ext4: Bad value for 'max_batch_time'
[  135.593782][ T7501] loop6: detected capacity change from 0 to 1024
[  135.594207][ T7501] ext4: Bad value for 'max_batch_time'
[  135.620207][ T7501] loop6: detected capacity change from 0 to 1024
[  135.624131][ T7501] ext4: Bad value for 'max_batch_time'
[  135.655560][ T7501] loop6: detected capacity change from 0 to 1024
[  135.659187][ T7505] loop2: detected capacity change from 0 to 128
[  135.664369][ T7507] loop7: detected capacity change from 0 to 2048
[  135.665429][ T7505] ext3: Unknown parameter 'pcr'
[  135.675542][ T7501] ext4: Bad value for 'max_batch_time'
[  135.688338][ T7509] ext3: Unknown parameter 'pcr'
[  135.722995][ T7501] ext4: Bad value for 'max_batch_time'
[  135.735499][ T7501] ext4: Bad value for 'max_batch_time'
[  135.742574][ T7501] ext4: Bad value for 'max_batch_time'
[  135.756166][ T7501] ext4: Bad value for 'max_batch_time'
[  135.764221][ T7501] ext4: Bad value for 'max_batch_time'
[  135.774494][ T7501] ext4: Bad value for 'max_batch_time'
[  135.800180][ T7501] ext4: Bad value for 'max_batch_time'
[  135.814663][ T7501] ext4: Bad value for 'max_batch_time'
[  135.831184][ T7501] ext4: Bad value for 'max_batch_time'
[  135.848881][ T7501] ext4: Bad value for 'max_batch_time'
[  135.864013][ T7501] ext4: Bad value for 'max_batch_time'
[  135.877679][ T7501] ext4: Bad value for 'max_batch_time'
[  135.893786][ T7501] ext4: Bad value for 'max_batch_time'
[  135.915286][ T7501] ext4: Bad value for 'max_batch_time'
[  135.940926][ T7501] ext4: Bad value for 'max_batch_time'
[  135.954016][ T7501] ext4: Bad value for 'max_batch_time'
[  136.014812][ T7501] ext4: Bad value for 'max_batch_time'
[  136.042735][ T7507]  loop7: p1 p4
[  136.042735][ T7507]  p1: <solaris:  cannot handle version 589825 vtoc>
[  136.043271][ T7507] loop7: p4 size 589824 extends beyond EOD, truncated
[  136.058876][ T7501] ext4: Bad value for 'max_batch_time'
[  136.094098][ T7501] ext4: Bad value for 'max_batch_time'
[  136.141361][ T6375] udevd[6375]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  136.143410][ T7501] ext4: Bad value for 'max_batch_time'
[  136.145174][ T6238] udevd[6238]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  136.183518][ T7501] ext4: Bad value for 'max_batch_time'
[  136.227144][ T7501] ext4: Bad value for 'max_batch_time'
[  136.311870][ T7523] overlayfs: failed to clone upperpath
[  136.321177][ T7501] ext4: Bad value for 'max_batch_time'
[  136.353342][ T7501] ext4: Bad value for 'max_batch_time'
[  136.430404][ T7530] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  136.728239][ T4722] Bluetooth: hci2: command tx timeout
[  137.655619][    C0] sched: DL replenish lagged too much
[  140.577242][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.762645][ T7623] FAULT_INJECTION: forcing a failure.
[  140.762645][ T7623] name failslab, interval 1, probability 0, space 0, times 0
[  140.762664][ T7623] CPU: 1 UID: 0 PID: 7623 Comm: syz.7.548 Not tainted syzkaller #0 PREEMPT 
[  140.762674][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  140.762679][ T7623] Call trace:
[  140.762682][ T7623]  show_stack+0x2c/0x3c (C)
[  140.762699][ T7623]  __dump_stack+0x30/0x40
[  140.762709][ T7623]  dump_stack_lvl+0xd8/0x12c
[  140.762719][ T7623]  dump_stack+0x1c/0x28
[  140.762728][ T7623]  should_fail_ex+0x418/0x58c
[  140.762736][ T7623]  should_failslab+0xc4/0x120
[  140.762744][ T7623]  kmem_cache_alloc_noprof+0x94/0x5d4
[  140.762752][ T7623]  __kernfs_new_node+0xf0/0x7d8
[  140.762762][ T7623]  kernfs_new_node+0xe8/0x130
[  140.762771][ T7623]  __kernfs_create_file+0x60/0x2e0
[  140.762781][ T7623]  sysfs_add_file_mode_ns+0x1e8/0x2a4
[  140.762791][ T7623]  internal_create_group+0x550/0xb30
[  140.762798][ T7623]  internal_create_groups+0x64/0x138
[  140.762805][ T7623]  sysfs_create_groups+0x2c/0x3c
[  140.762812][ T7623]  device_add_attrs+0x17c/0x4e4
[  140.762821][ T7623]  device_add+0x420/0x9e0
[  140.762829][ T7623]  netdev_register_kobject+0x184/0x328
[  140.762840][ T7623]  register_netdevice+0xd74/0x14c0
[  140.762848][ T7623]  macsec_newlink+0x810/0x1184
[  140.762859][ T7623]  rtnl_newlink_create+0x294/0x6b8
[  140.762868][ T7623]  rtnl_newlink+0xfe4/0x138c
[  140.762876][ T7623]  rtnetlink_rcv_msg+0x66c/0x9bc
[  140.762885][ T7623]  netlink_rcv_skb+0x238/0x414
[  140.762894][ T7623]  rtnetlink_rcv+0x28/0x38
[  140.762902][ T7623]  netlink_unicast+0x600/0x7f8
[  140.762911][ T7623]  netlink_sendmsg+0x648/0x948
[  140.762921][ T7623]  __sock_sendmsg+0xc8/0x17c
[  140.762930][ T7623]  ____sys_sendmsg+0x3d0/0x6c8
[  140.762944][ T7623]  ___sys_sendmsg+0x198/0x224
[  140.762954][ T7623]  __sys_sendmsg+0x158/0x204
[  140.762964][ T7623]  __arm64_sys_sendmsg+0x88/0x9c
[  140.762974][ T7623]  invoke_syscall+0x98/0x244
[  140.762984][ T7623]  el0_svc_common+0xec/0x23c
[  140.762994][ T7623]  do_el0_svc+0x4c/0x5c
[  140.763003][ T7623]  el0_svc+0x60/0x1d8
[  140.763011][ T7623]  el0t_64_sync_handler+0x44/0x104
[  140.763018][ T7623]  el0t_64_sync+0x198/0x19c
[  140.842670][ T7643] netlink: 'syz.2.553': attribute type 12 has an invalid length.
[  140.920966][ T7643] syzkaller0: entered promiscuous mode
[  140.920986][ T7643] syzkaller0: entered allmulticast mode
[  140.935700][ T7645] ip6t_rt: unknown flags A
[  140.949452][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'.
[  141.018828][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'.
[  141.225397][ T7670] netlink: 'syz.7.560': attribute type 9 has an invalid length.
[  141.265169][ T6620] nvme nvme1: rdma_resolve_route failed (-110).
[  141.269977][ T7667] nvme nvme1: rdma connection establishment failed (-19)
[  141.704879][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.564'.
[  141.704897][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.564'.
[  141.709538][ T7701] set_capacity_and_notify: 25 callbacks suppressed
[  141.709550][ T7701] loop2: detected capacity change from 0 to 512
[  141.709920][ T7701] EXT4-fs: Ignoring removed i_version option
[  141.709930][ T7701] EXT4-fs: Ignoring removed nobh option
[  141.725522][ T7701] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  141.725538][ T7701] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  141.795962][ T7701] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[  141.796015][ T7701] System zones: 1-12
[  141.796131][ T7701] EXT4-fs (loop2): orphan cleanup on readonly fs
[  141.796408][ T7701] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.564: corrupted in-inode xattr: overlapping e_value 
[  141.796428][ T7701] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  141.796689][ T7701] EXT4-fs (loop2): Remounting filesystem read-only
[  141.797197][ T7701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  142.112867][ T7714] netlink: 20 bytes leftover after parsing attributes in process `syz.7.565'.
[  142.112887][ T7714] netlink: 24 bytes leftover after parsing attributes in process `syz.7.565'.
[  142.116738][ T7714] loop7: detected capacity change from 0 to 512
[  142.117183][ T7714] EXT4-fs: Ignoring removed i_version option
[  142.117193][ T7714] EXT4-fs: Ignoring removed nobh option
[  142.128063][ T7714] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  142.128080][ T7714] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  142.197176][ T7714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[  142.197220][ T7714] System zones: 1-12
[  142.197316][ T7714] EXT4-fs (loop7): orphan cleanup on readonly fs
[  142.197424][ T7714] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.565: corrupted in-inode xattr: overlapping e_value 
[  142.197438][ T7714] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  142.197845][ T7714] EXT4-fs (loop7): Remounting filesystem read-only
[  142.198371][ T7714] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  145.207843][ T1138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.208001][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.657768][ T6616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.658276][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.048487][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.048633][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.297868][  T865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.877899][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.947565][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.366064][  T865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.556699][ T6612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.746240][  T865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.778954][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.505890][ T6622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.506024][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.887454][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.417027][ T4858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.417358][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.646973][ T4858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.666366][ T4800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.086962][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.966949][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.206500][ T6264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.206614][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.637648][   T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.657856][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.657997][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.336365][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.367673][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.397048][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.507545][ T1568] ieee802154 phy1 wpan1: encryption failed: -22
[  188.048016][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.737174][ T4720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.737349][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.696481][ T4800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.457653][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.457783][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.638315][ T6622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.638483][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.867214][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.786473][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.786610][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.376010][ T6626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.697141][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.457888][ T4815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.497814][ T4815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.717434][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.737923][ T4838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.738074][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.305719][ T6629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.686470][ T4820] net_ratelimit: 3 callbacks suppressed
[  199.686487][ T4820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.686619][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.537653][ T7733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.537790][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  203.126054][ T1138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  203.126201][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.306879][ T7733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.307022][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.316584][  T865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.607832][ T7733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.608137][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.898374][ T4820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.898687][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.336193][ T4820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.336326][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.937247][ T1249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.937376][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.078916][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.596285][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.036097][  T865] net_ratelimit: 1 callbacks suppressed
[  211.036114][  T865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.538216][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.538474][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.056766][ T7732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.716500][ T6625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.716632][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.037619][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.037925][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.607394][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.178720][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.179027][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.376616][ T7733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.376751][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.747774][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.747947][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.286002][  T865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.868634][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.868771][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.946903][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.947081][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.047248][ T7732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.397399][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.397538][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.436316][ T6615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.436455][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.297438][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.297621][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.385729][ T7732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.846174][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.846477][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.047313][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.047648][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.106850][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.966974][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.967119][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.407762][ T6611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.407889][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.176941][ T4858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.177322][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.237576][ T7732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  243.317643][ T4858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  243.317943][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.027781][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.027128][ T7732] net_ratelimit: 1 callbacks suppressed
[  246.027145][ T7732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.197566][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.197709][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.538188][ T4709] Bluetooth: hci3: command 0x0406 tx timeout
[  247.286857][ T4820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.287012][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.896699][ T6612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.896789][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.959115][ T4342] udevd[4342]: worker [6278] /devices/virtual/block/loop7 is taking a long time
[  248.035616][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  248.036938][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P7731/1:b..l P7729/3:b..l
[  248.038559][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=13373, q=2079169 ncpus=2)
[  248.039999][    C1] task:syz.1.569       state:R  running task     stack:0     pid:7729  tgid:7728  ppid:4708   task_flags:0x400040 flags:0x00000001
[  248.042444][    C1] Call trace:
[  248.043044][    C1]  __switch_to+0x2b4/0x6e4 (T)
[  248.043915][    C1]  __schedule+0x135c/0x2b00
[  248.044727][    C1]  preempt_schedule_common+0xd4/0x190
[  248.045704][    C1]  preempt_schedule+0x60/0x78
[  248.046574][    C1]  __local_bh_enable_ip+0x16c/0x234
[  248.047546][    C1]  __dev_queue_xmit+0x14d4/0x2a68
[  248.048488][    C1]  ip_finish_output2+0xa80/0xee4
[  248.049394][    C1]  __ip_finish_output+0x198/0x41c
[  248.050298][    C1]  ip_finish_output+0x44/0x2fc
[  248.051128][    C1]  ip_output+0x28c/0x400
[  248.051871][    C1]  ip_local_out+0x110/0x148
[  248.052676][    C1]  __ip_queue_xmit+0xd58/0x162c
[  248.053561][    C1]  ip_queue_xmit+0x5c/0x7c
[  248.054383][    C1]  __tcp_transmit_skb+0x1d08/0x34d4
[  248.055273][    C1]  tcp_connect+0x1170/0x3228
[  248.056122][    C1]  tcp_v4_connect+0xc3c/0x13e4
[  248.056952][    C1]  __inet_stream_connect+0x1f4/0xc14
[  248.057890][    C1]  inet_stream_connect+0x74/0xb0
[  248.058781][    C1]  __sys_connect_file+0x13c/0x184
[  248.059677][    C1]  __sys_connect+0x114/0x194
[  248.060495][    C1]  __arm64_sys_connect+0x84/0x9c
[  248.061410][    C1]  invoke_syscall+0x98/0x244
[  248.062229][    C1]  el0_svc_common+0xec/0x23c
[  248.063061][    C1]  do_el0_svc+0x4c/0x5c
[  248.063840][    C1]  el0_svc+0x60/0x1d8
[  248.064589][    C1]  el0t_64_sync_handler+0x44/0x104
[  248.065527][    C1]  el0t_64_sync+0x198/0x19c
[  248.066352][    C1] task:syz.6.570       state:R  running task     stack:0     pid:7731  tgid:7730  ppid:6798   task_flags:0x400140 flags:0x00000001
[  248.068830][    C1] Call trace:
[  248.069430][    C1]  __switch_to+0x2b4/0x6e4 (T)
[  248.070286][    C1]  __schedule+0x135c/0x2b00
[  248.071100][    C1]  preempt_schedule_irq+0x74/0x174
[  248.071993][    C1]  raw_irqentry_exit_cond_resched+0x30/0x40
[  248.073061][    C1]  irqentry_exit_to_kernel_mode_preempt+0x44/0x54
[  248.074180][    C1]  arm64_exit_to_kernel_mode_preempt+0x1c/0x38
[  248.075270][    C1]  el1_interrupt+0x4c/0x60
[  248.076043][    C1]  el1h_64_irq_handler+0x18/0x24
[  248.076918][    C1]  el1h_64_irq+0x78/0x7c
[  248.077639][    C1]  inet6_fill_ifla6_attrs+0x110/0x1dbc (P)
[  248.078633][    C1]  inet6_fill_link_af+0xac/0x144
[  248.079488][    C1]  rtnl_fill_link_af+0x190/0x444
[  248.080363][    C1]  rtnl_fill_ifinfo+0x1f7c/0x2150
[  248.081257][    C1]  rtmsg_ifinfo_build_skb+0x170/0x25c
[  248.082202][    C1]  rtmsg_ifinfo_event+0xb0/0x114
[  248.083065][    C1]  rtmsg_ifinfo+0x60/0x7c
[  248.083811][    C1]  __dev_notify_flags+0x208/0x438
[  248.084678][    C1]  netif_change_flags+0xd0/0x15c
[  248.085550][    C1]  do_setlink+0xc28/0x31e8
[  248.086350][    C1]  rtnl_newlink+0xe90/0x138c
[  248.087146][    C1]  rtnetlink_rcv_msg+0x66c/0x9bc
[  248.088018][    C1]  netlink_rcv_skb+0x238/0x414
[  248.088835][    C1]  rtnetlink_rcv+0x28/0x38
[  248.089670][    C1]  netlink_unicast+0x600/0x7f8
[  248.090513][    C1]  netlink_sendmsg+0x648/0x948
[  248.091348][    C1]  __sock_sendmsg+0xc8/0x17c
[  248.092178][    C1]  ____sys_sendmsg+0x3d0/0x6c8
[  248.093070][    C1]  ___sys_sendmsg+0x198/0x224
[  248.093916][    C1]  __sys_sendmsg+0x158/0x204
[  248.094741][    C1]  __arm64_sys_sendmsg+0x88/0x9c
[  248.095617][    C1]  invoke_syscall+0x98/0x244
[  248.096407][    C1]  el0_svc_common+0xec/0x23c
[  248.097232][    C1]  do_el0_svc+0x4c/0x5c
[  248.097925][    C1]  el0_svc+0x60/0x1d8
[  248.098592][    C1]  el0t_64_sync_handler+0x44/0x104
[  248.099498][    C1]  el0t_64_sync+0x198/0x19c
[  248.102062][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.316704][ T7125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.843045][ T1568] ieee802154 phy1 wpan1: encryption failed: -22
[  249.216084][ T4800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.420971][ T4820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.421079][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.919902][ T4715] Bluetooth: hci2: command 0x0406 tx timeout
[  251.957860][   T26] net_ratelimit: 2 callbacks suppressed
[  251.957877][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.957982][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.978360][ T6616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.978456][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.256304][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.216992][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.217126][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.297409][ T6614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.297504][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.288128][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
SYZFAIL: failed to send rpc
fd=3 want=29536 sent=0 n=-1 (errno 32: Broken pipe)
[  257.106846][    T9] net_ratelimit: 6 callbacks suppressed
[  257.106863][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.339345][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.544878][ T6616] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.544905][ T6616] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.558181][ T4800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.558374][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.614961][ T4800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.776885][ T6614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.776973][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.788256][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.788354][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.927488][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog