last executing test programs:

20.869750661s ago: executing program 4 (id=5):
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ec, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1200084, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbc9, &(0x7f00000027c0)="$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")

19.412995523s ago: executing program 4 (id=9):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0403d15, 0x0)
mount$9p_virtio(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000300), 0x10000, &(0x7f0000000340))
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './cgroup\x00'})
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3000, 0x0, &(0x7f0000b2b000/0x3000)=nil)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast, @initdev}, &(0x7f00000001c0)=0xc)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280))
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x4, 0x20, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x40, 0x3, 0xb7d}})
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4)
r7 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r7, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x22}, {&(0x7f0000000180)="e196bc1480bb", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}, 0x2400c004)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'hsr0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r9, @ANYBLOB="400d00000000000030001280080001006873720024000280"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003"], 0x44}}, 0x20008004)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000440)={@private2}, &(0x7f0000000480)=0x14)

18.910839569s ago: executing program 4 (id=12):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x2f, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004814}, 0x20000800)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000900)="01020304", 0x4, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df2508000300010000000800011300000008004a000100000008004b001300000000fc4ff0fe86c99bde8eecd60000"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)

18.832773294s ago: executing program 4 (id=13):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804000000000014"], 0x3c}}, 0x8000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x6, @remote, 0x7}}, 0x4, 0xca61, 0x8, 0x8, 0x0, 0x2}, &(0x7f0000001c00)=0x9c)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780050015000200000008001240"], 0x64}}, 0x0)

18.832089816s ago: executing program 4 (id=14):
r0 = semget$private(0x0, 0x7, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x8001, 0x1000}], 0x1, &(0x7f0000000040))
openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x101040, 0x191}, 0x18)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0) (async)
syz_open_procfs(0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x494000, 0x0)
openat(r1, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r2, &(0x7f0000000500)=""/10, 0xa)
read(r2, &(0x7f0000000500)=""/10, 0xa)
read(r2, &(0x7f0000000500)=""/10, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
io_setup(0x3, &(0x7f00000000c0)=<r3=>0x0)
io_pgetevents(r3, 0x0, 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000180), &(0x7f0000000240)={&(0x7f0000000200)={[0xb3b]}, 0x8}) (async)
io_pgetevents(r3, 0x0, 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000180), &(0x7f0000000240)={&(0x7f0000000200)={[0xb3b]}, 0x8})
syz_clone(0x408000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="6652522b5da227a18c163fcd644bf17cd1df34d0aeb4da7ceb2889b5d5103de236e36cbdb211dc264793f2930a7d1c794c018a2de2d4c8ab4a180c1630bf8cb0dc6bf9addaf9d18fdd9a862f2b4c17eab12f9bac7cf0d784e38d474bc0c7bc46978e26f2e6f8f3d4382ce0e31b11bd3b6f705e640971d40bd764da9e9f458cb1bd057493f34b69c9fd12b332a77f45424066b88a4135752541ed0dc4f4db26539aca517b74309e19df46355c62ada46f703ecfb0f7c23ad3259e4af0aadfcac088b99d17") (async)
syz_clone(0x408000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="6652522b5da227a18c163fcd644bf17cd1df34d0aeb4da7ceb2889b5d5103de236e36cbdb211dc264793f2930a7d1c794c018a2de2d4c8ab4a180c1630bf8cb0dc6bf9addaf9d18fdd9a862f2b4c17eab12f9bac7cf0d784e38d474bc0c7bc46978e26f2e6f8f3d4382ce0e31b11bd3b6f705e640971d40bd764da9e9f458cb1bd057493f34b69c9fd12b332a77f45424066b88a4135752541ed0dc4f4db26539aca517b74309e19df46355c62ada46f703ecfb0f7c23ad3259e4af0aadfcac088b99d17")
mount(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x2008001, 0x0)

18.204688811s ago: executing program 4 (id=20):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x1, 0x51a, &(0x7f00000001c0)="$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") (async, rerun: 64)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) (rerun: 64)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000008c0)=0x1) (async, rerun: 64)
lgetxattr(&(0x7f0000000880)='./file1\x00', &(0x7f0000000b40)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000c00)=""/221, 0xdd) (async, rerun: 64)
recvmsg$can_bcm(r0, &(0x7f0000000b00)={&(0x7f0000000140)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/91, 0x5b}, {&(0x7f0000000780)=""/217, 0xd9}, {0x0}, {&(0x7f0000000900)=""/1, 0x1}, {0x0}], 0x5}, 0x10021)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async, rerun: 32)
r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10)
syz_emit_ethernet(0x44, &(0x7f0000000940)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x68, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"38cab3bc525a100aa74fa750066d"}}}}}}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x4) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32)
write$binfmt_misc(r2, &(0x7f0000000000), 0x6) (rerun: 32)

4.351179427s ago: executing program 2 (id=187):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = fsopen(&(0x7f0000002280)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x82)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x78)
lseek(r4, 0xffffffffffffffff, 0x1)
r5 = socket(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0606120c"], 0x9)
recvmmsg$unix(r5, &(0x7f0000001500)=[{{0xfffffffffffffffe, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2022, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0)
write(r5, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb4700", 0x13)
close(r1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x3)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
fcntl$lock(r7, 0x26, &(0x7f0000000180)={0x1, 0x2, 0x1, 0x5})
close(r10)
socket$unix(0x1, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3.260464666s ago: executing program 2 (id=206):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2008084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffe, 0x800, 0x3, 0xd, 0x6}, 0x80000029}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48004}, 0x20004000)
r2 = socket$kcm(0x23, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x571, &(0x7f0000000bc0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x10)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000040)={0x3, 0xfffffffffffffc07, 0xf8bf, 0x7, 0xf, 0xfffb})
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000680)={0x80, 0x8, 0x100, 0xfffffffffffffff8, 0x5, 0x9})
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0)
connect$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$eJzs3U1vG0UfAPD/Ok7f0udpKlUVcECReqCo1GkSXorEoRwRVFSCe7GSbVTFqavYqZpQifZAL1xQhYQQlRAfgDvHii/Ap+iBShWqIjhwMVpnnbqNnbiJ27j495M2mdkdZ3Y8O+MZj50NYGhNZD8KEa9GxLdJxJG2Y8XID06sp1t7dGM225JoND77M4kk39dKn+S/x/LIKxHx29cRpwqb862trC6UK5V0KY9P1hevTtZWVk9fXizPp/PplemZmbPvzEy//967fSvrmxf+/uHTex+d/ebE2ve/PDh6J4lzcTg/1l6OXbjZHpmIifw5GY1zTyWc6kNmgyTZ6xNgR0bydj4aWR9wJEbyVg/8930VEQ1gSCXaPwyp1jigNbfv0zz4pfHww/UJ0ObyF9ffG4kDzbnRobXkiZlRNt8d70P+WR6//nH3TrZF/96HANjWzVsRcaZY3Nz/JXn/t3NnekjzdB76P3hx7mXjn7c6jX8KG+Of6DD+GevQdndi+/ZfeNCHbLrKxn8fdBz/bixajY/ksf81x3yjyaXLlTTr2/4fESdjdH8W32o95+za/Ua3Y+3jv2zL8m+NBfPzeFDc/+Rj5sr18m7K3O7hrYjXOo5/k436TzrUf/Z8XOgxj+Pp3de7Hdu+/M9X4+eINzrW/+MVrWTr9cnJ5vUw2boqNvvr9vHfu+W/1+XP6v/Q1uUfT9rXa2vPnsdPB/5Jux3b6fW/L/m8Gd6X77terteXpiL2JZ9s3j/9+LGteCt9Vv6TJ7bu/zpd/wcj4osey3/72O2uSQeh/ueeqf6fPXD/4y9/7JZ/b/X/djN0Mt/TS//X6wnu5rkDAAAAAACAQVOIiMORFEob4UKhVFr/fMexOFSoVGv1U5eqy1fmovld2fEYLbRWusfaPg8xlX8ethWffio+ExFHI+K7kYPNeGm2Wpnb68IDAAAAAAAAAAAAAAAAAADAgBjr9P3/1v9bH9njkwOeP7f8huG1bfvvx52egIHk9R+Gl/YPw0v7h+Gl/cPwKq7fzxgYQl7/YXhp/zC8tH8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqwvnz2dbY+3RjdksPndtZXmheu30XFpbKC0uz5Zmq0tXS/PV6nwlLc1WF7f7e5Vq9erUdCxfn6yntfpkbWX14mJ1+Ur94uXF8nx6MR19IaUCAAAAAAAAAAAAAAAAAACAl0ttZXWhXKmkSwICOwoUB+M0BPoc2OueCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe+zcAAP//eIg3rQ==")
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="1d00"], 0x8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc000000130005000100000000000000000000000000000000000000000000010000000000000000000000000100000a00808000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000100001234330000000a0000000000000000000000000000000000000100"/180], 0xfc}}, 0x0)
sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A7', 0x2}], 0x1}}], 0x1, 0x4000801)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x4}]}]}, {0x0, [0x0, 0x30, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28)
fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1})

3.196476144s ago: executing program 32 (id=20):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x1, 0x51a, &(0x7f00000001c0)="$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") (async, rerun: 64)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) (rerun: 64)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000008c0)=0x1) (async, rerun: 64)
lgetxattr(&(0x7f0000000880)='./file1\x00', &(0x7f0000000b40)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000c00)=""/221, 0xdd) (async, rerun: 64)
recvmsg$can_bcm(r0, &(0x7f0000000b00)={&(0x7f0000000140)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/91, 0x5b}, {&(0x7f0000000780)=""/217, 0xd9}, {0x0}, {&(0x7f0000000900)=""/1, 0x1}, {0x0}], 0x5}, 0x10021)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async, rerun: 32)
r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10)
syz_emit_ethernet(0x44, &(0x7f0000000940)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x68, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"38cab3bc525a100aa74fa750066d"}}}}}}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x4) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32)
write$binfmt_misc(r2, &(0x7f0000000000), 0x6) (rerun: 32)

3.188842761s ago: executing program 2 (id=209):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8)
listen(r6, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000180), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)

3.058355238s ago: executing program 2 (id=212):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000800)=ANY=[@ANYRES8=r0], 0x170}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r2)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
sendmmsg(r0, &(0x7f0000005800)=[{{&(0x7f00000017c0)=@can={0x1d, r5}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000000c0)='\x00\x00\b\x00', 0x4}, {&(0x7f0000000100)="0a7aab37d5f95ed84a016028ea92060409df749a66bdd0ee63e7fc261ebd361048d641abdb147b1399ce9950617717224d28682f8c8b1c6e3db0c04d6710fba422897a58dcc5addaf6a3f6340944", 0x4e}, {&(0x7f0000001440)="54f896b068096ab158057ade4380958ae99ea4bd2709d907fd0f86997d834e6a2bc91d465634fa2afad052b262defb9d5ceb5359e94a52a19a6d137f72dec34a62e7e070c310e09d2372a306029ffa56c833239748717ef6da0279c03df864e028cbfe06242cd96f2655b41d03cd6247ba43650593565a0c96ba52eea8f7904cd69f405a8cf12e543742005f90e818a68df49986b336a4bcbc343e1c1783ed3cd5896594b9019006ae64b227d0922849eb4273db89552c5810fdce218547b09a15f06b2a4498b888", 0xc8}, {&(0x7f0000000380)="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", 0x5e0}], 0x4}}], 0x1, 0x4005)

1.660604738s ago: executing program 0 (id=224):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x2c, 0x2d, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0xb}, {0x9, 0xfff1}, {0xd, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x2c, 0x2d, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0xb}, {0x9, 0xfff1}, {0xd, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004840}, 0x0)
write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e00080000"], 0x1c)
write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000020a000001162e04d200080000"], 0x1c) (async)
write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000020a000001162e04d200080000"], 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x16, 0x10}, {0xf, 0x4}, {0x0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7}}]}, 0x2c}}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c)
sendmmsg$unix(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c05c}}], 0x1, 0x2400c082)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000280), 0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x3800}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
socket(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r7=>0x0})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r8, 0x29, 0xd0, 0x0, 0xfffffffffffffffe) (async)
getsockopt$inet6_int(r8, 0x29, 0xd0, 0x0, 0xfffffffffffffffe)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
fcntl$setstatus(r0, 0x4, 0x2000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000003d0007130fd492c99379880003"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000003d0007130fd492c99379880003"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
fsopen(&(0x7f0000000240)='cgroup\x00', 0x1) (async)
fsopen(&(0x7f0000000240)='cgroup\x00', 0x1)

1.600290358s ago: executing program 1 (id=225):
r0 = userfaultfd(0x40001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xf2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r2=>0x0, 0x4, 0x83, 0x3, 0x1000, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x20, 0x9, 0x9}})
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000140)=r2)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f00000001c0)=0x7)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r4=>0x0})
process_vm_writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f0000000500)=""/20, 0x14}, {&(0x7f0000000540)=""/29, 0x1d}, {&(0x7f0000000580)=""/25, 0x19}], 0x7, &(0x7f0000002a40)=[{&(0x7f0000000640)=""/71, 0x47}, {&(0x7f00000006c0)=""/119, 0x77}, {&(0x7f0000000740)=""/116, 0x74}, {&(0x7f00000007c0)=""/86, 0x56}, {&(0x7f0000000840)=""/175, 0xaf}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/170, 0xaa}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/66, 0x42}], 0x9, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000002b00), 0x8, 0x640000)
name_to_handle_at(r5, &(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x1, 0xdd, 0x401, 0x1}}, &(0x7f0000002bc0), 0x400)
ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000002c00)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, {0x1}, 0x833b50f7095b7fed, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'pim6reg1\x00'})
mount(&(0x7f0000002c80)=@sg0, &(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00)='gfs2\x00', 0x28800, &(0x7f0000002d40)='\x19&.*+%,\x00')
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000002d80)={<r6=>0x0, 0x6f, "533807ef87049c94d70eb14d06c7fde6a0c84c01239d2c2c29b71cc705e93983dcec43533622bea97a3b39f96003e431c48634e0378ba9168ff0d127502d03043e7fb7e956eeadd101c685bcd20b71fd597bec21c1d9a680e5e4fb1859d125ea06cbed71a1023a7c3c1e6718259b2d"}, &(0x7f0000002e00)=0x77)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000002e40)={r6, @in6={{0xa, 0x4e23, 0xd25, @mcast1, 0x5}}}, 0x84)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002f00)='/proc/consoles\x00', 0x0, 0x0)
ioctl$VIDIOC_S_PRIORITY(r7, 0x40045644, 0x0)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000002f40)={0x0, 0x0, 0x101, 0x7, {0x10, 0x9, 0x3ff, 0xa5}})
r8 = syz_open_dev$mtd(&(0x7f0000002f80), 0x1, 0x30002)
ioctl$OTPSELECT(r8, 0x80044d0d, &(0x7f0000002fc0))
r9 = openat$full(0xffffffffffffff9c, &(0x7f0000003000), 0x8000, 0x0)
r10 = openat$panthor(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r10, 0xc00864c0, &(0x7f0000003080))
ioctl$XFS_IOC_FSBULKSTAT(r8, 0xc0205865, &(0x7f0000003800)={&(0x7f00000030c0)=0x8, 0x7, &(0x7f0000003100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000037c0)})
ioctl$MEMLOCK(r3, 0x40084d05, &(0x7f0000003840)={0x5, 0x1})
syz_ublk_setup_queues(r7, 0x0, &(0x7f0000003880)={0x0, 0xd4c1, 0x2000, 0x1, 0x218, 0x0, r5}, &(0x7f0000003900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf1a, 0x80, 0x1, 0x75, 0x0, r5}, <r11=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5938, 0x1002, 0x0, 0x216, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e70, 0x8, 0x2, 0x3a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9703, 0x8000, 0x1, 0xd2}}], 0x4, &(0x7f0000004b80)={0x2e, 0x8, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7f}, 0x0, 0x0, '\x00', {0x3, 0xe93, 0x0, &(0x7f0000003b80)=@buf_512="60d1f7683a4b18797614ba5b3d0751b8596260ff680b739feed8e540f5732653c51ff0b863835548efc650a5ce4a6d546b0caef9e8251b2f1dfb078cd0c446892ac7e384d1e0451a7c04cdf2fe1155088f9f7d2b805eab2904540bedbb33c1ec3fb00db498e82e9958179eaf30b40312fc0ec5c7bb9daadafff9cb7af17e99ebb3a7e730b2158809ac559a039703683bfc8ec883df82b08f8085df0e926c9294233652134b4a9e3e8df780ae9b5d420a58edf39002eb8668e3ad4e28670fb6bf1019de4d959a9c1dd182b55ff0a9d8a95e6f49bb1d9114f1bfe94bed089357305e1f1c2962a350c415211112ed1cf18d052a8e83f57d4fb3d6413041c38fa0936ca0a27b9c8c727dc08d5b66871b7fec0c6169c294ead00691e66e83691150db3233742eee9ece10d9fd5d80458c92a60cf3c0ad5325e2c4e7f021f40d8df8046ff6c1275a5a66c03535bd7bf33f34917cf66d578e990a520dda5b347a6a6994ca62db60e703847e250ac6a227cba6aaba396a16cfa6de94e619b323964f3fd9354bdf5bf1189255b488c55141c2bf0be08aa7c6af47d5bacb2d5651ddb47146df828e414a0d6eabc948550c03923aa1a09c52fe237e8a90410f7c2e01e11cb7e828520890770cf5a033fa03934b4da16cb982ea725b0d2da4ec2da38045e2bd72d6a0712d905850602cda801e84a47846a063f6ad34b309f59906f381562b4b"}}, &(0x7f0000004c00))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r11, 0xe, &(0x7f0000004dc0)={0x5, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004c40)=""/163, 0xa3}], &(0x7f0000004d40)=[0x4, 0x6, 0x7fffffffffffffff, 0x40, 0x8000, 0x7, 0x7, 0x2, 0x400], 0x1}, 0x20)
connect$inet(r5, &(0x7f0000004e00)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000005080)={&(0x7f0000004e40)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000005040)=[{&(0x7f0000004e80)="a372570a4bbb164e1f6cc9aaf2ce9925efcd5b37be816d04a4abe5e345c7810c48af50bc159615874cead3c40e78a7f56251be9920556232bc01e55dad0f9ff6377200d535113fc47e7a51ae51eae65118e3a7dfbfade205f318c5", 0x5b}, {&(0x7f0000004f00)="a53a520bef6caeec812c37014854", 0xe}, {&(0x7f0000004f40)}, {&(0x7f0000004f80)="823eefc5a7e880df4c3a5a7ff3de20d8d6403a6cedb018c7ae98b4af414b7340017548a150c4618439b201aac73c69a1f11a06c8b215bf420f1c2e4f201a4909a35e37a15abaa8cb03215f986326f1961413fcb7fc081efc9252e81dd693e94aeedd7c50ec8d489da8a6d31edd95186b3f009ea3a1f52bf3d7fbec1142a8950871517da609c480c2f6cc36f49373ada568d54b9fa98da755f66b5950e23a6b7d6fb48b9148a8f42b5f895745f37be9d7be7c2ccc0f660813a1", 0xb9}], 0x4}, 0x800)

1.514230316s ago: executing program 1 (id=227):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x17, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_MARK={0x0, 0x10, 0x747b16eb}]}, 0x60}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101000007000000"], 0x60}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@can_newroute={0x1c, 0x18, 0x821, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}}, 0x800)

1.264106622s ago: executing program 1 (id=228):
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000090000000000000000", 0x25}, {&(0x7f0000000080)="e3da9b", 0x3}, {0x0, 0xbb}], 0x3}, 0x0)
r1 = gettid()
sigaltstack(&(0x7f0000000000)={&(0x7f00000020c0)=""/4099, 0x80000000, 0xfffffffffffffefe}, 0x0)
rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0xb, 0x4})

1.236570955s ago: executing program 1 (id=230):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20044040}, 0x44040)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x18})
fstat(r1, &(0x7f0000002a00))
syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x9, 0x1480012, r3})
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c04018006041000", 0x2c}, {0x0}], 0x2}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x4, r6, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x83, @private1, 0xb}}}, 0xa0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@netkit}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4004090)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c000000090601020000000000000000020000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb0600044000040000050007000600000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

1.070814517s ago: executing program 2 (id=233):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0)
recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x2bb3}, {{0x0, 0x0, 0x0}, 0x4f56}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000bc0)=""/109, 0x6d}, {&(0x7f0000000d00)=""/208, 0xd0}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/188, 0xbc}, {&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f0000000700)=""/87, 0x57}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000980)=""/180, 0xb4}], 0xb}}], 0x3, 0x40002000, 0x0)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20)
write(r1, &(0x7f0000000280)='0', 0x1)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x0, 0x7fffffff, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x68, 0x0, 0xdc, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x16}}}}})
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="2c000680"], 0x78}}, 0x0)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r8=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001c08e48c448f368d777e8e5be742deb10000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800a0014000180c200000c00000800090000000000"], 0x48}}, 0x0)
tkill(r9, 0x17)
ptrace$peeksig(0x4209, r9, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0))
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r11)

1.022000957s ago: executing program 3 (id=234):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000008000685d000000fdff00003d128e6c03f91a2bbaf2cbfa71eaf37d46375655a79b6ea97270a9391b61c8dc3740d4afb0b7a6509440c4e972f3b6b6b94c879837b4f24b073477fd780a8f6b4990bee0afbaaa31c4fa7fbcde0d3aa0cc2ffb615a91aa9800f8504d8a923b890ddb6b4c9cb4c09e2f4e69186944d6ce0d642c9ad4c7c6933b2c5b12871b1836babaf15b0538564441062bf2de852108f04d83801df3cd3b8bd8"], &(0x7f0000000280)='GPL\x00', 0x8, 0x75, &(0x7f00000001c0)=""/117}, 0x94)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000002f80)=""/54)

961.582945ms ago: executing program 3 (id=235):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}})
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0xb02f, 0x800)

696.461043ms ago: executing program 3 (id=236):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x814000, &(0x7f0000000000), 0x1, 0x793, &(0x7f0000001700)="$eJzs2M1rnNUeB/Df82SSm7a5nfTeu7i9m15uL7Rw6eStDU3vpr1wBUGwUHClYrCTNGTSlExKTVYpLnXhQlARQbtxIdIshG5EA4J/gG7svyCIii5cCCPPZPJCMkljnfTQ9POBM3POc+aZ7+/My8OcCeCJ9c/iJovoi4jBiCi3jucR0dPs9UYsrT7u7sjytaJl0Whc+T4rTos7I8vX1p4ra90fieYpcToi/vdUFn99dXtufWFxerxWq861xgPzMzcG6guLZ6Zmxierk9Xrw8Pnz42dHRodHevYWocG4sUvPrn43NKlmx8PPj87XdTb15rbvI5OytocK0XEC/sRlkBXaz1dm45lpYQFAQCwq+J3/l8i4l/N33Dl6IqNH2/luP950uIAAACAjmicaAAAAAAHXOr/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeDw0Glk0AAAAgAMt9f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Xu6MLF9ba48y97tLEdG/mn+31VZnSrHUvO+N7og4/FMWpU3nZREx2IH8pdvRfN7t68+a+f3R2xxtzc8j4nKH8uPvD5f/Ugfy4Um2Ulx/Lrb7/uXr159o8/0rrZ72h61d/+5uu/5t5HftcP27sceMD79+9vUd829H/KPULj9bz892yF/aY/5nzxx/Z6e5xgcRp6J9/uasgfmZGwP1hcUzUzPjk9XJ6vXh4fPnxs4OjY6ODUxM1aqDq7dtM9776LUvd1v/4Z3ys9j19X9jt0U3Nronj/330/d3yT99cvf3v93rX9S0vFv+Jj9+dfTXneaK/Ks7rP9B7//KHvOfvnf53h4fCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAAZFHRF9keWW9n+eVSsSRiPhbHM5rs/X5/0zM3rx+tZiL6I/ufGKqVh2MiPLqOCvGQ83+xnh4y3gkIo5FxJvlQ81x5eXZ2tXUiwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDdkYjoiyyvREQeET+X87xSSV0VAAAA0HH9qQsAAAAA9p39PwAAABx89v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADss2MnVu5nEbF04VCzFXpac93bH37r/43Goy0Q2Dd56gKAZLpSFwAkU0pdAJBMmz0+8ITJHjDf+xAzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw8p46v3M8iYunCoWYr9LTmupNWBuy3PHUBQDJdqQsAkimlLgBIxh4fyB4w3/sQMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcPH3NluWViMib/TyvVCL+HBH90Z1NTNWqgxFxNCK+KXf/qRgPpS4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAjqsvLE6P12rVOR2dtU6p9eF4lKE9nfxANtK/ho99J+FFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZOoLi9PjtVp1rp66EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANLKv80iominyv/u2zrbk/1Sbt5HxK13r7z1yvj8/NxQcfyH9ePzb7eOD6eoHwAAANhqbZ++to8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYq/rC4vR4rVad28dO6jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL/PbwEAAP//Lj6eNg==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a88000000060a010400000000000000000a0004050900010073797a31000000005c000480580001800a000100696e6e6572000000480002800800044000000017240005800c0001007061796c6f6164001400026c080003400000009208000240000000000800034000000002080002400000008408000140000000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./lower2\x00', &(0x7f0000000440)='debugfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0)
write$FUSE_IOCTL(r1, &(0x7f0000004480)={0x20, 0xffffffffffffffda, 0x0, {0x4, 0x0, 0xffff, 0x6}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000002680)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00.\xca*\x99!\x97\x9c\x14.7\v\xe9A\xd0\xb3L\xaf\x14\x98\x88\xff\xed\x95\x0e\xe2\xf65Z\x1eY\xd6\x82\x88wK\x0e\xbb\xfd#n\xb48\xc2\xb9\xb0\f=q\x98\xd0\x80\x95\xdbm~\x9c2W\xec\n`F\x1aU\xce\xc0\xf3\xca\x17V\x97U\xad\xf1\x9fS=Y\xa6\xbe6G\x0fr\xe0^\x8dD\xd6\x1d\xd8\xbe\x17\xd7\x19\xf9pfr\xf1\x0f\xe8\x8c\'S\xe9\x93\xc2\f\xdc\xc3S\x16\f\x8bSR\xb5\xfd\xa48\xa1-\xdc\\\xa8R\x12\xdd\xb4\xfc\xc7\xc9\x01\x83\x0eH2\xc0\xb7\'\x18\x8e=x\xebCH\x17P\xc4hF\xcar/\x89*7\x0f[\xae\xcf\xd7\xce\xd3m\x9eL^\xa2\xf8E\xb0\x9b\x81\x1c\xfe')

689.44377ms ago: executing program 2 (id=237):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c5, &(0x7f0000000480)="$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")
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in6=@private0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000c00)=0xe8)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x202c03, &(0x7f0000000040)={[{@noauto_da_alloc}, {@dioread_nolock}, {@nodioread_nolock}, {@orlov}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@dont_appraise}], 0x2c}, 0x0, 0x466, &(0x7f0000000c40)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)

594.443974ms ago: executing program 1 (id=238):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4b6, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c0001000002"], 0x60}}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240408d1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

573.369694ms ago: executing program 3 (id=239):
r0 = epoll_create1(0x0)
epoll_pwait(r0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
copy_file_range(r1, &(0x7f0000000040)=0x2, r1, &(0x7f00000000c0)=0x3ff, 0x13, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000000000000002000000090001006c797a3000000000"], 0x20}}, 0x0)
sendto$inet6(r1, &(0x7f0000000080)="e10679b202eefe", 0x7, 0x24004845, &(0x7f0000000000)={0xa, 0x2, 0x5, @dev={0xfe, 0x80, '\x00', 0x24}}, 0x1c)

524.562233ms ago: executing program 0 (id=240):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
io_uring_setup(0x504b, &(0x7f0000000000)={0x0, 0x48b3, 0x400, 0x1, 0x1c8})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)
setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

522.933338ms ago: executing program 0 (id=241):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000140))
mmap(&(0x7f000014f000/0x4000)=nil, 0x4000, 0x3000000, 0x4000010, r1, 0x94eb000)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000000)=""/80)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x2f4, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x294, 0x1, [@m_connmark={0x128, 0xc, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x5, 0x8000, 0x9}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x10000000, 0xb, 0x5ad2}, 0xd651}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7fffffff, 0x1, 0x22}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xff, 0x0, 0xffff4d8d, 0xe0d}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x140, 0x5, 0x6, 0x1, 0x6}, 0xf702}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb9f, 0x5, 0x7, 0x6, 0x73}, 0xb}}]}, {0x4e, 0x6, "db261f954fc8be6d804880956e4df6d49ea2ae64d824f48727e240b3bdb1098279d69121d42cd399e9d4f11bafce4a24551f586dae53617e36e2422f57118dff08b9ad08ba738f032f0b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x168, 0x1, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x5, 0x8, 0x6, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7178, 0xc, 0x10000000}, 0xfff8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff9, 0x7, 0x1, 0xfff, 0xbdf3}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x1, 0x8, 0x4e4c}, 0x8}}]}, {0xc5, 0x6, "bf2aa1042b2ff850088164cb7b886371db87d5650473e17dd414148947a1c7d8fdd4baf7779fc89ed6adbe3b6c122259acf1ac3e53a8ca66a44f3c338afff0c660791d4c0e9bf8b7f8007d3bb19b63a29f0cec2d512b384d91a46f2a402a9a063f464ed7e8f6b2a96b4af1b3083b41fba65f4c087629375a0f08bc58213e558436d3a043336c51ac93f306be8ae49872e8d59fb72d57f93b90f13a7c40864d42cdb3c59418c06da908b68b4f58d7ae3048c2f5ebac0b8a0a2595008de9a1557ab4"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2f4}}, 0x400c004)
sendmmsg$inet(r1, &(0x7f0000001840)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000017c0)=[{&(0x7f00000006c0)="d5860811c9349bcc0d48cc927e4783b101bd6506362eaecc27260c273b8ee8fd9e52d72aae99d5d7dbfa13bdc7124a5c10afcddb4ccf1b30b365fe445de93e33aee65ccbbfab8641ef8fe72f53a010cbbd559dbb918d75f4826fea083f48bafe39d76216f7822738c5fb8d19133eb066739f747c6996ebacd38363e708fffac7cf6fa4dfbd7cfff8caec7638af85b7192decea04b27a5b852ee93a0907859cfbe8f43581c4add49f2c77df0a868b4e2879f37f5ff7395de0aaf3e14531ec5a545d2ff053c0c337bb3b69c92782015ffbe0dd14828ecf50307ab44a4cdcb5d0e4fb374bf79141b27ea3fd2a01171e1097d70c14255a4374ee5c45bbb5b8c49ac3487fe94494a4cfd87c803e941bc51eb450690deaa9a57de81f98f9df6d14e2a010cedca3b19fbc1a23c4f4aee1e81b1edc30b9ef17b7a6c3cb94784a8e595c8a53848ee6da0412d776fe7da8a5f79497063811f9be98484bbe7e33c07d9b8dbb695a33a13912659b5ff78b4a583d07167e3e593e5adc69966977d114baabc2d840710813883608db0ba035706e19a29e2d62612aed382e79e2e68c77f27493afe5d5a0c9f359062eca3aa9bcdd2b5d9a582e65e69a84ecdb0bf5d374e187f6a0b0b76dd76d9b10475f646dcc569501b0bfc509914131e30b31fd92519ebcff33958ad39ee4853d87491ac637a2ded1a92083c70dc0996b5e36d39cee636a7396d186111132a94e1967d2be11f4a9fa05e06f4364c73b0913e0b8efee67ba891790999a69d76b8c97444f5feeb06c5e5052655244c6b7784f82bdc7b0ff8494ce931afde3303d170fab5c3a5e6fc326e2f20ef3de042fdbf061276ee06c740b691e0f49db2e5a6456938b10b107014c8e79cf6169d0e8df8dc16c1fc7d9403ba568566907d82fb345907c3499270507d2870d4d54e2a367bc400ae59359ac4c50858a2d20d5737a1d09c916e017033f500582903156694d889db542e90597299671ba445d69c2bcb2d7980fe7b391ed6a3f2434d76e5947e4cbc24b75cb515dd02063a5c70e402aaef7a73541d755d52d20808e8618400a6c708324cebc3ed9b99e56058bba953897d515de2379b292ed8950e6094a8f8af80d4917effd4efe5835d0c20428fef6447caae071f0c6b569f5a51c2938279b074b8f9c3ba3815059889d5de38678351c4dadbfdecf101c6bdba8405827a42c73556612f3220a866e61db528782d4085870a0bc89a68b285bd32bfaf380ac4283ee8d6a7ec6e9a15d5c557212088c030351b51b00aff45f18d5224680be7ef37fda09c7c2f3848f5a5716f32759f47addbabeb38a8aed4353889683ebb81ebf399b3d89947ba4bea8ab3824ca44bb04ad8029ff9b270cada7d5caf99f3ad3582629a8adca9275692edb4838bc0e763553840033b98e6def8a32818d92003cba0c94841f28b56b05ba02c04982df1e6fd5a61a3f01f919d831e8033ca00fa771448da98abfaa705343a4f72854a45bd6e95d7a166d85ffffbd1e3f6204350c0927410ffc7f2ef0f94bf3c94301ae75afe42111c63e1a742b71dd4faa1e7df2d66cefe99b234842a6edf2edb9720275be94451378069d1d0f67dda54019c28be8e9115f8f23442fa3b9f56d94d15f0c4386d34d7b1bea243af4c3ae9938c981dc86c019651a8443c3f233d30676bed68d9edc14673686196681684af5f85734e5dc05299f1ffe95576163d271b2461d7453c4acef9195c83237780ca1f4b32348c51a9ff0d9db62b116fd3ed2d1cfee18e9a25d42d4cf9a48f13b299d1a607532765d6a938c66dbbe741460a263067a59c4d6ab64372bf5bb0a3d93f19feb2da70c8ae904459822af4aec2d61a662cc5948dc9c903e5098db9267d8ce96aeec40a1aca9efe2bee2d01f20c307704560ba01cf7750d4d5041d19cb824f5b41b9e2206845e0837df32ec9c7e2db65b3b68aac81cd0d15d5db2f303dd8f604028c6dccdd5d0275549b754537a0a96818b9cf6493f2d17fe9fa99985e1297cdf8fa138e166f891e9d3b7ec291209220b0ff9d293380f7352ba0af9e9b732b2d1bea49e205ee078a400d87c85dbbd177cd608d567dc1b245ab27f12a8d5dc6f25f88a062e02f2ab57a37258f8cea1faa81b6269a7a359fa0cd3a7a863843be904fc26df2f26a2035585ef5a0072f50f60fdb53ed3411f41d79aa2f460b984c5a81c5b4f501603fe0dbea9e6643615d365bf0db27368a842b5145ca8514e5cc9b79bbf282f18a6723b3bac6b7dba095dc0de340c4a2df637e50ae6d03a1ad5507acff6d4f86ef9f063fdabf20d915052f7ab18f893aa846d99c562516cd0482eb0c24fa17550c8cb786281ed428662c9a60d976cb46f4cb8775545893849aa4df7422e111739071ff6fe3458d62a2144543a7df35a0dcada393c8ac5b123c3e0f13876b8c13cfa34077d28ea18b54e62da2d97e8ff67df4a4a75074646e9dd49403b5499eb60ce5f7754ee1e797222f25ffa20e74b05b4a15dab52be83e2623e92b5d3de7b3e05024e4912dae5a3eba7d67dd6149075aa0a74ebfe05eeafc28a82af5b85916d331f3b3d10c93197d4b9278f61978a1f0f1d4a90e221673e4561059a3b5f5c62764608d025cc7c3e6b69b8992a595e0335e36befcac02e078baf65240599e2e356bc95a0e23826343105b8206c343fbeb26cafbfae5fcb3cbb5f15d21be19733eeddefc4ca011432faae5b7656cd7b4e64add4f61bb86adf6fcdb87a07b227436d68a6a457479568c0ae93f2f23b088c46446048dfc110fb1fd56ff25c7477a80602b97c192743eeda2f2c69e33ed5a20e5791ca702cc7a8159e8ba0fa55cecf8f249401d95ac041806ec4dd31adc90878ccff10ee740f92eef2720123125e4397ae8515977bd09d147d3e8c9867068ab157bc59330c821856bd567b0c066380fe4e1b4d6883e19bc74f508b84b361bc919dc1aa4fb99f1df6faa1a1959faa7cca66c0bce9eae00928fd7c7803e302a66c7329b0889950b8277065ef78497ff0168b795b39cb432316ecad2a52d8eaf2353e5738a552e1baf9e922136fbc5a33acb02b59961295e100110e13849f4a4f86a3e24c6d2b5f710ca24a0aae85e611b0afe981619962643d30abec8651d02d7b52738d7481526ac93b7e9ac7faaa028cba321c3add62614e078078eaf02efc05afd81bcd86079c0d8ae16c0b588f9e7d76ca23b7c2a32a71cbac130dbec51b780689e98b01a46a9f77b0f2ee48e6d0287fbb2379b49e20d7433cfff47d20292dd0db1feb489fa47e15b5b54569a3f0ceb8d4d5335bb1d08b30eafe63fb6e32db38c32283bf6dced5177aa5156014200c18e2afc8c93bc20056e4d298d0956f2e2812137b7dcd5237bba350468f1107b8aabc3c9b7e3d3c6ffdee3bf418cf2a0a8b777751187b05ad999bf8bff4462e01606b67f1e6eab664216893bae9db6940f7410d7afd50eb5215bb4972d101b0958f741818e959badac54b64540c891c052c8fa4418f90fe139254a186694526ea10f365b59ac59370816bdacf07a95c6f3c69e07c060a2db053e9ac5a82241dd9f574a21cd1c8f24a58f1483986a6f44c527ce5ec129212f82a45a3c534f222841ebad121207a6519236ab33df6d52d1498c89af48abfae06374589747c25362bd74cf4372f2769c39a7f98e41b0ba25850835501fb03d77f06d1e54432caed676f3a9c8d5400fe2da9e4bc52ee689cecfb29d113c85c2ac4825817e4e7142d0da33da99f4c1ad1df76484bc74d09d26f6503ff391d9693f9b678fa325799bd6825c8dffb32a442550e2510ac11a0d7bbd31abb2190f4e1b105c2fe23556695d011b43af85b0689d8de8dbf2c75877e33bf400ca169a1713b40a4c3bdd3fc9fa77e77b97f84a2a7eac0ccb78a615b7a653149a8b89755cf8ca294db97293b461c8a86000301f71a3ece776e3ba4d1aab1bc41d1cd6c42d5a48463afce1f98679425d3de7f5e86cf539416cc0595527d84f79c2f62838b33a087be32add80951d756a4f36856fbfdb586b0207993783ae5f3e30a7a3ebb34f4b5067af173b9892912843b17b51575a31b29ef94194e32f3e158c5ae21be9065eeacd2f539be911ca81e9385a1e9336df1724c95150031fdd8b318f23ef088e7853b8da56b4dc89b344a375afafe11c4e4a4ecf5909a74f63b485c9f68f18959dfb33a80c041ace0ae72d3745d630538a5e86bdeb8b484bde2252fb8b5bd4e458c2ed43e4d8d4028ffebdb7aeea6017f298ca8ec7cfe071b2ef5d8d1ea9a504186b97cabc09f6ceac0a94b8fa35db9e0e5364fc562828c4d6d97f10d63fd493fea07ea4f4d65672a35c45acb17272d9aeff8b7ac473bad8413da256e004caa61b8459d254acc3c8e885d51ca28170bb51c628d3a5724688e414721097274ac519f330aa29db142305aa60fec4321059df5fd3ff19867f5db95f8605db9d81d9ff8ceef14963bd251aec279e62896c7b3d091dad9da56d329d543131e455fef7aa38ae6b8ba4b3c093accfa4829a8b423572e1f98a10d96291e995c225ed26d18a6c9f91fb08df1e430d7c5a090572f334e8c0628f95d3ea81a7f96abd078278780cdcd52e2e5b227fb9bc47bc3979cc48dc7e611482fecb52cff24f91182afb7e813cef0862a662ce40ef11b763cff5e66a7658e5ca84b30057bcadc84951ecfb3e359a52c08529df198805c03edc617cda9345fd6bb99167a4275c46c98627e3fb3a68ba8e6e31c0bcd49aa00b8276b2e6fc00e80c5217dd82115f91fe793ae59e7f9a6759d30f304515a32f09cb37ac90d6eaf743862fe723c637c2f18c589f195bb5f9a0ffc1baf7467bed4792ba1a6b4c4846713c0c9fdde24fd715c474f72034fb2d32c3e39cec8ab6a1a3305762ad4048a20f5213ffc454739036e9d6939d21f83422a26b8ad49a10147c4757842865e026df381e33cf675e76f20cd0dd021813fe78a69e6c6be05488503d628f9dd62d26324e39aeb049df36c5c7f21f00b6d416f00bb20ff544a2fe72357845cc5195f9afb109165409e5a1d0f86cf01a12825c00998e9b2e8f0184f89cdc4a81fb21259a0c644c3115146095223424691e781ed16d4990245cd646a6e078bfad8901389b0020211e49f344450f9be149b1b809dfdbff22713b0c956d9d888e4a9ad6c3901ea9e9af55ebe2049cc9d82a34cbc04eb62a8c2dcf78a935ca3b572b942029b37941fe5d4d277fb8edad3e743ea1f50939249274fa85d148d1153b1ff4d96d74bba8f70ffc22deeb694a4a93586a23b63257bd5fc218a6a08fc836679d3b7fb4805cca10d975ad955647e47219ae44e404530b5a6ecae8e26e49dafbb0b5b86baa43f29d9dc4aa8748e89a3e0861d2d9f3e2e67e54cc7ac208fd6401fa41e5f0529c9ba4b7698f2544bfe4e55e4c9ed9cdf41692af12eb13c32d55b07ca11830ea1a3595984c09067015e827572a4f81bd8b1e0878d24dda626a10a2cb32fa1d9cbf188373edee70a15ffafb9d9164defdcf60102f0156133af50558a296828e93dc57de1f0355e65a98c6c3e4ed9748b9fdc372b51629be6519a46b7032367adf1dceb4891541305dae3792944faf97e539fdd3f8ed32022ea0943a7527ae482017a6a4d38c844a82b7b4baba5b334183eced0db32c2ca92315da217d50adaae61a7a8497850a33f82fe2921c96db7f753b53118bc7bd3f4f71b231bb5f1f80f0a331eeaa46e0ad57656a0ef6dde87c4f47307d543e68dbdeab96da86ab7124ecf2a63af1e40263999b9b85fa2f63885bdd7036b5cbe6d7", 0x1000}, {&(0x7f00000016c0)="49c5852cd7f700c47ef12504f7e4a1306dc37a1abece578516e9219d476800b2be557d5d9dba6c3c68e8af9815cc816bc677e22305cfacb45c25715f24e8e72c4b91974116e714236af6d0d24f802b0f18dafe971c1c2e0ae6e0a3fcf1c3a41ac2e40987a3ad062ed98616ac4cf38a82c2e48e04a4c370422b8ad0bb22a81c5cc093cceaafb7065747c63c33419d10e945f37e068a474389e2b068f921d311014e917deb51eb6c9c43f89530c873fb400fec3e9e64d473474afc40bbd46e505a76b3454a54c07498a0380a7fabed8ee6f1d2b16959a483172b737b8eb1c392855fe76452a3254656", 0xe8}], 0x2, &(0x7f0000001800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}}], 0x1, 0x8040)

391.584701ms ago: executing program 3 (id=242):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
setns(r2, 0x4000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
r5 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(r5, &(0x7f0000000080)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getnexthop={0x30, 0x6a, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r6}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008090}, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000001c0)=0xd, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x4, 0x0, @private2, @mcast2}}}}, 0x0)
r7 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0)
write$smackfs_change_rule(r7, &(0x7f0000001c80)={'^+/', 0x20, './\x8a..+', 0x20, 'rxbl', 0x20, 'wxtb'}, 0x15)
write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dde681"], 0xfdef)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r0, 0x0, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async)
setns(r2, 0x4000000) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$unix(0x1, 0x3, 0x0) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
getpeername$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) (async)
sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getnexthop={0x30, 0x6a, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r6}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008090}, 0x0) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000001c0)=0xd, 0x4) (async)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x4, 0x0, @private2, @mcast2}}}}, 0x0) (async)
openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) (async)
write$smackfs_change_rule(r7, &(0x7f0000001c80)={'^+/', 0x20, './\x8a..+', 0x20, 'rxbl', 0x20, 'wxtb'}, 0x15) (async)
write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dde681"], 0xfdef) (async)

379.398165ms ago: executing program 0 (id=243):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x10000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="020e000014000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010006c00020100000011000000000000e0000002000000000000000000000000e000000200000000000000000000000005000500000000000a"], 0xa0}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup(r2, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0xffffffffffffffff)

200.446181ms ago: executing program 0 (id=244):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xe, 0x1, 0x1, "33c50010e9b89fd508000000000002000000000000000080000000fbffffff00", 0x4c314356})
ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000100)={&(0x7f0000000080)='\x00', &(0x7f00000000c0)='\x00'})
r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f00000002c0)={0x319, 0x18, '\x00', 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0]})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0xff30, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e144ad11f40c897700", "0000b3f88813da82b4cf00"}, 0x800008, 0x1})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
write(r3, &(0x7f0000000040)="38ced1978c2fd7", 0x7)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
sendto$inet6(r4, &(0x7f0000000240)="4c48a6037b686761603db51d7bca79283264ea72e9dd42f55539e87e5b53243f71a95fead683d92e47fa92badfbe56148c2fdf15a635006f9b2af1fc7a", 0x3d, 0x10, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="18ccd67bdeeab9cd2e9a20bf1491081b8d3d713ab6100000000000000045a1977f32c6007d38e0bea49f92dba7eaab00"/59], 0x18}, 0x1, 0x0, 0x0, 0x4840}, 0x44004)

199.750144ms ago: executing program 1 (id=245):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000300)={0x28, 0x4, 0x0, 0x0, 0x3be940, 0xffffffffffffffff, 0xffffffce, 0x27608f})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r3 = socket$inet(0x2, 0x1, 0x100) (async)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000040)=0x82, 0x4)
syslog(0x2, &(0x7f0000001940)=""/87, 0x57) (async)
listen(r3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8801, 0x10)
write$rfkill(r6, &(0x7f0000000140)={0x8, 0x6}, 0xfe76)
fallocate(r6, 0x0, 0xfff, 0x9) (async)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1497, 0x55}}}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @device_b, @device_a, @random="c47d56a2ddd7", {0x6, 0x1}}, @val={0x0, 0x0, @random='R'}, @val, @void, @void, @val={0x72, 0x6}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048041}, 0x28008004)

164.718985ms ago: executing program 5 (id=208):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000040)="be1c40114d26f4f247484a4893025f47b6b86c2dcc558d64", 0x18}, {&(0x7f0000001280)='\\]', 0x2}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x408d0}], 0x1, 0xc0041)
recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x8dff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x2, 0x3, 0x100000001)
setsockopt(r4, 0xff, 0x1, 0x0, 0x51)
ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000300)={'ip6gretap0\x00', 0xe})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="44f62f000000000000007400"/24, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d00ff000000"], 0x44}}, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x6, 0x8, 0xc, 0x0, 0x5, 0x40, 0x7, 0x3, 0x85, 0x2, 0x0, 0x257, 0xef9, 0x9, 0x1, 0x6, [0x200, 0x9]}})
sendto(r3, &(0x7f0000000080)="e3ccc88954bacdc94006082ae24035b5fa54b13602aee617b95cf69a0259af2c94e13d1da01735a822970ddf838b38ec7cef8a2c098a5bfc26f52e89", 0x3c, 0x4000, 0x0, 0x0)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80100)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x625dc263cdb1ed82, r2)
sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getlink={0x34, 0x12, 0x1, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x23000, 0x1001}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x100}, 0x2400c004)

84.077059ms ago: executing program 5 (id=246):
setns(0xc9, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
fsetxattr$trusted_overlay_upper(r1, &(0x7f00000000c0), 0x0, 0x0, 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000001080)={0x4, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x43}}}}, 0x108)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x54, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xe}, {0xffffff1f, 0x90, 0x56}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000300)={0x7, {{0x2, 0x4e22, @multicast2}}}, 0x88)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]})
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000440), 0x10)
listen(r7, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
writev(r8, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1)
close_range(r6, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
r11 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="03427ec4b12f126e13b233dafd889c99c7e8073eef3f0a7ebc862a799b969b04e2f51c77759c33d7249fa88ffa14417af91a8527e0e15695ef8e49014cb58d68c2c763b13e1b7b8eb5955a154b800c8ca733c041"], 0x4)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r9, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x48}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xc}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x8c, 0xbe, "086f6c9bd6df47a8587c2a1b9452595585180e3a0183afe637802758ab459d02ea453561e5679bf41e5418cf4fa66c98d44b9b8b8b985603f05614158ce8fc702c8fd53db8e950c86a0e71f9773a15728386da9732e671b5ad970c791dbf161c9928293f1dc4a92a6b603d5e4d087eb3a8e69a00e3f6fd5295ed6e2cfbb7c58788ecd0426228e4b0"}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40844}, 0x4000040)
r12 = syz_ublk_setup_io_uring(0x4d1c, &(0x7f0000000180)={0x0, 0x466b, 0x0, 0x0, 0x90}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0))
io_uring_enter(r12, 0x64b1, 0x7c63, 0x80, &(0x7f00000003c0)={[0x3]}, 0x8)
sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000140)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a1f6e4a6", @ANYRES16=r9, @ANYBLOB="01002abd7000fadbdf252600000008000300", @ANYRES32=r10, @ANYBLOB="0400d0000a0034000202020202020000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004c00)

817.948µs ago: executing program 3 (id=247):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff0000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xfa, &(0x7f00000001c0)=""/250}, 0x94)

0s ago: executing program 0 (id=248):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'\x00', 0x1})
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr=0x64010100, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@private=0xa010101}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/ieee80211/phy0/reset\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='1\x00', 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb0000000000", 0xd8}], 0x1}, 0x4000)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x80)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000340)="07000000010000", 0x7)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58010000100001000000000000000000ac141444000000000000000000000000ff0100000000000000000000000000010000ecdf000000000a0000200000000038bc71c44baaefe4bcef3dda85f3eab2a355d62adb7b4cca58808a166fc9f2a4c36490a18bba6b2f2e1f14392a17e5673a1f7420ff2e13715f88a67df1e4d7c09da271bd562a952ffcd599a09f569a292b4b90595ba04b970b982ec51f6f6f23d867050cc5e55b88bfa46c684d54622cfbec4f981f4c98b2a0e5ce6619", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000ff01000000000000ec0000fc0100060000005a6d621980c0c438bc1a0000000000000000000000000000000000000000000000000000000000003e000000fcffffffffffffff000000090060e12292239f0000000000c73b000000000000070044000000000000070000800000000000000000000000000200000054000000ffffffff2abd7000030080000200020057000000000000001c00170000000000000000000000004c001400686d6163287368613235362900000000000000000000000000000000000000000000000000000000000000000000000000386e0fb37cc6e5f2fb5e0000f4ff009600"/270], 0x158}}, 0x4004004)
pwrite64(r0, &(0x7f00000000c0)="98f6dc6b0049c545a2de74a4c7b5fcac58d479a3f002f6e20304bf55bb7252d543dd4356c21a3e93ca84fe94a781ea41999c8c3b473e56537b3cde83b83e729c6d940a2979b5e97d328be0d3993432144d9e8686f088fbdb6ad461c70299efd55eaaae373cf802b25ca0846e0cf64b8a51d3ea5ba6b76a876f0c832ffa3a2bc9ac3b41c1bf247b3c4983773a47077e0416dc5cecd7cecd382cc926e72b67bb00d6e6", 0xa2, 0x7fff)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x26)
sendto$inet(r6, 0x0, 0x0, 0x4004004, &(0x7f0000000080)={0x2, 0x4c1e, @multicast1}, 0x10)
setsockopt$inet_int(r6, 0x0, 0x19, &(0x7f0000000100)=0x3, 0x4)
recvmmsg(r6, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0)
setsockopt$inet_int(r6, 0x0, 0x7, 0x0, 0x0)
setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000200)=0x2, 0x4)
syz_emit_ethernet(0x2c, &(0x7f0000003840)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @local, @val={@void, {0x8100, 0x1}}, {@arp={0x806, @generic={0x337, 0x8847, 0x6, 0x3, 0x9, @broadcast, "9ea410", @remote, "32c8aa"}}}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts.
[   27.687119][ T4694] cgroup: Unknown subsys name 'net'
[   27.827002][ T4694] cgroup: Unknown subsys name 'cpuset'
[   27.829183][ T4694] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   27.944874][ T4694] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   29.854039][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   29.856268][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   29.856555][ T4718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   29.856769][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   29.857105][ T4718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   29.857335][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   29.859552][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   29.859728][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   29.859808][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   29.859917][ T4718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   29.860458][ T4718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   29.860570][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   29.860707][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   29.860823][ T4718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   29.861213][ T4718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   29.861447][ T4718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   29.861595][ T4718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   29.864111][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   29.864231][ T4718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   29.864579][ T4718] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   29.865558][ T4718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   29.865689][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   29.870574][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   29.871309][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   29.872735][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   30.238494][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.240151][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.241688][ T4706] bridge_slave_0: entered allmulticast mode
[   30.243400][ T4706] bridge_slave_0: entered promiscuous mode
[   30.248536][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.250017][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.251492][ T4706] bridge_slave_1: entered allmulticast mode
[   30.253238][ T4706] bridge_slave_1: entered promiscuous mode
[   30.278537][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.299944][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.310718][ T4706] team0: Port device team_slave_0 added
[   30.341696][ T4706] team0: Port device team_slave_1 added
[   30.363647][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.365081][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.366564][ T4717] bridge_slave_0: entered allmulticast mode
[   30.367020][ T4717] bridge_slave_0: entered promiscuous mode
[   30.376792][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.376869][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.376980][ T4717] bridge_slave_1: entered allmulticast mode
[   30.377385][ T4717] bridge_slave_1: entered promiscuous mode
[   30.377794][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.377818][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.377907][ T4714] bridge_slave_0: entered allmulticast mode
[   30.378336][ T4714] bridge_slave_0: entered promiscuous mode
[   30.379036][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.379063][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.379108][ T4714] bridge_slave_1: entered allmulticast mode
[   30.379505][ T4714] bridge_slave_1: entered promiscuous mode
[   30.392216][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.396633][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.398061][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.402817][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.408900][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.410278][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.414875][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.417142][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.430527][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.431576][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.443500][ T4717] team0: Port device team_slave_0 added
[   30.444299][ T4717] team0: Port device team_slave_1 added
[   30.456175][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.456256][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.456619][ T4707] bridge_slave_0: entered allmulticast mode
[   30.457058][ T4707] bridge_slave_0: entered promiscuous mode
[   30.458177][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.458199][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.458246][ T4707] bridge_slave_1: entered allmulticast mode
[   30.458630][ T4707] bridge_slave_1: entered promiscuous mode
[   30.473256][ T4706] hsr_slave_0: entered promiscuous mode
[   30.475042][ T4706] hsr_slave_1: entered promiscuous mode
[   30.476842][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.476868][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.476884][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.477610][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.477616][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.477627][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.488628][ T4717] hsr_slave_0: entered promiscuous mode
[   30.488942][ T4717] hsr_slave_1: entered promiscuous mode
[   30.489141][ T4717] debugfs: 'hsr0' already exists in 'hsr'
[   30.489172][ T4717] Cannot create hsr debugfs directory
[   30.490202][ T4714] team0: Port device team_slave_0 added
[   30.491303][ T4714] team0: Port device team_slave_1 added
[   30.512080][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.512222][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.512613][ T4708] bridge_slave_0: entered allmulticast mode
[   30.513084][ T4708] bridge_slave_0: entered promiscuous mode
[   30.514226][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.514257][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.514306][ T4708] bridge_slave_1: entered allmulticast mode
[   30.514783][ T4708] bridge_slave_1: entered promiscuous mode
[   30.523166][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.524176][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.525114][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.537587][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.537612][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.537626][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.538221][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.538228][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.538241][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.548055][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.554126][ T4708] team0: Port device team_slave_0 added
[   30.554823][ T4708] team0: Port device team_slave_1 added
[   30.578931][ T4714] hsr_slave_0: entered promiscuous mode
[   30.579245][ T4714] hsr_slave_1: entered promiscuous mode
[   30.579427][ T4714] debugfs: 'hsr0' already exists in 'hsr'
[   30.579437][ T4714] Cannot create hsr debugfs directory
[   30.580431][ T4707] team0: Port device team_slave_0 added
[   30.580981][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.580991][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.581002][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.583544][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.583552][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.583564][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.596976][ T4707] team0: Port device team_slave_1 added
[   30.630897][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.630940][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.630954][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.642208][ T4708] hsr_slave_0: entered promiscuous mode
[   30.643630][ T4708] hsr_slave_1: entered promiscuous mode
[   30.645020][ T4708] debugfs: 'hsr0' already exists in 'hsr'
[   30.645694][ T4708] Cannot create hsr debugfs directory
[   30.646041][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.646048][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.646062][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.656353][ T4707] hsr_slave_0: entered promiscuous mode
[   30.656687][ T4707] hsr_slave_1: entered promiscuous mode
[   30.656891][ T4707] debugfs: 'hsr0' already exists in 'hsr'
[   30.656900][ T4707] Cannot create hsr debugfs directory
[   30.747965][ T4706] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.752898][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.757144][ T4706] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.759494][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.762976][ T4706] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.765901][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.767610][ T4706] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.769791][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.785340][ T4714] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.789359][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.789888][ T4714] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.791585][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.792888][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.792934][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.793085][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.793114][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.794232][ T4714] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.797401][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.802216][ T4714] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.804764][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.820216][ T4717] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.824027][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.827373][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.827417][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.827512][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.827553][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.829210][ T4717] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.831378][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.831667][ T4717] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.833572][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.841435][ T4717] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.842441][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.873449][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.877035][ T4707] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.879732][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.883680][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.886191][ T4707] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.888677][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.895159][ T4707] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.898036][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.898452][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.898477][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.898557][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.898588][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.909104][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.910953][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.914596][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.916916][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.918337][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.919799][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.928469][ T4707] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.930771][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.937607][ T4714] 8021q: adding VLAN 0 to HW filter on device team0
[   30.939890][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.939942][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.943943][ T4706] 8021q: adding VLAN 0 to HW filter on device team0
[   30.961785][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.961832][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.962183][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.962201][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.962814][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.962834][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.974672][ T4706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.976033][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.980558][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.988247][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.989437][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.992835][ T4708] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.995103][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.996554][ T4708] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.999156][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.007800][ T4708] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.017266][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.029545][ T4717] 8021q: adding VLAN 0 to HW filter on device team0
[   31.039451][ T4708] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.041641][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.044994][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.045034][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.046377][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.046403][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.084323][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.093362][ T4707] 8021q: adding VLAN 0 to HW filter on device team0
[   31.103111][  T420] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.103157][  T420] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.110127][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.110173][ T3383] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.127579][ T4707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.129596][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.168573][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.177055][ T4708] 8021q: adding VLAN 0 to HW filter on device team0
[   31.186739][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.186788][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.187333][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.187356][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.194680][ T4708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.196918][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.254400][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.289875][ T4717] veth0_vlan: entered promiscuous mode
[   31.293475][ T4717] veth1_vlan: entered promiscuous mode
[   31.301479][ T4717] veth0_macvtap: entered promiscuous mode
[   31.303830][ T4717] veth1_macvtap: entered promiscuous mode
[   31.310487][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.323869][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.337154][ T3383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.337247][ T3383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.342930][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.348203][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.379470][ T4706] veth0_vlan: entered promiscuous mode
[   31.382950][ T4714] veth0_vlan: entered promiscuous mode
[   31.392447][ T4706] veth1_vlan: entered promiscuous mode
[   31.404272][ T4706] veth0_macvtap: entered promiscuous mode
[   31.409060][ T4706] veth1_macvtap: entered promiscuous mode
[   31.412941][ T4714] veth1_vlan: entered promiscuous mode
[   31.419224][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.422006][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.426192][   T55] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.426232][   T55] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.433798][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.433829][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.440726][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.449416][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.450799][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.453999][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.457238][   T54] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.457798][   T54] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.457830][   T54] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.475366][ T4714] veth0_macvtap: entered promiscuous mode
[   31.489627][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.504671][ T4708] veth0_vlan: entered promiscuous mode
[   31.519608][ T4717] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.522908][ T4714] veth1_macvtap: entered promiscuous mode
[   31.533640][ T4708] veth1_vlan: entered promiscuous mode
[   31.543505][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.544597][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.571295][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.571325][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.581674][ T4707] veth0_vlan: entered promiscuous mode
[   31.584253][ T4708] veth0_macvtap: entered promiscuous mode
[   31.587116][ T4708] veth1_macvtap: entered promiscuous mode
[   31.589114][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.589143][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.600397][ T4707] veth1_vlan: entered promiscuous mode
[   31.605406][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.626951][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.633592][ T4888] syzkaller0: entered promiscuous mode
[   31.633620][ T4888] syzkaller0: entered allmulticast mode
[   31.642911][   T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.651323][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.651354][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.665361][ T4888] loop2: detected capacity change from 0 to 2048
[   31.674904][ T4888] ext4: Unknown parameter 'dont_hash'
[   31.676132][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.676161][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.676182][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.676201][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.676218][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.676234][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.676529][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.699926][ T4707] veth0_macvtap: entered promiscuous mode
[   31.706847][ T4707] veth1_macvtap: entered promiscuous mode
[   31.717345][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.720267][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.744232][   T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.766130][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.766158][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.789069][ T3383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.789098][ T3383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.798875][ T3383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.798908][ T3383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.807441][   T54] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.807927][   T54] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.818645][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.818677][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.820178][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.820187][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.826086][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.986206][ T4712] Bluetooth: hci1: command tx timeout
[   31.986494][ T4712] Bluetooth: hci4: command tx timeout
[   31.986719][ T4712] Bluetooth: hci0: command tx timeout
[   31.987016][ T4712] Bluetooth: hci3: command tx timeout
[   31.987270][ T4712] Bluetooth: hci2: command tx timeout
[   32.094734][ T4895] loop0: detected capacity change from 0 to 1024
[   32.112620][ T4895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.227635][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.454836][ T4907] loop0: detected capacity change from 0 to 256
[   32.458565][ T4907] vfat: Bad value for 'shortname'
[   32.561004][ T4905] loop4: detected capacity change from 0 to 4096
[   32.728197][ T4910] loop3: detected capacity change from 0 to 512
[   32.866626][ T4905] EXT4-fs (loop4): unsupported descriptor size 320
[   32.871596][ T4910] EXT4-fs (loop3): Test dummy encryption mode enabled
[   32.978211][ T4910] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.4: bg 0: block 7: invalid block bitmap
[   32.978397][ T4910] loop3: lost filesystem error report for type 5 error -117
[   32.985528][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   32.985553][    C1] EXT4-fs (loop3): initial error at time 32: ext4_validate_block_bitmap:436
[   32.985576][    C1] EXT4-fs (loop3): last error at time 32: ext4_validate_block_bitmap:436
[   33.072394][ T4910] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   33.072482][ T4910] loop3: lost filesystem error report for type 5 error -117
[   33.244566][ T4910] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #11: comm syz.3.4: corrupted xattr block 95: invalid header
[   33.244651][ T4910] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   33.275008][ T4910] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117)
[   33.275192][ T4910] EXT4-fs (loop3): 1 orphan inode deleted
[   33.277016][ T4910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.295413][ T4910] fuse: fd is not a fuse device
[   34.005598][ T4715] Bluetooth: hci2: command tx timeout
[   34.005640][ T4715] Bluetooth: hci3: command tx timeout
[   34.005781][ T4715] Bluetooth: hci0: command tx timeout
[   34.005802][ T4715] Bluetooth: hci4: command tx timeout
[   34.005817][ T4715] Bluetooth: hci1: command tx timeout
[   34.012043][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.049754][ T4917] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9'.
[   34.051439][ T4917] netlink: 'syz.4.9': attribute type 1 has an invalid length.
[   34.051453][ T4917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9'.
[   34.098753][ T4928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12'.
[   34.099488][ T4928] ip_tables: iptables: counters copy to user failed while replacing table
[   34.103459][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'.
[   34.141667][ T4933] loop4: detected capacity change from 0 to 128
[   34.144333][ T4933] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   34.194780][ T4937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15'.
[   34.606430][ T4933] Invalid source name
[   34.639730][ T4953] loop2: detected capacity change from 0 to 1024
[   34.640123][ T4953] =======================================================
[   34.640123][ T4953] WARNING: The mand mount option has been deprecated and
[   34.640123][ T4953]          and is ignored by this kernel. Remove the mand
[   34.640123][ T4953]          option from the mount to silence this warning.
[   34.640123][ T4953] =======================================================
[   34.641726][ T4953] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   34.642183][ T4953] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   34.643393][ T4953] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   34.643519][ T4953] EXT4-fs (loop2): orphan cleanup on readonly fs
[   34.648549][ T4953] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #3: block 3: comm syz.2.19: lblock 3 mapped to illegal pblock 3 (length 1)
[   34.648579][ T4953] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   34.649655][ T4953] Quota error (device loop2): write_blk: dquota write failed
[   34.649684][ T4953] Quota error (device loop2): find_free_dqentry: Can't write quota data block 3
[   34.650023][ T4953] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   34.650064][ T4953] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.19: Failed to acquire dquot type 0
[   34.650084][ T4953] loop2: lost filesystem error report for type 5 error -117
[   34.650849][ T4953] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 3: comm syz.2.19: lblock 3 mapped to illegal pblock 3 (length 1)
[   34.650878][ T4953] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   34.651349][ T4953] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   34.651641][ T4953] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.19: Failed to acquire dquot type 0
[   34.651670][ T4953] loop2: lost filesystem error report for type 5 error -117
[   34.652045][ T4953] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.19: Freeing blocks not in datazone - block = 0, count = 4096
[   34.652072][ T4953] loop2: lost filesystem error report for type 5 error -117
[   34.653078][ T4953] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 3: comm syz.2.19: lblock 3 mapped to illegal pblock 3 (length 1)
[   34.653108][ T4953] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   34.653875][ T4953] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   34.653910][ T4953] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.19: Failed to acquire dquot type 0
[   34.654191][ T4953] loop2: lost filesystem error report for type 5 error -117
[   34.654920][ T4953] EXT4-fs (loop2): 1 orphan inode deleted
[   34.655553][    C1] EXT4-fs (loop2): error count since last fsck: 7
[   34.655599][    C1] EXT4-fs (loop2): initial error at time 34: ext4_map_blocks:832: inode 3: block 3
[   34.655643][    C1] EXT4-fs (loop2): last error at time 34: ext4_acquire_dquot:7069
[   34.732025][ T4953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   35.100357][ T4962] random: crng reseeded on system resumption
[   35.111090][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'.
[   35.182090][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.222657][ T4965] syz.2.22 uses obsolete (PF_INET,SOCK_PACKET)
[   35.264479][ T4967] loop2: detected capacity change from 0 to 1024
[   35.280983][ T4967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.693869][ T4974] netlink: 'syz.0.24': attribute type 1 has an invalid length.
[   35.752439][ T4974] gretap1: entered promiscuous mode
[   35.753657][ T4974] batman_adv: batadv0: Adding interface: gretap1
[   35.753665][ T4974] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.755637][ T4974] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[   35.785874][ T4981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'.
[   35.785914][ T4981] netlink: 'syz.0.25': attribute type 1 has an invalid length.
[   36.087296][ T4715] Bluetooth: hci4: command tx timeout
[   36.087336][ T4715] Bluetooth: hci0: command tx timeout
[   36.087370][ T4715] Bluetooth: hci3: command tx timeout
[   36.087391][ T4715] Bluetooth: hci2: command tx timeout
[   36.091493][ T4712] Bluetooth: hci1: command tx timeout
[   36.128617][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.273432][ T4994] Zero length message leads to an empty skb
[   36.373079][ T5009] loop2: detected capacity change from 0 to 1024
[   36.384393][ T5009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   36.391198][ T5009] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   36.394141][ T5009] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   36.396241][ T5009] EXT4-fs (loop2): orphan cleanup on readonly fs
[   36.399414][ T5009] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #3: block 3: comm syz.2.29: lblock 3 mapped to illegal pblock 3 (length 1)
[   36.403395][ T5009] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   36.403557][ T5009] Quota error (device loop2): write_blk: dquota write failed
[   36.403577][ T5009] Quota error (device loop2): find_free_dqentry: Can't write quota data block 3
[   36.403638][ T5009] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   36.403665][ T5009] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.29: Failed to acquire dquot type 0
[   36.403681][ T5009] loop2: lost filesystem error report for type 5 error -117
[   36.405968][    C1] EXT4-fs (loop2): error count since last fsck: 2
[   36.405980][    C1] EXT4-fs (loop2): initial error at time 36: ext4_map_blocks:832: inode 3: block 3
[   36.406003][    C1] EXT4-fs (loop2): last error at time 36: ext4_acquire_dquot:7069
[   36.421700][ T5009] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 3: comm syz.2.29: lblock 3 mapped to illegal pblock 3 (length 1)
[   36.421723][ T5009] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   36.425064][ T5009] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   36.427098][ T5009] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.29: Failed to acquire dquot type 0
[   36.427118][ T5009] loop2: lost filesystem error report for type 5 error -117
[   36.431869][ T5009] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.29: Freeing blocks not in datazone - block = 0, count = 4096
[   36.438160][ T5009] loop2: lost filesystem error report for type 5 error -117
[   36.438485][ T5009] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 3: comm syz.2.29: lblock 3 mapped to illegal pblock 3 (length 1)
[   36.443622][ T5009] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   36.444182][ T5009] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   36.444218][ T5009] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.29: Failed to acquire dquot type 0
[   36.444244][ T5009] loop2: lost filesystem error report for type 5 error -117
[   36.450888][ T5009] EXT4-fs (loop2): 1 orphan inode deleted
[   36.458269][ T5009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   36.472705][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.499703][ T5012] loop2: detected capacity change from 0 to 128
[   36.505430][ T5012] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   36.524317][ T5012] fscrypt (loop2, inode 12): Unsupported encryption modes (contents 0, filenames 0)
[   36.537931][ T4717] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   37.147626][ T5039] syzkaller1: entered allmulticast mode
[   37.151830][ T5039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'.
[   37.478453][ T5060] loop2: detected capacity change from 0 to 512
[   37.483543][ T5060] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   37.486429][ T5060] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   37.499437][ T5060] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.41: Invalid block bitmap block 0 in block_group 0
[   37.505184][ T5060] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   37.506984][    C0] EXT4-fs (loop2): error count since last fsck: 2
[   37.506998][    C0] EXT4-fs (loop2): initial error at time 37: ext4_read_block_bitmap_nowait:487
[   37.507010][    C0] EXT4-fs (loop2): last error at time 37: ext4_mb_clear_bb:6680
[   37.513823][ T5060] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.41: attempt to clear invalid blocks 983261 len 1
[   37.513870][ T5060] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   37.518663][ T5060] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.41: Invalid inode table block 0 in block_group 0
[   37.523708][ T5060] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   37.529477][ T5060] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem
[   37.535719][ T5060] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.41: Invalid inode table block 0 in block_group 0
[   37.538246][ T5060] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   37.540419][ T5060] EXT4-fs error (device loop2): ext4_truncate:4721: inode #11: comm syz.2.41: mark_inode_dirty error
[   37.540459][ T5060] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   37.542819][ T5060] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem
[   37.546693][ T5060] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.41: Invalid inode table block 0 in block_group 0
[   37.549294][ T5060] EXT4-fs (loop2): 1 truncate cleaned up
[   37.549780][ T5060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.567403][ T5065] loop3: detected capacity change from 0 to 512
[   37.569770][ T5065] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   37.572963][ T5065] EXT4-fs (loop3): 1 truncate cleaned up
[   37.573559][ T5065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.583773][ T5065] Bluetooth: MGMT ver 1.23
[   37.593927][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.613588][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.759199][ T5088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.46'.
[   37.784414][ T5090] loop3: detected capacity change from 0 to 4096
[   37.790278][ T5090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   37.790312][ T5090] EXT4-fs (loop3): Test dummy encryption mode enabled
[   37.808510][ T5090] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   37.808565][ T5090] System zones: 0-5
[   37.814095][ T5090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.876211][ T5095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[   37.908896][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.184337][ T4713] Bluetooth: hci2: command tx timeout
[   38.184458][ T4713] Bluetooth: hci3: command tx timeout
[   38.184658][ T4713] Bluetooth: hci0: command tx timeout
[   38.184742][ T4713] Bluetooth: hci4: command tx timeout
[   38.187484][ T4712] Bluetooth: hci1: command tx timeout
[   38.883615][ T5122] loop2: detected capacity change from 0 to 512
[   38.892240][ T5122] EXT4-fs (loop2): Test dummy encryption mode enabled
[   38.892279][ T5122] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   38.904387][ T5122] EXT4-fs (loop2): 1 truncate cleaned up
[   38.904873][ T5122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.925449][ T5122] fscrypt: AES-256-XTS using blk-crypto-fallback
[   38.932580][ T5122] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   38.939137][ T5122] EXT4-fs error (device loop2): __ext4_expand_extra_isize:6537: inode #12: comm syz.2.52: bad extra_isize 62 (inode size 256)
[   38.942049][ T5122] EXT4-fs (loop2): Remounting filesystem read-only
[   38.970410][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.025439][ T5128] loop3: detected capacity change from 0 to 512
[   39.059611][ T5128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.088969][ T5128] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   39.095138][ T5128] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28
[   39.098157][ T5128] EXT4-fs (loop3): This should not happen!! Data will be lost
[   39.098157][ T5128] 
[   39.098191][ T5128] EXT4-fs (loop3): Total free blocks count 0
[   39.098208][ T5128] EXT4-fs (loop3): Free/Dirty block details
[   39.098228][ T5128] EXT4-fs (loop3): free_blocks=65280
[   39.098244][ T5128] EXT4-fs (loop3): dirty_blocks=33
[   39.098256][ T5128] EXT4-fs (loop3): Block reservation details
[   39.098266][ T5128] EXT4-fs (loop3): i_reserved_data_blocks=33
[   39.110535][ T5128] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28
[   39.204170][ T5144] netlink: 80 bytes leftover after parsing attributes in process `syz.2.59'.
[   39.211234][ T5134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'.
[   39.296210][ T5153] netlink: 60 bytes leftover after parsing attributes in process `syz.0.61'.
[   39.300309][ T5150] loop2: detected capacity change from 0 to 512
[   39.337689][ T5150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.376176][ T5150] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   39.384568][ T5153] overlay: Unknown parameter 'fsuuid'
[   39.425248][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.475175][ T5182] netlink: 48 bytes leftover after parsing attributes in process `syz.3.66'.
[   39.490725][ T5180] loop3: detected capacity change from 0 to 2048
[   39.508911][ T5178] loop1: detected capacity change from 0 to 512
[   39.509316][ T5178] EXT4-fs: Ignoring removed nobh option
[   39.513016][ T5186] bpf setsockopt: ignoring program buffer with optlen=65242 (max_optlen=4096)
[   39.517951][ T5178] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   39.524712][ T5178] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002]
[   39.524850][ T5178] EXT4-fs (loop1): orphan cleanup on readonly fs
[   39.528778][ T5178] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.64: attempt to clear invalid blocks 1024 len 1
[   39.528821][ T5178] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   39.529340][ T5178] EXT4-fs (loop1): Remounting filesystem read-only
[   39.529848][ T5178] EXT4-fs (loop1): 1 truncate cleaned up
[   39.530302][ T5178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   39.543941][ T5180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.561428][ T5180] RDS: rds_bind could not find a transport for ::a:0:0, load rds_tcp or rds_rdma?
[   39.617530][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   39.655022][   T14] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   39.656718][   T14] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   39.656739][   T14] EXT4-fs (loop3): This should not happen!! Data will be lost
[   39.656739][   T14] 
[   39.656753][   T14] EXT4-fs (loop3): Total free blocks count 0
[   39.656766][   T14] EXT4-fs (loop3): Free/Dirty block details
[   39.656781][   T14] EXT4-fs (loop3): free_blocks=4096
[   39.656795][   T14] EXT4-fs (loop3): dirty_blocks=32
[   39.656806][   T14] EXT4-fs (loop3): Block reservation details
[   39.656815][   T14] EXT4-fs (loop3): i_reserved_data_blocks=2
[   39.657424][   T14] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[   39.658492][ T4708] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost
[   39.694546][ T5204] loop0: detected capacity change from 0 to 512
[   39.705746][ T5202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.68'.
[   39.712157][ T5204] EXT4-fs (loop0): Test dummy encryption mode enabled
[   39.712192][ T5204] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   39.713733][ T5204] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #17: comm syz.0.69: corrupted in-inode xattr: e_name out of bounds
[   39.713749][ T5204] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[   39.714387][ T5204] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.69: couldn't read orphan inode 17 (err -117)
[   39.714405][ T5204] fserror_report: 9 callbacks suppressed
[   39.714412][ T5204] loop0: lost filesystem error report for type 5 error -117
[   39.715542][    C0] EXT4-fs (loop0): error count since last fsck: 2
[   39.715554][    C0] EXT4-fs (loop0): initial error at time 39: ext4_iget_extra_inode:5210: inode 17
[   39.715568][    C0] EXT4-fs (loop0): last error at time 39: ext4_orphan_get:1408
[   39.716909][ T5204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.720807][ T5206] tmpfs: Unknown parameter 'usrjquota'
[   39.846690][ T5219] sock: sock_set_timeout: `syz.1.73' (pid 5219) tries to set negative timeout
[   39.862134][ T5220] input: syz0 as /devices/virtual/input/input3
[   39.943310][ T5215] loop3: detected capacity change from 0 to 2048
[   39.961776][ T5215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.045304][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.106848][ T5232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'.
[   40.160935][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.223049][ T5235] Alternate GPT is invalid, using primary GPT.
[   40.224774][ T5235]  loop1: p1 p2 p3
[   40.278883][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[   40.286459][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   40.287272][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   40.436818][ T5245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.581298][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.608987][ T5249] capability: warning: `syz.3.82' uses 32-bit capabilities (legacy support in use)
[   40.621880][ T5249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.82'.
[   40.653283][ T5253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   40.661454][ T5253] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.81: iget: bogus i_mode (3355)
[   40.661499][ T5253] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   40.664054][ T5253] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.81: couldn't read orphan inode 15 (err -117)
[   40.664093][ T5253] loop1: lost filesystem error report for type 5 error -117
[   40.665532][    C0] EXT4-fs (loop1): error count since last fsck: 2
[   40.665548][    C0] EXT4-fs (loop1): initial error at time 40: ext4_orphan_get:1403: inode 15
[   40.665564][    C0] EXT4-fs (loop1): last error at time 40: ext4_orphan_get:1408
[   40.666796][ T5253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.887184][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.948051][ T5261] netlink: 40 bytes leftover after parsing attributes in process `syz.2.85'.
[   40.960193][ T5261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'.
[   41.190360][ T5277] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   41.223825][ T5290] No fuse device found
[   41.235095][ T5290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'.
[   41.286096][ T5298] tmpfs: Bad value for 'mpol'
[   41.920706][ T5344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.974719][ T5350] syzkaller0: entered promiscuous mode
[   41.980479][ T5350] syzkaller0: entered allmulticast mode
[   41.986681][ T5350] tipc: Started in network mode
[   41.988060][ T5350] tipc: Node identity 0633043e1383, cluster identity 4711
[   41.989764][ T5350] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   42.023686][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.039739][ T5347] tipc: Resetting bearer <eth:syzkaller0>
[   42.057658][ T5347] tipc: Disabling bearer <eth:syzkaller0>
[   42.227275][ T5365] EXT4-fs (loop1): Test dummy encryption mode enabled
[   42.238071][ T5365] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.108: inode has both inline data and extents flags
[   42.238108][ T5365] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   42.238401][ T5365] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.108: couldn't read orphan inode 15 (err -117)
[   42.238425][ T5365] loop1: lost filesystem error report for type 5 error -117
[   42.239200][ T5365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.312336][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.859290][ T5388] can: request_module (can-proto-0) failed.
[   43.138241][ T5396] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   43.142093][ T5396] overlayfs: failed to set xattr on upper
[   43.144402][ T5396] overlayfs: ...falling back to redirect_dir=nofollow.
[   43.147073][ T5396] overlayfs: ...falling back to uuid=null.
[   43.164286][ T5390] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   43.169247][ T5390] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   43.170805][ T5390] overlayfs: failed to set xattr on upper
[   43.170848][ T5390] overlayfs: ...falling back to redirect_dir=nofollow.
[   43.170866][ T5390] overlayfs: ...falling back to uuid=null.
[   43.277743][ T5398] openvswitch: netlink: IP tunnel dst address not specified
[   43.862320][ T5417] set_capacity_and_notify: 7 callbacks suppressed
[   43.867206][ T5417] loop1: detected capacity change from 0 to 256
[   44.178167][ T5436] loop1: detected capacity change from 0 to 512
[   44.183534][ T5436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   44.340301][ T5436] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.125: invalid block
[   44.340343][ T5436] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   44.342991][ T5436] EXT4-fs error (device loop1) in ext4_process_orphan:346: IO failure
[   44.343012][ T5436] loop1: lost filesystem error report for type 5 error -5
[   44.345170][ T5436] EXT4-fs (loop1): 2 truncates cleaned up
[   44.346353][ T5436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.362301][ T5440] loop3: detected capacity change from 0 to 1024
[   44.362628][ T5440] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.369951][ T5440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.432347][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.492259][ T5447] ip6t_hbh: unknown flags 38
[   44.542373][ T5449] __nla_validate_parse: 4 callbacks suppressed
[   44.543956][ T5449] netlink: 96 bytes leftover after parsing attributes in process `syz.3.130'.
[   44.549027][ T5449] vlan2: entered allmulticast mode
[   44.551277][ T5449] gretap0: entered allmulticast mode
[   44.562811][ T5449] loop3: detected capacity change from 0 to 128
[   44.671799][ T5452] team0: No ports can be present during mode change
[   45.115768][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.275118][ T5480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.140'.
[   45.278310][ T5480] ieee802154 phy0 wpan0: encryption failed: -90
[   45.308223][ T5485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   45.308258][ T5485] IPv6: NLM_F_CREATE should be set when creating new route
[   45.459150][ T5495] capability: warning: `syz.1.145' uses deprecated v2 capabilities in a way that may be insecure
[   45.608156][ T5507] loop2: detected capacity change from 0 to 512
[   45.620295][ T5508] loop1: detected capacity change from 0 to 256
[   45.620661][ T5508] vfat: Unknown parameter 'rodar'
[   45.660436][ T5514] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   45.694652][ T5512] loop0: detected capacity change from 0 to 128
[   45.695110][ T5512] EXT4-fs: Ignoring removed i_version option
[   45.708141][ T5512] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   45.762441][ T5512] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 1986330625 (only 1 groups)
[   45.851446][ T4714] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   45.908981][ T5529] netlink: 'syz.3.154': attribute type 11 has an invalid length.
[   45.922183][ T5538] warning: `syz.2.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   45.971554][ T5543] loop3: detected capacity change from 0 to 512
[   45.997601][ T5543] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only
[   46.091288][ T4712] Bluetooth: hci2: command tx timeout
[   46.265372][ T5559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   46.265402][ T5559] IPv6: NLM_F_CREATE should be set when creating new route
[   46.513906][ T5566] loop3: detected capacity change from 0 to 256
[   46.523286][ T5566] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   46.618207][ T5563] loop2: detected capacity change from 0 to 1024
[   46.982564][ T5588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.162'.
[   47.290674][ T5605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.293444][ T5605] syz_tun: entered allmulticast mode
[   47.307917][ T5605] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   47.310681][ T5605] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[   47.310703][ T5605] EXT4-fs (loop0): This should not happen!! Data will be lost
[   47.310703][ T5605] 
[   47.310711][ T5605] EXT4-fs (loop0): Total free blocks count 0
[   47.310719][ T5605] EXT4-fs (loop0): Free/Dirty block details
[   47.310727][ T5605] EXT4-fs (loop0): free_blocks=20480
[   47.310735][ T5605] EXT4-fs (loop0): dirty_blocks=96
[   47.310742][ T5605] EXT4-fs (loop0): Block reservation details
[   47.310748][ T5605] EXT4-fs (loop0): i_reserved_data_blocks=6
[   47.543151][ T5625] macvlan1: mtu less than device minimum
[   47.543250][ T5627] macvlan1: mtu less than device minimum
[   47.604128][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'.
[   47.605314][ T5631] input: syz0 as /devices/virtual/input/input4
[   47.677643][   T14] Bluetooth: (null): Invalid header checksum
[   47.785715][   T14] Bluetooth: (null): Invalid header checksum
[   47.896175][   T54] Bluetooth: (null): Invalid header checksum
[   47.906598][ T5659] netlink: 'syz.1.176': attribute type 39 has an invalid length.
[   48.080920][ T5662] Invalid source name
[   48.100610][ T5604] syz_tun: left allmulticast mode
[   48.136370][ T3383] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   48.152919][ T5662] SQUASHFS error: Unable to read inode 0xe3
[   48.163101][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'.
[   48.163584][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'.
[   48.163715][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'.
[   48.163951][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'.
[   48.164598][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'.
[   48.177557][ T5666] Injecting memory failure for pfn 0x13406b at process virtual address 0x20ffe000
[   48.186866][ T5666] Memory failure: 0x13406b: keeping poisoned page in swap cache
[   48.187015][ T5666] Memory failure: 0x13406b: recovery action for clean swapcache page: Recovered
[   48.187028][ T5666] Injecting memory failure for pfn 0x13cec9 at process virtual address 0x20fff000
[   48.188294][ T5667] netlink: 44 bytes leftover after parsing attributes in process `syz.1.178'.
[   48.199425][ T5666] Memory failure: 0x13cec9: Sending SIGBUS to syz.0.179:5666 due to hardware memory corruption
[   48.200660][ T5666] Memory failure: 0x13cec9: recovery action for dirty LRU page: Recovered
[   48.329301][ T5677] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.329345][ T5677] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.335262][ T5677] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   48.347480][ T5677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.384403][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.481439][ T5684] batadv_slave_0: entered promiscuous mode
[   48.566409][ T5689] Bluetooth: MGMT ver 1.23
[   48.567330][ T5682] batadv_slave_0: left promiscuous mode
[   48.734303][ T5701] netlink: 'syz.3.189': attribute type 2 has an invalid length.
[   48.752772][ T5701] : entered promiscuous mode
[   48.768360][ T5702] tipc: Started in network mode
[   48.768407][ T5702] tipc: Node identity 7af305146864, cluster identity 4711
[   48.768499][ T5702] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.776754][ T5702] tipc: Resetting bearer <eth:syzkaller0>
[   48.923182][ T5712] set_capacity_and_notify: 33 callbacks suppressed
[   48.926796][ T5712] loop0: detected capacity change from 0 to 256
[   48.928442][ T5712] vfat: Bad value for 'uni_xlate'
[   49.024825][ T5717] bonding: no command found in bonding_masters - use +ifname or -ifname
[   49.151956][ T5728] overlay: Unexpected value for 'default_permissions'
[   49.313756][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.313797][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.322221][ T5739] 9p: Bad value for 'rfdno'
[   49.335655][ T5734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   49.351945][ T5739] 8021q: adding VLAN 0 to HW filter on device bond1
[   49.362773][ T5739] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   49.547346][ T5696] tipc: Disabling bearer <eth:syzkaller0>
[   49.685177][ T5746] __nla_validate_parse: 4 callbacks suppressed
[   49.685217][ T5746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'.
[   49.713930][ T5750] loop2: detected capacity change from 0 to 1024
[   49.724329][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.729972][ T5750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.783561][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.867203][ T5758] netlink: 52 bytes leftover after parsing attributes in process `syz.2.209'.
[   49.868526][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.868892][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.940427][ T5763] vhci_hcd vhci_hcd.0: invalid port number 36
[   49.940476][ T5763] vhci_hcd vhci_hcd.0: default hub control req: 0007 v000b i0024 l0
[   49.944271][ T4715] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   49.949197][ T4715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   49.949986][ T4715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   49.950709][ T4715] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   49.955944][ T4715] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   49.999523][ T5760] loop0: detected capacity change from 0 to 256
[   49.999898][ T5760] vfat: Unknown parameter 'ÿ0x0000000000000000'
[   50.052575][ T5781] loop1: detected capacity change from 0 to 1024
[   50.062670][ T5781] loop1: detected capacity change from 0 to 128
[   50.249866][ T4707] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   50.377621][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.398077][ T5807] loop3: detected capacity change from 0 to 512
[   50.407339][ T5805] tipc: Started in network mode
[   50.407396][ T5805] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[   50.407443][ T5805] tipc: Enabled bearer <eth:syz_tun>, priority 0
[   50.411118][ T5805] tipc: Resetting bearer <eth:syz_tun>
[   50.427250][ T5807] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.219: iget: bad i_size value: 38620345925642
[   50.427283][ T5807] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   50.429633][ T5810] loop1: detected capacity change from 0 to 128
[   50.432544][ T5810] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   50.436443][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   50.436464][    C0] EXT4-fs (loop3): initial error at time 50: ext4_orphan_get:1403: inode 15
[   50.436494][    C0] EXT4-fs (loop3): last error at time 50: ext4_orphan_get:1403: inode 15
[   50.437920][ T5810] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   50.439810][ T5805] tipc: Disabling bearer <eth:syz_tun>
[   50.444661][ T5807] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.219: couldn't read orphan inode 15 (err -117)
[   50.444696][ T5807] loop3: lost filesystem error report for type 5 error -117
[   50.448057][ T5807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.542230][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.542324][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.542389][ T5762] bridge_slave_0: entered allmulticast mode
[   50.542806][ T5762] bridge_slave_0: entered promiscuous mode
[   50.543635][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.543683][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.543734][ T5762] bridge_slave_1: entered allmulticast mode
[   50.544142][ T5762] bridge_slave_1: entered promiscuous mode
[   50.550921][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.551783][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.558509][ T5762] team0: Port device team_slave_0 added
[   50.559210][ T5762] team0: Port device team_slave_1 added
[   50.803890][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.807854][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.813151][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.828151][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.835999][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.837442][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.842749][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.874593][ T5762] hsr_slave_0: entered promiscuous mode
[   50.879145][ T5762] hsr_slave_1: entered promiscuous mode
[   50.879376][ T5762] debugfs: 'hsr0' already exists in 'hsr'
[   50.879394][ T5762] Cannot create hsr debugfs directory
[   50.917911][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.004276][ T5823] netlink: 'syz.0.222': attribute type 25 has an invalid length.
[   51.064918][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.083169][ T5762] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   51.087371][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   51.089412][ T5762] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   51.223120][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   51.226954][ T5762] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   51.259281][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.286506][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   51.288054][ T5762] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   51.304665][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   51.389469][    C0] vxcan0: j1939_tp_rxtimer: 0x00000000b28fc412: rx timeout, send abort
[   51.389541][   T12] bridge_slave_1: left allmulticast mode
[   51.390024][   T12] bridge_slave_1: left promiscuous mode
[   51.392939][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.433322][   T12] bridge_slave_0: left allmulticast mode
[   51.433370][   T12] bridge_slave_0: left promiscuous mode
[   51.433458][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.449944][ T5842] 9pnet_fd: p9_fd_create_unix (5842): problem connecting socket: ./file0/file0: -20
[   51.552049][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   51.552292][ T5847] netlink: 44 bytes leftover after parsing attributes in process `syz.1.227'.
[   51.608492][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   51.627618][   T12] bond0 (unregistering): Released all slaves
[   51.634933][ T5839] netlink: 'syz.0.224': attribute type 12 has an invalid length.
[   51.634972][ T5839] netlink: 'syz.0.224': attribute type 29 has an invalid length.
[   51.634984][ T5839] netlink: 148 bytes leftover after parsing attributes in process `syz.0.224'.
[   51.634996][ T5839] netlink: 51 bytes leftover after parsing attributes in process `syz.0.224'.
[   51.673853][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.688667][ T5762] 8021q: adding VLAN 0 to HW filter on device team0
[   51.696429][  T555] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.696473][  T555] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.705255][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.705301][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.803964][ T5860] loop1: detected capacity change from 0 to 256
[   51.889923][    C0] vxcan0: j1939_tp_rxtimer: 0x00000000b28fc412: abort rx timeout. Force session deactivation
[   51.966808][   T12] hsr_slave_0: left promiscuous mode
[   51.968265][   T12] hsr_slave_1: left promiscuous mode
[   51.968613][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.968639][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.972957][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.980636][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.991712][   T12] veth1_macvtap: left promiscuous mode
[   51.995603][   T12] veth0_macvtap: left promiscuous mode
[   51.995669][   T12] veth1_vlan: left promiscuous mode
[   51.995737][   T12] veth0_vlan: left promiscuous mode
[   52.006403][ T4715] Bluetooth: hci5: command tx timeout
[   52.137399][   T12] team0 (unregistering): Port device team_slave_1 removed
[   52.143058][   T12] team0 (unregistering): Port device team_slave_0 removed
[   52.225752][ T4396] 8021q: adding VLAN 0 to HW filter on device eth0
[   52.274845][ T5896] loop3: detected capacity change from 0 to 2048
[   52.277997][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.312800][ T5896] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=4
[   52.315011][ T5896] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   52.323270][ T5896] EXT4-fs (loop3): mount failed
[   52.351190][ T5896] overlayfs: fs on 'lower2' does not support file handles, falling back to index=off,nfs_export=off.
[   52.452146][ T5904] loop1: detected capacity change from 0 to 512
[   52.542428][ T5762] veth0_vlan: entered promiscuous mode
[   52.545352][ T5762] veth1_vlan: entered promiscuous mode
[   52.559951][ T5762] veth0_macvtap: entered promiscuous mode
[   52.562307][ T5762] veth1_macvtap: entered promiscuous mode
[   52.567988][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.571793][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.575204][   T55] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.575297][   T55] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.575323][   T55] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.575337][   T55] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.646897][ T5904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.678679][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.678714][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.700785][ T5904] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   52.704686][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.704717][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.707985][ T5904] EXT4-fs (loop1): Remounting filesystem read-only
[   52.760356][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.760582][  T555] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[   52.760603][  T555] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[   52.833819][ T4396] 8021q: adding VLAN 0 to HW filter on device eth3
[   53.005559][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.246'.
[   53.030201][ T5962] ------------[ cut here ]------------
[   53.030216][ T5962] WARNING: net/mac80211/pm.c:171 at __ieee80211_suspend+0xab8/0x1214, CPU#0: syz.0.248/5962
[   53.032958][ T5962] Modules linked in:
[   53.033640][ T5962] CPU: 0 UID: 0 PID: 5962 Comm: syz.0.248 Not tainted syzkaller #0 PREEMPT 
[   53.035115][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   53.036856][ T5962] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[   53.038203][ T5962] pc : __ieee80211_suspend+0xab8/0x1214
[   53.039152][ T5962] lr : __ieee80211_suspend+0xab8/0x1214
[   53.040086][ T5962] sp : ffff800095a779c0
[   53.040810][ T5962] x29: ffff800095a779e0 x28: dfff800000000000 x27: 1fffe000192ea1f6
[   53.042215][ T5962] x26: ffff0001079c6400 x25: 0000000000001db0 x24: dfff800000000000
[   53.043640][ T5962] x23: 0000000000000001 x22: ffff0000c9752a38 x21: ffff0000c9752a38
[   53.045077][ T5962] x20: ffff0000c9752c38 x19: ffff0000c9750f60 x18: 00000000ffffffff
[   53.046481][ T5962] x17: 0000000000000003 x16: ffff800088bf7000 x15: ffff800080cc4178
[   53.047815][ T5962] x14: ffff800080cc3ff8 x13: 0000000000000001 x12: 0000000000000003
[   53.049274][ T5962] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000015315
[   53.050768][ T5962] x8 : ffff80009be97000 x7 : ffff800080d20f70 x6 : 0000000000000000
[   53.052233][ T5962] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000861f6d20
[   53.053635][ T5962] x2 : 0000000000000001 x1 : ffff0000c9a4bb00 x0 : 0000000000000001
[   53.055050][ T5962] Call trace:
[   53.055620][ T5962]  __ieee80211_suspend+0xab8/0x1214 (P)
[   53.056586][ T5962]  reset_write+0x80/0x1d0
[   53.057359][ T5962]  short_proxy_write+0x120/0x164
[   53.058224][ T5962]  vfs_write+0x2a4/0xa0c
[   53.058972][ T5962]  ksys_write+0x12c/0x228
[   53.059742][ T5962]  __arm64_sys_write+0x84/0x98
[   53.060597][ T5962]  invoke_syscall+0x98/0x244
[   53.061430][ T5962]  el0_svc_common+0xec/0x23c
[   53.062240][ T5962]  do_el0_svc+0x4c/0x5c
[   53.062987][ T5962]  el0_svc+0x64/0x260
[   53.063728][ T5962]  el0t_64_sync_handler+0x44/0x104
[   53.064637][ T5962]  el0t_64_sync+0x198/0x19c
[   53.065446][ T5962] irq event stamp: 1116
[   53.066132][ T5962] hardirqs last  enabled at (1115): [<ffff80008055b5c8>] seqcount_lockdep_reader_access+0x7c/0xf8
[   53.067929][ T5962] hardirqs last disabled at (1116): [<ffff8000869841d4>] el1_brk64+0x20/0x54
[   53.069412][ T5962] softirqs last  enabled at (432): [<ffff80008013b050>] fpsimd_restore_current_state+0x39c/0x9c8
[   53.071218][ T5962] softirqs last disabled at (430): [<ffff80008013acf8>] fpsimd_restore_current_state+0x44/0x9c8
[   53.073056][ T5962] ---[ end trace 0000000000000000 ]---
[   53.099511][ T5969] netlink: 'syz.0.248': attribute type 11 has an invalid length.
[   53.149338][ T5969] netlink: 104 bytes leftover after parsing attributes in process `syz.0.248'.
[   53.312771][ T4396] 8021q: adding VLAN 0 to HW filter on device eth1
[   53.441751][ T4396] 8021q: adding VLAN 0 to HW filter on device eth2
[   54.085615][ T4712] Bluetooth: hci5: command tx timeout
[   55.205578][ T4715] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   55.207814][ T4715] Bluetooth: hci0: command 0x0c1a tx timeout
[   56.165669][ T4712] Bluetooth: hci5: command tx timeout
[   58.255591][ T4712] Bluetooth: hci5: command tx timeout