last executing test programs:

59.412641354s ago: executing program 0 (id=111):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x2000002, &(0x7f0000000180)={[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@appraise}, {@obj_type={'obj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '\xff\xff'}}, {@measure}]}, 0x9, 0x558, &(0x7f0000001a80)="$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")
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x2}}, 0x0, 0x9}, &(0x7f0000000080)=0x90)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00')

59.345759237s ago: executing program 0 (id=113):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x80ffffffff)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000300)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8U\x1e\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xcf+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18l\xc1\x81\x8e8L\xcb*S_\xd0:\xa4V\xbd\xf1\xa4\x955\xa9\x9d\xe0\x9b\xd3\x95\xc88n:\x89>?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4)
ftruncate(r3, 0x400000)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0)
finit_module(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0)
r6 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0xa8, 0x0, &(0x7f00000005c0)=[@release, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd, @fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r6}, @flat=@handle={0x73682a85, 0x10a, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x40}], 0x68, 0x0, &(0x7f0000000680)="99cd6035d94a4123e40d8447096d84e0273a23c6cf2119fb06cfd5c0863815d91f034597e264fa7eb26cfbdd6630e0d159b94cc22d09bc1d4c5dffe4831e76edadcb44ce00fdc79d86ab2ef3b114f0d9936e1f6c8671881c39469a541f81be7b38a5f8d322d39e6c"})

58.419290181s ago: executing program 0 (id=130):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x20200000, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7}}, 0x50)
vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="5282a4", 0x3}], 0x1, 0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x200000000000011, 0x2, 0xd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x90ffffff, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r7, 0x3007, 0x409}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
socket$packet(0x11, 0x3, 0x300)
r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00')
read$usbfs(r8, &(0x7f00000015c0)=""/235, 0xeb)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x18, 0x2d, 0x1, 0x20000000, 0x25dfdbf8, "", [@typed={0x8, 0x11a, 0x0, 0x0, @fd=r0}]}, 0x18}], 0x1, 0x0, 0x0, 0x24801}, 0x4000)
r9 = fsmount(0xffffffffffffffff, 0x1, 0x0)
r10 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r9)
sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0xc, 0x400, 0x8, 0x2, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x221347f6267c8444}, 0x28090)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40011}, 0x40000)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r9, 0xc0485630, &(0x7f0000000000)={0x401, "578257cfd39cb37b4b1914a1d9408c78240e923824b2d654fd84df179b0b232b", 0x2, 0x1, 0x8, 0x4000, 0x2})
prctl$PR_SET_ENDIAN(0x47, 0x1)

57.918294434s ago: executing program 0 (id=134):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x8, 0x4, 0x4, 0xf}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

57.023330183s ago: executing program 0 (id=144):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='.\x02\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@abort}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x4, 0xbbe, &(0x7f00000004c0)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='.\x02\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@abort}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x4, 0xbbe, &(0x7f00000004c0)="$eJzs3M1rXOUaAPDnnHy2yb2TXi6X27tpLpdLC/c6TSsptgi2UnHjQtCt0JBOSsj0gyRSk2Yx0X9A1LXgRlCL0oVdd6Pg1o3WrcWFUCQ2CiIaOfORxGYmH+0kJyS/H7xz3nfeM/M8z5xOz3lhTgLYtwazhzTicERcSCIK9efTiOiu9nojKrX9FhfmRn9emBtNYmnppR+SSCLiwcLcaOO9kvq2rz7ojYgvn03ib2+sjTs1MzsxUi6XJuvj49OXrx2fmpl9YvzyyKXSpdKVE6eeGj45fGro9HDbav3l27O3f/r3899Vfv3wt5s/vv1+Emejvz63uo52GYzB5c9ktc6IGGl3sJx01OtZXWfSucGL0m1OCgCAltJV13D/iEJ0xMrFWyE++yrX5AAAAIC2WOqIWAIAAAD2uMT6HwAAAPa4xu8AHizMjTZavr9I2Fn3z0XEQK3+xXqrzXRGpbrtja6IOPggidW3tSa1lz22wYi4983pT7IW23Qf8noq8xHxz2bHP6nWP1C9i3tt/WlEDLUh/uBD491W//+7W9d/tg3x864fgP3pzrnaiWzt+S9dvv6JJue/zibnrkeR9/mvcf23uOb6b6X+jhbXfy9uMsaND9693mouq//p28993GhZ/Gz7WEVtwf35iH91Nqs/Wa4/aVH/hU3GKPx+vdRqbpP192y5sE1aei/iaDSvvyFZ/+8THR8bL5eGao9NY8x/MfxRq/i74fgfbFH/Rsf/2iZjvHL+/K1WcxvXn37fnbxc7XXXn3ltZHp68kREd/LC2udP1m9ob6GxT+M9svqP/Wf973+z+rMQlfrnkK0F5uvbbPz6QzGfuXnj0/Xqz9Z+eR7/i494/N/cZIz/fv7WsVZzq9e/Wcvi30tqa2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaEgjoj+StLjcT9NiMaIvIv4eB9Py1anp/41dffXKxWwuYiC60rHxcmkoIgq1cZKNT1T7K+OTD42fjIhDEfFO4UB1XBy9Wr6Yd/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs64uI/kjSYkSkEbFYSNNiMe+sAAAAgLYbyDsBAAAAYNtZ/wMAAMDeZ/0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANjt05M7dJCIqZw5UW6a7PteVa2bAdkvzTgDITUfeCQC56cw7ASA3W1zju1yAPSjZYL635UxP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYPc6evjO3SQiKmcOVFumuz7X1fQVR3YwO2A7pXknAOSmY73Jzp3LA9h5vuKwfzVf4wP7SbLBfO/KPpU/z/RsW04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7D791ZakxYhIq/00LRYj/hIRA9GVjI2XS0MR8deI+LrQ1ZONe/JOGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLabmpmdGCmXS5M6Ou3t9NX/ie2WfHZ/J9kdadQ6Of/HBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABALqZmZidGyuXS5FTemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5m5qZnRgpl0uTm+jc2srOqzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CAAA///L0Aqz")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
semop(0x0, 0x0, 0x0)
syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) (async)
syz_fuse_handle_req(r4, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c000a0001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x40050)

56.896753922s ago: executing program 0 (id=145):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) (async)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xf7fffff8, 0xf21f96a5, 0xe5a, 0x80, 0xe, "00000000001a00f5ff7d0d00", 0x8, 0x3})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020005000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async)
writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='0', 0x1}], 0x1) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xd)

54.116778663s ago: executing program 3 (id=171):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00')
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1, 0xa3, 0xaf)
timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000140))
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
r4 = syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0xc0085666, &(0x7f0000000080)={0x2, 0x4})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r4, 0xc0305615, &(0x7f0000000000)={0x0, {0xee, 0xfffffcbb}})

53.246466164s ago: executing program 3 (id=180):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000440)=@routing={0x33, 0x8, 0x1, 0x1, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0xd}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast1]}, 0x48)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "eead00000000000000f46d7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1add0a80939a8ebf07cb417308a3d40aa1c788df600"}, 0xd8)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000400)=0x3, 0x4)
connect$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="3b2eb091", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x48090}, 0x20008840)
sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r6, 0x200, 0xfffffff6, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc)
r8 = socket$inet6(0xa, 0x1, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x3f7, 0x300, 0x70bd2a, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x2, 0x1}, 0x20)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000000280)={0xf, 0x4, 0x9, 0xa, 0x80, 0x40})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r10=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYRES32=r10, @ANYBLOB="0800000000000000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0)

52.275819339s ago: executing program 3 (id=196):
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x63da19722c3836c6, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x1, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000500000009d27ab8a8753f568c3ed568b1211690b0773cacc4e703496d79c835706e3c2b0cb5168b759eab91a927880ab6723c32d107866527e1776b9ae6a20f803f8ded36edb7c8f660e705c7c6110ede278ddb840f4eb2b9657600b14219d18d300000000000000"], 0x0, 0x4000020, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340), 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') (async)
r2 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00')
pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0xc, @loopback, 0x8001}, 0x3)
sendmmsg$inet6(r0, &(0x7f0000009a40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000940)="8de6d5dc7fabdf6c41e9370df010ecfc759ca9c2e5b87fd93531dd5abab5f752d04bf36d454cd21e7408071592a05acba61b15a4e4d64e368fc1427cce239e32acd490c8285ea25ea500fc25949d5ee5c92d16b2caa74bac9e7bd102bf9806542d806c40532982fbfb145a879f0cf17b13be382593ca96e4e712f5f1c9861c438073b716d599101507940d4810faefdbb6f7d38e2a6256356a8d9bcd00904462aba2e58e030bbf5d523a77c99a6c98a96a52bddda08dfc7b7526e2f03f912780803118b83fc2958ffa5c30d6c419c533f46fc1975c1722752bc9c81df713663fef72ec2df968e1acc9f8d69e96b7809c85778fd4f5be4e5ca08af12e20456883b30e0c63a93eedbedb7882e0a53c4086644985bdceb6f02e7986047ef40e0fb220d8502d72773699e19fd392d117e564d48a982a201722a9c610a445e27a1ec11a3201016ade3449f7ebfda77fcfbef46decf1c939633b0d949287bf538b3bc027843f9521abb749e083a4aa2d700fcaee7114e106cf1dfdec17b70fbb238aa6b137fef0e8e34b1a01bf5fbb2687dba671831c111089f530781ced73bed0d2582518b955ce91c161f9459e385f463e9790fe8b7e511346e2a3f4b8502f22a06a1923097a850277ce7ac721df88ee50d6bd3f45415b267c6ba5d778614c1a253b7d6a40f43cc308cdfe9938f59ddd81e8acd18a425ad0439f869a3fab9831472bc4dda355be3a07b2becca73aff4f05c0edef75ddddd79b40324cb1c9dffc52d365e740a4a5b1c70424f29c347b1064df09985dcc09bf873a681b3f7e7861a39d04768675db062d488f9f2cf4a6fb16ee02177841a67314b47a3a649428368e4bdb43c9717519cf7cf7cc9f78cf3f88b15cd046244ea084ec7abedd5e6025c2e016e2de5a2dd8ee9105f42d49b016ef31c1c7dbe2c7361adbdb433b2edec4ba877b014b4570b2e79b31744282111cb69c863bcb84fd193e60ddca475ed0669b6b17fd3fdea8d30f41f7fd7b585c209eb42851489c441ce75ee070b9eb66a432d14974551bdb6c3b83ffb320885b3bf5db3251f86a5692f9725b99673885e13f2c8a92608e4d1a2d95d9fe64da1831dbb17e81ba44e2bbb57cd8a1bce7cb26d086f106a8b49f7367969d622275e3a52f4642267e9cbbc727f3cdec0f9448e2505451f5c65635ea6b50323eb9d636f9fe2814934a7c342963ced280ce4d3a0f7fc9fd0e7b22809331f02dfd1b09d169bdf2946000972865474803fb4a9387dff1a88aacfdb89c843a668c4d50ae754689976aaf0cfe715081b4a2aa390fc4ced80a63c3c946c0fb7f12c6d9eabbfd9cb927746ccb85a8abbf7c2db934950d4cdddd20c5d1ec30b5621ee3817575cee0318add2bde45adc5d1fc58ae0d377be7c64feb274231808f36e91d402bdf73414aa354668665a4d09db4a0ed26de582d941af4eca7c7fb18f4f2b7f9d2c77fc378d02b1510b1a294fcd189924e93fdb89bf4d588fb3f475a893044fa8044d51cfc8dc5374803db1bde0c6e15c36f8f08e0adb1831bbb60c394268d06e1ac71c9cafd25dc3820277989f2eb72ea52077e25c206b8e809b63bdc219a79bbce9c40cf6db872eb59fa1cd4643cdec7fb06233c22d9d504a549ef6a6b3ba030c6a4ebbefb41e779067823bfa281cbccc81018e48e0ef125e8059f981053ce9fe00bdabcda21dc056fbad5b0fa4c2b6d13f28be8946b3dde409f7728b748cd3103d596fd39ad66ea1f8cb5a2ddddc0e0d69b91c0486cbb850b1d9c56d6f085f8be4e6b188817c7090a679a6a122c596e0aa42dc9c5a5a0abf6188c6bcf28e26f37fb0ec91b56bf71a4e13979d1bdfe57a32d1a2f8fcd6af4b885b2d6f3cf05eaabb49b6cc4461d253f5b2eb969a0fde6e7e908ed46011b522370179fdec08e9d1faa85e413fea9ed714e5a35efc0f43f668eb0f6558f856b863a550e63f04f4c0284e230a343c0fccbc46cb8b5c2576087f56dc6c17360278bcc62b371c65e53aba0366a7f495872c06d71e338574a3478a8f43f10f1073eaff1e374f1e13ba202c20e41f922596d5911686d6a91221cd9ef8aa4b9e99cff8503ebc5ddf868343f7caf7d7df56bd506a6e6bf2cb29360b8e3c73e87e6aa1f86a4c71b2e2b2e6e551c25282bf779baf75c9f50f9812a95bc8c26757b4ce00eca06e7ac31ec17156ca65d553e32712653a2d80898885c787d83d8ebe9e028aca15943585c52337425835fa40cbbabb0a27e56ae2ea2dc3d66927beb58eb894fa5cf9217d7aacbdc592933ac42ad8880f6f30dcb3fcbe66cf64c3f9fd9ffa571e98a424cece992bcbe2a0681216ba0370d1a372698f53ee349bb1fd7052c3e0043264d9cfcaf439c36a3f1fb8cf9bb6402a7aa6e21878acee3b481e31b026413d2830198703e39f7a64273f165ec292866287ad55f63cc8ea980e7d047b10a622494ee8908e44df0b81abff75c2cd4f5faa2d75001bbc0633b62b9d25752fa111ff61051facde35a05a4a1c3806f60b197aa63699dfaf7f67f6e00b3361c1c61bf96f4b0a3c7200aa096490196585150c89fb6e2f95c5a2a07f78ff1c17b11b2c5cbcb8f5165ba604e1381129950cb473956fb21361d32090fb644a711c741b7ce3ed52d9fb49a9a8cd1aa03021ff593b6403aa5443018d58087f3f951e2587e98835edcf3213a1e6704165af698704a522203140aeb4035ead959964f8c5f59bcbff02bf69edfe997e527e41e23517e5b72dfb73df9962a853f9138fda74bdfd41a46892eaf25a978689994e1c5f0", 0x7b2}, {&(0x7f0000000840)="82043d505765b33c7848993d49eb28ef32b66db4aec266a36391a1e4e79891a0a28246a0eecd37b610c230c494c39b507d65432d3de86faf1d3fc0b92152c9", 0x3f}, {0x0}], 0x3}}, {{&(0x7f0000001a40)={0xa, 0x4e21, 0xffffffff, @empty, 0x4}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000001b00)="496ed4435397ede231706705d013728deffa39d8f5e0e6dc57bdc19be811af94e8035fdeee101d225606a8fac612559d034521d58311811a396b58ef6e5f041017cb442c67b13f12b87e29665ba5e649c188bda8603fed09a5166a6e4ef4", 0x5e}, {&(0x7f0000001a80)}, {0x0}, {0x0}], 0x4, &(0x7f0000009b80)=ANY=[@ANYBLOB], 0x60}}], 0x2, 0x48800)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000019280)=@security={'security\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x298, 0xe0, 0xe0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000019080), {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'pimreg\x00', {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, 0x8, 0xc, [0x3e, 0x3, 0xc, 0xa, 0x3b, 0x32, 0x0, 0x31, 0x3c, 0x13, 0x13, 0x12, 0x2d, 0x23, 0x6, 0x5], 0x2, 0x7fff, 0x6}}}, {{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x20}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'ipvlan0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) (async)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000019280)=@security={'security\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x298, 0xe0, 0xe0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000019080), {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'pimreg\x00', {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, 0x8, 0xc, [0x3e, 0x3, 0xc, 0xa, 0x3b, 0x32, 0x0, 0x31, 0x3c, 0x13, 0x13, 0x12, 0x2d, 0x23, 0x6, 0x5], 0x2, 0x7fff, 0x6}}}, {{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x20}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'ipvlan0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390)

52.245076217s ago: executing program 3 (id=197):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000200)=""/174, &(0x7f00000002c0)=0xae)
fallocate(r0, 0x0, 0x1, 0x8ffff)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

52.121782462s ago: executing program 3 (id=198):
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) (async)
bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91000800000000"], &(0x7f0000000280)='GPL\x00'}, 0x94) (async)
connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") (async)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) (async)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
r2 = socket$kcm(0x2, 0x3, 0x2) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000200)={0x9, 0xc7c}) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000000240)={0x3, 0xffffffff}) (async, rerun: 64)
r5 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r5, 0x10f, 0x83, &(0x7f0000000080), &(0x7f0000000240)=0x4)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3810090, &(0x7f0000000c80)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@data_journal}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@discard}, {@minixdf}, {@mb_optimize_scan}, {@grpjquota}, {@dax_never}], [{@flag='posixacl'}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") (async)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) (async, rerun: 32)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340), &(0x7f0000000100), 0xfc21, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'rose0\x00', <r8=>0x0}) (async)
r9 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10, 0x8000000000000003, {}, 0xfd}, 0x18) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@deltclass={0x48, 0x29, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x10, 0xf}, {0x10, 0x3}, {0xffff, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async)
sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x6e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x306}, {&(0x7f0000002b40)="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", 0x2ae}], 0x2}, 0x8400) (async)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}, 0x0) (async)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00')

51.507577815s ago: executing program 3 (id=202):
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)
getresuid(&(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000001073012f0000000000950000000000000052594c316f8f62d8a9821ee237a765f2c94a82db47f7bdf5a4"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000001073012f0000000000950000000000000052594c316f8f62d8a9821ee237a765f2c94a82db47f7bdf5a4"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="0500"], 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="0500"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x4a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48)
sendmsg(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', r3, 0x4000, r5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800, &(0x7f00000007c0)={[{}, {@nogrpid}], [{@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x30, 0x37, 0x65, 0x39, 0x65, 0x62, 0x32], 0x2d, [0x34, 0x33, 0x65, 0x65], 0x2d, [0x32, 0x37, 0x35, 0x68], 0x2d, [0x63, 0x65, 0x64, 0x37], 0x2d, [0x30, 0x34, 0x31, 0x35, 0x4, 0x63, 0x38, 0x36]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'bsddf'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'bsddf'}}, {@audit}, {@uid_lt={'uid<', r1}}, {@fowner_lt={'fowner<', r0}}]}, 0xfe, 0x572, &(0x7f0000000240)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)

51.424164856s ago: executing program 32 (id=202):
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)
getresuid(&(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000001073012f0000000000950000000000000052594c316f8f62d8a9821ee237a765f2c94a82db47f7bdf5a4"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000001073012f0000000000950000000000000052594c316f8f62d8a9821ee237a765f2c94a82db47f7bdf5a4"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="0500"], 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="0500"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x4a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48)
sendmsg(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', r3, 0x4000, r5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800, &(0x7f00000007c0)={[{}, {@nogrpid}], [{@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x30, 0x37, 0x65, 0x39, 0x65, 0x62, 0x32], 0x2d, [0x34, 0x33, 0x65, 0x65], 0x2d, [0x32, 0x37, 0x35, 0x68], 0x2d, [0x63, 0x65, 0x64, 0x37], 0x2d, [0x30, 0x34, 0x31, 0x35, 0x4, 0x63, 0x38, 0x36]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'bsddf'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'bsddf'}}, {@audit}, {@uid_lt={'uid<', r1}}, {@fowner_lt={'fowner<', r0}}]}, 0xfe, 0x572, &(0x7f0000000240)="$eJzs3U1rVFcfAPD/nSS+JD4aQeRpFyXgohbrxCR9sdCFXZZWKrR7OyTXIJk4kpmISYXqom66KVIopdLSD9B9l9Iv0E8htIIUCe2imyl35o6OyUwS42hG5/eDq+fcc6/nnrn3fzxnzgwTwMCayP4oRLwSEd8kEYfayoYjL5xoHrf24NpstiVRr3/6VxJJvq91fJL/PZZn/h8Rv30VcaKwsd7qyupCqVxOl/L8ZG3x8mR1ZfXkxcXSfDqfXpqemTn99sz0e+++s/HkvTtr6xvn/vn+kzsfnv762Np3v9w7fCuJM3EgL2tvx1O43p6ZiIn8NRmJM+sOnOpBZf0k2e0LYEeG8jgfiawPOBRDedQDL78vI6IODKhE/MOAas4AMs25/abz4PrLN8u7/0FzAtRq+6P2J833RmJfY240upY8NjPKXonxHtSf1fHrn7dvZVv07n0IgC1dvxERp4aHH+v/DkZb/7dzp7ZxzPo69H/w/NzJxj9v7u0w/ik8HP9Eh/HPWIfY3Ymt479wr/OZO1wEWicb/70fncZ/Dxetxofy3P8aY76R5MLFcpr1bVk3eTxG9mb5zdZzTq/drXcrax//ZVtWf2ssmF/HveF1TZ0r1UpP0+Z2929EvLrF+DfpcP+z1+PcNus4mt5+rVvZ1u1/tuo/R7ze8f4/muskm69PTjaeh8nWU7HR3zeP/t6t/t1uf3b/Rzdv/3jSvl5bffI6ftr3b9qtbCLJF02f8Pnfk3zWSO/J910t1WpLUxF7ko837p9upn9sy7eOz9p//Fjn+N/s+d8fEZ9vs/03j9zsemg/3P+5J7r/XRL1pGvR3Y+++KFb/dvr/95qpI7ne7bT/3W+0tG89GmeZgAAAAAAAOhfhYg4EEmh+DBdKBSLzc93HInRQrlSrZ24UFm+NBeN78qOx0ihtdI91vZ5iKn887Ct/PS6/ExEHI6Ib4f2N/LF2Up5brcbDwAAAAAAAAAAAAAAAAAAAH1irMv3/zN/DO321QHPnJ/8hsG1Zfz34peegL7k/38YXOIfBpf4h8El/mFwiX8YXOIfBpf4h8El/gEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp09m231tQfXZrP83JWV5YXKlZNzaXWhuLg8W5ytLF0uzlcq8+W0OFtZ3OrfK1cql6emY/nqZC1NapPVldXzi5XlS7XzFxdL8+n5dOS5tAoAAAAAAAAAAAAAAAAAAABeLNWV1YVSuZwuvVyJQt68bZ91MD+hHy7+xUoM98dlSPQ4sYudEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs818AAAD//0efKxA=")
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)

41.715379455s ago: executing program 33 (id=145):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) (async)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xf7fffff8, 0xf21f96a5, 0xe5a, 0x80, 0xe, "00000000001a00f5ff7d0d00", 0x8, 0x3})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020005000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async)
writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='0', 0x1}], 0x1) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xd)

23.975267858s ago: executing program 5 (id=475):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf25000000", @ANYBLOB="10080400"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x34, r7, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800)
r9 = signalfd4(r3, &(0x7f0000000100)={[0x3]}, 0x8, 0x800)
ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, &(0x7f0000001a40)=""/215)
sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000001a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000019c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58100020", @ANYRES16=r5, @ANYBLOB="000404000000fedbdf255200000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x1058}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r13=>0x0})
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r11)
sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x80000000, 0x4a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24004840}, 0x20000080)
sendmsg$NL80211_CMD_SET_STATION(r11, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x38, r14, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x38}}, 0x4000810)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b0400ff7529ad7e024b0e000000400004803c0001800b00010065787468647200002c0002800800034000000000e63f05000200000000000800044000000000080007400000000008000640000000010900010073797a30000000000900020073798e23b3cc00001400000011000100"/148], 0x94}}, 0x0)
r15 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r15, 0x0, 0x0)
syz_usb_control_io$lan78xx(r15, &(0x7f0000000540)={0x14, &(0x7f00000003c0)={0x0, 0x22, 0xae, {0xae, 0x21, "3c982d34ec7799596c9999c514413e4fbb2a6ee7d742ed34e13736adc81dd2376229a5bdc3aa703eff06e37ce1c003014af6463abddcd732134d2fc2e1001e21a292d0603f2d2b4458c91502aea4ac9c2039fdcd393505b9c046436952fdd6a2f024b85348149b55ee203e308362fa22266760ca375e411f0046c099b39c60c4b89717a27b508e159463f38e2342c69b632bcf7b4a1045b5efb3da6768188ee2cc6fa80fddbfabf20c39d1f9"}}, &(0x7f0000000480)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "83f4a352406d2cf33cb76127b656ea4987947bd5337cf5fb956c08c2ac6709497c8f85262dc3db65d068fcfe87d8ee00af63ad92e71141b93d46ef8d47b5d885ef24bc0cc8b04292e2b1c66af20fd50a9ef6fb04905dab23c08257dce2d5fecd60e240776b4ec575d161f700815f6744345dcd184118e5448543ad1d143ad2b8b8a28a70e4c0b276a8"}}}, &(0x7f00000007c0)={0x34, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000700)={0xc0, 0xa1, 0x4, 0xfffffffd}, &(0x7f0000000740)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000780)={0xc0, 0xa2, 0x2f, "22467156e42626b140590ac158369b378534f594d792de83f9494c84c9ea571321f23245042e7831531719f3518f0b"}})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040)

23.108862376s ago: executing program 5 (id=484):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x29a83a768e447add)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8005}, 0x4008810)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

23.094091443s ago: executing program 5 (id=487):
r0 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x4084)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r8)
keyctl$read(0xb, r8, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x48, r6, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
close(r4)

22.19238456s ago: executing program 5 (id=501):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@usrquota}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x200000, 0xd, 0x2, 0x2})
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0x46, 0x3, 0x0, 0x85, 0x6, 0x21, 0xe6, 0x0, 0x81, 0x4c, 0x2, 0x3}, 0xe)
sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x1, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa00, 0xb)
r5 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
wait4(r5, 0x0, 0x80000000, 0x0)
ptrace(0x10, r5)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000000)=0xffffffffffffffff)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
r8 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0)
ftruncate(r8, 0x80079a0)
splice(r8, 0x0, r7, 0x0, 0x800000020200, 0x4)
close_range(r6, 0xffffffffffffffff, 0x0)
syz_pidfd_open(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

22.028153198s ago: executing program 5 (id=505):
r0 = memfd_create(&(0x7f0000000140)='\x00\x00@Z\x82\x1f\xd7\xdc1yE7\xb4\xa4\xc4\x85s\xedz\xef\x96\xe4:\xec\x14\xb9\xa0\xfeA\x7f0\xee\xde\xb9', 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x2)
msgget(0x3, 0x693)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

20.552823574s ago: executing program 5 (id=530):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b509050000000000dbaaf0ffe1000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000080000004600000076000000bf91000000000000b6080000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94)

20.504688412s ago: executing program 34 (id=530):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b509050000000000dbaaf0ffe1000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000080000004600000076000000bf91000000000000b6080000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94)

6.40753984s ago: executing program 4 (id=681):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e8, &(0x7f00000004c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x7900000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

6.099975958s ago: executing program 4 (id=683):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0xd0}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x800, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x320, 0x8}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}]}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000)

6.06265619s ago: executing program 2 (id=684):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b509050000000000dbaaf0ffe1000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000080000004600000076000000bf91000000000000b6080000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94)

5.976753203s ago: executing program 4 (id=685):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
listen(r0, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async)
listen(r1, 0x0) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async)

5.972001754s ago: executing program 2 (id=686):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000165b7fd3df85a13dea10949fc8fdc52a0fd73365a8bd491ee3ba779c51d9b6a8af7158cc8d423eaffeae1967df58b0f5992387e83096a92ee459ec256f41b851fcbb4345a03c84bf6cce5144cc5418869543019c0b73f07d38b7df8fb5572f0dbc3c9f00652d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex, 0x1e, 0x0, 0x1, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], <r2=>0x0}, 0x40)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000500)='.log\x00', 0x0, 0x110)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="e51a00000000010000000000", @ANYRESOCT=r1, @ANYBLOB, @ANYRES64=r2], 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd28, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=<r4=>0x0)
syz_open_procfs(r4, &(0x7f0000000200)='uid_map\x00')
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = getpid()
sched_setscheduler(r6, 0x0, &(0x7f00000004c0))
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100))
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r5, @ANYBLOB="ee540000000000000000b702000014000000b703000000000000850000000055090100000000009500008c00000000850000002a000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"/104], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x79, 0x101b01)
ioctl$USBDEVFS_SETINTERFACE(r9, 0x80045510, &(0x7f0000000000))

5.964133564s ago: executing program 4 (id=687):
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(r0, 0x0, 0x2000c0d6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x200000000000011, 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffefc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x4, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0xf, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xca, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x6, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x1, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
r8 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r8, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14)
preadv(r7, &(0x7f0000003d40)=[{&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000840)=""/4084, 0xff4}], 0x2, 0x13, 0xf7)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$eJzs3M9rHFUcAPDvTLJpY6qJtf5q/RGtYhFNmrZqDx5UFDxUEBTU45LEUptWaSLYEjD1UE8ignfx6L/gSS8ingSvepdCkV5sPa3Mzkyym2w22XQ3W93PB7b9vvmR974783bfzNvdAAbWZPZPErEvIn6PiPG82LzBZP7fjevLszevL88mUau99VdS3+7v68uz5ablfmONhUjiUIt6Fy9eOltdWJi/UJSnl859NL148dKzZ85VT8+fnj9/7OTJE8dnXnj+2HNdyXMs0iJ6/b2v3jj1RVP+6/Loksl2K5+s1bpcXX/d2RAP97EddGaoOF6Vev8fj6GGozcer322Wvi0Tw0EeqZWq9XGNl+9UgP+x5JoLuvyMCjKN/ry+rfVdfBLPRt99N+1l/MLoCzvG8UjXzO8esegsu76tpsmI+LdlX++yR7Rm/sQAABNfsjGP89ko53l2WzssTb+SOO+hu3uKuaGJiLi7ojYHxH3xPk4EBH3RtS3vT8iHuiw/oZJkvowc+P4J7264+S2IRv/vVjMbTWP/8rRX0wM1UsX80JUkvfPLMwfLZ6TI1HZk5Vn2tTx46u/fbnZusbxX/bI6i/HgkU7rg7vad5nrrpU3XnGza5djjg43Cr/ZHUmIImIByPiYKs/kG5dx5mnv3tos3Vb599GFyaaat9GPJUf/5VYl38paT8/Ob03FuaPTpdnxUa//Hrlzc3qX5f/3ugk/y7Ijv8dLc//1fwnksb52sXO67jyx+ebXtNMVoqgg/N/pbpUHUnerscjxbJPqktLF2YiRpJTeaMblx9b27csl9tn+R853Lr/74+1Z+JQRGQn8cMR8UhEPFocu8ci4vGIONwm/59feeKD9ctGy/xv5fzvgiz/uY6O/1owEs1L0hbbZMHQ2Z++b6p0Yi0s8r/Z/vXvRD06UizZzuvfxla0Dm71+QMAAID/gjQi9kWSTq3GaTo1lX+G/0A+9Z35+Pxc/h2Biaik5Z2u8Yb7oTPFZX1evhwR+UcLyvXHI63fN/56aLRenpr9cGGur5kDY5v0/8yfQ/1uHdBzvrAFg0v/h8HVtv9Xdq8dwO7b0P/b9vk9PW0LsLtavP+P9qMdwO5rNf73ez8wGNb1f9N+MEDc/4fBpf/D4NL/YSAtjsbWX5JvG5R/aYe7bxWMR+y8hRGx0uX2bDuISh8q3cUg0p5XMdLbU6tnQbKzNidxOzS+oe9s4Z02PxwOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwu/g3AAD//0C6yvY=")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]})

5.902272075s ago: executing program 2 (id=690):
r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0)
capset(&(0x7f0000000480)={0x19980330}, &(0x7f00000004c0)={0xff, 0x7ff, 0x3, 0x1, 0x83, 0x3})
r1 = socket(0x2, 0x5, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000001240)={'gre0\x00', 0x0, 0x80, 0x7800, 0x8, 0x9, {{0x5, 0x4, 0x1, 0x1, 0x14, 0x66, 0x0, 0x4, 0x29, 0x0, @loopback, @empty}}}})

5.881558648s ago: executing program 2 (id=692):
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
mount$bind(&(0x7f0000000200)='./bus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a01004, 0x0)
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x78)
accept$unix(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x6e)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80, 0x1)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

5.828619759s ago: executing program 2 (id=694):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x320}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000) (fail_nth: 13)

5.780489372s ago: executing program 4 (id=696):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x3, [@restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x2, 0x7, 0x0, 0x4, 0x0, 0xffffffff, [{0x3, 0x5, 0x1}, {0x7, 0x3, 0xc}, {0x6, 0x0, 0x1}, {0x3, 0x5, 0x6}, {0x5, 0x1, 0x1}, {0x0, 0x5, 0x8000}, {0xe, 0x2, 0x70}]}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}]}, {0x0, [0x30]}}, &(0x7f0000000380)=""/156, 0x97, 0x9c, 0x1, 0xd97c, 0x10000, @value=r0}, 0x28)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x6, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8000}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f00000000c0)='GPL\x00', 0x3, 0x39, &(0x7f0000000280)=""/57, 0x41000, 0x52, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xc, 0x3, 0x4}, 0x10, 0x11aed, r4, 0x7, &(0x7f0000000540)=[r0, r0], &(0x7f0000000580)=[{0x5, 0x3, 0x1, 0x7}, {0x1, 0x4, 0xc, 0x4}, {0x3, 0x2, 0xe}, {0x4, 0x2, 0x4, 0x1}, {0x3, 0x1, 0xa, 0x2}, {0x4, 0x1, 0xe, 0xa}, {0x2, 0x2, 0x9, 0x6}], 0x10, 0x100}, 0x94)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x320}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000)
getsockopt$inet_tcp_buf(r0, 0x6, 0x33, &(0x7f0000000140)=""/117, &(0x7f0000000200)=0x75)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000006c0)={@private=0xa010101, @multicast1, 0x1, 0x1, [@rand_addr=0x64010100]}, 0x14)

5.561626821s ago: executing program 2 (id=699):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000880)={0xc, <r3=>0x0})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000008c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000900)={0x28, 0x6, r3, r4, 0x4, 0x6, 0xdb2})
r5 = socket$can_raw(0x1d, 0x3, 0x1)
mount$binderfs(0x0, &(0x7f0000000840)='./binderfs\x00', 0x0, 0x22020, &(0x7f0000000200)=ANY=[@ANYBLOB='stats=,'])
r6 = getgid()
mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x20002, &(0x7f0000000280)={'trans=virtio,', {[{@cache_mmap}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@cache_none}, {@access_user}, {@access_any}, {@cache_fscache}, {@access_client}, {@afid={'afid', 0x3d, 0x8}}, {@directio}, {@directio}], [{@dont_appraise}]}})
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
recvmsg$can_raw(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000380)=""/25, 0x19}], 0x2, &(0x7f0000000400)=""/185, 0xb9}, 0x40000002)
r7 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4)
syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffd}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x6, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x71, 0xfffffff8, 0x7, 0x1, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x8000006, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x400, 0x4, 0x1, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x0, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x6, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r8=>0x0})
sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r8}, 0x10, &(0x7f00000005c0)={&(0x7f0000000040)=@canfd={{0x2}, 0x1f, 0x1, 0x0, 0x0, "6439030ffdc97c45885be2719745d8fc0846dc3438d706534ae83e9f8ca8c00563c107a5985e43b66f7492829ce7c110c114639bd60f904853d0b03e59d77673"}, 0x48}}, 0x80)

4.607120588s ago: executing program 35 (id=699):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000880)={0xc, <r3=>0x0})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000008c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000900)={0x28, 0x6, r3, r4, 0x4, 0x6, 0xdb2})
r5 = socket$can_raw(0x1d, 0x3, 0x1)
mount$binderfs(0x0, &(0x7f0000000840)='./binderfs\x00', 0x0, 0x22020, &(0x7f0000000200)=ANY=[@ANYBLOB='stats=,'])
r6 = getgid()
mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x20002, &(0x7f0000000280)={'trans=virtio,', {[{@cache_mmap}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@cache_none}, {@access_user}, {@access_any}, {@cache_fscache}, {@access_client}, {@afid={'afid', 0x3d, 0x8}}, {@directio}, {@directio}], [{@dont_appraise}]}})
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
recvmsg$can_raw(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000380)=""/25, 0x19}], 0x2, &(0x7f0000000400)=""/185, 0xb9}, 0x40000002)
r7 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4)
syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffd}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x6, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x71, 0xfffffff8, 0x7, 0x1, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x8000006, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x400, 0x4, 0x1, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x0, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x6, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r8=>0x0})
sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r8}, 0x10, &(0x7f00000005c0)={&(0x7f0000000040)=@canfd={{0x2}, 0x1f, 0x1, 0x0, 0x0, "6439030ffdc97c45885be2719745d8fc0846dc3438d706534ae83e9f8ca8c00563c107a5985e43b66f7492829ce7c110c114639bd60f904853d0b03e59d77673"}, 0x48}}, 0x80)

4.457753114s ago: executing program 4 (id=706):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440100001000130722bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb00000000321a0000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000500ac000000000000004c001200726663343534332867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000e8000000000000000000000000000080000000080028"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

4.361712116s ago: executing program 36 (id=706):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440100001000130722bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb00000000321a0000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000500ac000000000000004c001200726663343534332867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000e8000000000000000000000000000080000000080028"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

2.283725262s ago: executing program 6 (id=733):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x9], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x9}, {}, {}, {0x15}}, @ldst={0x1, 0x0, 0x3}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)

1.687808376s ago: executing program 1 (id=738):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x201, 0xa000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040481)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

1.181971305s ago: executing program 6 (id=741):
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000840)={{<r0=>0xffffffffffffffff, &(0x7f0000000000)='U\x00', 0x1, &(0x7f0000000080)={@_ha_fsid={[0x8]}, {0x7, 0x32, 0x3, 0x2}}, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x6}, 0x8, &(0x7f0000000740)=[{0x3, 0x2fd, &(0x7f0000000140)='&}\'#*:@\x00', &(0x7f0000000180)="9d11a10791525defafb2b2947613fbeb457f3876fab7e93614e4a553b3e06abf33b3e1a68dad970497304c1dbe5cdc22af0dc59429", 0x35, 0x2}, {0x2, 0x6, &(0x7f00000001c0)='/::!\x00', &(0x7f0000000200)="a5cc754dbe9b21c1c8d425a20de71aa51a184db6a4477f5f7657be4cf01dd9926d45da06dfaf989561edbb889b05fee13bd82b93c851d66596fad7c665809082a9922c17ebb3051b81f735c165b498bde06c2a45aad9ddc7a41f83cc3db440ac6a11ed805ad20492fba2dceb6f98a2", 0x6f, 0x12}, {0x1, 0x3, &(0x7f0000000280)=',!\\\x00', &(0x7f00000002c0)="51cba5bccc3d0521aa22de297815822a9ce3c0acdf0a653f3b95a576bc3813713ffce5963e16a160c28c452f77e6d9e23084adfbb646da8be46b190b4f6284e0f7dad30aab8ba301564366de6ac0790b514ee75834ddc831f5764d5864e30e", 0x5f, 0x30}, {0x1, 0x7, &(0x7f0000000340)='GPL\x00', &(0x7f0000000380)="0c0dc2cf7ff81723645d87803b745ea0118ba3df106ec5e0d1dffc319280f64b3e7f544e8d8d3ba3d10c3a4c66dd01f846ffb03ccfcf69328236211d0b6a785faba5de6cb7a5aa8f8db6718b5734ca1052902bf8462099a93560bf5d094090b372547cf370a98207a41a5a3a0790966a2616e50b", 0x74, 0x20}, {0x2, 0x1, &(0x7f0000000400)='\x00', &(0x7f0000000440)="0175c47ab9610694cdc0dfd99cefcccacdd4be79d6b5903a23e0d68541635359981d765d6c38f9e9cea5476e7a7fbddc0cb89b8edfb70f17415519f0d4b0653cf04d1255b10bb5f0c8", 0x49, 0x30}, {0x3, 0xc, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="cfc248d33d071696a3f01fcccaf374c7da7740a654b27c9564fd331a5ba7bfee685d2d901cba94a9a43e985080501f50370958f1f6a357d009ac97cf10871311d2573b799dd0de21f134644a816c789c724306cb7936b3476d6f585cdf30a4fe260d3114505b0204302779f592e4773238e061c5b3c2831663a588a0060a30", 0x7f, 0x10}, {0x3, 0x5, &(0x7f0000000580)='\x00', &(0x7f00000005c0)="367120e04173e7095665281e79f293a2dc656c662115c5f6a03e508889ab3aff0424af9358de4364a3c3f6a3ffc3aa0af7b83e3c8be4718233de1322a1dfe65783efb20aa1977e9b361815dc2879ab374d45139be48c54d53dca2f69a10cdf4d450150e2c1cd6aaadb39ffd87771f9e975c0c4af79b9265c", 0x78, 0x2}, {0x3, 0x7, &(0x7f0000000640)='\x00', &(0x7f0000000680)="6f1e3b8b5ec6e9aa2ed0a1824ad2d37639df7e3f75a07f12a3fc0bf320a77a6f365cb71c62215894f004ee4f450748a493dd80de582ec213123e10d1f5253062a4626947fd9a1c0bcc69ecf2737e1e255479ade38340a48519061e885743a7a5419693bfb4a9e49bd4df855e7e2efa4dee0efc87cc8717ec986df7071e6e507ad5d2e18f9542dc9940ed19c6760d0bd3ad06a9052d3399377674a6f0eee75eea32bf0bf95c0d653f46ca33c058146d78aba3dd0545fe49d4a6b1fb57", 0xbc, 0x6a}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x4}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcf}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ac0)={0x0, <r1=>0x0}, &(0x7f0000000b00)=0xc)
getgroups(0x9, &(0x7f0000000b40)=[0xee00, 0xee01, 0xee00, 0xee01, 0x0, 0x0, <r2=>0x0, 0xffffffffffffffff, 0xee00])
fchown(r0, r1, r2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000008c0)={<r3=>0x0, @in6={{0xa, 0x4e23, 0x200, @loopback, 0xfffffff8}}, 0x6, 0x400, 0xfffff577, 0x5, 0x90, 0x800, 0x7}, &(0x7f0000000980)=0x9c)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000009c0)={r3, @in={{0x2, 0x4e24, @local}}, 0x3919, 0xf7d0}, &(0x7f0000000a80)=0x90)

1.076893699s ago: executing program 6 (id=742):
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000004c0)=[{0x80000006, 0x0, 0x12, 0xf9}]}, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)="fa87c7e72022c7b864b07519029431b0f73faf3562d4199e9f31c1dd1202787cdc0dad572930535fe281583dce41f94472697f744b2aec18a02dafedcfe93533ddc8f52bf553629fad5e0e873ea442348753ce7f0b8a58a6fa37", 0x5a}, {&(0x7f0000000340)="0a2b131fed7c3b0ace259fcc73c7401df65ac597b979f6cc76064e5a3b452de24ce402ad11a56e85c9fe9f3c2e305933c9adbcc8576d051634f516897eb95943656f8b840b1fb922463f63432934f3dab5c65c44056b72e7ff918b9ca851", 0x5e}], 0x2}}], 0x20, 0x0)

1.076681111s ago: executing program 7 (id=743):
socket$l2tp(0x2, 0x2, 0x73)
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x2, 0x0, @void}, 0x10)
socket$l2tp(0x2, 0x2, 0x73)

1.073186569s ago: executing program 6 (id=744):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x8, 0x4, 0x4, 0xf}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (fail_nth: 6)

1.054400708s ago: executing program 7 (id=745):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="d001000019000100000000000300000000000000000000000000ffff64010102e000000100000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffff000000000800000000000100000000000c001c00", @ANYRES32, @ANYBLOB="000000000c0015005a07350000000000e4000600ac1414bb000000000000000000000000fe8000000000000007000000000000bb4e2400004e220000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001000004d233000000ac14142b00000080ffffff000000000007000000000000000900000000000000faffffffffffffff04000000000000008ef93a6300000000f9ffffffffffffff000100000000000004000000000000000100000000000000ff0300000000000003000000000000005f790000000000000900000005000000ffff00002dbd70000735000002000312520000000000000008001800000100000c001c00", @ANYRES32, @ANYBLOB="0200000008001f00"], 0x1d0}}, 0x0)

964.900557ms ago: executing program 7 (id=746):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)

963.069376ms ago: executing program 7 (id=747):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440100001000130722bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032002000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000500ac000000000000004c001200726663343534332867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000e8000000000000000000000000000080000000080028"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

711.279409ms ago: executing program 1 (id=748):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x30, r1, 0x5, 0x3, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x9}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}]}]}, 0x30}}, 0x0) (async, rerun: 64)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ffff0000000000000000020018910000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x12, 0x79, &(0x7f0000000040)="e0e476ea8cf526e9140c8076fc1cb49ed858", &(0x7f0000000080)=""/121, 0x42eb, 0x0, 0x7e, 0x48, &(0x7f0000000100)="2843dc1c66864f10b3d5e274114376321cffe6d5ca7484fa2978c55ae969d4f78a75faf3d8ac65e158cb8297bb324edebb04d32560cc0c1996c0e2ef028926206566cf97e364178f5689cedd194fc056fef1b6af31b1014eb075d2a32e5599a875fa92d97913cb2296b469c54980995ae876495c6d970d2a51fd910e5f27", &(0x7f0000000180)="b998afd4e0e3445bbab2403b8fd62b849a22a96a8cfc75a2ff2776821b6ac17113e7fbad590c78e2d587815ac822109ffb41f5e36b4de6bd8bef1614fce9dc5584166e5d733a2e0d", 0x0, 0x0, 0x6}, 0x50)

652.258181ms ago: executing program 1 (id=749):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x76}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x52}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x80}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), 0x4)

650.876968ms ago: executing program 7 (id=750):
openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)

540.285631ms ago: executing program 1 (id=751):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xd73c, 0x80000, <r1=>r0})
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7cfd1f19}, 0x20)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={<r3=>0x0, 0x1000, 0x7ff}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}}, 0xc, 0x200}, &(0x7f0000000200)=0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

533.531076ms ago: executing program 7 (id=752):
r0 = socket(0x2a, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000009f80)="c674015814a875ec92e8793fce1d", 0x0, 0x130000b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x27)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0)
r4 = syz_io_uring_setup(0x40ce, &(0x7f0000000100)={0x0, 0x40d6, 0x40, 0x0, 0x1ac, 0x0, r3}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240))
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000002140))
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r7 = fcntl$dupfd(r0, 0x406, r4)
ioctl$OCFS2_IOC_UNRESVSP64(r4, 0x4030582b, &(0x7f0000000400)={0x1, 0x1, 0x9, 0x10, 0x8001})
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r6, {0x5, 0xfff1}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8005}, 0x4008810)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

508.880057ms ago: executing program 1 (id=753):
socket$l2tp(0x2, 0x2, 0x73)
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x2, 0x0, @void}, 0x10)
socket$l2tp(0x2, 0x2, 0x73)

450.863202ms ago: executing program 1 (id=754):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@bh}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@errors_remount}, {@nolazytime}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbae, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0}, &(0x7f0000000040)=0x5)
setreuid(r3, 0x0)
sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="f5", 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x800}, 0xc084)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x31, 0x1}]})
socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r4, 0xffffffffffffffff, 0x600000000000000)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
getpid()
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020)
socket$inet6_mptcp(0xa, 0x1, 0x106)

333.093084ms ago: executing program 8 (id=701):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000002014002b80"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0)

232.862577ms ago: executing program 8 (id=755):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)

232.485823ms ago: executing program 8 (id=756):
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', '\x00'})
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x4a1e, &(0x7f0000000280)=ANY=[], 0x4, 0x32e, &(0x7f0000000a40)="$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")
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updsa={0x120, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x2}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@private2}, @replay_esn_val={0x1c}]}, 0x120}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x350, 0xffffffff, 0xffffffff, 0x350, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'gretap0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x40, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3}, {0x800000000}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0xf22, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xffff, 0x400}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x480)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x12)

181.698608ms ago: executing program 6 (id=757):
r0 = socket(0x10, 0x3, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = fsopen(&(0x7f0000000200)='pipefs\x00', 0x1)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000240)='sockfs\x00', 0x0) (async)
readv(r2, &(0x7f0000000480)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010426bd70000000000000000000", @ANYRES32, @ANYBLOB="4254010008080300280012800b00010065727370616e00001800028004001200060003000400000006000e"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x810) (async)
sendmsg$nl_route(r0, 0x0, 0xa690ab6b55b67f29) (async)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfff}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) (async)
r5 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async)
r6 = fsmount(r5, 0x0, 0x82)
fchdir(r6) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r7, &(0x7f0000000240)=""/182, 0x74) (async)
lseek(r7, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r8 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000080)={0x4, 0x9, 0x0, 0x2, 0x0, 0x64a}) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0xf07, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x21, 0xc, "1b8ba36afe22f5bbc4807c96f9a5382bd5f0b289d76d760d9e80fa201c"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff69}]}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x114, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe8, 0x3, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ELEM_KEY_END={0xa4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x20c}}, 0x0) (async)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10)
capset(&(0x7f0000000b00)={0x19980330}, &(0x7f0000000000)) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xffe0}, {0xb, 0x2}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0xfa, 0xa, 0x0, 0x3, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0x9, 0x1, 0x0, 0xcd5b}}, {0x4}}]}]}, 0x68}}, 0x0)

135.113669ms ago: executing program 8 (id=758):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440100001000130722bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000019fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000500ac000000000000004c001200726663343534332867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000e8000000000000000000000000000080000000080028"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

107.552721ms ago: executing program 9 (id=708):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}}, 0x24040084)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
unshare(0x2c020400)
r5 = msgget$private(0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x3, @mcast1, 0x6}}, 0xa, 0x6}, 0x90)
msgsnd(r5, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0)
msgrcv(r5, &(0x7f0000000100)={0x0, ""/9}, 0x1042, 0x2, 0x3000)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9be28fee00ee6fbe788587d5670c6cd5ea1e4784d38162b261050e3c5b18c9155edf765f8c1bd8cacfe115d1e67a590599253ffea2a18ad62e3133588c3c010d0e01409cd149ddb79e4e6f21f5c11f2b0464bffa18e6", @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf2507000000"], 0x14}}, 0x2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x803, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}}, 0x24040084) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async)
unshare(0x2c020400) (async)
msgget$private(0x0, 0x0) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x3, @mcast1, 0x6}}, 0xa, 0x6}, 0x90) (async)
msgsnd(r5, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) (async)
msgrcv(r5, &(0x7f0000000100)={0x0, ""/9}, 0x1042, 0x2, 0x3000) (async)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9be28fee00ee6fbe788587d5670c6cd5ea1e4784d38162b261050e3c5b18c9155edf765f8c1bd8cacfe115d1e67a590599253ffea2a18ad62e3133588c3c010d0e01409cd149ddb79e4e6f21f5c11f2b0464bffa18e6", @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf2507000000"], 0x14}}, 0x2) (async)

40.610913ms ago: executing program 6 (id=759):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000040)={'syz0\x00', {0x3, 0x93ff, 0xb, 0x7fff}, 0x4b, [0x79e9, 0x9, 0x2, 0x100, 0xe, 0x5, 0x3, 0x0, 0x1, 0x9, 0x5, 0x8, 0x6, 0x0, 0x1, 0x7, 0x8, 0x7, 0x1b, 0x9, 0x5, 0xffff, 0x80000000, 0x7, 0x4, 0x401, 0x7, 0xcb5, 0x2, 0x4, 0xf792, 0xfffffffe, 0xffffff55, 0xaec6, 0x2, 0x7fff, 0x0, 0x1, 0x40, 0x1000, 0x30000, 0xab36, 0x6, 0x8, 0x1, 0x4, 0x1ff, 0x6, 0x9, 0xff, 0x9, 0x8, 0x1ff, 0x5, 0x8, 0x1, 0xac, 0xf, 0x1800000, 0x5, 0x3, 0xc, 0xc, 0x800], [0x0, 0x0, 0x401, 0xfffffffb, 0x3, 0x5, 0xfffff001, 0x2000000, 0x8, 0xffffffff, 0x8, 0x3, 0x400, 0xff, 0x8, 0x4, 0x4, 0xffff7fff, 0x10, 0xc1, 0x6, 0x40, 0x7, 0x61, 0x7, 0x9, 0x1, 0x4, 0x7b, 0x7ff, 0x3, 0x3, 0x9, 0x7f, 0xa, 0x1, 0x8, 0x0, 0x5, 0xe, 0x0, 0x1, 0xfffffffe, 0x2, 0x9, 0xf, 0x7, 0x3, 0x7ff, 0x2, 0x7, 0x1, 0x6, 0x83, 0x0, 0x3, 0x800, 0x9, 0x6, 0x2, 0x7, 0x5, 0x3, 0x8], [0x190d, 0x9, 0x3ff, 0xd, 0x0, 0x7, 0x40, 0x47, 0x9, 0x7fffffff, 0x9, 0x80, 0x1, 0x5, 0x6, 0x8, 0x9, 0x2, 0x2, 0xfffffff8, 0x5e7c, 0x2, 0x2, 0x100, 0x9, 0x0, 0x2, 0x9bd5, 0x4, 0x5, 0x8, 0x1000, 0x1, 0x911, 0x81, 0x4, 0x6, 0x7, 0x3, 0x800, 0x91fe, 0x459, 0x5, 0x3, 0x5, 0x3, 0x5, 0x80000000, 0xd, 0x1, 0x25f, 0x1000, 0x3, 0xff, 0x3, 0x4, 0x1, 0x4, 0x3c8, 0x9f2, 0x6, 0xfffffffc, 0xdc, 0x5], [0x400, 0x4, 0x0, 0x5, 0x0, 0x9, 0x20000, 0x1, 0x8, 0x10, 0x4, 0x7, 0x3, 0x6, 0x3ff, 0x0, 0x3, 0xffffffff, 0xae, 0x4, 0xd458, 0x9a, 0x40000000, 0x6, 0x0, 0x7, 0x2, 0xc082, 0x1000, 0x2a5a, 0xffff, 0x9, 0x0, 0x4, 0x8, 0x1, 0x2, 0x4, 0x7f, 0x0, 0xffffff1c, 0xbd8, 0x4, 0xfffffffb, 0x401, 0x8, 0x8, 0x2, 0x7fff, 0x101, 0x10, 0x8000, 0xf4290000, 0x2, 0x35, 0x2, 0x5, 0x8, 0x7, 0x7, 0x5, 0x3f1, 0x6, 0xfffffffa]}, 0x45c) (async, rerun: 64)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) (async, rerun: 64)
r2 = syz_open_dev$vivid(&(0x7f0000000500), 0x2, 0x2)
ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000540)={0x0, 0x0, '\x00', @raw_data=[0x1, 0xb61, 0x4, 0x0, 0x3, 0x7fff, 0x2, 0x153c9e15, 0x3, 0x7, 0x1b0e0d20, 0x8, 0x7, 0x63, 0x40000000, 0x6, 0x9, 0x200, 0x8, 0x0, 0x401, 0x10001, 0x2, 0x6, 0x0, 0x2, 0xfffffff2, 0x9, 0x8, 0xffffffff, 0xde, 0x2]}) (async)
ioctl$VT_WAITACTIVE(r0, 0x5607) (async, rerun: 32)
r3 = socket$inet6(0xa, 0x1, 0x63d) (async, rerun: 32)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000680)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x26, r4}) (async)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000006c0)={0x5, 0x4, 0x0, 0x3, 0xe4c, 0xff, 0x8}) (async)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x101c00, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000740)=0x12) (async)
pipe2$watch_queue(&(0x7f0000000780)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f00000007c0)={0xd, 0x2})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000800), 0x410080, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000840)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000000880)={0x48, 0x7, r6, 0x0, 0x1, <r9=>0x0, 0x3ff, 0x1000})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000900)={0x48, 0x6, r8, 0x0, r9})
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000bc0)=@filter={'filter\x00', 0xe, 0x1, 0x1c6, [0x0, 0x200009c0, 0x200009f0, 0x20000a20], 0x0, &(0x7f0000000980), &(0x7f00000009c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x5, 0x5, 0x6003, 'sit0\x00', 'vlan0\x00', 'bond_slave_1\x00', 'vlan0\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xdf3f4ce0788c10d8], @local, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xce, 0xfe, 0x136, [@arp={{'arp\x00', 0x0, 0x38}, {{0x335, 0x8917, 0xa, @local, 0xff, @multicast1, 0xff, @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0xff], 0x80, 0x2}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xffffffffffffffff}}}}]}]}, 0x23e) (async)
r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000c40), 0x40, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vcan0\x00', <r11=>0x0})
sendmsg$can_j1939(r6, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x1d, r11, 0x3, {0x0, 0xff, 0x2}, 0xfd}, 0x18, &(0x7f0000000d80)={&(0x7f0000000d00)="391ae0d5fe31bda9ba6bf37ebc77cdda92cdcd9aff03e0f8ebda38d6fda793928d9f1367a5fd0a4112048af8859fbb61d5b9975409225c8fc27f8ff065f10f774277484a972afd03c6fe34aad1199816c2efc23b9b7865", 0x57}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
ioctl$TIOCGSID(r10, 0x5429, &(0x7f0000000e00)=<r12=>0x0)
prlimit64(r12, 0x8, &(0x7f0000000e40)={0x322a, 0x8}, 0x0)
getsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4)
ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000f00)={0x5, 0x9, 0x3, 0x0, 0x4}) (async, rerun: 32)
ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000f40)={0xa, 0x3, 0x1, 0x90880}) (rerun: 32)
r13 = geteuid()
mount$9p_fd(0x0, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x20428, &(0x7f00000010c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [{@euid_gt={'euid>', r13}}, {@seclabel}, {@euid_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, '/(%'}}, {@permit_directio}]}})

40.153138ms ago: executing program 8 (id=760):
openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)

38.036726ms ago: executing program 9 (id=761):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000, &(0x7f0000000080)='\x00')
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000000)="3fa5c7f3", 0x4)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff8000/0x1000)=nil)
r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xfffffffb, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff9000/0x3000)=nil, 0x3000}})

33.33755ms ago: executing program 9 (id=762):
socket$l2tp(0x2, 0x2, 0x73)
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x2, 0x0, @void}, 0x10)
socket$l2tp(0x2, 0x2, 0x73)

0s ago: executing program 9 (id=763):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000e00)={<r1=>r0})
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setreuid(0xee00, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x100, 0x0, &(0x7f0000000ac0))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000003c0))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000100))
setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x2, 0x2, 0x0)
setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f00000000c0)=0x4b5, 0x4)
sendto$inet(r8, 0x0, 0x0, 0x46800, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvfrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2004c800)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000880), &(0x7f00000008c0)=ANY=[@ANYBLOB="00fbda0404394044f84e09ffc63615d934b23d48c4159390e7b96436e2813dd5dbc0b1ced00c253e0013aa4f5a5dd8560ee3bf2433483af9df2968be401932ac9c178fe43ec1d7d502a0eae539c2a14a6d42426db97172a91acdbb4b5b4d763bf66515b8fa5b3c599b9240980e3415ecf1e834dfc729755f2b8ae3afc58e9070cf30ebccbecf9ef34c14eb3a749feddda0cc6c1bba8443150628176eb4f2e739cd316913505bedccbcbf9044ee2e91c2cd5eeef11c2d51e8595ee6ec28ac3a63db7d3fd99cf89b1b3170c54751e251"], 0xda, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', <r9=>0x0, 0x7, 0x10, 0x6, 0x101, {{0xa, 0x4, 0x1, 0x8, 0x28, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @empty, {[@rr={0x7, 0x13, 0xc2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @remote]}]}}}}})
sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=@newtclass={0x124, 0x28, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xa, 0x6}, {0xfffa, 0x3}, {0xf, 0xfff2}}, [@c_cbq={{0x8}, {0x6c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x0, 0x3, 0x2, 0x49, 0x8, 0x6, 0x3ff, 0x7fff}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xffe0, 0xfff2}, 0x3c, 0xd6fa}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x27, 0x7, 0x0, 0x3, 0x800, 0xb}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3b, 0x2, 0x1c, 0x4, 0x7, 0x0, 0x80000000, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x19, 0x3, 0x1a, 0x6, 0x9, 0x1, 0xffff0001}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x94}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xa}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x8}}}, @c_cbq={{0x8}, {0x3c, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x8, 0x6}, 0xf00, 0x9}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xfa, 0x6, 0x77, 0x18, 0x3, 0x401}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xc, 0x2, 0x23, 0x12, 0x5, 0x6, 0x24a, 0x401}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x14000800}, 0x4)
recvmmsg(r0, &(0x7f0000005800)=[{{&(0x7f0000000300)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/63, 0x3f}, {&(0x7f00000005c0)=""/153, 0x99}, {&(0x7f0000000680)=""/28, 0x1c}], 0x7, &(0x7f0000000740)=""/40, 0x28}, 0x6}, {{&(0x7f0000000780)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000800)=""/99, 0x63}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/45, 0x2d}, {&(0x7f00000026c0)=""/135, 0x87}, {&(0x7f0000002780)=""/54, 0x36}, {&(0x7f00000027c0)}, {&(0x7f0000002800)=""/208, 0xd0}], 0x7}, 0x4}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002980)=""/8, 0x8}, {&(0x7f00000029c0)=""/243, 0xf3}, {&(0x7f0000002ac0)=""/61, 0x3d}, {&(0x7f0000002b00)=""/150, 0x96}, {&(0x7f0000002bc0)=""/251, 0xfb}, {&(0x7f0000002cc0)=""/181, 0xb5}, {&(0x7f0000002dc0)=""/237, 0xed}], 0x7, &(0x7f0000002f40)=""/93, 0x5d}, 0x8}, {{&(0x7f0000002fc0)=@phonet, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003040)=""/32, 0x20}, {&(0x7f0000003080)=""/48, 0x30}], 0x2, &(0x7f0000003100)=""/126, 0x7e}, 0x3}, {{&(0x7f0000003180)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003200)=""/17, 0x11}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f00000032c0)=""/39, 0x27}, {&(0x7f0000003300)=""/70, 0x46}, {&(0x7f0000003380)=""/219, 0xdb}], 0x5, &(0x7f0000003500)=""/198, 0xc6}, 0x1}, {{&(0x7f0000003600)=@hci, 0x80, &(0x7f0000003700)=[{&(0x7f0000003680)=""/3, 0x3}, {&(0x7f00000036c0)=""/62, 0x3e}], 0x2}, 0x7}, {{&(0x7f0000003740)=@isdn, 0x80, &(0x7f0000003900)=[{&(0x7f00000037c0)=""/55, 0x37}, {&(0x7f0000003800)=""/229, 0xe5}], 0x2, &(0x7f0000003940)=""/172, 0xac}, 0x7fffffff}, {{&(0x7f0000003a00)=@nl, 0x80, &(0x7f0000004000)=[{&(0x7f0000003a80)=""/250, 0xfa}, {&(0x7f0000003b80)=""/239, 0xef}, {&(0x7f0000003c80)=""/39, 0x27}, {&(0x7f0000003cc0)=""/234, 0xea}, {&(0x7f0000003dc0)=""/242, 0xf2}, {&(0x7f0000003ec0)=""/14, 0xe}, {&(0x7f0000003f00)=""/136, 0x88}, {&(0x7f0000003fc0)=""/1, 0x1}], 0x8, &(0x7f0000004080)=""/234, 0xea}, 0x7ff}, {{&(0x7f0000004180)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004740)=[{&(0x7f0000004200)=""/139, 0x8b}, {&(0x7f00000042c0)=""/232, 0xe8}, {&(0x7f00000043c0)=""/98, 0x62}, {&(0x7f0000004440)=""/94, 0x5e}, {&(0x7f00000044c0)=""/23, 0x17}, {&(0x7f0000004500)}, {&(0x7f0000004540)=""/116, 0x74}, {&(0x7f00000045c0)=""/104, 0x68}, {&(0x7f0000004640)=""/244, 0xf4}], 0x9, &(0x7f0000004800)=""/4096, 0x1000}, 0x1}], 0x9, 0x0, &(0x7f0000005a40)={0x0, 0x989680})
sendmsg$inet6(r6, &(0x7f0000000dc0)={&(0x7f00000009c0)={0xa, 0x4e20, 0x80000001, @private1, 0x2}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000a00)="3ec7a0e9f97c5e30cf0a3a375c9e9adde769f0d2ced6db1fea801071c2d42ef4441d767f59d7fd28dd89a184352d2d0a9cf1c3c5cc27c21d1f79be7dace4b1774974ebe34dba32184e6c67fec4cca6", 0x4f}, {&(0x7f0000000bc0)="68ee685d521ad54ac6bb64bc8559d2c1e21a8671fa582b0d3fe73c68fef843ae79a671640965604bd09349096d5bd3546744bb18991b5102dad8aea4e5a11dfc47e00ada68c8395f6267b51f6d7e85dde600f68cf4cd703824cb83f0cb59fed119c1e0458b3da01f75af528907ce444d35f5598c97488a5a6e488f6d9750ba00a24c088c52adec2ca9dd5c0b48732eab5568d13716cc933c38c64bf7dd570c9936a9228cf1440e556c33b61e4f52b3", 0xaf}, {&(0x7f0000000c80)="4d08ece5e90c3fde1ca15904b7becf94841712128a5e786a56f89ae74d2a8efbb82b25b711727e6871bd96cfc6ca1629ceb8f74bc097a63960f060105d3947ccb46b41f4419e3fe951e625f570987eeba983cf0b4d00a9afc2a692bb9ff2e2e91d825e3a6b02f65a4c4c6dea8fb5421fef6132ac27fb1a64253d7ca9479e0b51fd7f48c98a93940b8d2933d61a136e9af0583029ff8fc3b1aeb145d08756bee82a771cab35f2d0d410d0ed28", 0xac}], 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="1500000000000000e1e39d3d29000000430000000000000000000500"], 0x18}, 0x20004011)
sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 mode: none.
[  104.969248][ T5319] loop4: detected capacity change from 0 to 1024
[  104.992377][ T5305] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.127: Freeing blocks not in datazone - block = 0, count = 16
[  105.002603][ T5319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  105.009702][ T5305] EXT4-fs (loop1): Remounting filesystem read-only
[  105.111920][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  105.396907][ T5225] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  105.418249][ T5318] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.132: lblock 0 mapped to illegal pblock 0 (length 1)
[  105.423469][ T5318] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.132: lblock 0 mapped to illegal pblock 0 (length 1)
[  105.426728][ T5318] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.132: lblock 0 mapped to illegal pblock 0 (length 1)
[  105.429503][ T5318] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.132: lblock 0 mapped to illegal pblock 0 (length 1)
[  105.429836][ T5318] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.132: lblock 0 mapped to illegal pblock 0 (length 1)
[  105.509716][ T5318] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.132: lblock 0 mapped to illegal pblock 0 (length 1)
[  105.519222][ T5318] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.132: lblock 0 mapped to illegal pblock 0 (length 1)
[  105.519895][ T5318] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.132: lblock 0 mapped to illegal pblock 0 (length 1)
[  105.520118][ T5318] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.132: lblock 0 mapped to illegal pblock 0 (length 1)
[  105.521753][ T5325] Zero length message leads to an empty skb
[  105.905972][ T4668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  105.996934][ T5352] loop4: detected capacity change from 0 to 8192
[  106.114990][ T5362] Invalid ELF header magic: != ELF
[  106.202916][ T5352] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  106.204824][ T5352] FAT-fs (loop4): Filesystem has been set read-only
[  106.327232][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'.
[  106.341891][ T5368] vlan2: entered allmulticast mode
[  106.346035][ T5368] erspan0: entered allmulticast mode
[  106.367687][ T5367] loop0: detected capacity change from 0 to 4096
[  106.379772][ T5371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.143'.
[  106.464512][ T5373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'.
[  106.751352][ T5379] EXT4-fs: Ignoring removed nomblk_io_submit option
[  106.756897][ T5379] EXT4-fs: Ignoring removed bh option
[  106.757476][ T5381]  loop3: p1 < > p4
[  106.759822][ T5379] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  106.762364][ T5381] loop3: p4 size 722688 extends beyond EOD, truncated
[  106.781605][ T4298]  loop3: p1 < > p4
[  106.783593][ T4298] loop3: p4 size 722688 extends beyond EOD, truncated
[  107.148267][ T5389] dlm: non-version read from control device 8224
[  107.191484][ T5218] udevd[5218]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  107.194675][ T5220] udevd[5220]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  107.201759][ T5218] udevd[5218]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  107.205115][ T5220] udevd[5220]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  107.223922][ T5393] tmpfs: Bad value for 'mpol'
[  107.382282][ T5403] syzkaller1: entered promiscuous mode
[  107.382318][ T5403] syzkaller1: entered allmulticast mode
[  107.442339][ T5406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.156'.
[  107.449197][ T5406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.156'.
[  107.449225][  T865] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.449250][  T865] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.449266][  T865] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.449279][  T865] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.477940][ T5406] overlayfs: failed to resolve './file0': -2
[  107.540777][ T5409] fuse: Bad value for 'fd'
[  107.795010][ T5420] Invalid ELF header magic: != ELF
[  108.558350][ T5427] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  108.561544][ T5427] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.162: casefold flag without casefold feature
[  108.561583][ T5427] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  108.562101][ T5427] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.162: couldn't read orphan inode 15 (err -117)
[  108.562120][ T5427] loop4: lost filesystem error report for type 5 error -117
[  108.562806][ T5427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.581091][ T4668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.630024][ T5431] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  108.658350][ T5431] EXT4-fs (loop4): failed to initialize system zone (-117)
[  108.658458][ T5431] EXT4-fs (loop4): mount failed
[  108.707388][ T5435] netlink: 'syz.4.164': attribute type 14 has an invalid length.
[  108.710537][  T865] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.710593][  T865] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.710614][  T865] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.710631][  T865] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.711048][ T5435] netlink: 'syz.4.164': attribute type 14 has an invalid length.
[  109.046708][ T5363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  109.130991][ T5447] set_capacity_and_notify: 4 callbacks suppressed
[  109.132294][ T5447] loop2: detected capacity change from 0 to 512
[  109.138487][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.197598][ T5454] loop1: detected capacity change from 0 to 512
[  109.209746][ T5456] __nla_validate_parse: 4 callbacks suppressed
[  109.210296][ T5454] FAT-fs (loop1): Directory bread(block 199916) failed
[  109.210311][ T5454] FAT-fs (loop1): Directory bread(block 199917) failed
[  109.210323][ T5454] FAT-fs (loop1): Directory bread(block 199918) failed
[  109.210333][ T5454] FAT-fs (loop1): Directory bread(block 199919) failed
[  109.210344][ T5454] FAT-fs (loop1): Directory bread(block 199920) failed
[  109.210354][ T5454] FAT-fs (loop1): Directory bread(block 199921) failed
[  109.210364][ T5454] FAT-fs (loop1): Directory bread(block 199922) failed
[  109.210374][ T5454] FAT-fs (loop1): Directory bread(block 199923) failed
[  109.210498][ T5456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.170'.
[  109.273759][ T5447] loop2: detected capacity change from 0 to 512
[  109.274034][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.287179][ T5454] FAT-fs (loop1): Directory bread(block 199916) failed
[  109.287212][ T5454] FAT-fs (loop1): Directory bread(block 199917) failed
[  109.291051][ T5454] netlink: 64 bytes leftover after parsing attributes in process `syz.1.172'.
[  109.396167][ T5447] loop2: detected capacity change from 0 to 512
[  109.396475][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.398822][ T5447] loop2: detected capacity change from 0 to 512
[  109.399001][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.401249][ T5447] loop2: detected capacity change from 0 to 512
[  109.401446][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.413934][ T5464] loop1: detected capacity change from 0 to 512
[  109.417748][ T5447] loop2: detected capacity change from 0 to 512
[  109.418282][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.436116][ T5464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.466685][ T5447] loop2: detected capacity change from 0 to 512
[  109.466946][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.469269][ T5447] loop2: detected capacity change from 0 to 512
[  109.471545][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.474594][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.478004][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.480914][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.483719][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.488253][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.496390][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.513713][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.532247][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.577073][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.640100][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.651947][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.668568][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.698721][ T5473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.176'.
[  109.713642][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.720370][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.729982][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.732490][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.747823][ T5447] EXT4-fs: quotafile must be on filesystem root
[  109.758362][ T5447] EXT4-fs: quotafile must be on filesystem root
[  110.134794][ T5488] netlink: 'syz.1.181': attribute type 4 has an invalid length.
[  110.196994][ T5491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'.
[  110.199545][ T5491] veth1_macvtap: left promiscuous mode
[  110.248840][ T5499] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  110.313010][ T5502] EXT4-fs: Ignoring removed mblk_io_submit option
[  110.313063][ T5502] EXT4-fs: Ignoring removed bh option
[  110.316723][ T5502] EXT4-fs (loop2): Test dummy encryption mode enabled
[  110.332072][ T5502] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  110.332335][ T5502] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  110.332777][ T5502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.354077][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.570603][ T5519] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  110.570640][ T5519] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  110.581429][ T5519] EXT4-fs (loop4): 1 truncate cleaned up
[  110.582813][ T5519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.619092][ T4668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.116837][ T5545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.155562][ T4669] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /52/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  111.159633][ T4669] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /52/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  111.160853][ T4669] EXT4-fs error (device loop3): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  111.163281][ T4669] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  111.163429][ T4669] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /52/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  111.165966][ T4669] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /52/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  111.166240][ T4669] EXT4-fs error (device loop3): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  111.166783][ T4669] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  111.166942][ T4669] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /52/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  111.167843][ T4669] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /52/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  111.168646][ T4669] EXT4-fs error (device loop3): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  111.169990][ T4669] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  111.170131][ T4669] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /52/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  111.170637][ T4669] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  111.171248][ T4669] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  111.172296][ T4669] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  111.173347][ T4669] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  111.178002][ T4669] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  111.181864][ T4669] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  111.182400][ T4669] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  111.227206][ T5549] 9p: Unknown Cache mode or invalid value uone
[  111.230390][ T5533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  111.401205][ T5558] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  111.433889][ T5558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.445986][ T5558] __quota_error: 17 callbacks suppressed
[  111.446012][ T5558] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5
[  111.446054][ T5558] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  111.446069][ T5558] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.200: Failed to acquire dquot type 1
[  111.627849][ T5565] FAULT_INJECTION: forcing a failure.
[  111.627849][ T5565] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  111.627921][ T5565] CPU: 1 UID: 0 PID: 5565 Comm: syz.1.201 Not tainted syzkaller #0 PREEMPT 
[  111.627934][ T5565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  111.627940][ T5565] Call trace:
[  111.627943][ T5565]  show_stack+0x2c/0x3c (C)
[  111.627961][ T5565]  __dump_stack+0x30/0x40
[  111.627973][ T5565]  dump_stack_lvl+0xd8/0x12c
[  111.627982][ T5565]  dump_stack+0x1c/0x28
[  111.627991][ T5565]  should_fail_ex+0x414/0x588
[  111.628002][ T5565]  should_fail+0x14/0x24
[  111.628011][ T5565]  should_fail_usercopy+0x20/0x30
[  111.628020][ T5565]  vt_do_kdgkb_ioctl+0x294/0x588
[  111.628029][ T5565]  vt_ioctl+0xcac/0x1dfc
[  111.628040][ T5565]  tty_ioctl+0x880/0xd4c
[  111.628049][ T5565]  __arm64_sys_ioctl+0x14c/0x1c4
[  111.628059][ T5565]  invoke_syscall+0x98/0x244
[  111.628068][ T5565]  el0_svc_common+0xe8/0x23c
[  111.628077][ T5565]  do_el0_svc+0x48/0x58
[  111.628086][ T5565]  el0_svc+0x60/0x25c
[  111.628095][ T5565]  el0t_64_sync_handler+0x48/0x148
[  111.628104][ T5565]  el0t_64_sync+0x198/0x19c
[  111.796165][ T4669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.799369][ T5558] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5
[  111.801346][ T5558] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  111.803095][ T5558] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.200: Failed to acquire dquot type 1
[  111.816620][ T5558] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5
[  111.816695][ T5558] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  111.816722][ T5558] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.200: Failed to acquire dquot type 1
[  111.825583][ T5558] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5
[  111.828599][ T5558] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  111.830431][ T5558] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.200: Failed to acquire dquot type 1
[  111.838181][ T4816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.866816][ T4816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.914029][ T4816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.945015][ T4816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.951197][ T4684] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  111.952054][ T4684] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  111.952329][ T4684] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  111.952756][ T4684] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.953058][ T4684] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.149090][ T4816] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  112.150724][ T4816] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  112.151226][ T4816] bridge0: port 3(wlan1) entered disabled state
[  112.154049][ T4816] bridge_slave_1: left allmulticast mode
[  112.154095][ T4816] bridge_slave_1: left promiscuous mode
[  112.159271][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.166394][ T4816] bridge_slave_0: left allmulticast mode
[  112.167666][ T4816] bridge_slave_0: left promiscuous mode
[  112.170179][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.362041][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.410163][ T4816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.445712][ T4816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.476469][ T4816] bond0 (unregistering): Released all slaves
[  112.479644][ T4354] 8021q: adding VLAN 0 to HW filter on device eth0
[  112.505784][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'.
[  112.505822][ T5595] netlink: 'syz.1.204': attribute type 5 has an invalid length.
[  112.505832][ T5595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.204'.
[  112.511748][ T5595] geneve2: entered promiscuous mode
[  112.518417][ T5595] geneve2: entered allmulticast mode
[  112.519019][ T4898] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  112.519122][ T4898] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  112.519160][ T4898] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  112.519181][ T4898] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  112.628653][ T5606] syzkaller1: entered promiscuous mode
[  112.629780][ T5606] syzkaller1: entered allmulticast mode
[  112.709770][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.712393][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.750396][ T5606] netlink: 'syz.2.207': attribute type 16 has an invalid length.
[  112.751871][ T5606] netlink: 'syz.2.207': attribute type 17 has an invalid length.
[  112.846010][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.846078][ T5606] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.847277][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.847301][ T5606] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.871700][ T5606] syzkaller1: left promiscuous mode
[  112.871732][ T5606] syzkaller1: left allmulticast mode
[  112.896281][ T4354] 8021q: adding VLAN 0 to HW filter on device eth1
[  113.012847][ T4816] hsr_slave_0: left promiscuous mode
[  113.016455][ T4816] hsr_slave_1: left promiscuous mode
[  113.021102][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.021138][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.034068][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.034126][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.043246][ T4816] veth0_macvtap: left promiscuous mode
[  113.043307][ T4816] veth1_vlan: left promiscuous mode
[  113.043355][ T4816] veth0_vlan: left promiscuous mode
[  113.172547][ T5635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.208'.
[  113.172584][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'.
[  113.273284][ T4816] team0 (unregistering): Port device team_slave_1 removed
[  113.278615][ T4816] team0 (unregistering): Port device team_slave_0 removed
[  113.346561][ T5567] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.347930][ T5567] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.349540][ T5567] bridge_slave_0: entered allmulticast mode
[  113.351272][ T5567] bridge_slave_0: entered promiscuous mode
[  113.353728][ T5567] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.355285][ T5567] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.356633][ T5567] bridge_slave_1: entered allmulticast mode
[  113.358496][ T5567] bridge_slave_1: entered promiscuous mode
[  113.367390][ T4354] 8021q: adding VLAN 0 to HW filter on device eth2
[  113.390832][ T5567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.403979][ T5567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.449041][ T5567] team0: Port device team_slave_0 added
[  113.454969][ T5567] team0: Port device team_slave_1 added
[  113.520493][ T5640] binder: tried to use weak ref as strong ref
[  113.521744][ T5640] binder: 5639:5640 Acquire 1 refcount change on invalid ref 0 ret -22
[  113.523394][ T5640] binder: 5639:5640 ioctl 40045201 20000040 returned -22
[  113.539823][ T5567] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.541257][ T5567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  113.546207][ T5567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.549579][ T5567] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.550902][ T5567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  113.554369][ T5567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.583041][ T5567] hsr_slave_0: entered promiscuous mode
[  113.583448][ T5567] hsr_slave_1: entered promiscuous mode
[  113.584159][ T5567] debugfs: 'hsr0' already exists in 'hsr'
[  113.584170][ T5567] Cannot create hsr debugfs directory
[  113.772692][ T5659] vfat: Unknown parameter '0'
[  113.996236][ T4684] Bluetooth: hci2: command tx timeout
[  114.073574][ T5665] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.213: inode has both inline data and extents flags
[  114.073654][ T5665] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  114.076315][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  114.076327][    C1] EXT4-fs (loop2): initial error at time 114: ext4_orphan_get:1397: inode 15
[  114.076344][    C1] EXT4-fs (loop2): last error at time 114: ext4_orphan_get:1397: inode 15
[  114.084210][ T5665] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.213: couldn't read orphan inode 15 (err -117)
[  114.084241][ T5665] loop2: lost filesystem error report for type 5 error -117
[  114.093665][ T5665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.191245][ T5665] overlayfs: missing 'lowerdir'
[  114.841038][ T5679] set_capacity_and_notify: 24 callbacks suppressed
[  114.851915][ T5679] loop1: detected capacity change from 0 to 512
[  114.857021][ T5679] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  114.869354][ T5679] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.217: bad orphan inode 131083
[  114.871296][ T5679] loop1: lost filesystem error report for type 5 error -117
[  114.874641][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'.
[  114.885062][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'.
[  114.896571][ T5679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.899997][ T5567] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  114.901069][ T5567] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  114.901398][ T5567] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  114.914999][ T5567] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  114.919247][ T5678] Invalid ELF header magic: != ELF
[  114.920748][ T4354] 8021q: adding VLAN 0 to HW filter on device eth3
[  114.924896][ T5567] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  114.928229][ T5567] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  114.939600][ T5567] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  114.964432][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.966227][ T5567] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  114.989921][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.048127][ T5694] FAULT_INJECTION: forcing a failure.
[  115.048127][ T5694] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.048168][ T5694] CPU: 0 UID: 0 PID: 5694 Comm: syz.1.219 Not tainted syzkaller #0 PREEMPT 
[  115.048179][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  115.048186][ T5694] Call trace:
[  115.048190][ T5694]  show_stack+0x2c/0x3c (C)
[  115.048210][ T5694]  __dump_stack+0x30/0x40
[  115.048220][ T5694]  dump_stack_lvl+0xd8/0x12c
[  115.048229][ T5694]  dump_stack+0x1c/0x28
[  115.048237][ T5694]  should_fail_ex+0x414/0x588
[  115.048248][ T5694]  should_fail+0x14/0x24
[  115.048256][ T5694]  should_fail_usercopy+0x20/0x30
[  115.048266][ T5694]  _inline_copy_from_user+0x40/0x180
[  115.048276][ T5694]  move_addr_to_kernel+0x88/0x168
[  115.048283][ T5694]  __sys_sendto+0x1b4/0x338
[  115.048290][ T5694]  __arm64_sys_sendto+0xd8/0xf8
[  115.048298][ T5694]  invoke_syscall+0x98/0x244
[  115.048307][ T5694]  el0_svc_common+0xe8/0x23c
[  115.048316][ T5694]  do_el0_svc+0x48/0x58
[  115.048325][ T5694]  el0_svc+0x60/0x25c
[  115.048334][ T5694]  el0t_64_sync_handler+0x48/0x148
[  115.048343][ T5694]  el0t_64_sync+0x198/0x19c
[  115.107945][ T5567] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.115064][ T5567] 8021q: adding VLAN 0 to HW filter on device team0
[  115.129000][ T5567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  115.130778][ T5567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  115.133796][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.133842][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.134523][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.134543][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.196176][ T5708] loop4: detected capacity change from 0 to 512
[  115.361714][ T5567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.437122][ T5567] veth0_vlan: entered promiscuous mode
[  115.442231][ T5567] veth1_vlan: entered promiscuous mode
[  115.450806][ T5734] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  115.463281][ T5567] veth0_macvtap: entered promiscuous mode
[  115.471174][ T5567] veth1_macvtap: entered promiscuous mode
[  115.478286][ T5567] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.483069][ T5567] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.488840][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.488893][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.488909][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.488922][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.521797][ T5736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.524882][ T5736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.552302][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.552336][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.579935][  T865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.579971][  T865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.075147][ T4684] Bluetooth: hci2: command tx timeout
[  116.103319][ T5750] FAULT_INJECTION: forcing a failure.
[  116.103319][ T5750] name failslab, interval 1, probability 0, space 0, times 1
[  116.103356][ T5750] CPU: 0 UID: 0 PID: 5750 Comm: syz.1.232 Not tainted syzkaller #0 PREEMPT 
[  116.103373][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  116.103378][ T5750] Call trace:
[  116.103381][ T5750]  show_stack+0x2c/0x3c (C)
[  116.103399][ T5750]  __dump_stack+0x30/0x40
[  116.103417][ T5750]  dump_stack_lvl+0xd8/0x12c
[  116.103426][ T5750]  dump_stack+0x1c/0x28
[  116.103435][ T5750]  should_fail_ex+0x414/0x588
[  116.103446][ T5750]  should_failslab+0xc4/0x124
[  116.103457][ T5750]  kmem_cache_alloc_noprof+0x8c/0x558
[  116.103467][ T5750]  dst_alloc+0xf4/0x168
[  116.103476][ T5750]  rt_dst_alloc+0x4c/0x22c
[  116.103487][ T5750]  ip_route_output_key_hash_rcu+0x1144/0x1cbc
[  116.103494][ T5750]  ip_route_output_key_hash+0x15c/0x274
[  116.103504][ T5750]  ip_route_output_flow+0x3c/0x160
[  116.103514][ T5750]  raw_sendmsg+0xd00/0x1434
[  116.103524][ T5750]  inet_sendmsg+0xb4/0xd8
[  116.103533][ T5750]  __sock_sendmsg+0xc8/0x138
[  116.103541][ T5750]  __sys_sendto+0x254/0x338
[  116.103549][ T5750]  __arm64_sys_sendto+0xd8/0xf8
[  116.103556][ T5750]  invoke_syscall+0x98/0x244
[  116.103565][ T5750]  el0_svc_common+0xe8/0x23c
[  116.103574][ T5750]  do_el0_svc+0x48/0x58
[  116.103583][ T5750]  el0_svc+0x60/0x25c
[  116.103592][ T5750]  el0t_64_sync_handler+0x48/0x148
[  116.103601][ T5750]  el0t_64_sync+0x198/0x19c
[  116.220443][ T5754] loop1: detected capacity change from 0 to 1024
[  116.222350][ T5754] EXT4-fs: Ignoring removed nomblk_io_submit option
[  116.247244][ T5754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  116.249199][ T5754] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.234: bg 0: block 112: padding at end of block bitmap is not set
[  116.277501][ T5754] EXT4-fs (loop1): re-mounted 00000000-0000-0006-0000-000000000000.
[  116.287323][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  116.416197][ T5766] loop4: detected capacity change from 0 to 256
[  116.444790][ T5766] FAT-fs (loop4): Directory bread(block 64) failed
[  116.444828][ T5766] FAT-fs (loop4): Directory bread(block 65) failed
[  116.444856][ T5766] FAT-fs (loop4): Directory bread(block 66) failed
[  116.444868][ T5766] FAT-fs (loop4): Directory bread(block 67) failed
[  116.444892][ T5766] FAT-fs (loop4): Directory bread(block 68) failed
[  116.444916][ T5766] FAT-fs (loop4): Directory bread(block 69) failed
[  116.444942][ T5766] FAT-fs (loop4): Directory bread(block 70) failed
[  116.444953][ T5766] FAT-fs (loop4): Directory bread(block 71) failed
[  116.444977][ T5766] FAT-fs (loop4): Directory bread(block 72) failed
[  116.444987][ T5766] FAT-fs (loop4): Directory bread(block 73) failed
[  117.522836][ T5787] loop5: detected capacity change from 0 to 512
[  117.542102][ T5787] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  117.560500][ T5787] EXT4-fs error (device loop5): ext4_quota_enable:7225: inode #4: comm syz.5.241: unexpected EA_INODE flag
[  117.560532][ T5787] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[  117.564125][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  117.564154][    C1] EXT4-fs (loop5): initial error at time 117: ext4_quota_enable:7225: inode 4
[  117.564192][    C1] EXT4-fs (loop5): last error at time 117: ext4_quota_enable:7225: inode 4
[  117.573047][ T5787] EXT4-fs error (device loop5): ext4_quota_enable:7228: comm syz.5.241: Bad quota inode: 4, type: 1
[  117.573075][ T5787] loop5: lost filesystem error report for type 5 error -117
[  117.576058][ T5787] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  117.586891][ T5787] EXT4-fs (loop5): mount failed
[  118.154229][ T4684] Bluetooth: hci2: command tx timeout
[  118.171566][ T5810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.249'.
[  118.210365][ T5812] loop4: detected capacity change from 0 to 8
[  118.288941][ T5816] binder: 5815:5816 ioctl c018620c 20000040 returned -1
[  118.456122][ T5829] loop4: detected capacity change from 0 to 8
[  118.459147][ T5829] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[  118.459714][ T5829] unable to read xattr id index table
[  118.530031][ T5831] loop4: detected capacity change from 0 to 512
[  118.534088][ T5831] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  118.550290][ T5831] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  118.551093][ T5831] EXT4-fs (loop4): 1 truncate cleaned up
[  118.551569][ T5831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.647834][ T4668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.859400][ T5850] loop4: detected capacity change from 0 to 512
[  118.861046][ T5850] EXT4-fs: Ignoring removed oldalloc option
[  118.866996][ T5850] EXT4-fs: journaled quota format not specified
[  119.396142][ T5872] netlink: 68 bytes leftover after parsing attributes in process `syz.1.271'.
[  119.398936][ T5873] netlink: 68 bytes leftover after parsing attributes in process `syz.1.271'.
[  119.737722][ T5876] Injecting memory failure for pfn 0x13a9a2 at process virtual address 0x20ffe000
[  119.742236][ T5879] loop2: detected capacity change from 0 to 512
[  119.745284][ T5876] Memory failure: 0x13a9a2: recovery action for clean LRU page: Recovered
[  119.745371][ T5876] Injecting memory failure for pfn 0x13da22 at process virtual address 0x20fff000
[  119.745449][ T5876] Memory failure: 0x13da22: recovery action for clean LRU page: Recovered
[  119.758315][ T5879] EXT4-fs: Ignoring removed nobh option
[  119.773228][ T5879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.784337][ T5879] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.273: iget: bad i_size value: 2533274857506816
[  119.787550][ T5879] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.273: iget: bad i_size value: 2533274857506816
[  119.788846][ T5879] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.273: iget: bad i_size value: 2533274857506816
[  119.789078][ T5879] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.273: iget: bad i_size value: 2533274857506816
[  119.797745][ T5879] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  119.798332][ T5879] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  119.822639][ T5883] EXT4-fs: Ignoring removed bh option
[  119.825089][ T5883] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  119.838099][ T5883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.876387][ T5883] syzkaller1: entered promiscuous mode
[  119.876430][ T5883] syzkaller1: entered allmulticast mode
[  119.936570][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.079164][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.130706][ T5907] set_capacity_and_notify: 1 callbacks suppressed
[  120.132111][ T5907] loop5: detected capacity change from 0 to 512
[  120.151235][ T5907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.191460][ T5906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.279'.
[  120.234715][ T4684] Bluetooth: hci2: command tx timeout
[  120.251596][ T5567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.682023][ T5930] binder: 5928:5930 ioctl c0306201 20000100 returned -14
[  120.986009][ T5935] loop5: detected capacity change from 0 to 1024
[  120.997213][ T5935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  121.013886][ T5567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  121.239936][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'.
[  121.600661][ T5955] loop2: detected capacity change from 0 to 2048
[  121.620661][ T5955]  loop2: p1 p2 p3
[  121.645387][ T4298]  loop2: p1 p2 p3
[  121.734507][ T4681] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  121.737310][ T4681] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  121.738871][ T4681] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  121.750724][ T4681] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  121.752391][ T4681] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  122.236325][   T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.337107][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.337188][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.337267][ T5975] bridge_slave_0: entered allmulticast mode
[  122.337851][ T5975] bridge_slave_0: entered promiscuous mode
[  122.338813][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.338862][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.338926][ T5975] bridge_slave_1: entered allmulticast mode
[  122.339349][ T5975] bridge_slave_1: entered promiscuous mode
[  122.347980][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.349077][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.356762][ T5975] team0: Port device team_slave_0 added
[  122.357696][ T5975] team0: Port device team_slave_1 added
[  122.364458][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.364475][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  122.364494][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.365014][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.365026][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  122.365045][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.377841][ T5975] hsr_slave_0: entered promiscuous mode
[  122.378494][ T5975] hsr_slave_1: entered promiscuous mode
[  122.378710][ T5975] debugfs: 'hsr0' already exists in 'hsr'
[  122.378726][ T5975] Cannot create hsr debugfs directory
[  122.429107][   T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.477766][   T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.497922][ T5975] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  122.501164][ T5975] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  122.501618][ T5975] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  122.503849][ T5975] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  122.504817][ T5975] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  122.506275][ T5975] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  122.506949][ T5975] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  122.508909][ T5975] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  122.544808][   T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.551317][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.551371][ T5975] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.551457][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.551487][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.579295][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.587592][ T4898] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.588892][ T4898] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.597631][ T5975] 8021q: adding VLAN 0 to HW filter on device team0
[  122.601117][ T4898] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.601168][ T4898] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.603891][ T4898] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.603931][ T4898] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.776895][ T6032] netlink: 36 bytes leftover after parsing attributes in process `syz.1.309'.
[  122.830269][ T6035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.309'.
[  122.911220][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'.
[  122.955493][   T40] bridge_slave_1: left allmulticast mode
[  122.955521][   T40] bridge_slave_1: left promiscuous mode
[  122.955612][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.957893][   T40] bridge_slave_0: left allmulticast mode
[  122.957904][   T40] bridge_slave_0: left promiscuous mode
[  122.957967][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.213117][   T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.218471][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'.
[  123.227294][   T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.256288][   T40] bond0 (unregistering): Released all slaves
[  123.258694][   T40] bond1 (unregistering): Released all slaves
[  123.264271][ T6034] batadv_slave_0: entered promiscuous mode
[  123.320626][ T5782] bond0: (slave bond_slave_0): interface is now down
[  123.320664][ T5782] bond0: (slave bond_slave_1): interface is now down
[  123.322524][ T5782] bond0: now running without any active interface!
[  123.354623][ T6033] batadv_slave_0: left promiscuous mode
[  123.378396][ T6045] syzkaller0: entered promiscuous mode
[  123.378438][ T6045] syzkaller0: entered allmulticast mode
[  123.685181][ T1173] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x6
[  123.834554][ T4684] Bluetooth: hci5: command tx timeout
[  123.868677][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.869409][ T4354] 8021q: adding VLAN 0 to HW filter on device eth4
[  123.962987][ T6068] netlink: 123 bytes leftover after parsing attributes in process `syz.2.318'.
[  123.998158][ T6104] loop5: detected capacity change from 0 to 512
[  124.023151][ T6104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.027827][   T40] hsr_slave_0: left promiscuous mode
[  124.028889][   T40] hsr_slave_1: left promiscuous mode
[  124.029191][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.029202][   T40] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.030219][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.030230][   T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.046481][   T40] veth1_macvtap: left promiscuous mode
[  124.046524][   T40] veth0_macvtap: left promiscuous mode
[  124.046562][   T40] veth1_vlan: left promiscuous mode
[  124.046588][   T40] veth0_vlan: left promiscuous mode
[  124.339403][ T6127] binder: 6126:6127 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  124.342721][ T6127] binder: 6127 RLIMIT_NICE not set
[  124.352601][   T40] team0 (unregistering): Port device team_slave_1 removed
[  124.363533][   T40] team0 (unregistering): Port device team_slave_0 removed
[  124.506013][ T6127] netlink: 'syz.1.324': attribute type 2 has an invalid length.
[  124.508664][ T4354] 8021q: adding VLAN 0 to HW filter on device eth6
[  124.513665][ T4777] binder: undelivered death notification, 0000000000000000
[  124.627672][ T5567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.628892][ T5975] veth0_vlan: entered promiscuous mode
[  124.631964][ T5975] veth1_vlan: entered promiscuous mode
[  124.646292][ T5975] veth0_macvtap: entered promiscuous mode
[  124.647816][ T5975] veth1_macvtap: entered promiscuous mode
[  124.651590][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.657123][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.659774][ T4816] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.659874][ T4816] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.659902][ T4816] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.659925][ T4816] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.736552][ T5782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.736582][ T5782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.005298][ T4816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.005323][ T4816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.141940][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.333'.
[  125.159835][ T6164] loop1: detected capacity change from 0 to 1024
[  125.161797][ T6164] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  125.176798][ T6164] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.332: lblock 2 mapped to illegal pblock 2 (length 1)
[  125.176838][ T6164] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  125.179963][ T6164] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  125.180008][ T6164] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.332: lblock 0 mapped to illegal pblock 48 (length 1)
[  125.180040][ T6164] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  125.185508][    C1] EXT4-fs (loop1): error count since last fsck: 2
[  125.185531][    C1] EXT4-fs (loop1): initial error at time 125: ext4_map_blocks:791: inode 3: block 2
[  125.185550][    C1] EXT4-fs (loop1): last error at time 125: ext4_map_blocks:791: inode 3: block 48
[  125.191732][ T6164] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  125.191768][ T6164] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.332: Failed to acquire dquot type 0
[  125.191793][ T6164] loop1: lost filesystem error report for type 5 error -117
[  125.195566][ T6164] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  125.195588][ T6164] loop1: lost filesystem error report for type 5 error -117
[  125.199459][ T6164] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.332: mark_inode_dirty error
[  125.199494][ T6164] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  125.202854][ T6164] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  125.202901][ T6164] EXT4-fs (loop1): 1 orphan inode deleted
[  125.203371][ T6164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.211408][ T4354] 8021q: adding VLAN 0 to HW filter on device eth5
[  125.214307][ T5782] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  125.216515][ T5782] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  125.216544][ T5782] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 0
[  125.221949][ T6180] Bluetooth: MGMT ver 1.23
[  125.222400][ T6180] Bluetooth: hci0: invalid len left 7, exp >= 255
[  125.236128][ T6180] netlink: 104 bytes leftover after parsing attributes in process `syz.6.333'.
[  125.286371][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.335'.
[  125.338774][ T6194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.337'.
[  125.509866][ T4354] 8021q: adding VLAN 0 to HW filter on device eth7
[  125.915118][ T4684] Bluetooth: hci5: command tx timeout
[  125.916890][ T1574] ieee802154 phy0 wpan0: encryption failed: -22
[  125.972145][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.975608][ T4666] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0
[  125.978495][ T4666] loop1: lost filesystem error report for type 5 error -117
[  125.979347][ T4666] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  125.982258][ T4666] loop1: lost filesystem error report for type 5 error -117
[  125.982466][ T4666] EXT4-fs error (device loop1): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error
[  125.988571][ T4666] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  127.909418][   T30] audit: type=1326 audit(127.900:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6288 comm="syz.2.355" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff92577a28 code=0x0
[  127.963472][ T6294] ipt_REJECT: ECHOREPLY no longer supported.
[  127.965673][ T6294] binder: 6293 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero.
[  127.965692][ T6294] binder: 6293:6294 ioctl c018620c 200000c0 returned -22
[  127.968866][ T6294] loop4: detected capacity change from 0 to 128
[  127.969223][ T6294] vfat: Unknown parameter ''
[  128.004550][ T4684] Bluetooth: hci5: command tx timeout
[  128.051892][ T6296] netlink: 458 bytes leftover after parsing attributes in process `syz.5.353'.
[  128.102863][ T6311] loop4: detected capacity change from 0 to 128
[  128.115626][ T6311] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  128.120157][ T6311] netlink: 'syz.4.360': attribute type 8 has an invalid length.
[  128.122654][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.361'.
[  128.122687][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.361'.
[  128.127347][ T6311] ip6gretap2: entered promiscuous mode
[  128.154427][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.181673][ T4668] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  128.224732][ T6328] Cannot find add_set index 0 as target
[  128.228592][ T6323] syzkaller1: entered promiscuous mode
[  128.228623][ T6323] syzkaller1: entered allmulticast mode
[  128.476994][ T4426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.479080][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.713543][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.368'.
[  128.724502][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.762298][ T6364] loop6: detected capacity change from 0 to 4096
[  129.063137][ T6391] loop2: detected capacity change from 0 to 512
[  129.091917][ T6391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.114585][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.133026][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.247310][ T6403] loop5: detected capacity change from 0 to 4096
[  129.255038][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.255300][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.262379][ T6403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.276095][ T6403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  129.295611][ T6403] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  129.299722][ T6409] loop6: detected capacity change from 0 to 512
[  129.384574][ T6409] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.382: inode has both inline data and extents flags
[  129.384610][ T6409] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  129.387626][ T6409] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.382: couldn't read orphan inode 15 (err -117)
[  129.387660][ T6409] loop6: lost filesystem error report for type 5 error -117
[  129.392029][ T6409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.413547][ T5975] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.455982][ T6410] loop2: detected capacity change from 0 to 128
[  129.710318][ T6410] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  129.714420][ T6410] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  129.765807][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.787435][ T6418] loop6: detected capacity change from 0 to 512
[  129.794988][ T6418] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  129.799211][ T6418] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  129.812751][ T6418] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.383: bg 0: block 248: padding at end of block bitmap is not set
[  129.812787][ T6418] loop6: lost filesystem error report for type 5 error -117
[  129.816132][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  129.816150][    C0] EXT4-fs (loop6): last error at time 129: ext4_validate_block_bitmap:441
[  129.822940][ T6418] Quota error (device loop6): write_blk: dquota write failed
[  129.822986][ T6418] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  129.823019][ T6418] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.383: Failed to acquire dquot type 1
[  129.823036][ T6418] loop6: lost filesystem error report for type 5 error -28
[  129.835239][ T6418] EXT4-fs (loop6): 1 truncate cleaned up
[  129.835709][ T6418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  130.067275][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.067558][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.074498][ T4684] Bluetooth: hci5: command tx timeout
[  130.147698][ T5567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.160013][ T6425] loop2: detected capacity change from 0 to 8192
[  130.201954][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.206175][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.208835][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.385'.
[  130.314245][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.622982][  T865] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.623018][  T865] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.623046][  T865] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  130.623081][  T865] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.623096][  T865] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.623109][  T865] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  130.623130][  T865] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.623143][  T865] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.623155][  T865] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  130.623174][  T865] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.623187][  T865] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.623199][  T865] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  130.712765][ T6439] input: syz0 as /devices/virtual/input/input4
[  130.879952][ T5975] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  131.115214][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.126613][ T6460] loop1: detected capacity change from 0 to 128
[  131.131409][ T6460] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  131.136717][ T6460] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  131.422340][ T6474] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[  131.480757][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.398'.
[  131.551923][ T6502] binfmt_misc: register: failed to install interpreter file ./file1
[  131.638405][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'.
[  131.753526][ T4684] Bluetooth: hci4: hcon 00000000ca431654 sent 1 < count 114
[  131.767573][ T6519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.402'.
[  131.767602][ T6519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.402'.
[  131.806128][ T6519] netlink: 5 bytes leftover after parsing attributes in process `syz.4.402'.
[  131.806293][ T6519] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  131.809488][ T6519] 0ªî{X¹¦: entered allmulticast mode
[  132.046055][ T6543] loop6: detected capacity change from 0 to 512
[  132.089496][ T6543] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.612528][ T4684] Bluetooth: hci1: unexpected event for opcode 0x040e
[  133.184596][ T4426] net_ratelimit: 2 callbacks suppressed
[  133.184651][ T4426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.185090][ T5895] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  133.185103][ T5895] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  133.217787][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.221171][ T5975] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.232889][ T6564] loop1: detected capacity change from 0 to 512
[  133.260115][ T6566] loop2: detected capacity change from 0 to 256
[  133.331671][ T6566] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  133.343011][ T6564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.499139][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.572916][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'.
[  133.597358][ T6598] loop1: detected capacity change from 0 to 256
[  133.608098][ T6598] FAT-fs (loop1): Directory bread(block 64) failed
[  133.608127][ T6598] FAT-fs (loop1): Directory bread(block 65) failed
[  133.608161][ T6598] FAT-fs (loop1): Directory bread(block 66) failed
[  133.608177][ T6598] FAT-fs (loop1): Directory bread(block 67) failed
[  133.608203][ T6598] FAT-fs (loop1): Directory bread(block 68) failed
[  133.608217][ T6598] FAT-fs (loop1): Directory bread(block 69) failed
[  133.608242][ T6598] FAT-fs (loop1): Directory bread(block 70) failed
[  133.608256][ T6598] FAT-fs (loop1): Directory bread(block 71) failed
[  133.608281][ T6598] FAT-fs (loop1): Directory bread(block 72) failed
[  133.608295][ T6598] FAT-fs (loop1): Directory bread(block 73) failed
[  134.253292][ T4675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.492074][ T6637] loop6: detected capacity change from 0 to 128
[  134.500699][ T6640] tmpfs: Bad value for 'mpol'
[  134.500824][ T6640] tmpfs: Bad value for 'mpol'
[  134.500900][ T6640] tmpfs: Bad value for 'mpol'
[  134.500974][ T6640] tmpfs: Bad value for 'mpol'
[  134.501044][ T6640] tmpfs: Bad value for 'mpol'
[  134.501127][ T6640] tmpfs: Bad value for 'mpol'
[  134.501195][ T6640] tmpfs: Bad value for 'mpol'
[  134.506425][ T6637] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  134.510261][ T6640] tmpfs: Bad value for 'mpol'
[  134.510380][ T6640] tmpfs: Bad value for 'mpol'
[  134.510463][ T6640] tmpfs: Bad value for 'mpol'
[  134.510535][ T6640] tmpfs: Bad value for 'mpol'
[  134.510614][ T6640] tmpfs: Bad value for 'mpol'
[  134.510682][ T6640] tmpfs: Bad value for 'mpol'
[  134.510752][ T6640] tmpfs: Bad value for 'mpol'
[  134.510829][ T6640] tmpfs: Bad value for 'mpol'
[  134.510899][ T6640] tmpfs: Bad value for 'mpol'
[  134.510966][ T6640] tmpfs: Bad value for 'mpol'
[  134.511034][ T6640] tmpfs: Bad value for 'mpol'
[  134.517703][ T6640] tmpfs: Bad value for 'mpol'
[  134.517788][ T6640] tmpfs: Bad value for 'mpol'
[  134.517864][ T6640] tmpfs: Bad value for 'mpol'
[  134.518158][ T6640] tmpfs: Bad value for 'mpol'
[  134.518229][ T6640] tmpfs: Bad value for 'mpol'
[  134.518296][ T6640] tmpfs: Bad value for 'mpol'
[  134.518365][ T6640] tmpfs: Bad value for 'mpol'
[  134.525452][ T6640] tmpfs: Bad value for 'mpol'
[  134.525549][ T6640] tmpfs: Bad value for 'mpol'
[  134.525623][ T6640] tmpfs: Bad value for 'mpol'
[  134.525696][ T6640] tmpfs: Bad value for 'mpol'
[  134.525764][ T6640] tmpfs: Bad value for 'mpol'
[  134.525835][ T6640] tmpfs: Bad value for 'mpol'
[  134.525903][ T6640] tmpfs: Bad value for 'mpol'
[  134.525974][ T6640] tmpfs: Bad value for 'mpol'
[  134.526042][ T6640] tmpfs: Bad value for 'mpol'
[  134.526111][ T6640] tmpfs: Bad value for 'mpol'
[  134.526178][ T6640] tmpfs: Bad value for 'mpol'
[  134.526247][ T6640] tmpfs: Bad value for 'mpol'
[  134.526380][ T6640] tmpfs: Bad value for 'mpol'
[  134.526467][ T6640] tmpfs: Bad value for 'mpol'
[  134.526540][ T6640] tmpfs: Bad value for 'mpol'
[  134.526611][ T6640] tmpfs: Bad value for 'mpol'
[  134.526679][ T6640] tmpfs: Bad value for 'mpol'
[  134.526748][ T6640] tmpfs: Bad value for 'mpol'
[  134.526815][ T6640] tmpfs: Bad value for 'mpol'
[  134.526885][ T6640] tmpfs: Bad value for 'mpol'
[  134.526953][ T6640] tmpfs: Bad value for 'mpol'
[  134.527109][ T6640] tmpfs: Bad value for 'mpol'
[  134.527191][ T6640] tmpfs: Bad value for 'mpol'
[  134.527271][ T6640] tmpfs: Bad value for 'mpol'
[  134.527396][ T6640] tmpfs: Bad value for 'mpol'
[  134.527490][ T6640] tmpfs: Bad value for 'mpol'
[  134.527561][ T6640] tmpfs: Bad value for 'mpol'
[  134.527642][ T6640] tmpfs: Bad value for 'mpol'
[  134.527710][ T6640] tmpfs: Bad value for 'mpol'
[  134.527794][ T6640] tmpfs: Bad value for 'mpol'
[  134.527862][ T6640] tmpfs: Bad value for 'mpol'
[  134.527937][ T6640] tmpfs: Bad value for 'mpol'
[  134.528006][ T6640] tmpfs: Bad value for 'mpol'
[  134.528080][ T6640] tmpfs: Bad value for 'mpol'
[  134.528146][ T6640] tmpfs: Bad value for 'mpol'
[  134.528226][ T6640] tmpfs: Bad value for 'mpol'
[  134.528293][ T6640] tmpfs: Bad value for 'mpol'
[  134.528899][ T6640] tmpfs: Bad value for 'mpol'
[  134.528977][ T6640] tmpfs: Bad value for 'mpol'
[  134.529056][ T6640] tmpfs: Bad value for 'mpol'
[  134.580653][ T6637] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  134.614985][ T6649] netlink: 36 bytes leftover after parsing attributes in process `syz.2.427'.
[  134.617649][ T6649] netlink: 36 bytes leftover after parsing attributes in process `syz.2.427'.
[  134.725823][ T6637] loop6: detected capacity change from 0 to 128
[  134.728099][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'.
[  134.729202][ T6660] loop1: detected capacity change from 0 to 512
[  134.732840][ T4684] Bluetooth: hci4: adv larger than maximum supported
[  134.732866][ T4684] Bluetooth: hci4: Malformed LE Event: 0x0d
[  134.766957][ T6660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.778097][ T6637] loop6: detected capacity change from 0 to 128
[  134.816473][ T6637] loop6: detected capacity change from 0 to 128
[  134.835936][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.856471][ T6669] EXT4-fs: Ignoring removed mblk_io_submit option
[  134.858631][ T6670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.879579][ T6669] EXT4-fs (loop4): Test dummy encryption mode enabled
[  134.896015][ T6669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.273373][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.284386][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.460607][ T5895] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  135.462741][ T5895] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  135.549486][ T6697] overlayfs: failed lookup in lower (newroot/88, name='bus', err=-40): overlapping layers
[  135.550449][ T6697] overlayfs: failed lookup in lower (newroot/88, name='bus', err=-40): overlapping layers
[  135.559272][ T6697] overlayfs: failed lookup in lower (newroot/88, name='bus', err=-40): overlapping layers
[  135.559981][ T6697] overlayfs: failed lookup in lower (newroot/88, name='bus', err=-40): overlapping layers
[  135.560419][ T6697] overlayfs: failed lookup in lower (newroot/88, name='bus', err=-40): overlapping layers
[  135.570407][ T4684] Bluetooth: hci4: command 0x0c1a tx timeout
[  136.321678][ T6704] Cannot find add_set index 0 as target
[  136.329481][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.444'.
[  136.356940][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.358702][ T4675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.389068][ T4668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.858539][ T6723] netlink: 'syz.4.449': attribute type 21 has an invalid length.
[  136.910717][ T6722] set_capacity_and_notify: 5 callbacks suppressed
[  136.913563][ T6722] loop5: detected capacity change from 0 to 4096
[  136.913952][ T6722] EXT4-fs: inline encryption not supported
[  136.920156][ T6722] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  136.920191][ T6722] EXT4-fs (loop5): Test dummy encryption mode enabled
[  136.929926][ T6722] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0003]
[  136.931171][ T6722] System zones: 0-5
[  137.020766][ T6722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.048328][ T6730] loop2: detected capacity change from 0 to 2048
[  137.070635][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'.
[  137.103465][ T6722] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[  137.217905][ T6739] netlink: 104 bytes leftover after parsing attributes in process `syz.2.454'.
[  137.222918][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'.
[  137.410476][ T6751] syzkaller0: entered promiscuous mode
[  137.410519][ T6751] syzkaller0: entered allmulticast mode
[  137.453859][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.484088][ T6722] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[  137.916498][ T5567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.075094][ T4426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.246045][ T6764] syzkaller1: entered promiscuous mode
[  138.248151][ T6764] syzkaller1: entered allmulticast mode
[  138.714839][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.163610][ T6791] nbd: couldn't find device at index 52
[  139.173487][ T6790] pimreg: entered allmulticast mode
[  139.190927][ T6790] sit0: entered promiscuous mode
[  139.200518][ T5895] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  139.200551][ T5895] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  139.207969][ T6790] netlink: 'syz.4.470': attribute type 1 has an invalid length.
[  139.208000][ T6790] netlink: 1 bytes leftover after parsing attributes in process `syz.4.470'.
[  139.218391][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.219026][ T4684] Bluetooth: hci2: command 0x0c1a tx timeout
[  139.236326][ T6794] xt_hashlimit: size too large, truncated to 1048576
[  139.304446][ T6802] vhci_hcd vhci_hcd.3: default hub control req: 4019 v0005 i0003 l0
[  139.396259][ T6811] netlink: 36 bytes leftover after parsing attributes in process `syz.5.475'.
[  139.467713][ T4426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.547173][ T6814] pimreg: left allmulticast mode
[  139.551022][ T6807] overlay: Unknown parameter 'fsname'
[  139.616290][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.619108][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.638581][ T6821] tmpfs: Unknown parameter '�'
[  139.640718][ T6830] loop1: detected capacity change from 0 to 128
[  139.654214][ T6830] FAT-fs (loop1): bogus number of FAT structure
[  139.654245][ T6830] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  139.654265][ T6830] FAT-fs (loop1): Can't find a valid FAT filesystem
[  139.664826][ T6830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.665016][ T6830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.811641][ T6847] overlayfs: failed to resolve './file0/file1': -2
[  139.911010][ T6857] loop4: detected capacity change from 0 to 512
[  139.913789][ T6857] EXT4-fs: Ignoring removed bh option
[  139.915942][ T6857] EXT4-fs: inline encryption not supported
[  139.920883][ T6857] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  139.928634][ T6857] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  139.931247][ T6857] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.479: bg 0: block 248: padding at end of block bitmap is not set
[  139.931298][ T6857] loop4: lost filesystem error report for type 5 error -117
[  139.937943][ T6857] Quota error (device loop4): write_blk: dquota write failed
[  139.937995][ T6857] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  139.938017][ T6857] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.479: Failed to acquire dquot type 1
[  139.938029][ T6857] loop4: lost filesystem error report for type 5 error -28
[  139.938636][ T6857] EXT4-fs (loop4): 1 truncate cleaned up
[  139.939100][ T6857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  139.997128][ T4668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  140.004006][ T1173] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5
[  140.004047][ T1173] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1
[  140.004073][ T1173] loop4: lost filesystem error report for type 5 error -117
[  140.172610][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'.
[  140.229161][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.486'.
[  140.229214][ T6892] netlink: 'syz.6.486': attribute type 5 has an invalid length.
[  140.229224][ T6892] netlink: 'syz.6.486': attribute type 8 has an invalid length.
[  140.229232][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.486'.
[  140.240632][ T6892] geneve2: entered promiscuous mode
[  140.240665][ T6892] geneve2: entered allmulticast mode
[  140.245338][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.245565][ T4909] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  140.245594][ T4909] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  140.245614][ T4909] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  140.245633][ T4909] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  140.258743][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.486'.
[  140.260288][ T6892] netlink: 'syz.6.486': attribute type 5 has an invalid length.
[  140.261625][ T6892] netlink: 'syz.6.486': attribute type 8 has an invalid length.
[  140.262970][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.486'.
[  140.265098][ T6892] netlink: 'syz.6.486': attribute type 5 has an invalid length.
[  140.266407][ T6892] netlink: 'syz.6.486': attribute type 8 has an invalid length.
[  140.268055][ T6892] netlink: 'syz.6.486': attribute type 5 has an invalid length.
[  140.269342][ T6892] netlink: 'syz.6.486': attribute type 8 has an invalid length.
[  140.288417][ T6895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.307617][ T6900] loop2: detected capacity change from 0 to 512
[  140.312813][ T6900] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  140.343262][ T6900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  140.345074][ T6900] System zones: 1-12
[  140.348019][ T6900] EXT4-fs (loop2): 1 truncate cleaned up
[  140.348747][ T6900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.364151][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.502283][ T6915] loop1: detected capacity change from 0 to 128
[  140.517721][ T6915] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  140.542865][ T4666] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  140.562792][ T6921] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[6922] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[6921]
[  141.133610][ T6941] loop5: detected capacity change from 0 to 1024
[  141.149725][ T6941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.160421][ T6941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.162117][ T6941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.162434][ T6941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.162655][ T6941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.162783][ T6941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.274811][ T5567] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11
[  141.275108][ T5567] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11
[  141.514910][ T6975] Cannot find add_set index 0 as target
[  141.594332][ T4681] Bluetooth: hci5: command 0x0c1a tx timeout
[  141.594517][ T5895] Bluetooth: hci5: Opcode 0x0c1a failed: -110
[  141.594584][ T5895] Bluetooth: hci5: Error when powering off device on rfkill (-110)
[  142.388787][ T6981] syzkaller1: entered promiscuous mode
[  142.388821][ T6981] syzkaller1: entered allmulticast mode
[  142.454081][ T6994] loop2: detected capacity change from 0 to 512
[  142.460608][ T6994] EXT4-fs: Ignoring removed orlov option
[  142.463104][ T6994] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  142.478762][ T6994] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #16: comm syz.2.519: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  142.478802][ T6994] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  142.482450][ T6994] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.519: couldn't read orphan inode 16 (err -117)
[  142.482480][ T6994] loop2: lost filesystem error report for type 5 error -117
[  142.486226][    C1] EXT4-fs (loop2): error count since last fsck: 2
[  142.486239][    C1] EXT4-fs (loop2): initial error at time 142: ext4_ext_check_inode:521: inode 16
[  142.486259][    C1] EXT4-fs (loop2): last error at time 142: ext4_orphan_get:1402
[  142.488985][ T6994] EXT4-fs (loop2): 1 orphan inode deleted
[  142.489470][ T6994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.498134][ T6994] xt_hashlimit: size too large, truncated to 1048576
[  142.498221][ T6994] xt_hashlimit: max too large, truncated to 1048576
[  142.502755][ T6994] trusted_key: encrypted_key: master key parameter 'õà?„1§ŽG¶]C±ŠèëVfÅ™t;$�p¯Ò<Ò-“ÖpÛ/ZfÛDy;6� ë¹ÓîÙküÐ-³xp' is invalid
[  142.524888][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.595008][ T7008] __nla_validate_parse: 68 callbacks suppressed
[  142.596174][ T7008] netlink: 51 bytes leftover after parsing attributes in process `syz.2.525'.
[  142.598422][ T7005] loop1: detected capacity change from 0 to 1024
[  142.600089][ T7009] Cannot find add_set index 0 as target
[  142.611358][ T7005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  142.631140][ T7005] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.524: bg 0: block 112: padding at end of block bitmap is not set
[  142.640949][ T7013] loop6: detected capacity change from 0 to 256
[  142.649543][ T7013] FAT-fs (loop6): Directory bread(block 64) failed
[  142.650678][ T7013] FAT-fs (loop6): Directory bread(block 65) failed
[  142.655530][ T7013] FAT-fs (loop6): Directory bread(block 66) failed
[  142.656940][ T7013] FAT-fs (loop6): Directory bread(block 67) failed
[  142.658204][ T7013] FAT-fs (loop6): Directory bread(block 68) failed
[  142.659466][ T7013] FAT-fs (loop6): Directory bread(block 69) failed
[  142.662276][ T7013] FAT-fs (loop6): Directory bread(block 70) failed
[  142.663518][ T7013] FAT-fs (loop6): Directory bread(block 71) failed
[  142.664755][ T7013] FAT-fs (loop6): Directory bread(block 72) failed
[  142.665913][ T7013] FAT-fs (loop6): Directory bread(block 73) failed
[  142.672980][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  142.678527][ T5567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.078265][ T4681] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.081974][ T4681] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.088493][ T4681] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.090720][ T7021] netlink: 68 bytes leftover after parsing attributes in process `syz.6.527'.
[  143.091706][ T4681] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.092100][ T4681] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.096853][ T7021] syz.6.527: attempt to access beyond end of device
[  143.096853][ T7021] loop6: rw=2049, sector=1192, nr_sectors = 68 limit=256
[  143.099840][ T4684] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.099993][ T4684] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.100101][ T4684] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.100419][ T4684] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.100636][ T4684] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.259670][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.259711][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.259821][ T7024] bridge_slave_0: entered allmulticast mode
[  143.260272][ T7024] bridge_slave_0: entered promiscuous mode
[  143.261369][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.261427][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.261494][ T7024] bridge_slave_1: entered allmulticast mode
[  143.261984][ T7024] bridge_slave_1: entered promiscuous mode
[  143.272566][ T7024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.273706][ T7024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.287327][ T7024] team0: Port device team_slave_0 added
[  143.288335][ T7024] team0: Port device team_slave_1 added
[  143.301313][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.301349][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  143.301364][ T7024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.307736][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.307746][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  143.307758][ T7024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.325371][ T7024] hsr_slave_0: entered promiscuous mode
[  143.325712][ T7024] hsr_slave_1: entered promiscuous mode
[  143.381508][ T7024] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  143.383910][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  143.384456][ T7024] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  143.386118][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  143.386601][ T7024] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  143.389381][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  143.389802][ T7024] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  143.391869][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  143.400823][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.400867][ T7024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.400943][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.400972][ T7024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.420143][ T7024] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.425763][ T4909] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.427094][ T4909] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.431359][ T7024] 8021q: adding VLAN 0 to HW filter on device team0
[  143.433944][ T4909] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.433988][ T4909] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.437868][ T6700] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.437904][ T6700] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.584029][ T7024] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.646417][ T7067] bond1: entered promiscuous mode
[  143.648067][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'.
[  143.648384][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'.
[  143.707943][ T7024] veth0_vlan: entered promiscuous mode
[  143.939601][ T7024] veth1_vlan: entered promiscuous mode
[  143.943654][ T7067] loop1: detected capacity change from 0 to 512
[  143.947835][ T7024] veth0_macvtap: entered promiscuous mode
[  143.949932][ T7024] veth1_macvtap: entered promiscuous mode
[  143.951503][ T7067] EXT4-fs: Ignoring removed nomblk_io_submit option
[  143.953515][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.955319][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.961778][ T7067] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043e01c, mo2=0002]
[  143.961840][ T7067] System zones: 1-12
[  143.964069][  T865] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.967457][  T865] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.967486][  T865] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.967512][  T865] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.975761][ T7067] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.535: invalid indirect mapped block 8 (level 2)
[  143.978446][ T7067] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  143.984133][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  143.984165][    C0] EXT4-fs (loop1): initial error at time 143: ext4_free_branches:1023: inode 11
[  143.984202][    C0] EXT4-fs (loop1): last error at time 143: ext4_free_branches:1023: inode 11
[  144.007338][ T7067] EXT4-fs (loop1): 1 truncate cleaned up
[  144.011730][ T7067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.024007][ T7067] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 5: comm syz.1.535: lblock 0 mapped to illegal pblock 5 (length 1)
[  144.027979][ T7067] EXT4-fs warning (device loop1): ext4_empty_dir:3085: inode #2: lblock 0: comm syz.1.535: error -117 reading directory block
[  144.048632][ T6700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.048660][ T6700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.061930][ T6700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.061958][ T6700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.073439][ T7080] loop6: detected capacity change from 0 to 4096
[  144.094839][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.096519][ T7080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.147815][ T5975] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.232059][ T7098] loop6: detected capacity change from 0 to 1024
[  144.258783][ T7098] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c028, mo2=0002]
[  144.258843][ T7098] System zones: 0-1, 3-8
[  144.266923][ T7098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  144.282425][ T7098] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.541: lblock 0 mapped to illegal pblock 0 (length 1)
[  144.292665][ T7110] Cannot find add_set index 0 as target
[  144.307138][ T7098] EXT4-fs (loop6): Remounting filesystem read-only
[  144.337664][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.541'.
[  144.348264][ T4426] net_ratelimit: 6 callbacks suppressed
[  144.348294][ T4426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.364435][ T7115] loop1: detected capacity change from 0 to 256
[  144.381262][ T7117] loop7: detected capacity change from 0 to 512
[  144.381623][ T7117] EXT4-fs: inline encryption not supported
[  144.381700][ T7117] /dev/loop7: Can't open blockdev
[  144.396623][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.650492][ T5975] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  144.772294][ T7132] netlink: 32 bytes leftover after parsing attributes in process `syz.6.554'.
[  145.029558][ T7138] netlink: 36 bytes leftover after parsing attributes in process `syz.1.556'.
[  145.030603][ T7138] netlink: 36 bytes leftover after parsing attributes in process `syz.1.556'.
[  145.055649][ T7143] loop2: detected capacity change from 0 to 1024
[  145.114338][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.144623][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.148051][ T7143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  146.063621][ T7167] netlink: 16 bytes leftover after parsing attributes in process `syz.7.564'.
[  146.124531][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.128778][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  146.221892][ T7177] syzkaller0: entered promiscuous mode
[  146.221930][ T7177] syzkaller0: entered allmulticast mode
[  146.235193][ T4684] Bluetooth: hci2: command tx timeout
[  146.286106][ T7181] loop7: detected capacity change from 0 to 256
[  146.427340][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.007518][ T7209] syzkaller0: entered promiscuous mode
[  147.008708][ T7209] syzkaller0: entered allmulticast mode
[  147.195139][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.320518][ T7215] netlink: 36 bytes leftover after parsing attributes in process `syz.1.579'.
[  147.390424][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.601325][ T7231] loop4: detected capacity change from 0 to 512
[  147.601715][ T7231] EXT4-fs: Ignoring removed i_version option
[  147.601741][ T7231] EXT4-fs: Ignoring removed nobh option
[  147.615187][ T7231] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  147.744355][ T7231] EXT4-fs (loop4): 1 truncate cleaned up
[  147.744848][ T7231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.316901][ T4684] Bluetooth: hci2: command tx timeout
[  148.400448][ T7243] loop6: detected capacity change from 0 to 1024
[  148.402625][ T7243] EXT4-fs: Ignoring removed orlov option
[  148.409550][ T7243] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  148.467015][ T4777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.483169][ T7243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.753872][ T7235] __nla_validate_parse: 1 callbacks suppressed
[  148.754185][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.578'.
[  148.754204][ T7235] tc_dump_action: action bad kind
[  148.755042][ T7239] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  148.757574][ T7250] syzkaller0: entered promiscuous mode
[  148.757588][ T7250] syzkaller0: entered allmulticast mode
[  148.789422][ T7258] loop1: detected capacity change from 0 to 128
[  148.800238][ T7258] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  148.802775][ T7258] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  148.877846][ T4668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.902943][ T7264] vxcan1: entered promiscuous mode
[  148.983609][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'.
[  149.004058][ T5975] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.516349][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.680729][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.681224][ T4681] Bluetooth: hci2: command tx timeout
[  150.681440][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.795958][ T7304] Cannot find add_set index 0 as target
[  151.149585][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.601'.
[  151.544736][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.907115][ T4777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.955957][ T7341] loop2: detected capacity change from 0 to 512
[  151.971620][ T7341] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.610: corrupted in-inode xattr: invalid ea_ino
[  151.971652][ T7341] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  151.971816][ T7341] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.610: couldn't read orphan inode 15 (err -117)
[  151.971828][ T7341] loop2: lost filesystem error report for type 5 error -117
[  151.972332][ T7341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.972617][ T7341] capability: warning: `syz.2.610' uses 32-bit capabilities (legacy support in use)
[  151.997878][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.035056][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'.
[  152.041328][ T7350] tipc: Invalid UDP bearer configuration
[  152.041382][ T7350] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  152.071886][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.616'.
[  152.185515][ T7371] loop1: detected capacity change from 0 to 256
[  152.186107][ T7371] vfat: Unknown parameter 'shortnameùwin.>nt'
[  152.516715][ T7384] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  152.521925][ T7384] loop6: detected capacity change from 0 to 1024
[  152.538809][ T7384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  152.579548][ T5975] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  152.623384][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.626730][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.651429][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.6.627'.
[  152.777523][ T7416] loop1: detected capacity change from 0 to 256
[  152.779513][ T7416] vfat: Unknown parameter 'utf)'
[  152.957530][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.026793][ T7427] loop7: detected capacity change from 0 to 512
[  153.039462][ T7427] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.068384][ T7024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.168178][ T7436] loop7: detected capacity change from 0 to 256
[  153.386436][ T7450] bpf setsockopt: ignoring program buffer with optlen=30428 (max_optlen=4096)
[  153.386507][ T7452] netlink: 16 bytes leftover after parsing attributes in process `syz.7.636'.
[  153.440019][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'.
[  153.568207][ T7468] loop7: detected capacity change from 0 to 1024
[  153.568576][ T7468] EXT4-fs: Ignoring removed nomblk_io_submit option
[  154.352819][ T7468] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  154.419361][ T7468] bond1 (unregistering): Released all slaves
[  154.530985][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.564185][ T4426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.681937][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.649'.
[  154.957997][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'.
[  154.961118][ T7507] loop1: detected capacity change from 0 to 512
[  155.159606][ T7525] loop1: detected capacity change from 0 to 512
[  155.168710][ T7525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.195024][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.331061][ T7531] netlink: 9 bytes leftover after parsing attributes in process `syz.6.659'.
[  155.411682][ T7533] loop1: detected capacity change from 0 to 128
[  155.414798][ T7533] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  155.432462][ T7533] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  156.078518][ T7532] netlink: 9 bytes leftover after parsing attributes in process `syz.6.659'.
[  156.104341][ T7531] netlink: 9 bytes leftover after parsing attributes in process `syz.6.659'.
[  156.136774][ T7532] netlink: 9 bytes leftover after parsing attributes in process `syz.6.659'.
[  156.152363][ T7535] loop4: detected capacity change from 0 to 2048
[  156.159307][ T7535] EXT4-fs: Mount option(s) incompatible with ext3
[  156.269550][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.279446][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.663'.
[  156.329441][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.354080][ T7543] netlink: 32 bytes leftover after parsing attributes in process `syz.6.664'.
[  156.401092][ T7546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.665'.
[  156.418771][ T7551] loop2: detected capacity change from 0 to 512
[  156.421572][ T7551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.429085][ T7549] netlink: 16 bytes leftover after parsing attributes in process `syz.7.667'.
[  156.432063][ T7554] loop4: detected capacity change from 0 to 512
[  156.435260][ T7554] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  156.435290][ T7554] EXT4-fs (loop4): ea_inode feature is not supported for Hurd
[  156.451699][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.463198][ T7557] ext4: Bad value for 'data'
[  156.503935][ T7557] EXT4-fs (loop1): orphan cleanup on readonly fs
[  156.570103][ T7557] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.669: bg 0: block 248: padding at end of block bitmap is not set
[  156.570148][ T7557] loop1: lost filesystem error report for type 5 error -117
[  156.571333][ T7557] Quota error (device loop1): write_blk: dquota write failed
[  156.571386][ T7557] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  156.571421][ T7557] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.669: Failed to acquire dquot type 1
[  156.571439][ T7557] loop1: lost filesystem error report for type 5 error -117
[  156.572442][ T7557] EXT4-fs (loop1): 1 truncate cleaned up
[  156.574127][    C0] EXT4-fs (loop1): error count since last fsck: 2
[  156.574144][    C0] EXT4-fs (loop1): last error at time 156: ext4_acquire_dquot:7034
[  156.578559][ T7557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  156.599777][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.665199][ T7568] syz.2.672: vmalloc error: size 9007199254740992, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0
[  156.666037][ T7568] CPU: 0 UID: 0 PID: 7568 Comm: syz.2.672 Tainted: G             L      syzkaller #0 PREEMPT 
[  156.666052][ T7568] Tainted: [L]=SOFTLOCKUP
[  156.666055][ T7568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  156.666060][ T7568] Call trace:
[  156.666063][ T7568]  show_stack+0x2c/0x3c (C)
[  156.666083][ T7568]  __dump_stack+0x30/0x40
[  156.666095][ T7568]  dump_stack_lvl+0xd8/0x12c
[  156.666105][ T7568]  dump_stack+0x1c/0x28
[  156.666115][ T7568]  warn_alloc+0x1c4/0x2e0
[  156.666131][ T7568]  __vmalloc_node_range_noprof+0x11c/0x10dc
[  156.666140][ T7568]  __vmalloc_node_noprof+0xec/0x14c
[  156.666148][ T7568]  vmalloc_noprof+0x3c/0x4c
[  156.666157][ T7568]  dvb_dmxdev_set_buffer_size+0xc8/0x1b0
[  156.666166][ T7568]  dvb_demux_do_ioctl+0x3e0/0x4bc
[  156.666174][ T7568]  dvb_usercopy+0x29c/0x4d4
[  156.666186][ T7568]  dvb_demux_ioctl+0x3c/0x54
[  156.666198][ T7568]  __arm64_sys_ioctl+0x14c/0x1c4
[  156.666209][ T7568]  invoke_syscall+0x98/0x244
[  156.666220][ T7568]  el0_svc_common+0xe8/0x23c
[  156.666231][ T7568]  do_el0_svc+0x48/0x58
[  156.666241][ T7568]  el0_svc+0x60/0x25c
[  156.666252][ T7568]  el0t_64_sync_handler+0x48/0x148
[  156.666263][ T7568]  el0t_64_sync+0x198/0x19c
[  156.669133][ T7568] Mem-Info:
[  156.669150][ T7568] active_anon:2970 inactive_anon:31363 isolated_anon:0
[  156.669150][ T7568]  active_file:3399 inactive_file:15619 isolated_file:0
[  156.669150][ T7568]  unevictable:771 dirty:445 writeback:0
[  156.669150][ T7568]  slab_reclaimable:9205 slab_unreclaimable:94314
[  156.669150][ T7568]  mapped:32362 shmem:29227 pagetables:1291
[  156.669150][ T7568]  sec_pagetables:0 bounce:0
[  156.669150][ T7568]  kernel_misc_reclaimable:0
[  156.669150][ T7568]  free:1440643 free_pcp:12536 free_cma:7616
[  156.669185][ T7568] Node 0 active_anon:11880kB inactive_anon:125452kB active_file:13596kB inactive_file:62476kB unevictable:3084kB isolated(anon):0kB isolated(file):0kB mapped:129448kB dirty:1780kB writeback:0kB shmem:116908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10040kB pagetables:5164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  156.669212][ T7568] Node 0 DMA free:3077888kB boost:0kB min:20348kB low:25432kB high:30516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB
[  156.669245][ T7568] lowmem_reserve[]: 0 0 3654 3654 3654
[  156.669289][ T7568] Node 0 Normal free:2684684kB boost:0kB min:24704kB low:30880kB high:37056kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11880kB inactive_anon:125452kB active_file:13596kB inactive_file:62476kB unevictable:3084kB writepending:1780kB zspages:0kB present:5242880kB managed:3742176kB mlocked:12kB bounce:0kB free_pcp:50144kB local_pcp:34612kB free_cma:0kB
[  156.669320][ T7568] lowmem_reserve[]: 0 0 0 0 0
[  156.669363][ T7568] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB
[  156.669497][ T7568] Node 0 Normal: 3084*4kB (UME) 1837*8kB (UME) 809*16kB (UME) 420*32kB (UM) 174*64kB (UME) 51*128kB (UME) 59*256kB (UME) 39*512kB (UME) 24*1024kB (UME) 17*2048kB (UM) 615*4096kB (UM) = 2684584kB
[  156.669663][ T7568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  156.669673][ T7568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB
[  156.669683][ T7568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  156.669693][ T7568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB
[  156.669703][ T7568] 48193 total pagecache pages
[  156.669710][ T7568] 0 pages in swap cache
[  156.669717][ T7568] Free swap  = 124996kB
[  156.669724][ T7568] Total swap = 124996kB
[  156.669731][ T7568] 2097152 pages RAM
[  156.669737][ T7568] 0 pages HighMem/MovableOnly
[  156.669744][ T7568] 391560 pages reserved
[  156.669750][ T7568] 8192 pages cma reserved
[  156.669757][ T7568] 2 pages hwpoisoned
[  156.790053][ T5895] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  156.796383][ T5895] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  156.800147][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.940666][ T7594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.192173][ T7584] fido_id[7584]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  157.224948][ T4668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.277671][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.394021][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.394400][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.457087][ T7617] EXT4-fs: Ignoring removed nomblk_io_submit option
[  157.458754][ T7617] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  157.461612][ T7617] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.687: bad orphan inode 131083
[  157.461644][ T7617] loop4: lost filesystem error report for type 5 error -117
[  157.462291][ T7617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.472301][ T7617] overlayfs: upper fs needs to support d_type.
[  157.485534][ T7630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.519978][ T5975] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.544624][ T4668] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /159/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  157.594414][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.779108][ T7640] EXT4-fs: Ignoring removed mblk_io_submit option
[  157.790107][ T7640] EXT4-fs (loop6): Test dummy encryption mode enabled
[  157.816817][ T7640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.315183][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.581179][ T5782] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.696637][ T5782] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.754766][ T4684] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  158.757988][ T4684] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  158.759366][ T4684] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  158.761160][ T4684] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  158.762677][ T4684] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  158.798213][ T7655] set_capacity_and_notify: 8 callbacks suppressed
[  158.799587][ T7655] loop7: detected capacity change from 0 to 512
[  158.818008][ T5094] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.821501][ T5975] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.847875][ T5782] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.860979][ T7655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.907113][ T7024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.986064][ T7666] loop6: detected capacity change from 0 to 512
[  159.000338][ T5782] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.007741][ T7666] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.054529][ T4681] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  159.056908][ T4681] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  159.058855][ T4681] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  159.060486][ T4681] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  159.062712][ T4681] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  159.072772][ T5975] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.226136][ T7688] validate_nla: 58 callbacks suppressed
[  159.226177][ T7688] netlink: 'syz.6.713': attribute type 2 has an invalid length.
[  159.235778][ T5782] bridge_slave_1: left allmulticast mode
[  159.235810][ T5782] bridge_slave_1: left promiscuous mode
[  159.235896][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.238308][ T5782] bridge_slave_0: left allmulticast mode
[  159.238320][ T5782] bridge_slave_0: left promiscuous mode
[  159.238376][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.358460][ T4777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.399428][ T5782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.594570][ T5782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.668261][ T5782] bond0 (unregistering): Released all slaves
[  159.835623][ T7712] loop7: detected capacity change from 0 to 512
[  159.846527][ T7712] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.717: corrupted in-inode xattr: bad e_name length
[  159.846560][ T7712] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  159.847040][ T7712] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.717: couldn't read orphan inode 15 (err -117)
[  159.847068][ T7712] loop7: lost filesystem error report for type 5 error -117
[  159.857475][ T7712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.963006][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.963068][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.963231][ T7650] bridge_slave_0: entered allmulticast mode
[  159.963772][ T7650] bridge_slave_0: entered promiscuous mode
[  159.968107][ T7650] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.969715][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.969804][ T7650] bridge_slave_1: entered allmulticast mode
[  159.971422][ T7650] bridge_slave_1: entered promiscuous mode
[  159.984853][ T7736] loop1: detected capacity change from 0 to 512
[  159.989233][ T7737] overlayfs: failed to resolve './file0/file1': -2
[  160.003743][ T7736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.007169][ T4354] 8021q: adding VLAN 0 to HW filter on device eth9
[  160.008538][ T7650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.010782][ T7650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.056999][ T7650] team0: Port device team_slave_0 added
[  160.065162][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.103477][ T7650] team0: Port device team_slave_1 added
[  160.119958][ T5782] hsr_slave_0: left promiscuous mode
[  160.120972][ T5782] hsr_slave_1: left promiscuous mode
[  160.144710][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.146019][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.158102][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.159547][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.179066][ T7024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.183534][ T5782] veth1_macvtap: left promiscuous mode
[  160.183589][ T5782] veth0_macvtap: left promiscuous mode
[  160.183672][ T5782] veth1_vlan: left promiscuous mode
[  160.183696][ T5782] veth0_vlan: left promiscuous mode
[  160.227630][ T7757] __nla_validate_parse: 4 callbacks suppressed
[  160.228966][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.7.722'.
[  160.232644][ T7749] overlayfs: failed lookup in lower (newroot/73, name='bus', err=-40): overlapping layers
[  160.341047][ T5782] team0 (unregistering): Port device team_slave_1 removed
[  160.350488][ T5782] team0 (unregistering): Port device team_slave_0 removed
[  160.422898][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.430524][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.432131][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  160.434166][ T7650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.435283][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.435293][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  160.435307][ T7650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.435513][ T7753] syz_tun: entered allmulticast mode
[  160.496074][ T7650] hsr_slave_0: entered promiscuous mode
[  160.496421][ T7650] hsr_slave_1: entered promiscuous mode
[  160.496628][ T7650] debugfs: 'hsr0' already exists in 'hsr'
[  160.496638][ T7650] Cannot create hsr debugfs directory
[  160.564894][ T7753] syz_tun: left allmulticast mode
[  160.610598][ T7782] loop1: detected capacity change from 0 to 512
[  160.636034][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.710835][ T7789] FAULT_INJECTION: forcing a failure.
[  160.710835][ T7789] name failslab, interval 1, probability 0, space 0, times 0
[  160.710898][ T7789] CPU: 1 UID: 0 PID: 7789 Comm: syz.7.727 Tainted: G             L      syzkaller #0 PREEMPT 
[  160.710914][ T7789] Tainted: [L]=SOFTLOCKUP
[  160.710917][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  160.710922][ T7789] Call trace:
[  160.710925][ T7789]  show_stack+0x2c/0x3c (C)
[  160.710943][ T7789]  __dump_stack+0x30/0x40
[  160.710952][ T7789]  dump_stack_lvl+0xd8/0x12c
[  160.710961][ T7789]  dump_stack+0x1c/0x28
[  160.710969][ T7789]  should_fail_ex+0x414/0x588
[  160.710980][ T7789]  should_failslab+0xc4/0x124
[  160.710990][ T7789]  __kmalloc_node_noprof+0x104/0x6c8
[  160.711001][ T7789]  __vmalloc_node_range_noprof+0x46c/0x10dc
[  160.711009][ T7789]  __vmalloc_node_noprof+0xec/0x14c
[  160.711016][ T7789]  __vmalloc_noprof+0x64/0x8c
[  160.711023][ T7789]  bpf_prog_alloc_no_stats+0x60/0x484
[  160.711032][ T7789]  bpf_prog_alloc+0x48/0x108
[  160.711041][ T7789]  bpf_prog_load+0x594/0x1434
[  160.711049][ T7789]  __sys_bpf+0x3f4/0x5f0
[  160.711058][ T7789]  __arm64_sys_bpf+0x80/0x98
[  160.711066][ T7789]  invoke_syscall+0x98/0x244
[  160.711075][ T7789]  el0_svc_common+0xe8/0x23c
[  160.711084][ T7789]  do_el0_svc+0x48/0x58
[  160.711092][ T7789]  el0_svc+0x60/0x25c
[  160.711102][ T7789]  el0t_64_sync_handler+0x48/0x148
[  160.711110][ T7789]  el0t_64_sync+0x198/0x19c
[  160.815054][ T4681] Bluetooth: hci1: command tx timeout
[  160.953034][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.958708][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.958806][ T7674] bridge_slave_0: entered allmulticast mode
[  160.959301][ T7674] bridge_slave_0: entered promiscuous mode
[  160.981595][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.981650][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.981740][ T7674] bridge_slave_1: entered allmulticast mode
[  160.982223][ T7674] bridge_slave_1: entered promiscuous mode
[  160.986173][ T7802] xt_TCPMSS: Only works on TCP SYN packets
[  161.002396][ T7804] overlayfs: failed to resolve './file0/file1': -2
[  161.008586][ T7650] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  161.015567][ T7650] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  161.021776][ T7674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.023711][ T7650] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  161.028049][ T7650] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  161.028377][ T7650] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  161.032131][ T7650] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  161.033999][ T7650] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  161.039741][ T7650] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  161.043068][ T7674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.066265][ T4354] 8021q: adding VLAN 0 to HW filter on device eth10
[  161.072436][ T7674] team0: Port device team_slave_0 added
[  161.073268][ T7674] team0: Port device team_slave_1 added
[  161.114944][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.114983][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  161.115186][ T7674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.115937][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.117240][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  161.117348][ T7674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.132844][ T7674] hsr_slave_0: entered promiscuous mode
[  161.133249][ T7674] hsr_slave_1: entered promiscuous mode
[  161.133595][ T7674] debugfs: 'hsr0' already exists in 'hsr'
[  161.133692][ T7674] Cannot create hsr debugfs directory
[  161.134280][ T4681] Bluetooth: hci3: command tx timeout
[  161.169746][ T7650] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.193723][ T7650] 8021q: adding VLAN 0 to HW filter on device team0
[  161.441860][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.463801][ T4816] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.463838][ T4816] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.490119][ T4792] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.490168][ T4792] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.501860][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.7.735'.
[  161.523603][ T7650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  161.523636][ T7650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  161.607728][ T4354] 8021q: adding VLAN 0 to HW filter on device eth8
[  161.663345][ T7674] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  161.729346][ T7674] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  161.729779][ T7674] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  161.732355][ T7857] loop7: detected capacity change from 0 to 512
[  161.740441][ T7674] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  161.742491][ T7674] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  161.746531][ T7674] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  161.746861][ T7674] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  161.753031][ T7674] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  162.157733][ T7674] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.170458][ T7674] 8021q: adding VLAN 0 to HW filter on device team0
[  162.177499][ T4898] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.177545][ T4898] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.183567][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.183620][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.296861][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.7.745'.
[  162.322918][ T7650] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.351239][ T4354] 8021q: adding VLAN 0 to HW filter on device eth11
[  162.611371][ T4678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.693757][ T7925] syzkaller0: entered promiscuous mode
[  162.693790][ T7925] syzkaller0: entered allmulticast mode
[  162.705475][ T7923] sctp: [Deprecated]: syz.1.749 (pid 7923) Use of int in maxseg socket option.
[  162.705475][ T7923] Use struct sctp_assoc_value instead
[  162.739281][ T7674] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.750857][ T7650] veth0_vlan: entered promiscuous mode
[  162.755482][ T7650] veth1_vlan: entered promiscuous mode
[  162.765771][ T7650] veth0_macvtap: entered promiscuous mode
[  162.767996][ T7650] veth1_macvtap: entered promiscuous mode
[  162.783239][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.786792][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.799054][ T6700] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.799104][ T6700] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.799124][ T6700] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.799141][ T6700] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.853509][ T6700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.853545][ T6700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.869312][ T4898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.869345][ T4898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.884323][ T4681] Bluetooth: hci1: command tx timeout
[  162.907823][ T7943] loop1: detected capacity change from 0 to 4096
[  162.909832][ T7943] EXT4-fs: Ignoring removed bh option
[  162.923831][ T7674] veth0_vlan: entered promiscuous mode
[  162.954019][ T7674] veth1_vlan: entered promiscuous mode
[  162.980624][   T30] audit: type=1326 audit(162.970:27): auid=4294967295 uid=3171839 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.1.754" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3777a28 code=0x0
[  163.001637][ T7674] veth0_macvtap: entered promiscuous mode
[  163.009159][ T7674] veth1_macvtap: entered promiscuous mode
[  163.024831][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.030949][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.040182][   T14] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.040224][   T14] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.040241][   T14] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.040257][   T14] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.101935][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.101971][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.140825][ T7953] loop8: detected capacity change from 0 to 128
[  163.146043][ T4898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.146071][ T4898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.149531][ T7953] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  163.153081][ T7953] xt_NFQUEUE: number of queues (1024) out of range (got 66558)
[  163.194206][ T4681] Bluetooth: hci3: command tx timeout
[  163.317371][ T7967] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  163.317434][ T7967] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  163.393161][ T7986] fuse: Bad value for 'fd'
[  163.401835][ T7967] ------------[ cut here ]------------
[  163.401858][ T7967] refcount_t: underflow; use-after-free.
[  163.401981][ T7967] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0x154/0x1f8, CPU#0: syz.6.759/7967
[  163.405515][ T7967] Modules linked in:
[  163.406202][ T7967] CPU: 0 UID: 0 PID: 7967 Comm: syz.6.759 Tainted: G             L      syzkaller #0 PREEMPT 
[  163.408032][ T7967] Tainted: [L]=SOFTLOCKUP
[  163.408791][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  163.410493][ T7967] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[  163.411830][ T7967] pc : refcount_warn_saturate+0x154/0x1f8
[  163.412818][ T7967] lr : refcount_warn_saturate+0x154/0x1f8
[  163.413745][ T7967] sp : ffff800093446d70
[  163.414474][ T7967] x29: ffff800093446d70 x28: 0000000000000000 x27: 1fffe00018ab08ea
[  163.415892][ T7967] x26: dfff800000000000 x25: ffff0000c7370000 x24: 1fffe0001e37df8c
[  163.417258][ T7967] x23: dfff800000000000 x22: ffff800082455418 x21: 0000000000000000
[  163.418636][ T7967] x20: ffff0000f1befc78 x19: ffff800089f06000 x18: 00000000ffffffff
[  163.419981][ T7967] x17: ffff80008a0cdc80 x16: ffff80008a4f9958 x15: ffff0000c7370b50
[  163.421400][ T7967] x14: ffff0000c7370b30 x13: 0000000000000001 x12: 0000000000000000
[  163.422793][ T7967] x11: 000000000000140a x10: 0000000000ff0100 x9 : 3761c53b127e7b00
[  163.424213][ T7967] x8 : 3761c53b127e7b00 x7 : ffff8000804886d0 x6 : 0000000000000000
[  163.425614][ T7967] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f13b0
[  163.427006][ T7967] x2 : 0000000000000001 x1 : ffff0000c7370000 x0 : 0000000000000000
[  163.428394][ T7967] Call trace:
[  163.428990][ T7967]  refcount_warn_saturate+0x154/0x1f8 (P)
[  163.430017][ T7967]  klist_dec_and_del+0x368/0x38c
[  163.430944][ T7967]  klist_put+0xc0/0x118
[  163.431658][ T7967]  klist_remove+0x118/0x264
[  163.432454][ T7967]  device_move+0x164/0x5a8
[  163.433179][ T7967]  hci_conn_del_sysfs+0xb4/0x194
[  163.434055][ T7967]  hci_conn_del+0x9bc/0xf04
[  163.434857][ T7967]  hci_conn_failed+0x224/0x334
[  163.435688][ T7967]  hci_abort_conn_sync+0x500/0x8e8
[  163.436621][ T7967]  hci_disconnect_all_sync+0x1b0/0x334
[  163.437544][ T7967]  hci_suspend_sync+0x324/0x88c
[  163.438412][ T7967]  hci_suspend_dev+0x214/0x448
[  163.439232][ T7967]  hci_suspend_notifier+0xe4/0x2b0
[  163.440129][ T7967]  notifier_call_chain+0x194/0x60c
[  163.440996][ T7967]  notifier_call_chain_robust+0x54/0xc4
[  163.441917][ T7967]  blocking_notifier_call_chain_robust+0x74/0xa8
[  163.442921][ T7967]  pm_notifier_call_chain_robust+0x34/0x60
[  163.443919][ T7967]  snapshot_open+0x17c/0x268
[  163.444780][ T7967]  misc_open+0x2d8/0x334
[  163.445509][ T7967]  chrdev_open+0x398/0x3e8
[  163.446262][ T7967]  do_dentry_open+0x5c8/0x10dc
[  163.447070][ T7967]  vfs_open+0x44/0x2d4
[  163.447742][ T7967]  path_openat+0x2234/0x2a6c
[  163.448491][ T7967]  do_file_open+0x1c4/0x2e4
[  163.449299][ T7967]  do_sys_openat2+0x114/0x1e8
[  163.450147][ T7967]  do_sys_open+0xac/0xdc
[  163.450919][ T7967]  __arm64_sys_openat+0x9c/0xb8
[  163.451755][ T7967]  invoke_syscall+0x98/0x244
[  163.452512][ T7967]  el0_svc_common+0xe8/0x23c
[  163.453329][ T7967]  do_el0_svc+0x48/0x58
[  163.454086][ T7967]  el0_svc+0x60/0x25c
[  163.454796][ T7967]  el0t_64_sync_handler+0x48/0x148
[  163.455677][ T7967]  el0t_64_sync+0x198/0x19c
[  163.456465][ T7967] irq event stamp: 5696
[  163.457217][ T7967] hardirqs last  enabled at (5695): [<ffff8000867248cc>] arm64_exit_to_kernel_mode+0x7c/0x90
[  163.458965][ T7967] hardirqs last disabled at (5696): [<ffff800086720a28>] el1_brk64+0x20/0x54
[  163.460483][ T7967] softirqs last  enabled at (5648): [<ffff800084ab928c>] local_bh_enable+0x10/0x34
[  163.462061][ T7967] softirqs last disabled at (5646): [<ffff800084ab9258>] local_bh_disable+0x10/0x34
[  163.463649][ T7967] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  163.555926][ T7967] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  163.604619][ T7967] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  163.616090][ T7967] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  163.637270][ T7967] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  163.641269][ T7967] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  163.641505][ T7967] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  163.643892][ T7967] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  163.685801][ T4898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.687818][ T4898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.691186][ T4776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.691872][ T4776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.720960][ T4426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.786661][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.287665][ T4816] bridge_slave_1: left allmulticast mode
[  164.287705][ T4816] bridge_slave_1: left promiscuous mode
[  164.287790][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.290259][ T4816] bridge_slave_0: left allmulticast mode
[  164.290272][ T4816] bridge_slave_0: left promiscuous mode
[  164.290336][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.487150][ T4816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.505491][ T4816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.535119][ T4816] bond0 (unregistering): Released all slaves
[  164.538107][ T4816] bond1 (unregistering): Released all slaves
[  164.771480][ T4354] 8021q: adding VLAN 0 to HW filter on device eth12
[  164.837412][ T4816] hsr_slave_0: left promiscuous mode
[  164.839173][ T4816] hsr_slave_1: left promiscuous mode
[  164.839462][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.841736][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.909103][ T4816] team0 (unregistering): Port device team_slave_1 removed
[  164.913345][ T4816] team0 (unregistering): Port device team_slave_0 removed
[  164.968860][ T4354] 8021q: adding VLAN 0 to HW filter on device eth13
[  165.100608][ T4354] 8021q: adding VLAN 0 to HW filter on device eth14
[  165.219574][ T4354] 8021q: adding VLAN 0 to HW filter on device eth15
[  165.260646][ T4816] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.755005][ T4675] net_ratelimit: 1 callbacks suppressed
[  165.755043][ T4675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.244917][ T6700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.245532][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.248148][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.516294][ T4816] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.551506][ T4816] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.591905][ T4816] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.746676][ T4816] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.794543][ T4426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.797050][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.800357][ T4816] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.826132][ T4816] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.867750][ T4816] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.885999][ T4354] 8021q: adding VLAN 0 to HW filter on device eth16
[  166.979052][ T4816] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.981099][ T4816] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  167.015991][ T4816] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.016039][ T4816] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  167.022828][ T4354] 8021q: adding VLAN 0 to HW filter on device eth17
[  167.065103][ T4816] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.065148][ T4816] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  167.116240][ T4816] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.118187][ T4816] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  167.145877][ T4354] 8021q: adding VLAN 0 to HW filter on device eth18
[  167.273424][ T4816] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.282189][ T4354] 8021q: adding VLAN 0 to HW filter on device eth19
[  167.304804][ T4816] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.352665][ T4816] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.372800][ T4816] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.428314][ T4354] 8021q: adding VLAN 0 to HW filter on device eth21
[  167.576262][ T4816] bridge_slave_1: left allmulticast mode
[  167.577366][ T4816] bridge_slave_1: left promiscuous mode
[  167.578478][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.580662][ T4816] bridge_slave_0: left allmulticast mode
[  167.580686][ T4816] bridge_slave_0: left promiscuous mode
[  167.580763][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.685252][ T4816] bridge_slave_1: left allmulticast mode
[  167.685288][ T4816] bridge_slave_1: left promiscuous mode
[  167.685387][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.689138][ T4816] bridge_slave_0: left allmulticast mode
[  167.689158][ T4816] bridge_slave_0: left promiscuous mode
[  167.689232][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.844426][ T4776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.924558][ T4816] bridge_slave_1: left allmulticast mode
[  167.924588][ T4816] bridge_slave_1: left promiscuous mode
[  167.924667][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.926865][ T4816] bridge_slave_0: left allmulticast mode
[  167.926876][ T4816] bridge_slave_0: left promiscuous mode
[  167.926934][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.124265][ T4816] bridge_slave_1: left allmulticast mode
[  168.124299][ T4816] bridge_slave_1: left promiscuous mode
[  168.124382][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.126609][ T4816] bridge_slave_0: left allmulticast mode
[  168.126620][ T4816] bridge_slave_0: left promiscuous mode
[  168.126677][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.580268][ T4816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.605488][ T4816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.625548][ T4816] bond0 (unregistering): Released all slaves
[  168.710147][ T4816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.714524][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.716443][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.718205][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.735543][ T4816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.746058][ T4816] bond0 (unregistering): Released all slaves
[  168.841804][ T4816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.866102][ T4816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.875900][ T4816] bond0 (unregistering): Released all slaves
[  168.951194][ T4816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.976012][ T4816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.015007][ T4816] bond0 (unregistering): Released all slaves
[  169.017463][ T4354] 8021q: adding VLAN 0 to HW filter on device eth20
[  169.156712][ T4354] 8021q: adding VLAN 0 to HW filter on device eth22
[  169.278254][ T4354] 8021q: adding VLAN 0 to HW filter on device eth23
[  169.443788][ T4354] 8021q: adding VLAN 0 to HW filter on device eth24
[  169.592625][ T4354] 8021q: adding VLAN 0 to HW filter on device eth25
[  169.738597][ T4354] 8021q: adding VLAN 0 to HW filter on device eth26
[  169.876014][ T4816] hsr_slave_0: left promiscuous mode
[  169.877045][ T4816] hsr_slave_1: left promiscuous mode
[  169.877311][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.877322][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.878228][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.878238][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.883412][ T4816] hsr_slave_0: left promiscuous mode
[  169.884881][ T4816] hsr_slave_1: left promiscuous mode
[  169.885150][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.885160][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.886074][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.886082][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.892382][ T4816] hsr_slave_0: left promiscuous mode
[  169.893360][ T4816] hsr_slave_1: left promiscuous mode
[  169.895323][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.895352][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.896968][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.896979][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.902007][ T4816] hsr_slave_0: left promiscuous mode
[  169.902929][ T4816] hsr_slave_1: left promiscuous mode
[  169.903221][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.903231][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.906738][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.906760][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.922393][ T4816] veth1_macvtap: left promiscuous mode
[  169.922436][ T4816] veth0_macvtap: left promiscuous mode
[  169.922470][ T4816] veth1_vlan: left promiscuous mode
[  169.922494][ T4816] veth0_vlan: left promiscuous mode
[  169.926745][ T4816] veth1_macvtap: left promiscuous mode
[  169.926770][ T4816] veth0_macvtap: left promiscuous mode
[  169.926818][ T4816] veth1_vlan: left promiscuous mode
[  169.926842][ T4816] veth0_vlan: left promiscuous mode
[  169.930669][ T4816] veth1_macvtap: left promiscuous mode
[  169.930694][ T4816] veth0_macvtap: left promiscuous mode
[  169.930721][ T4816] veth1_vlan: left promiscuous mode
[  169.930777][ T4816] veth0_vlan: left promiscuous mode
[  169.935849][ T4816] veth1_macvtap: left promiscuous mode
[  169.935872][ T4816] veth0_macvtap: left promiscuous mode
[  169.935900][ T4816] veth1_vlan: left promiscuous mode
[  169.935912][ T4816] veth0_vlan: left promiscuous mode
[  170.165990][ T4816] team0 (unregistering): Port device team_slave_1 removed
[  170.169868][ T4816] team0 (unregistering): Port device team_slave_0 removed
[  170.281838][ T4816] team0 (unregistering): Port device team_slave_1 removed
[  170.296934][ T4816] team0 (unregistering): Port device team_slave_0 removed
[  170.403851][ T4816] team0 (unregistering): Port device team_slave_1 removed
[  170.407905][ T4816] team0 (unregistering): Port device team_slave_0 removed
[  170.528138][ T4816] team0 (unregistering): Port device team_slave_1 removed
[  170.531958][ T4816] team0 (unregistering): Port device team_slave_0 removed
[  170.580560][ T4354] 8021q: adding VLAN 0 to HW filter on device eth27
[  170.729478][ T4354] 8021q: adding VLAN 0 to HW filter on device eth29
[  170.804297][   T24] net_ratelimit: 3 callbacks suppressed
[  170.804335][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.856516][ T4354] 8021q: adding VLAN 0 to HW filter on device eth28
[  170.975638][ T4354] 8021q: adding VLAN 0 to HW filter on device eth31
[  171.110148][ T4354] 8021q: adding VLAN 0 to HW filter on device eth30
[  171.834247][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.884240][ T4786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog