last executing test programs:

2m29.774117578s ago: executing program 1 (id=519):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000004000000001801004020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095dd0c6afa33e0a97e8b967a2354011b543f9a6e2e3c7aa33f9c33c940642b62837ca67cda9f39de4dda5c8f11b0e3a2b3f6e900"/139, @ANYRESOCT=r2, @ANYRESHEX=r2, @ANYRESDEC, @ANYBLOB="b18365c35d6007cb95f9e86bd608071cdac2f8207d503e06c0c6beaa73681863b961818e0770a028bb048f3899d76be0c8d9328c8b9c1ce22b389a3fa7dea682c19948408324126a1dd5cebeae8589e6c0f003b4e8e11677d6a862bd876549e3bffecdb327b6f709a6bb16b9c2a99499dd8b3e12647cff3293612fa900bf07f1"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m29.675948988s ago: executing program 1 (id=520):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r1, &(0x7f0000000040)='7', 0x1)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xff7e, 0x7})
r2 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x1e78, 0x40, 0x2, 0x207})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0)
write$char_usb(r1, 0x0, 0x0)
syz_usb_disconnect(r0)

2m28.79189982s ago: executing program 1 (id=527):
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) (async)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x44) (async)
r1 = fanotify_init(0x2, 0x1000)
r2 = dup3(r0, r1, 0x80000)
fanotify_mark(r1, 0x2, 0x8000009, r2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x2c}}, 0xc0400d4) (async)
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2089004, 0x0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x1002000, 0x0, 0x2, 0x0, 0x0) (async, rerun: 64)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000180)={[{@max_batch_time}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@dax}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@grpquota}]}, 0xfe, 0x467, &(0x7f0000001200)="$eJzs3M1vG0UbAPDHduw0bfMmbykfLS0ECqLiI2nSD3rgUgQSB5CQAKmIU0jSqtRtUBMkWlVQOJQjqsQdcUTiL+BCuSDghMQV7gipQrlQOCCjtXdTJ7GTOHbiUP9+0tYznt3OPLs76/GsNwH0rJHkn1zE7oj4JSKGatmlK4zUXm4vXJ36a+HqVC4qldf+yFXX+3Ph6lS2arbdrlqmUlml3utvRUyWyzOX0vzY/IV3x+YuX3nm3IXJszNnZy5OnDx57OjB0omJ423Fl09fB5O27v9g9sC+l9688crU6Rtv//BV0t7daXl9HJ0yUtu7DT3e6cq6bLAunevrYkNoSSEiksNVrPb/oSjEwGLZULz4cVcbB2yqSiVf+ad58bUKcBdLBuprK1WvFcDdJPugT77/ZssWDT22hVunYnEe43a61Er6FucOiul3pM0wEhGnr/39ebLEJs1DAADUu3kqIp5uNP7Lx3116/0vvTc0HBH/j4g9EXFPROyNiHsjquveHxEPtFj/8jskK8c/laENBbZOyfjvufTe1tLxXzb6i+FCmhusxl/MnTlXnjmS7pPDUexP8uOr1PHtCz9/2qysfvyXLEn92Vgwbcfvff1Lt5menJ9sJ+Z6tz6K2N/XKP7c4pg3GR/vi4j9G6zj3JNfHmhWtnb8q+jAoLzyRcQTteN/LZbFn8k1vT85/uyJieNjO6I8c2QsOytW+vGn6682q7+t+Dvg1s1K7MzO/4FoFP9wbkfE3OUr56v3a+dar+P6r580/U6z0fO/lHu9mi6l770/OT9/aTyilHt55fsTd7bN8tn6yfl/+FDj/r8n7uyJByMiOYkPRsRDEfFw2vZHIuLRiDi0SvzfP//YO63H37/K/9g5SfzTDa9/dcc/6o9/64nC+e++bj3+THL8j1VTh9N31nP9W28D29l3AAAA8F+Rr/4GPpcfXUzn86Ojtd/w742d+fLs3PxTZ2bfuzhd+638cBTz2UzXUN186Hg6N5zlJ5blj6bzxp8VBqr50anZ8nS3g4cet6tJ/0/8Vuh264BN53kt6F36P/Qu/R96l/4PvUv/h97VqP9/2IV2AFtvjc//ga1qB7D1jP+hd+n/0Lv0f+hJTZ+Nz7f1yH8vJd4YjNgGzaglvim197ca1p+I/EY335Gee9tjj22fRDEaFvVt9o7qb1jU5QsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAh/wbAAD//0nX2c8=") (async)
ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000400)={0x4, 0x1}) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$packet(0x11, 0x2, 0x300) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0) (async)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000380), &(0x7f0000000540)=0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x5c, 0x160, 0x1a0, 0x3e0, 0x290, 0x228, 0x25a, 0x290, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0x0, 0xffffffff], [0xff000000], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xa8, 0xe8, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xf9, 0x7, {0x6}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0xff, 0x7deb, 'netbios-ns\x00', {0x141a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
pipe2(&(0x7f00000003c0)={<r5=>0xffffffffffffffff}, 0x80080)
syz_io_uring_setup(0x67e0, &(0x7f0000000480)={0x0, 0xc3b1, 0x4, 0x20000001, 0x81, 0x0, r5}, &(0x7f0000000180), &(0x7f0000000580), &(0x7f0000000100))

2m28.535500539s ago: executing program 1 (id=528):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5d}, 0x94)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef)
preadv(r1, &(0x7f0000000880)=[{&(0x7f0000000040)=""/81, 0x51}, {&(0x7f00000000c0)=""/215, 0xd7}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f00000006c0)=""/201, 0xc9}, {&(0x7f00000007c0)=""/130, 0x82}], 0x6, 0x200, 0x7)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x1d36c94d, 0x0, 0x1, 0x5, '\x00', 0x0, r1, 0x3, 0x2, 0x5}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'veth0\x00', <r3=>0x0})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x80000001, <r4=>0x0}, 0x8)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x14, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xba1}, {}, {}, [@tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='syzkaller\x00', 0x2, 0x35, &(0x7f0000000cc0)=""/53, 0x40f00, 0x5, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000d00)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000d40)={0x2, 0x0, 0xfffffff7, 0xff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000d80)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, r1, 0x1], &(0x7f0000000dc0)=[{0x4, 0x4, 0x1}], 0x10, 0x5}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)=r0}, 0x20)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
fadvise64(r7, 0x8, 0x800002, 0x4)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1ff, '\x00', 0x0, r1, 0x5, 0x5, 0x3}, 0x50)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0)
writev(r9, &(0x7f0000000580)=[{&(0x7f0000000340)="512e6413ed29", 0x6}], 0x1)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x316, 0x3, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)=r0}, 0x20)
syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x74, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x16, 0x4, 0x0, 0x5, 0x0, 0x64, 0x0, 0x2, 0x11, 0x6, @empty, @local, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x3c, 0x78, 0x1, 0x0, [{@multicast2=0xe0000011, 0xffff}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x40000}, {@local, 0xefc}, {@multicast2}, {@dev}, {@private=0x2a010102, 0x1}]}]}}}}}}}, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@bloom_filter={0x1e, 0x80000000, 0x81, 0x4, 0x140, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0xf}, 0x50)
r13 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000001340)={'fscrypt:', @desc1}, &(0x7f0000001380)={0x0, "c6377ff71966fcf57293fb272089bec251f7318c31ffb9d289f2d377e8da7afe1dbbcdcad209c46e18251ffdec39363ffc1cc6a32a75f1485dfbb11fb3f87c2c", 0x3b}, 0x48, 0xfffffffffffffffc)
keyctl$unlink(0x9, 0x0, r13)
add_key(&(0x7f0000001400)='ceph\x00', &(0x7f0000001440)={'syz', 0x2}, 0x0, 0x0, r13)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x10, 0x548d, 0xb30, 0x1000, 0x2020, 0x1, 0xfffffffe, '\x00', 0x0, r1, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0x1e, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, @generic={0x7, 0x4, 0x9, 0xc, 0x6}, @call={0x85, 0x0, 0x0, 0xb0}, @ldst={0x0, 0x3, 0x6, 0x5, 0xb, 0xfffffffffffffff8, 0x10}, @jmp={0x5, 0x0, 0x0, 0x8, 0xc, 0x50}, @exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0x6, 0x64, &(0x7f0000000a40)=""/100, 0x0, 0x20, '\x00', r3, @xdp=0x25, r1, 0x8, &(0x7f0000000b00)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0xd, 0x100, 0xc}, 0x10, r4, r5, 0x5, &(0x7f00000011c0)=[r6, r8, r9, r10, r11, r12, r14], &(0x7f0000001200)=[{0x4, 0x3, 0x7, 0x9}, {0x1, 0x1, 0xd, 0x7}, {0x4, 0x3, 0x2, 0x1}, {0x4, 0x4, 0xb, 0x2}, {0x5, 0x5, 0x0, 0x5}], 0x10, 0x6b8}, 0x94)
r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r15, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r16 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
open_by_handle_at(r16, &(0x7f00000001c0)=ANY=[@ANYRES8=r16], 0x0)
ioctl$BLKTRACESTOP(r16, 0x1275, 0x0)

2m28.452373732s ago: executing program 1 (id=529):
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000800)='./file1\x00', 0x1000080, &(0x7f0000000680)=ANY=[], 0x1, 0x33e, &(0x7f0000000840)="$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")
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000881}, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={<r3=>0xffffffffffffffff, 0x0, 0x40, 0x0, 0xa5, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000000)='7', 0x52)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000005c0)={{r0, &(0x7f0000000100)='^-.&\x00', 0x200000, &(0x7f0000000180)={@_ha_fsid={[0xec3, 0x81]}, {0x3888, 0x10, 0xffffffff, 0xbb}}, 0x1, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)}, {[0x2, 0xf, 0x6a3, 0x6]}, 0x10000, 0x7, &(0x7f0000000580)=""/7})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
r8 = getpid()
sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5)
write$cgroup_pid(r3, &(0x7f0000000640)=r8, 0x12)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "1100520a00000000"}}}}}, 0x0)
ptrace$poke(0x2, r9, &(0x7f00000011c0), 0xfffffffffffffffd)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000004)
kcmp$KCMP_EPOLL_TFD(r9, r9, 0x7, r0, &(0x7f0000000080)={r3, r0, 0x7f})
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a1441, 0x104)

2m28.359340166s ago: executing program 1 (id=531):
r0 = syz_io_uring_complete(0x0, 0x0)
lseek(r0, 0x401, 0x1)
r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000001980)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000010000000100000f030000000500000000000000020400004d3655100000000000000f01000000b5005f2e"], &(0x7f0000001b00)=""/3, 0x47, 0x3, 0x1, 0x4}, 0x28) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) (async)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x57}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x4a, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd29, 0x3504, 0x2, 0x5, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 32)
r4 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x7ffffffe}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x800) (async)
r5 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000580)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
preadv(r5, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/86, 0x56}], 0x1, 0x9, 0x9) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10}, 0x94)

2m16.583941131s ago: executing program 0 (id=611):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f0000000200)={[{@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0, 0x80000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000540))
mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x2d2202816f78ba65)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

2m16.355773995s ago: executing program 0 (id=613):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x11, r0, 0x0)
writev(r0, &(0x7f0000001740)=[{&(0x7f0000000200)="abd71a06eaffd51a8459b161aaf39cfa306fccaa83c24cf562c6b8f9387fb9e06f7adbe5df742902e27c05897de027e9a74c5fade3c311ea130cc88e0cdd7b9b452667fb86ccf054a050c72d35f8498ee7197105f340a6f42577121a2492785865d522ca1d135d1cfc0ff1740abc11f6bcbb5f77e6ba4fe33a0977c1feafd42e1eac078b1306fd89f6b67caed1d1171fbf2f71598f6f60cc0ede5935d299d709ca65ced88279631bb2ee3c46", 0xac}, {&(0x7f0000000400)="bd1db79c3cc7f6e8291f887287e4cf6f50d3179190bb72b1cf7e3994396939e60e1fcb82226f5179fb89e286a302b3f4c972", 0x32}, {&(0x7f0000000740)="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", 0x1000}], 0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec610600044000040000050007"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002180)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000ac1414aa000000000000000000000000fc01000000000000000000000000000000000000000000400000000067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000000000000000000000000000000000000000000000000000000080000000000000000000ffffffffffffffff0000000000000000fcffffffffffff7b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000a0010002e"], 0xcc}, 0x1, 0x0, 0x0, 0x848}, 0x4000000)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r5 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0)
mlockall(0xe)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=<r7=>0xffffffffffffffff)
ioctl$MEDIA_REQUEST_IOC_QUEUE(r7, 0x7c80, 0x0)
sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14e30933", @ANYRES16, @ANYBLOB="00042cbd700003"], 0x14}, 0x1, 0x0, 0x0, 0x20008805}, 0x4000040)
setns(0xc9, 0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
connect$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x80000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xfffffffd}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd)
semtimedop(0x0, &(0x7f0000000100)=[{0x1, 0x1f}], 0x1, &(0x7f0000000140)={0x77359400})
write$binfmt_script(r5, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'xXT'}]}, 0xf)

2m16.046786215s ago: executing program 0 (id=615):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x80, 0x0) (async, rerun: 64)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x6a72c000) (async)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={<r1=>0x0, 0x3938700}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES8=r0], 0xfc}, 0x1, 0x0, 0x0, 0x20040040}, 0x10) (async, rerun: 64)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (rerun: 64)
write(r2, &(0x7f0000000000)='3', 0x4e)
r3 = io_uring_setup(0x1, &(0x7f0000000180)={0x0, 0xebb9, 0x80, 0x0, 0x215})
io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000002480)={&(0x7f0000002440)={0x0, 0x0, 0x0, 0x7fffffff, 0x10000}, 0x1}, 0x1)
r4 = socket$rxrpc(0x21, 0x2, 0x0)
bind$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async, rerun: 64)
bind$rxrpc(r4, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async, rerun: 64)
listen(r4, 0xfffff377)
dup3(r3, r0, 0x80000) (async, rerun: 64)
syz_usb_connect(0x3, 0x3c, &(0x7f0000000040)=ANY=[], 0x0) (rerun: 64)

2m15.131765265s ago: executing program 0 (id=625):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x80000)
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x400, 0x2, 0x4, 0x0, 0xfe})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x800})
close(r0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
socket(0x11, 0x3, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r1], 0x7)

2m14.135393852s ago: executing program 0 (id=633):
syz_emit_vhci(&(0x7f00000009c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x8001, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {0xf8d}, 0x0, 0x86e6bbf, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
ioctl$VIDIOC_QBUF(r4, 0xc058ff0b, &(0x7f0000000200)=@multiplanar_fd={0xd, 0xd, 0x4, 0x101140, 0x5, {0x77359400}, {0x5, 0x3, 0x8, 0xe, 0x4, 0x9, "b0e0161e"}, 0x81, 0x4, {0x0}, 0xa3})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x10)
mknodat$loop(r6, &(0x7f00000000c0)='./file0\x00', 0x803, 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47)
r8 = epoll_create1(0x0)
r9 = eventfd2(0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000b80)={0x60000012})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000)={0x10000000})
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x40000000)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000040)={'netpci0\x00', @local})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}}, 0x0)

2m13.279057033s ago: executing program 32 (id=531):
r0 = syz_io_uring_complete(0x0, 0x0)
lseek(r0, 0x401, 0x1)
r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000001980)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000010000000100000f030000000500000000000000020400004d3655100000000000000f01000000b5005f2e"], &(0x7f0000001b00)=""/3, 0x47, 0x3, 0x1, 0x4}, 0x28) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) (async)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x57}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x4a, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd29, 0x3504, 0x2, 0x5, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 32)
r4 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x7ffffffe}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x800) (async)
r5 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000580)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
preadv(r5, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/86, 0x56}], 0x1, 0x9, 0x9) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10}, 0x94)

2m12.979843547s ago: executing program 0 (id=640):
socket$tipc(0x1e, 0x2, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) (async)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x9, 0x1015, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x10]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x7, 0x3c}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x81, 0x0, 0x0, 0x1}, 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x7, 0x3c}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x81, 0x0, 0x0, 0x1}, 0x10}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
ftruncate(r5, 0xc17a) (async)
ftruncate(r5, 0xc17a)
lseek(r5, 0x2000, 0x4)
ioctl$RTC_PIE_OFF(r5, 0x7006)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x4a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)

1m59.980103441s ago: executing program 3 (id=741):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x1, 0x600081)
mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x40010, r6, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x0, 0x80, 0x7}}, [@mark={0xc, 0x15, {0x300, 0x100}}]}, 0x5c}}, 0x4004040)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000090)

1m59.859892974s ago: executing program 3 (id=742):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@nouid32}, {@inlinecrypt}, {@noload}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xfd, 0xbe0, &(0x7f0000001c00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000003c0))
fdatasync(r0)
socket(0x10, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20)
syslog(0xa, 0x0, 0x0)

1m58.634520638s ago: executing program 3 (id=745):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x24180, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x9, 0x4, 0x5, 0xf, 0x34, 0x7})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
futex_waitv(&(0x7f0000000180)=[{0xf, &(0x7f0000001380)=0x2, 0x6}], 0x1, 0x0, 0x0, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=")
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0)
write(r2, 0x0, 0x0)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r3, &(0x7f00000063c0)=""/1024, 0x400)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x24180, 0x0) (async)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x9, 0x4, 0x5, 0xf, 0x34, 0x7}) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
futex_waitv(&(0x7f0000000180)=[{0xf, &(0x7f0000001380)=0x2, 0x6}], 0x1, 0x0, 0x0, 0x1) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") (async)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) (async)
write(r2, 0x0, 0x0) (async)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async)
getdents64(r3, &(0x7f00000063c0)=""/1024, 0x400) (async)

1m58.451922041s ago: executing program 3 (id=746):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x5d, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xfffc)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x3261e)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$inet(0x2, 0x2, 0x0)
r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x525b})
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x4b, 0x0, @fd, 0x1, 0x0, 0x0, 0x11, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x6}, 0xb)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfbf0283703c70d89, 0x4008132, 0xffffffffffffffff, 0x0)
r9 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$MON_IOCG_STATS(r9, 0x80089203, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r10 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r10, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r11=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000100)={r11, 0x7}, 0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f00000000c0)={r11, @in6={{0xa, 0x4f23, 0x80000802, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0x10}, &(0x7f0000000040)=0x90)

1m57.207993552s ago: executing program 3 (id=750):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x24, 0x2, [@TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x10, 0x2, 0x10}, {0xd, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x40010)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x4c, 0x48, 0x8, 0x70bd27, 0xa5dfdbfd, {0xa, 0x0, 0x3f, 0x0, r3, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x4c}}, 0x800)

1m57.120029764s ago: executing program 33 (id=640):
socket$tipc(0x1e, 0x2, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) (async)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x9, 0x1015, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x10]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x7, 0x3c}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x81, 0x0, 0x0, 0x1}, 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x7, 0x3c}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x81, 0x0, 0x0, 0x1}, 0x10}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
ftruncate(r5, 0xc17a) (async)
ftruncate(r5, 0xc17a)
lseek(r5, 0x2000, 0x4)
ioctl$RTC_PIE_OFF(r5, 0x7006)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x4a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)

1m57.063091355s ago: executing program 3 (id=753):
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0) (async)
syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = socket$phonet(0x23, 0x2, 0x1) (async)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
futex(&(0x7f000000cffc)=0x2, 0x5, 0xf2, 0x0, &(0x7f0000000000), 0x3000000) (async)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x4) (async, rerun: 32)
r2 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32)
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0}) (async, rerun: 64)
r4 = socket(0x1d, 0x2, 0x6) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r4)
sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) (async)
sendto$phonet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x23, 0x1, 0x8}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x0, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x0, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x0, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT={0xfffffffffffffe3a, 0x7, 0x1, 0x0, 0x2}]}, 0x74}}, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) (async, rerun: 32)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
io_setup(0x8, &(0x7f0000000600)=<r9=>0x0) (async)
r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r9, 0x1, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r10, &(0x7f00000000c0)='\v', 0x1}])
syz_clone(0x212000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m40.705479137s ago: executing program 34 (id=753):
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0) (async)
syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = socket$phonet(0x23, 0x2, 0x1) (async)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
futex(&(0x7f000000cffc)=0x2, 0x5, 0xf2, 0x0, &(0x7f0000000000), 0x3000000) (async)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x4) (async, rerun: 32)
r2 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32)
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0}) (async, rerun: 64)
r4 = socket(0x1d, 0x2, 0x6) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r4)
sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) (async)
sendto$phonet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x23, 0x1, 0x8}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x0, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x0, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x0, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT={0xfffffffffffffe3a, 0x7, 0x1, 0x0, 0x2}]}, 0x74}}, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) (async, rerun: 32)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
io_setup(0x8, &(0x7f0000000600)=<r9=>0x0) (async)
r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r9, 0x1, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r10, &(0x7f00000000c0)='\v', 0x1}])
syz_clone(0x212000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m37.913517004s ago: executing program 2 (id=779):
r0 = gettid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x31, 0x0, @void}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r3, 0x31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendto$inet(r3, &(0x7f0000000280)="d0d54635ebfb0b7593798d763a457859f7268497b3d9d76760b9b759e26ba4bbaa858f266c8745e991b27e74c9f72f080979a83e766f971bad2b14b9d8deeead477b1c8b8d15c223f226ec4ea58a51adc73ed3ba97831a01f3570913ce6d562b9f127cab52851fd8c01ded50e9fb5dbb157f5765b9a15153e2353db1af01d942e678a30f26b529474d1eae1c5d4948fdeb9c72f92e9689b1", 0x98, 0x4000884, &(0x7f0000000340)={0x2, 0x4e22, @empty}, 0x10)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
keyctl$get_security(0x11, r4, &(0x7f0000000140)=""/195, 0xc3)
r5 = add_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r4)
r6 = add_key(&(0x7f0000000040)='blacklist\x00', 0x0, &(0x7f0000000900)="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", 0x559, r5)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r6}, &(0x7f00000008c0)=ANY=[@ANYRES32=r6], 0x0, 0x0)

1m34.932567069s ago: executing program 2 (id=780):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r1, 0x0, 0x0)

1m34.520426216s ago: executing program 2 (id=782):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x300000000000000, 0x0, 0x10000042}, 0x90)

1m29.228832756s ago: executing program 2 (id=785):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec610600"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

1m28.962535033s ago: executing program 2 (id=788):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

1m27.794635854s ago: executing program 2 (id=789):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x9, 0x4)
recvmmsg(r0, &(0x7f0000001040), 0x3, 0x60, 0x0)
io_setup(0x20fe, &(0x7f00000001c0)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9c010000100001002cbc700000000000ff020000000000000000000000000001ac14140d0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}}, 0x44050)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000240)={0xb, 0x5, 0x40, "ff050000007e000000001100", 0x50424752})
r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0)
landlock_restrict_self(r5, 0xe)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r6, &(0x7f0000000880)={0x2020}, 0x2020)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x2, 0x189)
close_range(r2, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
shutdown(r0, 0x1)

1m26.028058906s ago: executing program 5 (id=793):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0xf9efffffffffffff, 0x0, 0x10000042}, 0x90)

1m11.449252746s ago: executing program 35 (id=789):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x9, 0x4)
recvmmsg(r0, &(0x7f0000001040), 0x3, 0x60, 0x0)
io_setup(0x20fe, &(0x7f00000001c0)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9c010000100001002cbc700000000000ff020000000000000000000000000001ac14140d0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000000000000000000000a0004002c00000000000000600002006362632874776f666973682900000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000001a000b000000366a6a849a739045002419000000e800002900"], 0x19c}}, 0x44050)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000240)={0xb, 0x5, 0x40, "ff050000007e000000001100", 0x50424752})
r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0)
landlock_restrict_self(r5, 0xe)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r6, &(0x7f0000000880)={0x2020}, 0x2020)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x2, 0x189)
close_range(r2, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
shutdown(r0, 0x1)

1m11.022264914s ago: executing program 5 (id=796):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec610600"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

1m10.009413597s ago: executing program 5 (id=798):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa0c854, &(0x7f0000001240)={[{@iocharset={'iocharset', 0x3d, 'macroman'}}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@utf8no}, {@uni_xlate}, {@shortname_lower}, {@shortname_win95}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@rodir}, {@rodir}, {@rodir}, {@rodir}, {@shortname_win95}, {@numtail}]}, 0x7f, 0x2bf, &(0x7f0000001700)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x80401, 0x0)
pwrite64(r1, &(0x7f00000002c0)="13", 0x1, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000ac0)={0x14, 0x32, 0x800, 0x2000, 0x25dfdbff, {0x1}}, 0x14}}, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0xa}, 0x30, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r4, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x2a8002, 0x10)
r6 = geteuid()
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8800)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001300)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0x6c)
r9 = geteuid()
mount$9p_rdma(&(0x7f0000000180), &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x1100012, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,timeout=0x0000000000000006,sq=0x0000000080000000,cachetag=errors=remount-ro,version=9p2000.L,sq=0x0000000000600005,uid<', @ANYRESDEC=r6, @ANYBLOB=',uid>', @ANYRESDEC=r8, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=%},uid>', @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=r9, @ANYBLOB=',\x00'])
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlinkprop={0x44, 0x6c, 0xc9bff60d8a6563c3, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x110, 0x204}, [@IFLA_MAP={0x24, 0xe, {0x1, 0x23d6, 0x7fffffffffffffff, 0x3, 0x5a, 0x81}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x880)

1m8.867413885s ago: executing program 5 (id=800):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000300), 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0)
close(r2)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x1000000, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffb3ebcf5d214629051b8a53ffff00000000000000000000000000000000000000000000000000000000000800"/96]}, 0xd8)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="de7bebf3b0f5f6a7ef5ca32d2de29c499dff12e84fe3eee6e2f648aaaa799a9ac6bfa7a13a9b44b0b6c96f6775b2f9425eecdd28ba789a13e4c99c3ab7", @ANYRES32=r2], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40000d1)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0xfffffffffffffcff, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x44810}, 0x4004000)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040010)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)
write(r1, &(0x7f0000000000), 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

1m5.86264258s ago: executing program 5 (id=802):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={<r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000140000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1c)
r3 = socket(0x10, 0x3, 0x0)
sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="240000001400050000000000000000002d000000020000000500020008000000", 0x24}], 0x1}, 0x0)
r4 = socket(0x2d, 0x2, 0x0)
setsockopt(r4, 0x11d, 0x1, &(0x7f0000000500)="01000000", 0x4)
ioctl(r4, 0x89e2, &(0x7f0000000600)='\x00\x00\b\x00')
sendmsg(r4, &(0x7f0000000700)={&(0x7f0000000800)=@generic={0x2d, "0000000000000800000019000200"}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000240)="01020304", 0x4}], 0x1}, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, 0x0, 0xfffffffffffffffe)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000001c0)='./file1\x00', 0x4814, &(0x7f0000000bc0)=ANY=[], 0x1, 0x287, &(0x7f0000000480)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x113140, 0x2)
readv(r6, &(0x7f0000003f00)=[{&(0x7f0000001e00)=""/4096, 0x1000}], 0x1)
r7 = fanotify_init(0xf00, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa58000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
unshare(0x20000400)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r7, 0x5, 0x4800003e, r8, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x1000}]})
socket$nl_rdma(0x10, 0x3, 0x14)
close_range(r9, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvtap0\x00'})
socket$inet_sctp(0x2, 0x1, 0x84)

1m4.241936018s ago: executing program 5 (id=804):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/123, 0x7b}, {0x0}], 0x2, 0xc, 0x8)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='jffs2\x00', 0x2020449, &(0x7f0000000100)='/dev/bus/usb/00#/00#\x00')
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='allow_utime=00000000000000000000011,shortname=win95,utf8=1,shortname=lower,shortname=lower,utf8=1,rodir,utf8=1,nonumtail=0,shortname=winnt,check=strict,iocharset=maccroatian,uni_xlate=1,norumdail=0,uni_xlate=0,utf8=0,\x00'], 0x3, 0x29e, &(0x7f0000000800)="$eJzs3c1qa1UUAOB1mn8dJANHItwDOnB0ufUJWuQKYkFQIqgDLd5ckCRcaCHQKsaOfAKfQPBtnIgv4AMoztqBeOT0JGnSnqSmlqTo9026utZe2ftk79JOsvv5a8P+sxfHz8++/jWazSR29mIvLpLoxE5MfRulfvm9PA8APHAXWRZ/ZIVGkTpZHFGL8u+rOxtZIABw7+Z//297LQDAZnz48Sfv7R8cPP0gTZsRw+9G3SSKr0V9/3l8GYPoxZNox58R2UwRv/PuwdOoprlOvDEcj7p55/Czn86LPyf2f4u47N+NdnTK+3fTwlz/eNStxUuT+fcG0Xv/h2jHK+X9b5X0R7ceb74+t/7H0Y6fv4gXMYhnk2ef9n+zm6ZvZ9+ff/Vpns37k/Go25iNm4yubHhrAAAAAAAAAAAAAAAAAAAAAAD4D3ucznQW79+ZXvxfFJuT8Qv1FfcDjefu53mSpmmWXO+vxqvVqG7ruQEAAAAAAAAAAAAAAAAAAOAhOT457R8OBr2jNYKPbpYqsZCZfqy/pD3+Wsw0ImKt2ReCR+t2RWWytEEScW1MPSJWtNeicdl5+1yV5aX8BW6UWvl6ekdJNfqHP2Z325TrQTLLtOZLj6KYK8+0imAu828nHTTjMpierv5hctvmNssOybKg8s/Xk5Ucv+Xt9bLTmysZ3Foxe/3lO711WXtJKYmI2uzNXP06tXvZwaufFAAAAAAAAAAAAAAAAAAAYMOuPvRbUjzbwoIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYAuu/v//GsF40nyjlLUjTk77WSXPVGNS2vIjAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/wdwAAAP//h9dhCg==")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_clone(0x4a128000, &(0x7f0000000300)="6c140fdecb7ffc7c237fd42108430ec3062d108257cd309a85ea06acd295703c1845a300e57d8ecdec6ee6c267f599def04e1f2dfd679a487e72ea4fa940f713ddff24f846c87756b542547892659fef0c0597cddbedfa8f2949866f0f9e41c8f5de31e96eb7e346f28269b944071b", 0x6f, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="ea4f18d2efe294a8a59f53f3c414f53e06a6957717c440f7c3f4eb604f2e410c23a39e9a43d6")
r6 = syz_open_procfs(r5, &(0x7f0000000440)='net/netfilter\x00')
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r7=>0x0, 0x0, <r8=>0x0], &(0x7f0000000300), 0x3, r4})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8, r7, r8], &(0x7f00000003c0), 0x0, 0x2})
r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
add_key(0x0, 0x0, &(0x7f0000000540)="00005168ca64bbeb91759cd9084be285", 0x10, 0xffffffffffffffff)
r10 = syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00')
ioctl$KDSKBLED(r10, 0xc0686611, 0x20000081)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r9, 0x108000)
ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe7, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x8, 0x6, 0x81, 0x0, 0xb, 0x101, 0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r12, 0x1, 0x20000002, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x2, 0x65}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)

47.656471928s ago: executing program 36 (id=804):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/123, 0x7b}, {0x0}], 0x2, 0xc, 0x8)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='jffs2\x00', 0x2020449, &(0x7f0000000100)='/dev/bus/usb/00#/00#\x00')
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='allow_utime=00000000000000000000011,shortname=win95,utf8=1,shortname=lower,shortname=lower,utf8=1,rodir,utf8=1,nonumtail=0,shortname=winnt,check=strict,iocharset=maccroatian,uni_xlate=1,norumdail=0,uni_xlate=0,utf8=0,\x00'], 0x3, 0x29e, &(0x7f0000000800)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_clone(0x4a128000, &(0x7f0000000300)="6c140fdecb7ffc7c237fd42108430ec3062d108257cd309a85ea06acd295703c1845a300e57d8ecdec6ee6c267f599def04e1f2dfd679a487e72ea4fa940f713ddff24f846c87756b542547892659fef0c0597cddbedfa8f2949866f0f9e41c8f5de31e96eb7e346f28269b944071b", 0x6f, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="ea4f18d2efe294a8a59f53f3c414f53e06a6957717c440f7c3f4eb604f2e410c23a39e9a43d6")
r6 = syz_open_procfs(r5, &(0x7f0000000440)='net/netfilter\x00')
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r7=>0x0, 0x0, <r8=>0x0], &(0x7f0000000300), 0x3, r4})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8, r7, r8], &(0x7f00000003c0), 0x0, 0x2})
r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
add_key(0x0, 0x0, &(0x7f0000000540)="00005168ca64bbeb91759cd9084be285", 0x10, 0xffffffffffffffff)
r10 = syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00')
ioctl$KDSKBLED(r10, 0xc0686611, 0x20000081)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r9, 0x108000)
ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe7, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x8, 0x6, 0x81, 0x0, 0xb, 0x101, 0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r12, 0x1, 0x20000002, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x2, 0x65}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)

21.211813008s ago: executing program 4 (id=823):
setns(0xc9, 0x0)
r0 = socket(0x1f, 0x3, 0x1)
bind(r0, &(0x7f0000000300)=@generic={0x1f, "ffff0300"}, 0x6)
write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
r1 = socket(0x1f, 0x5, 0x8)
setsockopt(r1, 0x112, 0x14, 0x0, 0x0)

20.465657072s ago: executing program 4 (id=824):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='3', 0x1)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000340)={0x9a0000, 0x9, 0x10, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9a0913, 0x2, '\x00', @string=0x0}})

20.335896387s ago: executing program 4 (id=825):
socket$kcm(0x10, 0x2, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x1f, 0x3, 0x1)
bind(r0, &(0x7f0000000300)=@generic={0x1f, "ffff0300"}, 0x6)
write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
syz_emit_vhci(&(0x7f0000000510)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf)
setns(0xc9, 0x0)
r1 = socket(0x1f, 0x5, 0x8)
bind(r1, &(0x7f0000000800)=@generic={0x1f, "0000000000000100"}, 0xa)
setsockopt(r1, 0x112, 0x7, &(0x7f0000000750)="01000000", 0x4)
connect(r1, &(0x7f0000000900)=@generic={0x1f, "0102030405060100"}, 0xa)

19.025377907s ago: executing program 4 (id=826):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='3', 0x1)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000340)={0x9a0000, 0x9, 0x10, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090c, 0x2, '\x00', @ptr=0x7}})

18.413231669s ago: executing program 4 (id=827):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
r1 = dup(r0)
ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000080))
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000002c0)={'nat\x00', 0x0, 0x4, 0x17, [0x2, 0x6, 0x4, 0x6, 0x2, 0x4], 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)=""/23}, &(0x7f0000000340)=0x78)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
readv(r2, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
timerfd_create(0xf, 0x101800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000180000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x22f41, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r6, &(0x7f0000000280)=ANY=[], 0xff2e)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080)
syz_open_dev$loop(0x0, 0x0, 0x2)

17.130587383s ago: executing program 4 (id=828):
chdir(0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='8', 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0xa0)
unshare(0x6a040000)
write(r0, &(0x7f0000000000)='9', 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0xa0)
unshare(0x6a040000)
write(r0, &(0x7f0000000000)='10', 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0xa0)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, 0x0, 0xa0)
unshare(0x6a040000)
write(r0, &(0x7f0000000000)='12', 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0xa0)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, 0x0, 0xa0)
unshare(0x6a040000)
write(r0, &(0x7f0000000000)='14', 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0xa0)
unshare(0x6a040000)
write(r0, &(0x7f0000000000)='1', 0x1)

0s ago: executing program 37 (id=828):
chdir(0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='8', 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0xa0)
unshare(0x6a040000)
write(r0, &(0x7f0000000000)='9', 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0xa0)
unshare(0x6a040000)
write(r0, &(0x7f0000000000)='10', 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0xa0)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, 0x0, 0xa0)
unshare(0x6a040000)
write(r0, &(0x7f0000000000)='12', 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0xa0)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, 0x0, 0xa0)
unshare(0x6a040000)
write(r0, &(0x7f0000000000)='14', 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0xa0)
unshare(0x6a040000)
write(r0, &(0x7f0000000000)='1', 0x1)

kernel console output (not intermixed with test programs):

 sctp_assoc_value instead
[  112.516377][    C0] vxcan1: j1939_tp_rxtimer: 0x0000000054edead1: rx timeout, send abort
[  112.516716][    C0] vxcan1: j1939_tp_rxtimer: 0x00000000efe11ffb: abort rx timeout. Force session deactivation
[  112.695434][ T5911] scsi_nl_rcv_msg: discarding partial skb
[  112.699265][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'.
[  112.709525][ T5911] scsi_nl_rcv_msg: discarding partial skb
[  112.711326][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'.
[  112.722995][ T1161] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.723058][ T1161] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.723073][ T1161] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.723088][ T1161] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.755908][ T5921] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  112.755924][ T5921] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  112.756359][ T5921] vhci_hcd vhci_hcd.0: Device attached
[  112.760338][ T5922] vhci_hcd: connection closed
[  112.763892][ T1161] vhci_hcd vhci_hcd.2: stop threads
[  112.764255][ T1161] vhci_hcd vhci_hcd.2: release socket
[  112.764280][ T1161] vhci_hcd vhci_hcd.2: disconnect device
[  112.793623][    T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  113.016419][    C0] vxcan1: j1939_tp_rxtimer: 0x0000000054edead1: abort rx timeout. Force session deactivation
[  113.212328][ T5905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.212616][ T5905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.217985][ T5905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.218186][ T5905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.426629][ T5905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.426877][ T5905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.432775][ T5905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.433451][ T5905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.437399][ T5905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.437617][ T5905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.443220][    T9] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  113.443933][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[  113.443952][    T9] usb 1-1: can't read configurations, error -71
[  113.515396][ T5956] netlink: 'syz.2.288': attribute type 3 has an invalid length.
[  113.515411][ T5956] netlink: 252 bytes leftover after parsing attributes in process `syz.2.288'.
[  114.058621][ T5964] 9p: Bad value for 'wfdno'
[  114.100229][ T5967] vlan2: entered promiscuous mode
[  114.100244][ T5967] bridge0: entered promiscuous mode
[  114.180433][ T5970] fuse: Unknown parameter 'f$…0x0000000000000008ÿÿÿÿÿÿÿÿ00000000000000000000'
[  114.483071][ T4723] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  115.258668][ T6007] syzkaller0: entered promiscuous mode
[  115.258690][ T6007] syzkaller0: entered allmulticast mode
[  115.265940][ T6007] tipc: Started in network mode
[  115.265959][ T6007] tipc: Node identity 06e2028916b9, cluster identity 4711
[  115.266040][ T6007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.271845][ T6005] tipc: Resetting bearer <eth:syzkaller0>
[  115.280045][ T6005] tipc: Disabling bearer <eth:syzkaller0>
[  115.388724][ T6015] Illegal XDP return value 4294967274 on prog  (id 56) dev syz_tun, expect packet loss!
[  115.568773][ T6019] ip_tables: iptables: counters copy to user failed while replacing table
[  115.570837][ T6019] ip_tables: iptables: counters copy to user failed while replacing table
[  115.570931][ T6019] ip_tables: iptables: counters copy to user failed while replacing table
[  115.571009][ T6019] ip_tables: iptables: counters copy to user failed while replacing table
[  115.572455][ T6019] ip_tables: iptables: counters copy to user failed while replacing table
[  115.572554][ T6019] ip_tables: iptables: counters copy to user failed while replacing table
[  115.572628][ T6019] ip_tables: iptables: counters copy to user failed while replacing table
[  115.572696][ T6019] ip_tables: iptables: counters copy to user failed while replacing table
[  115.572764][ T6019] ip_tables: iptables: counters copy to user failed while replacing table
[  115.690778][ T6030] Injecting memory failure for pfn 0x11822f at process virtual address 0x20a0f000
[  115.701962][ T6030] Memory failure: 0x11822f: recovery action for clean LRU page: Recovered
[  115.702003][ T6030] Injecting memory failure for pfn 0x131a1f at process virtual address 0x20a1f000
[  115.702094][ T6030] Memory failure: 0x131a1f: recovery action for clean LRU page: Recovered
[  115.804479][ T6035] binder: 6033:6035 BC_FREE_BUFFER no match for buffer at offset 0
[  115.804667][ T6034] overlayfs: failed to resolve './bus': -2
[  115.966808][ T6039] FAULT_INJECTION: forcing a failure.
[  115.966808][ T6039] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.966836][ T6039] CPU: 0 UID: 0 PID: 6039 Comm: syz.4.317 Tainted: G             L      syzkaller #0 PREEMPT 
[  115.966849][ T6039] Tainted: [L]=SOFTLOCKUP
[  115.966852][ T6039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  115.966857][ T6039] Call trace:
[  115.966859][ T6039]  show_stack+0x2c/0x3c (C)
[  115.966877][ T6039]  __dump_stack+0x30/0x40
[  115.966889][ T6039]  dump_stack_lvl+0xd8/0x12c
[  115.966898][ T6039]  dump_stack+0x1c/0x28
[  115.966907][ T6039]  should_fail_ex+0x41c/0x590
[  115.966919][ T6039]  should_fail+0x14/0x24
[  115.966929][ T6039]  should_fail_usercopy+0x20/0x30
[  115.966939][ T6039]  bpf_test_finish+0x834/0xa70
[  115.966948][ T6039]  bpf_prog_test_run_skb+0x100c/0x1ed0
[  115.966955][ T6039]  bpf_prog_test_run+0x1e0/0x250
[  115.966965][ T6039]  __sys_bpf+0x6bc/0x82c
[  115.966973][ T6039]  __arm64_sys_bpf+0xd0/0xec
[  115.966980][ T6039]  invoke_syscall+0x98/0x244
[  115.966991][ T6039]  el0_svc_common+0xec/0x23c
[  115.967000][ T6039]  do_el0_svc+0x4c/0x5c
[  115.967009][ T6039]  el0_svc+0x64/0x260
[  115.967020][ T6039]  el0t_64_sync_handler+0x44/0x104
[  115.967029][ T6039]  el0t_64_sync+0x198/0x19c
[  116.090449][ T6044] netlink: 'syz.4.319': attribute type 2 has an invalid length.
[  116.100938][ T6052] netlink: 'syz.2.322': attribute type 1 has an invalid length.
[  116.113888][ T6052] __nla_validate_parse: 3 callbacks suppressed
[  116.113902][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.322'.
[  116.120104][ T6052] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  116.122048][ T6052] bond2 (unregistering): Released all slaves
[  116.169636][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.322'.
[  116.296847][ T6078] FAULT_INJECTION: forcing a failure.
[  116.296847][ T6078] name fail_futex, interval 1, probability 0, space 0, times 1
[  116.296871][ T6078] CPU: 1 UID: 0 PID: 6078 Comm: syz.1.329 Tainted: G             L      syzkaller #0 PREEMPT 
[  116.296884][ T6078] Tainted: [L]=SOFTLOCKUP
[  116.296887][ T6078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  116.296893][ T6078] Call trace:
[  116.296896][ T6078]  show_stack+0x2c/0x3c (C)
[  116.296915][ T6078]  __dump_stack+0x30/0x40
[  116.296929][ T6078]  dump_stack_lvl+0xd8/0x12c
[  116.296940][ T6078]  dump_stack+0x1c/0x28
[  116.296951][ T6078]  should_fail_ex+0x41c/0x590
[  116.296965][ T6078]  should_fail+0x14/0x24
[  116.296976][ T6078]  get_futex_key+0x1ec/0x12b0
[  116.296987][ T6078]  futex_wake+0x10c/0x594
[  116.296998][ T6078]  do_futex+0x2c4/0x378
[  116.297008][ T6078]  __arm64_sys_futex+0x2e4/0x418
[  116.297019][ T6078]  invoke_syscall+0x98/0x244
[  116.297031][ T6078]  el0_svc_common+0xec/0x23c
[  116.297043][ T6078]  do_el0_svc+0x4c/0x5c
[  116.297054][ T6078]  el0_svc+0x64/0x260
[  116.297066][ T6078]  el0t_64_sync_handler+0x44/0x104
[  116.297077][ T6078]  el0t_64_sync+0x198/0x19c
[  116.317250][ T6085] binder: 6084:6085 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  116.317267][ T6085] binder: 6085 RLIMIT_NICE not set
[  116.318584][ T6085] overlayfs: failed to resolve 'lower2': -2
[  116.431650][ T6093] warning: `syz.1.335' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  116.478222][ T6106] syzkaller0: entered promiscuous mode
[  116.478236][ T6106] syzkaller0: entered allmulticast mode
[  116.496625][   T30] kauditd_printk_skb: 84 callbacks suppressed
[  116.496636][   T30] audit: type=1326 audit(116.490:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.2.337" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  116.496654][   T30] audit: type=1326 audit(116.490:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.2.337" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  116.496928][   T30] audit: type=1326 audit(116.490:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.2.337" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  116.496944][   T30] audit: type=1326 audit(116.490:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.2.337" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  116.497815][   T30] audit: type=1326 audit(116.490:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.2.337" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=48 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  116.497889][   T30] audit: type=1326 audit(116.490:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.2.337" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  116.498228][   T30] audit: type=1326 audit(116.490:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.2.337" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  116.498252][   T30] audit: type=1326 audit(116.490:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.2.337" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  116.498347][   T30] audit: type=1326 audit(116.490:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.2.337" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  116.498439][   T30] audit: type=1326 audit(116.490:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.2.337" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  116.602149][ T6113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.340'.
[  116.602166][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.340'.
[  116.602185][ T6113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.340'.
[  116.763526][ T5018] IPVS: starting estimator thread 0...
[  116.763655][ T6122] netlink: 72 bytes leftover after parsing attributes in process `syz.3.343'.
[  116.853108][ T6124] IPVS: using max 60 ests per chain, 144000 per kthread
[  116.879348][ T6130] FAULT_INJECTION: forcing a failure.
[  116.879348][ T6130] name failslab, interval 1, probability 0, space 0, times 0
[  116.879368][ T6130] CPU: 0 UID: 0 PID: 6130 Comm: syz.4.345 Tainted: G             L      syzkaller #0 PREEMPT 
[  116.879380][ T6130] Tainted: [L]=SOFTLOCKUP
[  116.879384][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  116.879389][ T6130] Call trace:
[  116.879392][ T6130]  show_stack+0x2c/0x3c (C)
[  116.879411][ T6130]  __dump_stack+0x30/0x40
[  116.879423][ T6130]  dump_stack_lvl+0xd8/0x12c
[  116.879435][ T6130]  dump_stack+0x1c/0x28
[  116.879446][ T6130]  should_fail_ex+0x41c/0x590
[  116.879460][ T6130]  should_failslab+0xc4/0x120
[  116.879473][ T6130]  __kmalloc_cache_node_noprof+0x98/0x618
[  116.879483][ T6130]  alloc_cpumask_var_node+0x90/0x138
[  116.879493][ T6130]  __sched_setaffinity+0xbc/0x360
[  116.879504][ T6130]  sched_setaffinity+0x32c/0x3d8
[  116.879513][ T6130]  __arm64_sys_sched_setaffinity+0x144/0x1c0
[  116.879524][ T6130]  invoke_syscall+0x98/0x244
[  116.879536][ T6130]  el0_svc_common+0xec/0x23c
[  116.879547][ T6130]  do_el0_svc+0x4c/0x5c
[  116.879559][ T6130]  el0_svc+0x64/0x260
[  116.879570][ T6130]  el0t_64_sync_handler+0x44/0x104
[  116.879581][ T6130]  el0t_64_sync+0x198/0x19c
[  116.879591][ T6130] => alloc_cpumask_var: failed!
[  116.879596][ T6130] CPU: 0 UID: 0 PID: 6130 Comm: syz.4.345 Tainted: G             L      syzkaller #0 PREEMPT 
[  116.879606][ T6130] Tainted: [L]=SOFTLOCKUP
[  116.879609][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  116.879613][ T6130] Call trace:
[  116.879615][ T6130]  show_stack+0x2c/0x3c (C)
[  116.879627][ T6130]  __dump_stack+0x30/0x40
[  116.879638][ T6130]  dump_stack_lvl+0xd8/0x12c
[  116.879650][ T6130]  dump_stack+0x1c/0x28
[  116.879661][ T6130]  alloc_cpumask_var_node+0xfc/0x138
[  116.879669][ T6130]  __sched_setaffinity+0xbc/0x360
[  116.879679][ T6130]  sched_setaffinity+0x32c/0x3d8
[  116.879688][ T6130]  __arm64_sys_sched_setaffinity+0x144/0x1c0
[  116.879698][ T6130]  invoke_syscall+0x98/0x244
[  116.879710][ T6130]  el0_svc_common+0xec/0x23c
[  116.879721][ T6130]  do_el0_svc+0x4c/0x5c
[  116.879732][ T6130]  el0_svc+0x64/0x260
[  116.879742][ T6130]  el0t_64_sync_handler+0x44/0x104
[  116.879753][ T6130]  el0t_64_sync+0x198/0x19c
[  117.019658][ T6146] bond2: up delay (2) is not a multiple of miimon (4), value rounded to 0 ms
[  117.019677][ T6146] bond2: option downdelay: invalid value (18446744073709547521)
[  117.019686][ T6146] bond2: option downdelay: allowed values 0 - 2147483647
[  117.020882][ T6146] bond2 (unregistering): Released all slaves
[  117.168061][ T6151] netlink: 44 bytes leftover after parsing attributes in process `syz.0.351'.
[  117.604797][    T9] atkbd serio0: keyboard reset failed on 
[  125.923510][ T1593] ieee802154 phy0 wpan0: encryption failed: -22
[  125.923542][ T1593] ieee802154 phy1 wpan1: encryption failed: -22
[  131.052946][ T4355] block nbd1: Possible stuck request 00000000785cfbf6: control (read@0,4096B). Runtime 30 seconds
[  153.603155][ T4718] Bluetooth: hci0: command 0x0c3a tx timeout
[  153.603194][ T4724] Bluetooth: hci2: command 0x0406 tx timeout
[  155.763861][ T4723] Bluetooth: hci1: command 0x0406 tx timeout
[  161.123107][ T4355] block nbd1: Possible stuck request 00000000785cfbf6: control (read@0,4096B). Runtime 60 seconds
[  161.812334][ T4340] udevd[4340]: worker [4987] /devices/virtual/block/nbd1 is taking a long time
[  187.363440][ T1593] ieee802154 phy0 wpan0: encryption failed: -22
[  187.363485][ T1593] ieee802154 phy1 wpan1: encryption failed: -22
[  191.203096][ T4355] block nbd1: Possible stuck request 00000000785cfbf6: control (read@0,4096B). Runtime 90 seconds
[  195.374944][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'.
[  195.397271][ T6166] bond1: entered promiscuous mode
[  195.398391][ T6166] 8021q: adding VLAN 0 to HW filter on device bond1
[  195.421583][ T6161] bridge0: port 2(bridge_slave_1) entered listening state
[  195.465947][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.474654][ T5017] IPVS: starting estimator thread 0...
[  195.583322][ T6174] IPVS: using max 60 ests per chain, 144000 per kthread
[  195.821870][ T6181] trusted_key: encrypted_key: insufficient parameters specified
[  196.455817][ T6195] FAULT_INJECTION: forcing a failure.
[  196.455817][ T6195] name failslab, interval 1, probability 0, space 0, times 0
[  196.455838][ T6195] CPU: 0 UID: 0 PID: 6195 Comm: syz.3.364 Tainted: G             L      syzkaller #0 PREEMPT 
[  196.455851][ T6195] Tainted: [L]=SOFTLOCKUP
[  196.455855][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  196.455860][ T6195] Call trace:
[  196.455863][ T6195]  show_stack+0x2c/0x3c (C)
[  196.455883][ T6195]  __dump_stack+0x30/0x40
[  196.455897][ T6195]  dump_stack_lvl+0xd8/0x12c
[  196.455909][ T6195]  dump_stack+0x1c/0x28
[  196.455920][ T6195]  should_fail_ex+0x41c/0x590
[  196.455933][ T6195]  should_failslab+0xc4/0x120
[  196.455947][ T6195]  __kmalloc_cache_node_noprof+0x98/0x618
[  196.455956][ T6195]  alloc_cpumask_var_node+0x90/0x138
[  196.455967][ T6195]  __sched_setaffinity+0xbc/0x360
[  196.455977][ T6195]  sched_setaffinity+0x32c/0x3d8
[  196.455987][ T6195]  __arm64_sys_sched_setaffinity+0x144/0x1c0
[  196.455997][ T6195]  invoke_syscall+0x98/0x244
[  196.456010][ T6195]  el0_svc_common+0xec/0x23c
[  196.456021][ T6195]  do_el0_svc+0x4c/0x5c
[  196.456032][ T6195]  el0_svc+0x64/0x260
[  196.456044][ T6195]  el0t_64_sync_handler+0x44/0x104
[  196.456055][ T6195]  el0t_64_sync+0x198/0x19c
[  196.456065][ T6195] => alloc_cpumask_var: failed!
[  196.456070][ T6195] CPU: 0 UID: 0 PID: 6195 Comm: syz.3.364 Tainted: G             L      syzkaller #0 PREEMPT 
[  196.456080][ T6195] Tainted: [L]=SOFTLOCKUP
[  196.456083][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  196.456087][ T6195] Call trace:
[  196.456089][ T6195]  show_stack+0x2c/0x3c (C)
[  196.456101][ T6195]  __dump_stack+0x30/0x40
[  196.456112][ T6195]  dump_stack_lvl+0xd8/0x12c
[  196.456123][ T6195]  dump_stack+0x1c/0x28
[  196.456134][ T6195]  alloc_cpumask_var_node+0xfc/0x138
[  196.456152][ T6195]  __sched_setaffinity+0xbc/0x360
[  196.456161][ T6195]  sched_setaffinity+0x32c/0x3d8
[  196.456174][ T6195]  __arm64_sys_sched_setaffinity+0x144/0x1c0
[  196.456184][ T6195]  invoke_syscall+0x98/0x244
[  196.456195][ T6195]  el0_svc_common+0xec/0x23c
[  196.456207][ T6195]  do_el0_svc+0x4c/0x5c
[  196.456218][ T6195]  el0_svc+0x64/0x260
[  196.456228][ T6195]  el0t_64_sync_handler+0x44/0x104
[  196.456240][ T6195]  el0t_64_sync+0x198/0x19c
[  197.074286][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.368'.
[  197.486974][ T6225] bond2: entered promiscuous mode
[  197.487185][ T6225] 8021q: adding VLAN 0 to HW filter on device bond2
[  197.500696][ T5019] IPVS: starting estimator thread 0...
[  197.530820][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.532327][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.551359][ T6230] FAULT_INJECTION: forcing a failure.
[  197.551359][ T6230] name failslab, interval 1, probability 0, space 0, times 0
[  197.551381][ T6230] CPU: 1 UID: 0 PID: 6230 Comm: syz.3.375 Tainted: G             L      syzkaller #0 PREEMPT 
[  197.551394][ T6230] Tainted: [L]=SOFTLOCKUP
[  197.551398][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  197.551403][ T6230] Call trace:
[  197.551406][ T6230]  show_stack+0x2c/0x3c (C)
[  197.551425][ T6230]  __dump_stack+0x30/0x40
[  197.551438][ T6230]  dump_stack_lvl+0xd8/0x12c
[  197.551450][ T6230]  dump_stack+0x1c/0x28
[  197.551461][ T6230]  should_fail_ex+0x41c/0x590
[  197.551474][ T6230]  should_failslab+0xc4/0x120
[  197.551490][ T6230]  __kmalloc_cache_node_noprof+0x98/0x618
[  197.551499][ T6230]  alloc_cpumask_var_node+0x90/0x138
[  197.551511][ T6230]  __sched_setaffinity+0xbc/0x360
[  197.551521][ T6230]  sched_setaffinity+0x32c/0x3d8
[  197.551531][ T6230]  __arm64_sys_sched_setaffinity+0x144/0x1c0
[  197.551541][ T6230]  invoke_syscall+0x98/0x244
[  197.551554][ T6230]  el0_svc_common+0xec/0x23c
[  197.551565][ T6230]  do_el0_svc+0x4c/0x5c
[  197.551576][ T6230]  el0_svc+0x64/0x260
[  197.551588][ T6230]  el0t_64_sync_handler+0x44/0x104
[  197.551599][ T6230]  el0t_64_sync+0x198/0x19c
[  197.551895][ T6230] => alloc_cpumask_var: failed!
[  197.551905][ T6230] CPU: 1 UID: 0 PID: 6230 Comm: syz.3.375 Tainted: G             L      syzkaller #0 PREEMPT 
[  197.551917][ T6230] Tainted: [L]=SOFTLOCKUP
[  197.551921][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  197.551925][ T6230] Call trace:
[  197.551928][ T6230]  show_stack+0x2c/0x3c (C)
[  197.551941][ T6230]  __dump_stack+0x30/0x40
[  197.551952][ T6230]  dump_stack_lvl+0xd8/0x12c
[  197.551964][ T6230]  dump_stack+0x1c/0x28
[  197.551975][ T6230]  alloc_cpumask_var_node+0xfc/0x138
[  197.551984][ T6230]  __sched_setaffinity+0xbc/0x360
[  197.551993][ T6230]  sched_setaffinity+0x32c/0x3d8
[  197.552002][ T6230]  __arm64_sys_sched_setaffinity+0x144/0x1c0
[  197.552012][ T6230]  invoke_syscall+0x98/0x244
[  197.552023][ T6230]  el0_svc_common+0xec/0x23c
[  197.552035][ T6230]  do_el0_svc+0x4c/0x5c
[  197.552046][ T6230]  el0_svc+0x64/0x260
[  197.552056][ T6230]  el0t_64_sync_handler+0x44/0x104
[  197.552067][ T6230]  el0t_64_sync+0x198/0x19c
[  197.599358][ T6231] IPVS: using max 56 ests per chain, 134400 per kthread
[  197.989626][ T6246] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  197.989645][ T6246] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  198.088532][ T6253] netlink: 'syz.0.381': attribute type 26 has an invalid length.
[  198.089463][ T6253] tmpfs: Bad value for 'mpol'
[  199.361752][ T6290] netlink: 'syz.1.388': attribute type 3 has an invalid length.
[  199.550662][ T6297] overlayfs: failed lookup in lower (newroot/90, name='file0', err=-40): overlapping layers
[  199.558421][ T6297] overlayfs: failed lookup in lower (newroot/90, name='file0', err=-40): overlapping layers
[  199.561558][ T6297] overlayfs: failed lookup in lower (newroot/90, name='file0', err=-40): overlapping layers
[  199.562569][ T6297] overlayfs: failed lookup in lower (newroot/90, name='file0', err=-40): overlapping layers
[  199.701705][ T6312] FAULT_INJECTION: forcing a failure.
[  199.701705][ T6312] name failslab, interval 1, probability 0, space 0, times 0
[  199.701732][ T6312] CPU: 0 UID: 0 PID: 6312 Comm: syz.0.394 Tainted: G             L      syzkaller #0 PREEMPT 
[  199.701751][ T6312] Tainted: [L]=SOFTLOCKUP
[  199.701755][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  199.701761][ T6312] Call trace:
[  199.701764][ T6312]  show_stack+0x2c/0x3c (C)
[  199.701786][ T6312]  __dump_stack+0x30/0x40
[  199.701799][ T6312]  dump_stack_lvl+0xd8/0x12c
[  199.701811][ T6312]  dump_stack+0x1c/0x28
[  199.701822][ T6312]  should_fail_ex+0x41c/0x590
[  199.701835][ T6312]  should_failslab+0xc4/0x120
[  199.701848][ T6312]  __kmalloc_cache_node_noprof+0x98/0x618
[  199.701858][ T6312]  alloc_cpumask_var_node+0x90/0x138
[  199.701869][ T6312]  __arm64_sys_sched_setaffinity+0xe0/0x1c0
[  199.701880][ T6312]  invoke_syscall+0x98/0x244
[  199.701892][ T6312]  el0_svc_common+0xec/0x23c
[  199.701903][ T6312]  do_el0_svc+0x4c/0x5c
[  199.701914][ T6312]  el0_svc+0x64/0x260
[  199.701925][ T6312]  el0t_64_sync_handler+0x44/0x104
[  199.701936][ T6312]  el0t_64_sync+0x198/0x19c
[  199.701946][ T6312] => alloc_cpumask_var: failed!
[  199.701951][ T6312] CPU: 0 UID: 0 PID: 6312 Comm: syz.0.394 Tainted: G             L      syzkaller #0 PREEMPT 
[  199.701962][ T6312] Tainted: [L]=SOFTLOCKUP
[  199.701964][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  199.701969][ T6312] Call trace:
[  199.701971][ T6312]  show_stack+0x2c/0x3c (C)
[  199.701983][ T6312]  __dump_stack+0x30/0x40
[  199.701994][ T6312]  dump_stack_lvl+0xd8/0x12c
[  199.702006][ T6312]  dump_stack+0x1c/0x28
[  199.702017][ T6312]  alloc_cpumask_var_node+0xfc/0x138
[  199.702026][ T6312]  __arm64_sys_sched_setaffinity+0xe0/0x1c0
[  199.702037][ T6312]  invoke_syscall+0x98/0x244
[  199.702048][ T6312]  el0_svc_common+0xec/0x23c
[  199.702060][ T6312]  do_el0_svc+0x4c/0x5c
[  199.702071][ T6312]  el0_svc+0x64/0x260
[  199.702082][ T6312]  el0t_64_sync_handler+0x44/0x104
[  199.702093][ T6312]  el0t_64_sync+0x198/0x19c
[  200.120227][ T6352] netlink: 'syz.1.406': attribute type 1 has an invalid length.
[  200.120244][ T6352] netlink: 228 bytes leftover after parsing attributes in process `syz.1.406'.
[  201.588200][ T6384] vhci_hcd vhci_hcd.1: default hub control req: c007 v2000 i0000 l0
[  201.675209][ T6394] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  201.675227][ T6394] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  201.675318][ T6394] vhci_hcd vhci_hcd.0: Device attached
[  201.688511][ T6394] FAULT_INJECTION: forcing a failure.
[  201.688511][ T6394] name fail_futex, interval 1, probability 0, space 0, times 0
[  201.688531][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.3.413 Tainted: G             L      syzkaller #0 PREEMPT 
[  201.688547][ T6394] Tainted: [L]=SOFTLOCKUP
[  201.688551][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  201.688557][ T6394] Call trace:
[  201.688560][ T6394]  show_stack+0x2c/0x3c (C)
[  201.688580][ T6394]  __dump_stack+0x30/0x40
[  201.688595][ T6394]  dump_stack_lvl+0xd8/0x12c
[  201.688606][ T6394]  dump_stack+0x1c/0x28
[  201.688617][ T6394]  should_fail_ex+0x41c/0x590
[  201.688631][ T6394]  should_fail+0x14/0x24
[  201.688642][ T6394]  get_futex_key+0x1ec/0x12b0
[  201.688654][ T6394]  futex_wait_setup+0x58/0x674
[  201.688665][ T6394]  __futex_wait+0x108/0x25c
[  201.688676][ T6394]  futex_wait+0x108/0x2c0
[  201.688687][ T6394]  do_futex+0x320/0x378
[  201.688697][ T6394]  __arm64_sys_futex+0x2e4/0x418
[  201.688708][ T6394]  invoke_syscall+0x98/0x244
[  201.688720][ T6394]  el0_svc_common+0xec/0x23c
[  201.688732][ T6394]  do_el0_svc+0x4c/0x5c
[  201.688743][ T6394]  el0_svc+0x64/0x260
[  201.688755][ T6394]  el0t_64_sync_handler+0x44/0x104
[  201.688766][ T6394]  el0t_64_sync+0x198/0x19c
[  201.850097][ T6397] vhci_hcd: cannot find a urb of seqnum 254 max seqnum 0
[  201.852471][ T5020] vhci_hcd vhci_hcd.3: stop threads
[  201.852484][ T5020] vhci_hcd vhci_hcd.3: release socket
[  201.862947][ T5020] vhci_hcd vhci_hcd.3: disconnect device
[  202.810394][ T4813] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  203.274865][ T6438] loop9: detected capacity change from 0 to 524287997
[  203.701256][ T6448] FAULT_INJECTION: forcing a failure.
[  203.701256][ T6448] name failslab, interval 1, probability 0, space 0, times 0
[  203.701279][ T6448] CPU: 1 UID: 0 PID: 6448 Comm: syz.3.426 Tainted: G             L      syzkaller #0 PREEMPT 
[  203.701292][ T6448] Tainted: [L]=SOFTLOCKUP
[  203.701296][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  203.701301][ T6448] Call trace:
[  203.701303][ T6448]  show_stack+0x2c/0x3c (C)
[  203.701320][ T6448]  __dump_stack+0x30/0x40
[  203.701331][ T6448]  dump_stack_lvl+0xd8/0x12c
[  203.701340][ T6448]  dump_stack+0x1c/0x28
[  203.701351][ T6448]  should_fail_ex+0x41c/0x590
[  203.701363][ T6448]  should_failslab+0xc4/0x120
[  203.701374][ T6448]  __kmalloc_noprof+0x108/0x6c8
[  203.701382][ T6448]  tomoyo_encode2+0x10c/0x330
[  203.701392][ T6448]  tomoyo_encode+0x34/0x50
[  203.701401][ T6448]  tomoyo_realpath_from_path+0x488/0x4dc
[  203.701410][ T6448]  tomoyo_check_open_permission+0x1c4/0x394
[  203.701419][ T6448]  tomoyo_file_open+0x78/0xcc
[  203.701428][ T6448]  security_file_open+0xbc/0x258
[  203.701437][ T6448]  do_dentry_open+0x2a8/0xfc0
[  203.701446][ T6448]  vfs_open+0x44/0x2dc
[  203.701455][ T6448]  path_openat+0x1084/0x18f4
[  203.701464][ T6448]  do_file_open+0x1c8/0x2e8
[  203.701472][ T6448]  do_sys_openat2+0x114/0x1e8
[  203.701481][ T6448]  do_sys_open+0xb0/0xe0
[  203.701490][ T6448]  __arm64_sys_openat+0xa8/0xc4
[  203.701500][ T6448]  invoke_syscall+0x98/0x244
[  203.701510][ T6448]  el0_svc_common+0xec/0x23c
[  203.701519][ T6448]  do_el0_svc+0x4c/0x5c
[  203.701528][ T6448]  el0_svc+0x64/0x260
[  203.701538][ T6448]  el0t_64_sync_handler+0x44/0x104
[  203.701547][ T6448]  el0t_64_sync+0x198/0x19c
[  203.702102][ T6448] ERROR: Out of memory at tomoyo_realpath_from_path.
[  204.694465][ T6469] netlink: 'syz.4.431': attribute type 21 has an invalid length.
[  204.694483][ T6469] IPv6: NLM_F_CREATE should be specified when creating new route
[  204.694608][ T6469] IPv6: Can't replace route, no match found
[  204.727775][ T6469] overlayfs: conflicting lowerdir path
[  204.922943][ T6485] netlink: 'syz.3.435': attribute type 21 has an invalid length.
[  204.922958][ T6485] netlink: 128 bytes leftover after parsing attributes in process `syz.3.435'.
[  204.922984][ T6485] netlink: 3 bytes leftover after parsing attributes in process `syz.3.435'.
[  205.291400][ T6499] trusted_key: encrypted_key: insufficient parameters specified
[  205.400905][ T6503] FAULT_INJECTION: forcing a failure.
[  205.400905][ T6503] name failslab, interval 1, probability 0, space 0, times 0
[  205.400933][ T6503] CPU: 1 UID: 0 PID: 6503 Comm: syz.0.438 Tainted: G             L      syzkaller #0 PREEMPT 
[  205.400948][ T6503] Tainted: [L]=SOFTLOCKUP
[  205.400952][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  205.400957][ T6503] Call trace:
[  205.400960][ T6503]  show_stack+0x2c/0x3c (C)
[  205.400979][ T6503]  __dump_stack+0x30/0x40
[  205.400992][ T6503]  dump_stack_lvl+0xd8/0x12c
[  205.401004][ T6503]  dump_stack+0x1c/0x28
[  205.401015][ T6503]  should_fail_ex+0x41c/0x590
[  205.401029][ T6503]  should_failslab+0xc4/0x120
[  205.401042][ T6503]  __kmalloc_cache_node_noprof+0x98/0x618
[  205.401052][ T6503]  alloc_cpumask_var_node+0x90/0x138
[  205.401063][ T6503]  __sched_setaffinity+0xbc/0x360
[  205.401073][ T6503]  sched_setaffinity+0x32c/0x3d8
[  205.401083][ T6503]  __arm64_sys_sched_setaffinity+0x144/0x1c0
[  205.401093][ T6503]  invoke_syscall+0x98/0x244
[  205.401105][ T6503]  el0_svc_common+0xec/0x23c
[  205.401117][ T6503]  do_el0_svc+0x4c/0x5c
[  205.401128][ T6503]  el0_svc+0x64/0x260
[  205.401139][ T6503]  el0t_64_sync_handler+0x44/0x104
[  205.401151][ T6503]  el0t_64_sync+0x198/0x19c
[  205.401164][ T6503] => alloc_cpumask_var: failed!
[  205.401170][ T6503] CPU: 1 UID: 0 PID: 6503 Comm: syz.0.438 Tainted: G             L      syzkaller #0 PREEMPT 
[  205.401181][ T6503] Tainted: [L]=SOFTLOCKUP
[  205.401184][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  205.401188][ T6503] Call trace:
[  205.401190][ T6503]  show_stack+0x2c/0x3c (C)
[  205.401202][ T6503]  __dump_stack+0x30/0x40
[  205.401213][ T6503]  dump_stack_lvl+0xd8/0x12c
[  205.401224][ T6503]  dump_stack+0x1c/0x28
[  205.401235][ T6503]  alloc_cpumask_var_node+0xfc/0x138
[  205.401244][ T6503]  __sched_setaffinity+0xbc/0x360
[  205.401253][ T6503]  sched_setaffinity+0x32c/0x3d8
[  205.401263][ T6503]  __arm64_sys_sched_setaffinity+0x144/0x1c0
[  205.401273][ T6503]  invoke_syscall+0x98/0x244
[  205.401284][ T6503]  el0_svc_common+0xec/0x23c
[  205.401295][ T6503]  do_el0_svc+0x4c/0x5c
[  205.401306][ T6503]  el0_svc+0x64/0x260
[  205.401317][ T6503]  el0t_64_sync_handler+0x44/0x104
[  205.401328][ T6503]  el0t_64_sync+0x198/0x19c
[  205.868133][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'.
[  205.868160][ T6521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.445'.
[  206.117751][ T6528] overlayfs: missing 'lowerdir'
[  206.334754][ T4724] Bluetooth: hci0: command 0x0c3a tx timeout
[  206.756410][ T6530] FAULT_INJECTION: forcing a failure.
[  206.756410][ T6530] name failslab, interval 1, probability 0, space 0, times 0
[  206.756434][ T6530] CPU: 0 UID: 0 PID: 6530 Comm: syz.4.449 Tainted: G             L      syzkaller #0 PREEMPT 
[  206.756449][ T6530] Tainted: [L]=SOFTLOCKUP
[  206.756452][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  206.756458][ T6530] Call trace:
[  206.756461][ T6530]  show_stack+0x2c/0x3c (C)
[  206.756479][ T6530]  __dump_stack+0x30/0x40
[  206.756492][ T6530]  dump_stack_lvl+0xd8/0x12c
[  206.756503][ T6530]  dump_stack+0x1c/0x28
[  206.756514][ T6530]  should_fail_ex+0x41c/0x590
[  206.756528][ T6530]  should_failslab+0xc4/0x120
[  206.756542][ T6530]  __kmalloc_cache_noprof+0x94/0x5fc
[  206.756551][ T6530]  proc_self_get_link+0xe4/0x17c
[  206.756565][ T6530]  pick_link+0x5cc/0xcf4
[  206.756576][ T6530]  step_into_slowpath+0x468/0x670
[  206.756588][ T6530]  link_path_walk+0xb34/0x1584
[  206.756599][ T6530]  path_openat+0x160/0x18f4
[  206.756609][ T6530]  do_file_open+0x1c8/0x2e8
[  206.756619][ T6530]  do_sys_openat2+0x114/0x1e8
[  206.756631][ T6530]  do_sys_open+0xb0/0xe0
[  206.756642][ T6530]  __arm64_sys_openat+0xa8/0xc4
[  206.756654][ T6530]  invoke_syscall+0x98/0x244
[  206.756666][ T6530]  el0_svc_common+0xec/0x23c
[  206.756678][ T6530]  do_el0_svc+0x4c/0x5c
[  206.756689][ T6530]  el0_svc+0x64/0x260
[  206.756701][ T6530]  el0t_64_sync_handler+0x44/0x104
[  206.756712][ T6530]  el0t_64_sync+0x198/0x19c
[  206.842264][ T6534] bond2: entered promiscuous mode
[  206.847566][ T6534] 8021q: adding VLAN 0 to HW filter on device bond2
[  207.010219][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'.
[  207.020576][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'.
[  207.040524][ T6558] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  207.042183][ T6558] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  207.064777][ T6561] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  207.098147][ T6561] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  207.205073][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'.
[  207.216637][ T6561] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  207.224274][ T6561] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  207.298122][ T6588] batadv_slave_0: entered promiscuous mode
[  207.300758][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'.
[  207.313663][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'.
[  207.349359][ T6561] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  207.351820][ T6561] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  207.368700][ T6586] batadv_slave_0: left promiscuous mode
[  207.413303][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'.
[  207.415188][ T6561] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  207.415886][ T6561] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  207.455265][ T6561] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  207.458858][ T6561] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  207.496351][ T6561] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  207.496985][ T6561] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  207.536006][ T6561] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  207.536564][ T6561] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  207.575501][ T6561] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  207.575980][ T6561] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  207.814271][ T6561] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  207.815231][ T6561] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  208.011457][ T6604] ip6erspan0: entered allmulticast mode
[  208.191865][ T6621] FAULT_INJECTION: forcing a failure.
[  208.191865][ T6621] name failslab, interval 1, probability 0, space 0, times 0
[  208.191885][ T6621] CPU: 0 UID: 0 PID: 6621 Comm: syz.4.461 Tainted: G             L      syzkaller #0 PREEMPT 
[  208.191898][ T6621] Tainted: [L]=SOFTLOCKUP
[  208.191901][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  208.191906][ T6621] Call trace:
[  208.191909][ T6621]  show_stack+0x2c/0x3c (C)
[  208.191928][ T6621]  __dump_stack+0x30/0x40
[  208.191940][ T6621]  dump_stack_lvl+0xd8/0x12c
[  208.191952][ T6621]  dump_stack+0x1c/0x28
[  208.191963][ T6621]  should_fail_ex+0x41c/0x590
[  208.191976][ T6621]  should_failslab+0xc4/0x120
[  208.191989][ T6621]  kmem_cache_alloc_noprof+0x94/0x5d4
[  208.191998][ T6621]  alloc_empty_file+0x6c/0x1cc
[  208.192007][ T6621]  path_openat+0x78/0x18f4
[  208.192018][ T6621]  do_file_open+0x1c8/0x2e8
[  208.192028][ T6621]  do_sys_openat2+0x114/0x1e8
[  208.192039][ T6621]  do_sys_open+0xb0/0xe0
[  208.192050][ T6621]  __arm64_sys_openat+0xa8/0xc4
[  208.192062][ T6621]  invoke_syscall+0x98/0x244
[  208.192074][ T6621]  el0_svc_common+0xec/0x23c
[  208.192090][ T6621]  do_el0_svc+0x4c/0x5c
[  208.192101][ T6621]  el0_svc+0x64/0x260
[  208.192114][ T6621]  el0t_64_sync_handler+0x44/0x104
[  208.192125][ T6621]  el0t_64_sync+0x198/0x19c
[  208.459543][ T6634] device-mapper: ioctl: name not supplied when creating device
[  208.511324][ T6635] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(809004142.3223858.0), cmd(12)
[  209.946476][ T6560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  210.093749][ T6650] __nla_validate_parse: 5 callbacks suppressed
[  210.093763][ T6650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.469'.
[  210.192712][ T6667] netlink: 156 bytes leftover after parsing attributes in process `syz.0.476'.
[  210.232512][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'.
[  210.522630][ T6690] netlink: 'syz.1.481': attribute type 3 has an invalid length.
[  210.534248][ T6690] ucma_write: process 285 (syz.1.481) changed security contexts after opening file descriptor, this is not allowed.
[  210.942684][ T6714] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[  211.094141][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'.
[  211.141290][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'.
[  211.403537][ T6740] FAULT_INJECTION: forcing a failure.
[  211.403537][ T6740] name failslab, interval 1, probability 0, space 0, times 0
[  211.403564][ T6740] CPU: 0 UID: 0 PID: 6740 Comm: syz.2.496 Tainted: G             L      syzkaller #0 PREEMPT 
[  211.403578][ T6740] Tainted: [L]=SOFTLOCKUP
[  211.403582][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  211.403587][ T6740] Call trace:
[  211.403591][ T6740]  show_stack+0x2c/0x3c (C)
[  211.403610][ T6740]  __dump_stack+0x30/0x40
[  211.403624][ T6740]  dump_stack_lvl+0xd8/0x12c
[  211.403635][ T6740]  dump_stack+0x1c/0x28
[  211.403647][ T6740]  should_fail_ex+0x41c/0x590
[  211.403661][ T6740]  should_failslab+0xc4/0x120
[  211.403675][ T6740]  __kmalloc_cache_node_noprof+0x98/0x618
[  211.403684][ T6740]  alloc_cpumask_var_node+0x90/0x138
[  211.403695][ T6740]  __sched_setaffinity+0xbc/0x360
[  211.403709][ T6740]  sched_setaffinity+0x32c/0x3d8
[  211.403719][ T6740]  __arm64_sys_sched_setaffinity+0x144/0x1c0
[  211.403729][ T6740]  invoke_syscall+0x98/0x244
[  211.403741][ T6740]  el0_svc_common+0xec/0x23c
[  211.403753][ T6740]  do_el0_svc+0x4c/0x5c
[  211.403764][ T6740]  el0_svc+0x64/0x260
[  211.403776][ T6740]  el0t_64_sync_handler+0x44/0x104
[  211.403787][ T6740]  el0t_64_sync+0x198/0x19c
[  211.407192][ T6740] => alloc_cpumask_var: failed!
[  211.407204][ T6740] CPU: 0 UID: 0 PID: 6740 Comm: syz.2.496 Tainted: G             L      syzkaller #0 PREEMPT 
[  211.407224][ T6740] Tainted: [L]=SOFTLOCKUP
[  211.407228][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  211.407234][ T6740] Call trace:
[  211.407238][ T6740]  show_stack+0x2c/0x3c (C)
[  211.407253][ T6740]  __dump_stack+0x30/0x40
[  211.407265][ T6740]  dump_stack_lvl+0xd8/0x12c
[  211.407277][ T6740]  dump_stack+0x1c/0x28
[  211.407288][ T6740]  alloc_cpumask_var_node+0xfc/0x138
[  211.407298][ T6740]  __sched_setaffinity+0xbc/0x360
[  211.407308][ T6740]  sched_setaffinity+0x32c/0x3d8
[  211.407317][ T6740]  __arm64_sys_sched_setaffinity+0x144/0x1c0
[  211.407327][ T6740]  invoke_syscall+0x98/0x244
[  211.407339][ T6740]  el0_svc_common+0xec/0x23c
[  211.407350][ T6740]  do_el0_svc+0x4c/0x5c
[  211.407361][ T6740]  el0_svc+0x64/0x260
[  211.407371][ T6740]  el0t_64_sync_handler+0x44/0x104
[  211.407383][ T6740]  el0t_64_sync+0x198/0x19c
[  212.627655][ T6765] Injecting memory failure for pfn 0x121772 at process virtual address 0x20001000
[  212.660947][ T6765] Memory failure: 0x121772: recovery action for clean LRU page: Recovered
[  212.660966][ T6765] Injecting memory failure for pfn 0x139f56 at process virtual address 0x20002000
[  212.661032][ T6765] Memory failure: 0x139f56: recovery action for clean LRU page: Recovered
[  212.661042][ T6765] Injecting memory failure for pfn 0x13db48 at process virtual address 0x20003000
[  212.661079][ T6765] Memory failure: 0x13db48: recovery action for clean LRU page: Recovered
[  212.765180][ T6773] netlink: 36 bytes leftover after parsing attributes in process `syz.2.504'.
[  212.765198][ T6773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.504'.
[  212.765208][ T6773] netlink: 36 bytes leftover after parsing attributes in process `syz.2.504'.
[  212.954684][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'.
[  213.268483][ T6790] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6)
[  213.268571][ T6789] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6)
[  213.418939][ T6802] syzkaller0: entered promiscuous mode
[  213.418956][ T6802] syzkaller0: entered allmulticast mode
[  213.584787][ T6815] FAULT_INJECTION: forcing a failure.
[  213.584787][ T6815] name fail_futex, interval 1, probability 0, space 0, times 0
[  213.584815][ T6815] CPU: 0 UID: 0 PID: 6815 Comm: syz.2.511 Tainted: G             L      syzkaller #0 PREEMPT 
[  213.584828][ T6815] Tainted: [L]=SOFTLOCKUP
[  213.584831][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  213.584836][ T6815] Call trace:
[  213.584839][ T6815]  show_stack+0x2c/0x3c (C)
[  213.584856][ T6815]  __dump_stack+0x30/0x40
[  213.584868][ T6815]  dump_stack_lvl+0xd8/0x12c
[  213.584877][ T6815]  dump_stack+0x1c/0x28
[  213.584886][ T6815]  should_fail_ex+0x41c/0x590
[  213.584898][ T6815]  should_fail+0x14/0x24
[  213.584907][ T6815]  get_futex_key+0x1ec/0x12b0
[  213.584918][ T6815]  futex_wake+0x10c/0x594
[  213.584927][ T6815]  do_futex+0x2c4/0x378
[  213.584935][ T6815]  __arm64_sys_futex+0x2e4/0x418
[  213.584944][ T6815]  invoke_syscall+0x98/0x244
[  213.584954][ T6815]  el0_svc_common+0xec/0x23c
[  213.584963][ T6815]  do_el0_svc+0x4c/0x5c
[  213.584972][ T6815]  el0_svc+0x64/0x260
[  213.584983][ T6815]  el0t_64_sync_handler+0x44/0x104
[  213.584992][ T6815]  el0t_64_sync+0x198/0x19c
[  213.656013][ T6811] bond0: option slaves: interface -Vet does not exist!
[  213.743140][ T6828] net_ratelimit: 56 callbacks suppressed
[  213.743160][ T6828] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  213.885246][ T6828] netlink: 32 bytes leftover after parsing attributes in process `syz.2.514'.
[  214.230439][ T6853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.230937][ T6853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.248075][ T6854] devpts: Unknown parameter ''
[  214.249533][ T6854] fuse: Bad value for 'fd'
[  214.286633][   T30] kauditd_printk_skb: 158 callbacks suppressed
[  214.286643][   T30] audit: type=1326 audit(214.280:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6844 comm="syz.4.518" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  214.287114][   T30] audit: type=1326 audit(214.280:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6844 comm="syz.4.518" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffb5b5c22c code=0x7ffc0000
[  214.290208][   T30] audit: type=1326 audit(214.280:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6844 comm="syz.4.518" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffffb5b5c22c code=0x7ffc0000
[  214.290314][   T30] audit: type=1326 audit(214.280:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6844 comm="syz.4.518" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffffb5b5c22c code=0x7ffc0000
[  214.291823][   T30] audit: type=1326 audit(214.280:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6844 comm="syz.4.518" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  214.292034][   T30] audit: type=1326 audit(214.280:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6844 comm="syz.4.518" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  214.292177][   T30] audit: type=1326 audit(214.280:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6844 comm="syz.4.518" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  214.293821][   T30] audit: type=1326 audit(214.290:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6844 comm="syz.4.518" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  214.293997][   T30] audit: type=1326 audit(214.290:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6844 comm="syz.4.518" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  214.295078][   T30] audit: type=1326 audit(214.290:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6844 comm="syz.4.518" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  214.320228][ T6858] Injecting memory failure for pfn 0x13b980 at process virtual address 0x20001000
[  214.343765][ T6858] Memory failure: 0x13b980: Sending SIGBUS to syz.0.521:6858 due to hardware memory corruption
[  214.343829][ T6858] Memory failure: 0x13b980: recovery action for dirty LRU page: Recovered
[  214.343849][ T6858] Injecting memory failure for pfn 0x21910f at process virtual address 0x20002000
[  214.343859][ T6858] Memory failure: 0x21910f: unhandlable page.
[  214.343865][ T6858] Memory failure: 0x21910f: recovery action for reserved kernel page: Ignored
[  214.745375][ T4724] Bluetooth: hci1: Unexpected cc 0x0000 with no status
[  214.857861][ T6886] netlink: 'syz.2.525': attribute type 13 has an invalid length.
[  215.489026][ T6903] FAULT_INJECTION: forcing a failure.
[  215.489026][ T6903] name failslab, interval 1, probability 0, space 0, times 0
[  215.489045][ T6903] CPU: 0 UID: 0 PID: 6903 Comm: syz.1.529 Tainted: G             L      syzkaller #0 PREEMPT 
[  215.489060][ T6903] Tainted: [L]=SOFTLOCKUP
[  215.489064][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  215.489076][ T6903] Call trace:
[  215.489079][ T6903]  show_stack+0x2c/0x3c (C)
[  215.489098][ T6903]  __dump_stack+0x30/0x40
[  215.489111][ T6903]  dump_stack_lvl+0xd8/0x12c
[  215.489122][ T6903]  dump_stack+0x1c/0x28
[  215.489133][ T6903]  should_fail_ex+0x41c/0x590
[  215.489151][ T6903]  should_failslab+0xc4/0x120
[  215.489164][ T6903]  __kvmalloc_node_noprof+0x160/0x7fc
[  215.489174][ T6903]  io_alloc_cache_init+0x48/0x154
[  215.489186][ T6903]  io_ring_ctx_alloc+0x3b0/0x958
[  215.489196][ T6903]  io_uring_create+0x6c/0x830
[  215.489206][ T6903]  __arm64_sys_io_uring_setup+0x284/0x290
[  215.489216][ T6903]  invoke_syscall+0x98/0x244
[  215.489228][ T6903]  el0_svc_common+0xec/0x23c
[  215.489240][ T6903]  do_el0_svc+0x4c/0x5c
[  215.489251][ T6903]  el0_svc+0x64/0x260
[  215.489262][ T6903]  el0t_64_sync_handler+0x44/0x104
[  215.489274][ T6903]  el0t_64_sync+0x198/0x19c
[  216.113880][ T6940] trusted_key: encrypted_key: insufficient parameters specified
[  216.406201][ T6956] IPv6: NLM_F_CREATE should be specified when creating new route
[  217.271544][ T6990] ipvlan2: entered allmulticast mode
[  217.271561][ T6990] virt_wifi0: entered allmulticast mode
[  217.277990][ T6990] batman_adv: batadv0: Adding interface: ipvlan2
[  217.277998][ T6990] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.278018][ T6990] batman_adv: batadv0: Interface activated: ipvlan2
[  217.370439][ T6994] trusted_key: encrypted_key: insufficient parameters specified
[  218.882917][    C0] net_ratelimit: 75 callbacks suppressed
[  220.160898][ T7007] __nla_validate_parse: 24 callbacks suppressed
[  220.160919][ T7007] netlink: 64 bytes leftover after parsing attributes in process `syz.4.556'.
[  220.160940][ T7007] netlink: 64 bytes leftover after parsing attributes in process `syz.4.556'.
[  220.316153][ T7011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.558'.
[  220.316172][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.558'.
[  220.454241][ T7025] input: syz1 as /devices/virtual/input/input9
[  220.454256][ T7025] input: failed to attach handler leds to device input9, error: -6
[  220.578060][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'.
[  220.640991][ T7036] netlink: 72 bytes leftover after parsing attributes in process `syz.4.562'.
[  220.687644][ T7040] FAULT_INJECTION: forcing a failure.
[  220.687644][ T7040] name fail_futex, interval 1, probability 0, space 0, times 0
[  220.687664][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.0.564 Tainted: G             L      syzkaller #0 PREEMPT 
[  220.687676][ T7040] Tainted: [L]=SOFTLOCKUP
[  220.687680][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  220.687693][ T7040] Call trace:
[  220.687696][ T7040]  show_stack+0x2c/0x3c (C)
[  220.687716][ T7040]  __dump_stack+0x30/0x40
[  220.687729][ T7040]  dump_stack_lvl+0xd8/0x12c
[  220.687741][ T7040]  dump_stack+0x1c/0x28
[  220.687752][ T7040]  should_fail_ex+0x41c/0x590
[  220.687766][ T7040]  should_fail+0x14/0x24
[  220.687778][ T7040]  get_futex_key+0x1ec/0x12b0
[  220.687789][ T7040]  futex_wait_multiple_setup+0x144/0x758
[  220.687801][ T7040]  futex_wait_multiple+0xa4/0x33c
[  220.687813][ T7040]  __arm64_sys_futex_waitv+0x2ac/0x2dc
[  220.687825][ T7040]  invoke_syscall+0x98/0x244
[  220.687837][ T7040]  el0_svc_common+0xec/0x23c
[  220.687849][ T7040]  do_el0_svc+0x4c/0x5c
[  220.687860][ T7040]  el0_svc+0x64/0x260
[  220.687873][ T7040]  el0t_64_sync_handler+0x44/0x104
[  220.687884][ T7040]  el0t_64_sync+0x198/0x19c
[  221.286873][ T4355] block nbd1: Possible stuck request 00000000785cfbf6: control (read@0,4096B). Runtime 120 seconds
[  221.949632][ T7077] netlink: 'syz.3.570': attribute type 1 has an invalid length.
[  222.021710][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'.
[  222.046123][ T7077] 8021q: adding VLAN 0 to HW filter on device bond1
[  222.170967][ T7077] bond1: (slave veth3): Enslaving as an active interface with a down link
[  222.328036][ T7091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.571'.
[  222.397022][ T7086] trusted_key: syz.4.571 sent an empty control message without MSG_MORE.
[  222.748557][ T7117] 9pnet_fd: p9_fd_create_unix (7117): problem connecting socket: ./file0: -5
[  222.758222][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.577'.
[  222.759223][ T7097] 9p: Bad value for 'rfdno'
[  223.010873][ T7132] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  223.242337][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'.
[  223.856607][ T7160] binfmt_misc: register: failed to install interpreter ./file0
[  224.082898][    C1] net_ratelimit: 44 callbacks suppressed
[  224.265910][ T7168] usb usb9: usbfs: process 7168 (syz.0.588) did not claim interface 0 before use
[  227.040374][ T7230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.605'.
[  227.040384][ T7230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.605'.
[  227.040391][ T7230] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22)
[  227.040398][ T7230] iwpm_hello_cb: Unable to parse nlmsg
[  227.124462][ T7237] tmpfs: Bad value for 'mpol'
[  228.384651][ T7285] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0)
[  228.384795][ T7285] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  229.044812][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'.
[  229.202976][ T7299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.217636][ T4829] net_ratelimit: 770 callbacks suppressed
[  229.412800][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  229.412812][   T30] audit: type=1400 audit(229.400:285): lsm=SMACK fn=smack_inode_removexattr action=denied subject="_" object="lowerdir" requested=w pid=7309 comm="syz.3.629" name="file1" dev="tmpfs" ino=818
[  229.423037][   T30] audit: type=1400 audit(229.410:286): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowerdir" requested=x pid=7309 comm="syz.3.629" name="file1" dev="tmpfs" ino=818
[  229.427471][ T7310] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only
[  229.427493][ T7310] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  229.427610][ T7310] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  229.729876][ T5021] IPVS: starting estimator thread 0...
[  229.813450][ T7318] IPVS: using max 60 ests per chain, 144000 per kthread
[  230.223518][ T7316] tipc: Started in network mode
[  230.223533][ T7316] tipc: Node identity 1a3cfd384934, cluster identity 4711
[  230.223731][ T7316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.227848][ T7316] syzkaller0: entered promiscuous mode
[  230.227956][ T7316] syzkaller0: entered allmulticast mode
[  230.248626][ T7326] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.270912][ T7316] tipc: Resetting bearer <eth:syzkaller0>
[  230.352304][ T7331] Cannot find set identified by id 3 to match
[  230.399381][ T7315] tipc: Resetting bearer <eth:syzkaller0>
[  230.410203][ T7315] tipc: Disabling bearer <eth:syzkaller0>
[  230.582432][ T7337] xt_cgroup: invalid path, errno=-2
[  230.701496][ T4723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  230.702752][ T4723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  230.706996][ T4723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  230.709359][ T4723] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  230.710281][ T4723] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  230.869459][ T6904] team0: Port device syz_tun removed
[  231.039597][ T7360] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.641'.
[  231.381947][ T7343] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.393093][ T7343] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.393266][ T7343] bridge_slave_0: entered allmulticast mode
[  231.394182][ T7343] bridge_slave_0: entered promiscuous mode
[  231.398209][ T7343] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.398438][ T7343] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.398600][ T7343] bridge_slave_1: entered allmulticast mode
[  231.399490][ T7343] bridge_slave_1: entered promiscuous mode
[  231.446137][ T7371] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  231.446207][ T7371] xt_cluster: node mask cannot exceed total number of nodes
[  231.446385][ T7343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.450917][ T7343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.505782][ T7343] team0: Port device team_slave_0 added
[  231.509590][ T7343] team0: Port device team_slave_1 added
[  231.578733][ T7377] input: syz1 as /devices/virtual/input/input11
[  231.644229][ T7343] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.644236][ T7343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  231.644251][ T7343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.646046][ T7343] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.646053][ T7343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  231.646069][ T7343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.812089][ T7343] hsr_slave_0: entered promiscuous mode
[  231.815800][ T7343] hsr_slave_1: entered promiscuous mode
[  231.816664][ T7343] debugfs: 'hsr0' already exists in 'hsr'
[  231.816676][ T7343] Cannot create hsr debugfs directory
[  231.895360][ T7379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.895624][ T7379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.141488][ T7343] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  232.195889][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  232.196805][ T7343] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  232.199450][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  232.199858][ T7343] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  232.211560][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  232.214583][ T7343] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  232.217311][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  232.272197][ T7343] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.282608][ T7343] 8021q: adding VLAN 0 to HW filter on device team0
[  232.287812][ T5021] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.287837][ T5021] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.292141][ T5021] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.292169][ T5021] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.803078][ T4723] Bluetooth: hci5: command tx timeout
[  232.856486][ T7343] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.940688][ T6456] hid-generic 0005:10CF:0002.0001: unknown main item tag 0x0
[  232.957710][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.653'.
[  232.976164][ T6456] hid-generic 0005:10CF:0002.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  233.196718][ T7432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.654'.
[  233.425999][ T7343] veth0_vlan: entered promiscuous mode
[  233.428315][ T7343] veth1_vlan: entered promiscuous mode
[  233.457751][ T7343] veth0_macvtap: entered promiscuous mode
[  233.459338][ T7343] veth1_macvtap: entered promiscuous mode
[  233.470691][ T7343] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.476048][ T7343] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.533381][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.533387][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.550792][ T5021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.550804][ T5021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.578519][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.578547][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.578563][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.578578][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.873817][ T7460] usb usb8: usbfs: process 7460 (syz.2.660) did not claim interface 7 before use
[  234.136969][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.5.663'.
[  234.294765][    C0] net_ratelimit: 197 callbacks suppressed
[  234.972544][ T7492] xt_CONNSECMARK: invalid mode: 66
[  234.978958][ T4723] Bluetooth: hci5: command tx timeout
[  235.303142][ T7512] netlink: 72 bytes leftover after parsing attributes in process `syz.3.677'.
[  236.312508][ T7538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.685'.
[  236.365687][ T7536] Bluetooth: hci0: unsupported parameter 150
[  236.365693][ T7536] Bluetooth: hci0: unsupported parameter 150
[  236.393193][ T7537] nvme_fabrics: missing parameter 'transport=%s'
[  236.393201][ T7537] nvme_fabrics: missing parameter 'nqn=%s'
[  236.495039][ T7546] input: syz0 as /devices/virtual/input/input13
[  236.687962][ T7563] loop5: detected capacity change from 0 to 1024
[  236.736560][ T7563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.807713][ T7563] overlay: filesystem on ./bus not supported as upperdir
[  236.811791][ T7563] overlay: filesystem on ./bus not supported as upperdir
[  236.813417][ T7563] overlay: filesystem on ./bus not supported as upperdir
[  236.814012][ T7563] overlay: filesystem on ./bus not supported as upperdir
[  236.814163][ T7563] overlay: filesystem on ./bus not supported as upperdir
[  236.814316][ T7563] overlay: filesystem on ./bus not supported as upperdir
[  236.814888][ T7563] overlay: filesystem on ./bus not supported as upperdir
[  236.816851][ T7563] overlay: filesystem on ./bus not supported as upperdir
[  236.817331][ T7563] overlay: filesystem on ./bus not supported as upperdir
[  236.831415][ T7563] overlay: filesystem on ./bus not supported as upperdir
[  236.840438][ T7563] overlay: filesystem on ./bus not supported as upperdir
[  236.848513][ T7563] overlay: filesystem on ./bus not supported as upperdir
[  237.065498][ T7343] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.139255][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'.
[  237.203903][ T4723] Bluetooth: hci5: command tx timeout
[  237.668593][ T7596] tipc: Started in network mode
[  237.668608][ T7596] tipc: Node identity 1ed64fa700ad, cluster identity 4711
[  237.668655][ T7596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.669161][ T7596] syzkaller0: entered promiscuous mode
[  237.669172][ T7596] syzkaller0: entered allmulticast mode
[  237.704550][ T7596] tipc: Resetting bearer <eth:syzkaller0>
[  237.849936][ T7595] tipc: Resetting bearer <eth:syzkaller0>
[  237.862167][ T7595] tipc: Disabling bearer <eth:syzkaller0>
[  238.600769][ T7645] netlink: 144 bytes leftover after parsing attributes in process `syz.2.699'.
[  238.769414][ T7651] netlink: 'syz.2.700': attribute type 15 has an invalid length.
[  238.769430][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'.
[  238.791687][ T7651] netlink: 'syz.2.700': attribute type 15 has an invalid length.
[  238.791701][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'.
[  238.836065][   T40] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  238.836128][   T40] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  238.836157][   T40] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  238.836178][   T40] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  238.838347][ T4723] Bluetooth: hci0: command 0x0c3a tx timeout
[  238.848439][ T6456] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  238.848452][ T6456] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  239.584475][ T4723] Bluetooth: hci5: command tx timeout
[  239.939340][    C1] net_ratelimit: 208 callbacks suppressed
[  241.137428][ T4723] Bluetooth: hci1: command 0x0c1a tx timeout
[  241.137520][ T6456] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  241.137529][ T6456] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  241.235814][ T7748] netlink: 'syz.5.719': attribute type 6 has an invalid length.
[  241.660783][ T7752] binder: 7751:7752 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  242.016876][ T7762] syzkaller0: entered promiscuous mode
[  242.016892][ T7762] syzkaller0: entered allmulticast mode
[  242.017192][ T7762] syzkaller0: left promiscuous mode
[  242.017201][ T7762] syzkaller0: left allmulticast mode
[  242.023562][ T7754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.124582][ T7771] tipc: Resetting bearer <eth:syzkaller0>
[  242.139539][ T7771] tipc: Disabling bearer <eth:syzkaller0>
[  242.179963][ T7780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.725'.
[  242.710189][ T7803] can0: slcan on ptm0.
[  242.837762][ T7802] can0 (unregistered): slcan off ptm0.
[  243.202943][ T7827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.737'.
[  243.361436][ T4723] Bluetooth: hci2: command 0x0406 tx timeout
[  243.363751][ T6456] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  243.363764][ T6456] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  243.586118][ T7837] netlink: 60 bytes leftover after parsing attributes in process `syz.4.740'.
[  243.587111][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'.
[  243.698236][ T7841] fuse: Bad value for 'fd'
[  244.550892][ T7851] netlink: 104 bytes leftover after parsing attributes in process `syz.5.743'.
[  244.555778][ T7851] netlink: 20 bytes leftover after parsing attributes in process `syz.5.743'.
[  244.556000][ T7851] netlink: 20 bytes leftover after parsing attributes in process `syz.5.743'.
[  245.584018][    C1] net_ratelimit: 95 callbacks suppressed
[  246.268319][ T4723] Bluetooth: hci5: command 0x0c1a tx timeout
[  246.268424][ T6456] Bluetooth: hci5: Opcode 0x0c1a failed: -110
[  246.268431][ T6456] Bluetooth: hci5: Error when powering off device on rfkill (-110)
[  246.575727][ T7825] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  246.583028][ T7826] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  246.681559][ T7869] netlink: 16 bytes leftover after parsing attributes in process `syz.5.747'.
[  246.705152][ T7872] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  246.781181][ T7872] netlink: 72 bytes leftover after parsing attributes in process `syz.2.748'.
[  246.781196][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'.
[  246.830016][ T7882] loop5: detected capacity change from 0 to 256
[  246.844156][ T7882] /dev/loop5: Can't open blockdev
[  246.943438][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  246.946066][ T4724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  246.947520][ T4724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  246.950535][ T4724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  246.951584][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  247.037331][ T4723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  247.079375][ T4723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  247.079615][ T4723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  247.080235][ T4723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  247.080977][ T4723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  247.202858][ T7896] binder: 7895:7896 BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  247.202873][ T7896] binder: 7895:7896 ioctl c0306201 20000640 returned -22
[  247.208205][ T7896] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  248.817195][ T5022] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.010297][ T7931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.762'.
[  249.325811][ T4723] Bluetooth: hci3: command tx timeout
[  249.944819][ T1593] ieee802154 phy0 wpan0: encryption failed: -22
[  249.945819][ T1593] ieee802154 phy1 wpan1: encryption failed: -22
[  251.028829][ T5022] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.074768][ T7932] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  251.079313][ T7943] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  251.202279][ T7889] net_ratelimit: 84 callbacks suppressed
[  251.485651][ T4723] Bluetooth: hci3: command tx timeout
[  251.609665][ T5022] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.617296][ T4355] block nbd1: Possible stuck request 00000000785cfbf6: control (read@0,4096B). Runtime 150 seconds
[  253.502813][ T5022] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.709361][ T4723] Bluetooth: hci3: command tx timeout
[  255.420823][ T7979] netlink: 72 bytes leftover after parsing attributes in process `syz.2.769'.
[  255.943450][ T4723] Bluetooth: hci3: command tx timeout
[  256.691845][ T4827] net_ratelimit: 83 callbacks suppressed
[  257.956409][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.772'.
[  258.257721][ T7985] ip6_vti0: entered promiscuous mode
[  258.308352][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.5.772'.
[  259.072773][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.773'.
[  259.082919][ T5022] bridge_slave_1: left allmulticast mode
[  259.083142][ T5022] bridge_slave_1: left promiscuous mode
[  259.084427][ T5022] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.113789][ T5022] bridge_slave_0: left allmulticast mode
[  259.113996][ T5022] bridge_slave_0: left promiscuous mode
[  259.114450][ T5022] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.177987][    C0] net_ratelimit: 52 callbacks suppressed
[  263.777350][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  263.778486][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  263.779207][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  263.786884][ T4724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  263.788561][ T4724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  264.046030][ T8027] 9pnet_fd: Insufficient options for proto=fd
[  265.558514][ T5022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  265.647451][ T5022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  265.733290][ T5022] bond0 (unregistering): Released all slaves
[  266.195784][ T4724] Bluetooth: hci1: command tx timeout
[  267.991642][    C0] net_ratelimit: 64 callbacks suppressed
[  268.451278][ T4724] Bluetooth: hci1: command tx timeout
[  269.245942][ T8036] netlink: 72 bytes leftover after parsing attributes in process `syz.2.780'.
[  270.728471][ T4724] Bluetooth: hci1: command tx timeout
[  272.584176][ T8054] loop5: detected capacity change from 0 to 128
[  272.952110][ T4724] Bluetooth: hci1: command tx timeout
[  273.733306][    C0] net_ratelimit: 64 callbacks suppressed
[  274.348963][ T8056] overlayfs: failed to resolve './file1': -2
[  274.380633][ T8056] overlayfs: failed to resolve './file1': -2
[  276.821753][ T8084] netlink: 76 bytes leftover after parsing attributes in process `syz.2.789'.
[  276.967136][ T5022] hsr_slave_0: left promiscuous mode
[  276.970463][ T5022] hsr_slave_1: left promiscuous mode
[  276.975374][ T5022] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.976778][ T5022] batman_adv: batadv0: Removing interface: batadv_slave_0
[  277.016664][ T5022] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  277.016945][ T5022] batman_adv: batadv0: Removing interface: batadv_slave_1
[  277.149138][ T5022] veth1_macvtap: left promiscuous mode
[  277.149445][ T5022] veth0_macvtap: left promiscuous mode
[  277.150018][ T5022] veth1_vlan: left promiscuous mode
[  277.150775][ T5022] veth0_vlan: left promiscuous mode
[  277.390273][ T8103] netlink: 72 bytes leftover after parsing attributes in process `syz.5.790'.
[  277.652617][ T8110] loop5: detected capacity change from 0 to 128
[  277.731411][ T8110] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  277.893369][ T7343] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  279.366322][    C1] net_ratelimit: 62 callbacks suppressed
[  281.782386][    C0] sched: DL replenish lagged too much
[  285.022237][    C0] net_ratelimit: 58 callbacks suppressed
[  285.450199][ T4355] block nbd1: Possible stuck request 00000000785cfbf6: control (read@0,4096B). Runtime 180 seconds
[  285.844568][ T4340] udevd[4340]: worker [4987] /devices/virtual/block/nbd1 timeout; kill it
[  285.844625][ T4340] udevd[4340]: seq 10333 '/devices/virtual/block/nbd1' killed
[  288.629902][ T5022] team0 (unregistering): Port device team_slave_1 removed
[  290.400213][ T8086] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  290.826658][    C1] net_ratelimit: 118 callbacks suppressed
[  290.887237][ T8086] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  291.225195][ T8086] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  291.403997][ T4397] 8021q: adding VLAN 0 to HW filter on device eth1
[  291.638608][ T8086] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  291.638733][ T8086] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  292.002184][ T8086] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  292.411555][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.428360][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.428563][ T7889] bridge_slave_0: entered allmulticast mode
[  292.480924][ T7889] bridge_slave_0: entered promiscuous mode
[  292.614969][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.615188][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.615394][ T7889] bridge_slave_1: entered allmulticast mode
[  292.616328][ T7889] bridge_slave_1: entered promiscuous mode
[  292.630584][ T8133] overlayfs: failed to resolve './file1': -2
[  292.764015][ T8133] overlayfs: failed to resolve './file1': -2
[  292.794283][ T4724] Bluetooth: hci3: command 0x0c1a tx timeout
[  292.940098][ T4723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  292.941191][ T4723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  292.941835][ T4723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  292.943158][ T4723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  292.951363][ T4723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  293.911444][ T4723] Bluetooth: hci1: command 0x0c1a tx timeout
[  294.107925][ T8149] loop5: detected capacity change from 0 to 256
[  294.253468][ T8149] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  294.253483][ T8149] FAT-fs (loop5): Filesystem has been set read-only
[  294.338275][   T30] audit: type=1326 audit(290.343:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.4.797" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  294.338305][   T30] audit: type=1326 audit(290.343:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.4.797" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  294.338325][   T30] audit: type=1326 audit(290.343:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.4.797" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  294.338342][   T30] audit: type=1326 audit(290.343:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.4.797" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  294.338358][   T30] audit: type=1326 audit(290.352:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.4.797" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  294.338374][   T30] audit: type=1326 audit(290.352:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.4.797" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  294.338389][   T30] audit: type=1326 audit(290.352:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.4.797" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  294.338404][   T30] audit: type=1326 audit(290.371:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.4.797" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  294.338419][   T30] audit: type=1326 audit(290.371:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.4.797" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  294.338433][   T30] audit: type=1326 audit(290.371:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.4.797" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b79368 code=0x7ffc0000
[  294.683312][ T7889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.017860][ T4723] Bluetooth: hci3: command 0x0c1a tx timeout
[  295.103172][ T4723] Bluetooth: hci0: command tx timeout
[  295.499161][ T7889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.140295][ T4723] Bluetooth: hci1: command 0x0c1a tx timeout
[  296.215358][    T9] net_ratelimit: 121 callbacks suppressed
[  296.279703][ T5022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  296.279728][ T5022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.747841][ T8158] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  296.747954][ T8158] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  296.780931][ T4397] 8021q: adding VLAN 0 to HW filter on device eth0
[  297.241136][ T4723] Bluetooth: hci3: command 0x0c1a tx timeout
[  297.359451][ T4723] Bluetooth: hci0: command tx timeout
[  298.374401][ T4723] Bluetooth: hci1: command 0x0c1a tx timeout
[  298.521501][ T8187] loop5: detected capacity change from 0 to 256
[  298.651975][ T8187] syz.5.802: attempt to access beyond end of device
[  298.651975][ T8187] loop5: rw=8388608, sector=1768, nr_sectors = 4 limit=256
[  299.002631][ T7889] team0: Port device team_slave_0 added
[  299.258598][ T5022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  299.258624][ T5022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.292738][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.802'.
[  299.323790][ T8193] netlink: 48 bytes leftover after parsing attributes in process `syz.4.803'.
[  299.330670][ T7889] team0: Port device team_slave_1 added
[  299.552852][ T4723] Bluetooth: hci0: command tx timeout
[  299.566889][ T7889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.566900][ T7889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  299.566913][ T7889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.748236][ T5022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  299.748259][ T5022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.832109][ T7889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.832117][ T7889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  299.832134][ T7889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.109146][ T8204] loop5: detected capacity change from 0 to 256
[  300.139733][ T8204] vfat: Unknown parameter 'norumdail'
[  300.506821][ T5022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  300.506842][ T5022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.691135][ T7889] hsr_slave_0: entered promiscuous mode
[  300.712958][ T7889] hsr_slave_1: entered promiscuous mode
[  300.714094][ T7889] debugfs: 'hsr0' already exists in 'hsr'
[  300.714107][ T7889] Cannot create hsr debugfs directory
[  301.428284][ T4397] 8021q: adding VLAN 0 to HW filter on device eth2
[  301.773920][    C1] net_ratelimit: 134 callbacks suppressed
[  301.776434][ T4723] Bluetooth: hci0: command tx timeout
[  302.516382][ T8220] x_tables: ip_tables: osf match: only valid for protocol 6
[  307.418508][    C1] net_ratelimit: 44 callbacks suppressed
[  308.216971][ T5022] bridge_slave_1: left promiscuous mode
[  308.217434][ T5022] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.227404][ T5022] bridge_slave_0: left allmulticast mode
[  308.227612][ T5022] bridge_slave_0: left promiscuous mode
[  308.228057][ T5022] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.158549][ T4724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  312.159932][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  312.160606][ T4724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  312.161937][ T4724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  312.162815][ T4724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  312.977865][    C1] net_ratelimit: 35 callbacks suppressed
[  314.595603][ T5022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.688233][ T4724] Bluetooth: hci2: command tx timeout
[  315.597596][ T5022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.606396][ T1593] ieee802154 phy0 wpan0: encryption failed: -22
[  315.608369][ T1593] ieee802154 phy1 wpan1: encryption failed: -22
[  315.832462][ T5022] bond0 (unregistering): Released all slaves
[  315.880021][ T5022] bond1 (unregistering): Released all slaves
[  316.005612][ T4397] 8021q: adding VLAN 0 to HW filter on device eth3
[  316.031207][ T8024] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.031414][ T8024] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.031597][ T8024] bridge_slave_0: entered allmulticast mode
[  316.032518][ T8024] bridge_slave_0: entered promiscuous mode
[  316.211356][ T8024] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.211564][ T8024] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.211772][ T8024] bridge_slave_1: entered allmulticast mode
[  316.229294][ T8024] bridge_slave_1: entered promiscuous mode
[  316.838256][ T4723] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  316.858794][ T4723] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  316.861539][ T4723] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  316.863603][ T4723] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  316.874498][ T4723] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  316.913275][ T4723] Bluetooth: hci2: command tx timeout
[  317.483588][ T8268] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  317.554675][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'.
[  317.554703][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'.
[  317.626854][ T4355] block nbd1: Possible stuck request 00000000785cfbf6: control (read@0,4096B). Runtime 210 seconds
[  317.923044][ T8024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.344302][ T7396] net_ratelimit: 44 callbacks suppressed
[  319.051933][ T4723] Bluetooth: hci6: command tx timeout
[  319.135493][ T4723] Bluetooth: hci2: command tx timeout
[  319.161672][ T8024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.591069][ T4397] 8021q: adding VLAN 0 to HW filter on device eth4
[  319.599242][ T8295] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  320.223764][ T5022] hsr_slave_0: left promiscuous mode
[  320.227037][ T5022] hsr_slave_1: left promiscuous mode
[  320.228566][ T5022] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  320.228664][ T5022] batman_adv: batadv0: Removing interface: batadv_slave_0
[  320.234007][ T5022] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  320.234118][ T5022] batman_adv: batadv0: Removing interface: batadv_slave_1
[  320.305632][ T5022] veth1_macvtap: left promiscuous mode
[  320.305923][ T5022] veth0_macvtap: left promiscuous mode
[  320.306506][ T5022] veth1_vlan: left promiscuous mode
[  320.307238][ T5022] veth0_vlan: left promiscuous mode
[  321.273682][ T4723] Bluetooth: hci6: command tx timeout
[  321.359245][ T4723] Bluetooth: hci2: command tx timeout
[  323.497572][ T4723] Bluetooth: hci6: command tx timeout
[  324.010781][    C0] net_ratelimit: 74 callbacks suppressed
[  325.720907][ T4723] Bluetooth: hci6: command tx timeout
[  328.112438][ T5022] team0 (unregistering): Port device team_slave_1 removed
[  328.289138][ T5022] team0 (unregistering): Port device team_slave_0 removed
[  329.053610][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  329.068170][ T4724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  329.069700][ T4724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  329.071071][ T4724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  329.071916][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  329.654971][    C1] net_ratelimit: 28 callbacks suppressed
[  331.280234][ T4723] Bluetooth: hci3: command tx timeout
[  333.503713][ T4723] Bluetooth: hci3: command tx timeout
[  333.944983][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.945189][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.945362][ T8138] bridge_slave_0: entered allmulticast mode
[  333.946284][ T8138] bridge_slave_0: entered promiscuous mode
[  333.959199][ T8024] team0: Port device team_slave_0 added
[  333.962004][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.997584][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.997795][ T8138] bridge_slave_1: entered allmulticast mode
[  334.027549][ T8138] bridge_slave_1: entered promiscuous mode
[  334.683573][ T8138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.694552][ T8138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.844601][ T8138] team0: Port device team_slave_0 added
[  335.131651][ T8138] team0: Port device team_slave_1 added
[  335.727449][ T4723] Bluetooth: hci3: command tx timeout
[  335.898286][    C1] net_ratelimit: 62 callbacks suppressed
[  336.305982][ T8345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.464888][ T8346] syzkaller0: entered promiscuous mode
[  336.465005][ T8346] syzkaller0: entered allmulticast mode
[  336.469745][ T8346] tipc: Resetting bearer <eth:syzkaller0>
[  337.270521][ T5030] tipc: Resetting bearer <eth:syzkaller0>
[  337.306184][ T8338] tipc: Resetting bearer <eth:syzkaller0>
[  337.951859][ T4723] Bluetooth: hci3: command tx timeout
[  340.759673][ T8338] tipc: Disabling bearer <eth:syzkaller0>
[  340.905552][ T8138] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.905560][ T8138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  340.905574][ T8138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.907595][ T8138] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.907603][ T8138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  340.907614][ T8138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.155725][ T4397] 8021q: adding VLAN 0 to HW filter on device eth5
[  341.169845][   T24] tipc: Node number set to 274399881
[  341.411005][ T8350] net_ratelimit: 59 callbacks suppressed
[  341.420676][ T8350] FAULT_INJECTION: forcing a failure.
[  341.420676][ T8350] name fail_futex, interval 1, probability 0, space 0, times 0
[  341.420696][ T8350] CPU: 1 UID: 0 PID: 8350 Comm: syz.4.821 Tainted: G             L      syzkaller #0 PREEMPT 
[  341.420709][ T8350] Tainted: [L]=SOFTLOCKUP
[  341.420713][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  341.420727][ T8350] Call trace:
[  341.420730][ T8350]  show_stack+0x2c/0x3c (C)
[  341.420749][ T8350]  __dump_stack+0x30/0x40
[  341.420763][ T8350]  dump_stack_lvl+0xd8/0x12c
[  341.420775][ T8350]  dump_stack+0x1c/0x28
[  341.420786][ T8350]  should_fail_ex+0x41c/0x590
[  341.420802][ T8350]  should_fail+0x14/0x24
[  341.420814][ T8350]  get_futex_key+0x1ec/0x12b0
[  341.420826][ T8350]  futex_wake+0x10c/0x594
[  341.420837][ T8350]  do_futex+0x2c4/0x378
[  341.420847][ T8350]  __arm64_sys_futex+0x2e4/0x418
[  341.420858][ T8350]  invoke_syscall+0x98/0x244
[  341.420870][ T8350]  el0_svc_common+0xec/0x23c
[  341.420882][ T8350]  do_el0_svc+0x4c/0x5c
[  341.420893][ T8350]  el0_svc+0x64/0x260
[  341.420905][ T8350]  el0t_64_sync_handler+0x44/0x104
[  341.420916][ T8350]  el0t_64_sync+0x198/0x19c
[  341.652568][ T8138] hsr_slave_0: entered promiscuous mode
[  341.654062][ T8138] hsr_slave_1: entered promiscuous mode
[  341.655387][ T8138] debugfs: 'hsr0' already exists in 'hsr'
[  341.655398][ T8138] Cannot create hsr debugfs directory
[  341.721668][ T8353] Bluetooth: ISO socket layer initialized
[  344.233388][ T5022] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.746784][ T5022] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.768509][ T8138] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  344.777705][ T8138] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  344.865967][ T8138] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  345.239244][ T8138] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  345.240489][ T8138] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  345.255297][ T8138] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  345.801597][ T8138] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  345.834367][ T8138] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  346.645974][ T5022] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.900481][ T4397] 8021q: adding VLAN 0 to HW filter on device eth6
[  347.229014][ T8391] FAULT_INJECTION: forcing a failure.
[  347.229014][ T8391] name failslab, interval 1, probability 0, space 0, times 0
[  347.229039][ T8391] CPU: 1 UID: 0 PID: 8391 Comm: syz.4.828 Tainted: G             L      syzkaller #0 PREEMPT 
[  347.229052][ T8391] Tainted: [L]=SOFTLOCKUP
[  347.229056][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  347.229070][ T8391] Call trace:
[  347.229073][ T8391]  show_stack+0x2c/0x3c (C)
[  347.229094][ T8391]  __dump_stack+0x30/0x40
[  347.229108][ T8391]  dump_stack_lvl+0xd8/0x12c
[  347.229121][ T8391]  dump_stack+0x1c/0x28
[  347.229132][ T8391]  should_fail_ex+0x41c/0x590
[  347.229146][ T8391]  should_failslab+0xc4/0x120
[  347.229163][ T8391]  __kmalloc_cache_noprof+0x94/0x5fc
[  347.229172][ T8391]  alloc_fs_context+0x7c/0xba4
[  347.229183][ T8391]  fs_context_for_mount+0x34/0x44
[  347.229192][ T8391]  mq_init_ns+0xdc/0x638
[  347.229206][ T8391]  copy_ipcs+0x3c8/0x63c
[  347.229218][ T8391]  create_new_namespaces+0x1a8/0x50c
[  347.229230][ T8391]  unshare_nsproxy_namespaces+0x120/0x170
[  347.229241][ T8391]  ksys_unshare+0x438/0x6cc
[  347.229250][ T8391]  __arm64_sys_unshare+0x40/0x54
[  347.229260][ T8391]  invoke_syscall+0x98/0x244
[  347.229273][ T8391]  el0_svc_common+0xec/0x23c
[  347.229285][ T8391]  do_el0_svc+0x4c/0x5c
[  347.229296][ T8391]  el0_svc+0x64/0x260
[  347.229308][ T8391]  el0t_64_sync_handler+0x44/0x104
[  347.229320][ T8391]  el0t_64_sync+0x198/0x19c
[  347.273231][    C1] net_ratelimit: 57 callbacks suppressed
[  347.554518][ T8391] FAULT_INJECTION: forcing a failure.
[  347.554518][ T8391] name failslab, interval 1, probability 0, space 0, times 0
[  347.554542][ T8391] CPU: 1 UID: 0 PID: 8391 Comm: syz.4.828 Tainted: G             L      syzkaller #0 PREEMPT 
[  347.554557][ T8391] Tainted: [L]=SOFTLOCKUP
[  347.554561][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  347.554575][ T8391] Call trace:
[  347.554579][ T8391]  show_stack+0x2c/0x3c (C)
[  347.554599][ T8391]  __dump_stack+0x30/0x40
[  347.554614][ T8391]  dump_stack_lvl+0xd8/0x12c
[  347.554625][ T8391]  dump_stack+0x1c/0x28
[  347.554637][ T8391]  should_fail_ex+0x41c/0x590
[  347.554651][ T8391]  should_failslab+0xc4/0x120
[  347.554664][ T8391]  __kmalloc_cache_noprof+0x94/0x5fc
[  347.554674][ T8391]  mqueue_init_fs_context+0x64/0x4dc
[  347.554688][ T8391]  alloc_fs_context+0x7d8/0xba4
[  347.554698][ T8391]  fs_context_for_mount+0x34/0x44
[  347.554707][ T8391]  mq_init_ns+0xdc/0x638
[  347.554719][ T8391]  copy_ipcs+0x3c8/0x63c
[  347.554731][ T8391]  create_new_namespaces+0x1a8/0x50c
[  347.554742][ T8391]  unshare_nsproxy_namespaces+0x120/0x170
[  347.554754][ T8391]  ksys_unshare+0x438/0x6cc
[  347.554763][ T8391]  __arm64_sys_unshare+0x40/0x54
[  347.554772][ T8391]  invoke_syscall+0x98/0x244
[  347.554785][ T8391]  el0_svc_common+0xec/0x23c
[  347.554796][ T8391]  do_el0_svc+0x4c/0x5c
[  347.554808][ T8391]  el0_svc+0x64/0x260
[  347.554820][ T8391]  el0t_64_sync_handler+0x44/0x104
[  347.554831][ T8391]  el0t_64_sync+0x198/0x19c
[  347.608978][ T8391] FAULT_INJECTION: forcing a failure.
[  347.608978][ T8391] name failslab, interval 1, probability 0, space 0, times 0
[  347.609004][ T8391] CPU: 1 UID: 0 PID: 8391 Comm: syz.4.828 Tainted: G             L      syzkaller #0 PREEMPT 
[  347.609020][ T8391] Tainted: [L]=SOFTLOCKUP
[  347.609024][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  347.609037][ T8391] Call trace:
[  347.609040][ T8391]  show_stack+0x2c/0x3c (C)
[  347.609059][ T8391]  __dump_stack+0x30/0x40
[  347.609072][ T8391]  dump_stack_lvl+0xd8/0x12c
[  347.609083][ T8391]  dump_stack+0x1c/0x28
[  347.609094][ T8391]  should_fail_ex+0x41c/0x590
[  347.609109][ T8391]  should_failslab+0xc4/0x120
[  347.609122][ T8391]  __kmalloc_cache_noprof+0x94/0x5fc
[  347.609132][ T8391]  mqueue_init_fs_context+0x64/0x4dc
[  347.609147][ T8391]  alloc_fs_context+0x7d8/0xba4
[  347.609159][ T8391]  fs_context_for_mount+0x34/0x44
[  347.609168][ T8391]  mq_init_ns+0xdc/0x638
[  347.609179][ T8391]  copy_ipcs+0x3c8/0x63c
[  347.609191][ T8391]  create_new_namespaces+0x1a8/0x50c
[  347.609203][ T8391]  unshare_nsproxy_namespaces+0x120/0x170
[  347.609213][ T8391]  ksys_unshare+0x438/0x6cc
[  347.609222][ T8391]  __arm64_sys_unshare+0x40/0x54
[  347.609232][ T8391]  invoke_syscall+0x98/0x244
[  347.609244][ T8391]  el0_svc_common+0xec/0x23c
[  347.609255][ T8391]  do_el0_svc+0x4c/0x5c
[  347.609267][ T8391]  el0_svc+0x64/0x260
[  347.609279][ T8391]  el0t_64_sync_handler+0x44/0x104
[  347.609290][ T8391]  el0t_64_sync+0x198/0x19c
[  349.413167][ T5022] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.512374][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.512613][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.512814][ T8254] bridge_slave_0: entered allmulticast mode
[  349.522592][ T8254] bridge_slave_0: entered promiscuous mode
[  349.575036][ T8391] FAULT_INJECTION: forcing a failure.
[  349.575036][ T8391] name failslab, interval 1, probability 0, space 0, times 0
[  349.575068][ T8391] CPU: 1 UID: 0 PID: 8391 Comm: syz.4.828 Tainted: G             L      syzkaller #0 PREEMPT 
[  349.575081][ T8391] Tainted: [L]=SOFTLOCKUP
[  349.575085][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  349.575099][ T8391] Call trace:
[  349.575102][ T8391]  show_stack+0x2c/0x3c (C)
[  349.575120][ T8391]  __dump_stack+0x30/0x40
[  349.575133][ T8391]  dump_stack_lvl+0xd8/0x12c
[  349.575145][ T8391]  dump_stack+0x1c/0x28
[  349.575161][ T8391]  should_fail_ex+0x41c/0x590
[  349.575175][ T8391]  should_failslab+0xc4/0x120
[  349.575189][ T8391]  kmem_cache_alloc_noprof+0x94/0x5d4
[  349.575198][ T8391]  __proc_create+0x348/0x788
[  349.575209][ T8391]  proc_create_reg+0x88/0x110
[  349.575220][ T8391]  proc_create_single_data+0x58/0xf8
[  349.575231][ T8391]  psched_net_init+0x58/0x74
[  349.575244][ T8391]  ops_init+0x2cc/0x528
[  349.575256][ T8391]  setup_net+0x118/0x2fc
[  349.575265][ T8391]  copy_net_ns+0x454/0x698
[  349.575276][ T8391]  create_new_namespaces+0x304/0x50c
[  349.575287][ T8391]  unshare_nsproxy_namespaces+0x120/0x170
[  349.575298][ T8391]  ksys_unshare+0x438/0x6cc
[  349.575307][ T8391]  __arm64_sys_unshare+0x40/0x54
[  349.575317][ T8391]  invoke_syscall+0x98/0x244
[  349.575329][ T8391]  el0_svc_common+0xec/0x23c
[  349.575341][ T8391]  do_el0_svc+0x4c/0x5c
[  349.575352][ T8391]  el0_svc+0x64/0x260
[  349.575365][ T8391]  el0t_64_sync_handler+0x44/0x104
[  349.575376][ T8391]  el0t_64_sync+0x198/0x19c
[  349.729853][ T8263] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.730047][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.730277][ T8263] bridge_slave_0: entered allmulticast mode
[  349.731198][ T8263] bridge_slave_0: entered promiscuous mode
[  349.734704][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.734898][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.735055][ T8263] bridge_slave_1: entered allmulticast mode
[  349.737470][ T8263] bridge_slave_1: entered promiscuous mode
[  349.796841][ T4355] block nbd1: Possible stuck request 00000000785cfbf6: control (read@0,4096B). Runtime 240 seconds
[  349.956618][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.977858][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.988985][ T8254] bridge_slave_1: entered allmulticast mode
[  350.161731][ T8254] bridge_slave_1: entered promiscuous mode
[  352.017879][ T8263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.026832][ T8263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.088227][ T8263] team0: Port device team_slave_0 added
[  352.093447][ T8263] team0: Port device team_slave_1 added
[  352.189929][ T8254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.334484][ T8263] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.334493][ T8263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.334508][ T8263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.339225][ T8263] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.339233][ T8263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.339249][ T8263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.402872][ T8254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.605862][ T4397] 8021q: adding VLAN 0 to HW filter on device eth7
[  353.003271][    C1] net_ratelimit: 146 callbacks suppressed
[  353.558601][ T8254] team0: Port device team_slave_0 added
[  353.567257][ T8254] team0: Port device team_slave_1 added
[  357.006565][ T8315] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.006792][ T8315] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.006958][ T8315] bridge_slave_0: entered allmulticast mode
[  357.007943][ T8315] bridge_slave_0: entered promiscuous mode
[  357.040041][ T8315] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.040237][ T8315] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.040404][ T8315] bridge_slave_1: entered allmulticast mode
[  357.076755][ T8315] bridge_slave_1: entered promiscuous mode
[  357.109574][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.109582][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  357.109596][ T8254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.111434][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.111442][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  357.111456][ T8254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.203706][ T5022] bridge_slave_1: left allmulticast mode
[  357.203927][ T5022] bridge_slave_1: left promiscuous mode
[  357.204376][ T5022] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.221917][ T5022] bridge_slave_0: left allmulticast mode
[  357.222116][ T5022] bridge_slave_0: left promiscuous mode
[  357.222550][ T5022] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.334418][ T5022] bridge_slave_1: left allmulticast mode
[  357.334616][ T5022] bridge_slave_1: left promiscuous mode
[  357.335068][ T5022] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.348410][ T5022] bridge_slave_0: left allmulticast mode
[  357.348615][ T5022] bridge_slave_0: left promiscuous mode
[  357.349037][ T5022] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.411190][ T5022] bridge_slave_1: left allmulticast mode
[  357.411455][ T5022] bridge_slave_1: left promiscuous mode
[  357.411909][ T5022] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.415218][ T5022] bridge_slave_0: left allmulticast mode
[  357.415415][ T5022] bridge_slave_0: left promiscuous mode
[  357.415830][ T5022] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.105371][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  358.106906][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  358.107602][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  358.108909][ T4724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  358.109772][ T4724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  358.990090][    C1] net_ratelimit: 27 callbacks suppressed
[  359.523194][ T5022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  359.843116][ T5022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  360.273301][ T4724] Bluetooth: hci1: command tx timeout
[  360.644782][ T5022] bond0 (unregistering): Released all slaves
[  362.497467][ T4724] Bluetooth: hci1: command tx timeout
[  363.495634][ T5022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  363.599778][ T5022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  363.692960][ T5022] bond0 (unregistering): Released all slaves
[  364.634909][    C1] net_ratelimit: 26 callbacks suppressed
[  364.654740][ T4723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  364.658757][ T4723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  364.659835][ T4723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  364.661163][ T4723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  364.662028][ T4723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  364.725842][ T4723] Bluetooth: hci1: command tx timeout
[  366.858402][ T4723] Bluetooth: hci0: command tx timeout
[  367.062028][ T4723] Bluetooth: hci1: command tx timeout
[  368.594190][ T5022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.695658][ T5022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.733214][ T5022] bond0 (unregistering): Released all slaves
[  369.082265][ T4723] Bluetooth: hci0: command tx timeout
[  369.289238][ T5022] tipc: Left network mode
[  369.370562][ T8263] hsr_slave_0: entered promiscuous mode
[  369.393210][ T8263] hsr_slave_1: entered promiscuous mode
[  369.396130][ T8263] debugfs: 'hsr0' already exists in 'hsr'
[  369.396141][ T8263] Cannot create hsr debugfs directory
[  370.055714][ T8254] hsr_slave_0: entered promiscuous mode
[  370.163074][ T8254] hsr_slave_1: entered promiscuous mode
[  370.226890][ T8254] debugfs: 'hsr0' already exists in 'hsr'
[  370.226902][ T8254] Cannot create hsr debugfs directory
[  370.280444][    C0] net_ratelimit: 26 callbacks suppressed
[  371.410435][ T4723] Bluetooth: hci0: command tx timeout
[  373.659570][ T4723] Bluetooth: hci0: command tx timeout
[  373.909162][ T8315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  373.913410][ T8315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.417687][ T8315] team0: Port device team_slave_0 added
[  375.430039][ T8315] team0: Port device team_slave_1 added
[  376.020246][    C0] net_ratelimit: 25 callbacks suppressed
[  376.092736][ T8402] syz_tun (unregistering): left allmulticast mode
[  377.537246][ T4397] 8021q: adding VLAN 0 to HW filter on device eth8
[  379.542017][ T4724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  379.560215][ T4724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  379.561203][ T4724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  379.562520][ T4724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  379.563393][ T4724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  379.647166][ T5022] hsr_slave_0: left promiscuous mode
[  379.649289][ T5022] hsr_slave_1: left promiscuous mode
[  379.650384][ T5022] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  379.650481][ T5022] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.661231][ T5022] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  379.661382][ T5022] batman_adv: batadv0: Removing interface: batadv_slave_1
[  379.679972][ T5022] hsr_slave_0: left promiscuous mode
[  379.689071][ T5022] hsr_slave_1: left promiscuous mode
[  379.690120][ T5022] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.702381][ T5022] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.899983][ T4724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  380.901260][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  380.901937][ T4724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  380.905319][ T4724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  380.923810][ T4724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  381.270386][ T1593] ieee802154 phy0 wpan0: encryption failed: -22
[  381.270514][ T1593] ieee802154 phy1 wpan1: encryption failed: -22
[  381.392477][ T5026] net_ratelimit: 81 callbacks suppressed
[  381.537358][ T5022] veth1_macvtap: left promiscuous mode
[  381.558071][ T5022] veth0_macvtap: left promiscuous mode
[  381.600389][ T5022] veth1_vlan: left promiscuous mode
[  381.600896][ T5022] veth0_vlan: left promiscuous mode
[  381.836462][ T4724] Bluetooth: hci4: command tx timeout
[  382.361014][ T4355] block nbd1: Possible stuck request 00000000785cfbf6: control (read@0,4096B). Runtime 270 seconds
[  383.343748][ T4724] Bluetooth: hci2: command tx timeout
[  384.057567][ T4724] Bluetooth: hci4: command tx timeout
[  385.509869][ T4724] Bluetooth: hci2: command tx timeout
[  386.272516][ T4724] Bluetooth: hci4: command tx timeout
[  386.713817][ T5022] team0 (unregistering): Port device team_slave_0 removed
[  386.744325][ T4801] net_ratelimit: 22 callbacks suppressed
[  387.726603][ T4724] Bluetooth: hci2: command tx timeout
[  388.508046][ T4724] Bluetooth: hci4: command tx timeout
[  389.950185][ T4724] Bluetooth: hci2: command tx timeout
[  392.515820][    C1] net_ratelimit: 12 callbacks suppressed
[  395.274902][ T4723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  395.276321][ T4723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  395.276999][ T4723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  395.278326][ T4723] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  395.281242][ T4723] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  397.476472][ T4723] Bluetooth: hci5: command tx timeout
[  397.893527][ T4804] net_ratelimit: 19 callbacks suppressed
[  399.267126][ T5022] team0 (unregistering): Port device team_slave_1 removed
[  399.409460][ T5022] team0 (unregistering): Port device team_slave_0 removed
[  399.699996][ T4723] Bluetooth: hci5: command tx timeout
[  401.923981][ T4723] Bluetooth: hci5: command tx timeout
[  403.816298][    C0] net_ratelimit: 15 callbacks suppressed
[  404.147373][ T4723] Bluetooth: hci5: command tx timeout
[  405.951857][ T5022] team0 (unregistering): Port device team_slave_1 removed
[  406.147118][ T5022] team0 (unregistering): Port device team_slave_0 removed
[  409.453320][    C1] net_ratelimit: 16 callbacks suppressed
[  411.321444][ T4397] 8021q: adding VLAN 0 to HW filter on device eth9
[  414.774044][ T4355] block nbd1: Possible stuck request 00000000785cfbf6: control (read@0,4096B). Runtime 300 seconds
[  414.954534][ T4803] net_ratelimit: 106 callbacks suppressed
[  419.599901][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.600934][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.601120][ T8427] bridge_slave_0: entered allmulticast mode
[  419.602045][ T8427] bridge_slave_0: entered promiscuous mode
[  420.321202][ T5026] net_ratelimit: 23 callbacks suppressed
[  421.818433][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.820689][ T8427] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.820865][ T8427] bridge_slave_1: entered allmulticast mode
[  421.821811][ T8427] bridge_slave_1: entered promiscuous mode
[  422.096854][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  422.263071][ T4397] 8021q: adding VLAN 0 to HW filter on device eth10
[  422.427727][ T4724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  422.728932][ T4724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  422.731372][ T4724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  422.732232][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  423.832938][ T5022] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.832963][ T5022] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.868450][ T8473] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.868653][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.868860][ T8473] bridge_slave_0: entered allmulticast mode
[  423.869862][ T8473] bridge_slave_0: entered promiscuous mode
[  424.374024][ T8473] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.374240][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.374440][ T8473] bridge_slave_1: entered allmulticast mode
[  424.375362][ T8473] bridge_slave_1: entered promiscuous mode
[  424.570067][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.570277][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.570453][ T8432] bridge_slave_0: entered allmulticast mode
[  424.583534][ T8432] bridge_slave_0: entered promiscuous mode
[  424.694476][ T8473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.753882][ T8473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.865222][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.865427][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.871186][ T8432] bridge_slave_1: entered allmulticast mode
[  424.872168][ T8432] bridge_slave_1: entered promiscuous mode
[  424.930352][ T4724] Bluetooth: hci3: command tx timeout
[  426.480457][ T5030] net_ratelimit: 22 callbacks suppressed
[  427.153583][ T4724] Bluetooth: hci3: command tx timeout
[  427.610029][ T5022] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  427.610052][ T5022] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.842076][ T8473] team0: Port device team_slave_0 added
[  428.238913][ T8473] team0: Port device team_slave_1 added
[  428.335027][ T8432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  428.339363][ T8432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.377488][ T4724] Bluetooth: hci3: command tx timeout
[  429.793704][ T4723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  429.797658][ T4723] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  429.801981][ T4723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  429.803305][ T4723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  429.804173][ T4723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  430.017994][ T5022] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  430.018018][ T5022] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.105404][ T8478] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.105654][ T8478] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.105864][ T8478] bridge_slave_0: entered allmulticast mode
[  430.106810][ T8478] bridge_slave_0: entered promiscuous mode
[  430.117202][ T8478] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.117395][ T8478] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.117555][ T8478] bridge_slave_1: entered allmulticast mode
[  430.118442][ T8478] bridge_slave_1: entered promiscuous mode
[  430.188900][ T8478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.437571][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.437786][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.437961][ T8467] bridge_slave_0: entered allmulticast mode
[  430.438967][ T8467] bridge_slave_0: entered promiscuous mode
[  430.482517][ T8478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.557982][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.557991][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.558009][ T8473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.601079][ T4719] Bluetooth: hci3: command tx timeout
[  431.717051][ T5022] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  431.717074][ T5022] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.727055][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.727326][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.727514][ T8467] bridge_slave_1: entered allmulticast mode
[  431.728467][ T8467] bridge_slave_1: entered promiscuous mode
[  431.943923][   T61] net_ratelimit: 53 callbacks suppressed
[  432.026948][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.026955][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.026971][ T8473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.202690][ T4719] Bluetooth: hci1: command tx timeout
[  432.328563][ T8467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  432.423581][ T8478] team0: Port device team_slave_0 added
[  432.479740][ T8478] team0: Port device team_slave_1 added
[  432.496224][ T8467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.602372][ T8473] hsr_slave_0: entered promiscuous mode
[  432.603778][ T8473] hsr_slave_1: entered promiscuous mode
[  432.604606][ T8473] debugfs: 'hsr0' already exists in 'hsr'
[  432.604617][ T8473] Cannot create hsr debugfs directory
[  432.986674][ T8478] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.986681][ T8478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.986698][ T8478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.988550][ T8478] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.988557][ T8478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.988571][ T8478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.293515][ T8467] team0: Port device team_slave_0 added
[  433.297015][ T8467] team0: Port device team_slave_1 added
[  434.423264][ T4719] Bluetooth: hci1: command tx timeout
[  436.646964][ T4719] Bluetooth: hci1: command tx timeout
[  437.257756][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.257764][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.257780][ T8467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.259386][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.259392][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.259406][ T8467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.416363][    C1] net_ratelimit: 53 callbacks suppressed
[  437.584959][ T4397] 8021q: adding VLAN 0 to HW filter on device eth11
[  437.714483][ T8478] hsr_slave_0: entered promiscuous mode
[  437.718081][ T8478] hsr_slave_1: entered promiscuous mode
[  437.718974][ T8478] debugfs: 'hsr0' already exists in 'hsr'
[  437.718986][ T8478] Cannot create hsr debugfs directory
[  437.913233][ T8467] hsr_slave_0: entered promiscuous mode
[  437.921269][ T8467] hsr_slave_1: entered promiscuous mode
[  437.922149][ T8467] debugfs: 'hsr0' already exists in 'hsr'
[  437.922164][ T8467] Cannot create hsr debugfs directory
[  438.873987][ T4719] Bluetooth: hci1: command tx timeout
[  441.794437][ T4724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  441.806185][ T4724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  441.807030][ T4724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  441.808325][ T4724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  441.809423][ T4724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  442.025122][ T8473] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  442.112933][ T8473] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  442.266581][ T8473] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  442.329002][ T8473] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  442.330206][ T8473] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  442.364276][ T8473] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  442.664801][ T8473] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  442.672625][ T8473] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  442.707718][ T4397] 8021q: adding VLAN 0 to HW filter on device eth12
[  442.975537][    C1] net_ratelimit: 17 callbacks suppressed
[  443.316367][ T8478] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  443.388582][ T8478] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  443.782790][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.782984][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.783208][ T8553] bridge_slave_0: entered allmulticast mode
[  443.784187][ T8553] bridge_slave_0: entered promiscuous mode
[  443.808234][ T8478] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  443.846946][ T8478] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  443.848172][ T8478] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  443.900973][ T8478] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  444.009783][ T4719] Bluetooth: hci0: command tx timeout
[  444.089373][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.089597][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.089809][ T8553] bridge_slave_1: entered allmulticast mode
[  444.092310][ T8553] bridge_slave_1: entered promiscuous mode
[  444.222542][ T8478] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  444.282142][ T8478] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  444.694940][ T8553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.784093][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.784306][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.784515][ T8587] bridge_slave_0: entered allmulticast mode
[  444.785502][ T8587] bridge_slave_0: entered promiscuous mode
[  444.795853][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.809776][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.809953][ T8587] bridge_slave_1: entered allmulticast mode
[  444.810887][ T8587] bridge_slave_1: entered promiscuous mode
[  444.983293][ T5022] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.022598][ T8553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.036935][ T4397] 8021q: adding VLAN 0 to HW filter on device eth13
[  445.532554][ T8553] team0: Port device team_slave_0 added
[  445.536363][ T8553] team0: Port device team_slave_1 added
[  445.747359][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.019755][ T5022] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.171310][ T4724] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  446.218819][ T4724] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  446.220715][ T4724] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  446.222012][ T4724] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  446.222862][ T4724] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  446.227276][ T4724] Bluetooth: hci0: command tx timeout
[  446.269731][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.269739][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  446.269755][ T8553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  446.271363][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_1
[  446.271370][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  446.271384][ T8553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.412025][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.843603][ T8587] team0: Port device team_slave_0 added
[  446.872701][ T8587] team0: Port device team_slave_1 added
[  446.940464][ T4355] block nbd1: Possible stuck request 00000000785cfbf6: control (read@0,4096B). Runtime 330 seconds
[  446.941608][ T1593] ieee802154 phy0 wpan0: encryption failed: -22
[  446.941690][ T1593] ieee802154 phy1 wpan1: encryption failed: -22
[  448.415486][ T5022] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.449195][ T4724] Bluetooth: hci0: command tx timeout
[  448.535837][ T4724] Bluetooth: hci6: command tx timeout
[  448.973390][    C0] net_ratelimit: 41 callbacks suppressed
[  450.453247][ T8553] hsr_slave_0: entered promiscuous mode
[  450.483078][ T8553] hsr_slave_1: entered promiscuous mode
[  450.483954][ T8553] debugfs: 'hsr0' already exists in 'hsr'
[  450.483965][ T8553] Cannot create hsr debugfs directory
[  450.673440][ T4724] Bluetooth: hci0: command tx timeout
[  450.769489][ T4724] Bluetooth: hci6: command tx timeout
[  450.836589][ T4397] 8021q: adding VLAN 0 to HW filter on device eth14
[  451.699007][    C1] wireguard: wg2: Handshake for peer 29 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 4)
[  451.699959][ T8473] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER
[  451.699983][ T8473] net syz_tun: siw: event 6
[  451.701287][   T31] INFO: task udevd:4987 blocked in I/O wait for more than 143 seconds.
[  451.701298][   T31]       Tainted: G             L      syzkaller #0
[  451.701304][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  451.701309][   T31] task:udevd           state:D stack:0     pid:4987  tgid:4987  ppid:4340   task_flags:0x400140 flags:0x00800011
[  451.701325][   T31] dump_backtrace(regs = 0000000000000000 tsk = 0000000001f45036)
[  451.701333][   T31] Call trace:
[  451.701337][   T31]  __switch_to+0x2b4/0x6e4 (T)
[  451.701354][   T31]  __schedule+0x1370/0x2d80
[  451.701364][   T31]  schedule+0x13c/0x20c
[  451.701373][   T31]  io_schedule+0x1c/0xe0
[  451.701382][   T31]  folio_wait_bit_common+0x6b8/0xa30
[  451.701394][   T31]  do_read_cache_folio+0x23c/0x5a8
[  451.701405][   T31]  read_cache_folio+0x68/0x88
[  451.701415][   T31]  read_part_sector+0xcc/0x708
[  451.701425][   T31]  adfspart_check_POWERTEC+0x94/0x5b8
[  451.701434][   T31]  bdev_disk_changed+0x6e4/0x1224
[  451.701443][   T31]  blkdev_get_whole+0x15c/0x240
[  451.701451][   T31]  bdev_open+0x2b4/0x880
[  451.701459][   T31]  blkdev_open+0x2d4/0x408
[  451.701467][   T31]  do_dentry_open+0x5c4/0xfc0
[  451.701479][   T31]  vfs_open+0x44/0x2dc
[  451.701489][   T31]  path_openat+0x1084/0x18f4
[  451.701499][   T31]  do_file_open+0x1c8/0x2e8
[  451.701508][   T31]  do_sys_openat2+0x114/0x1e8
[  451.701518][   T31]  do_sys_open+0xb0/0xe0
[  451.701528][   T31]  __arm64_sys_openat+0xa8/0xc4
[  451.701539][   T31]  invoke_syscall+0x98/0x244
[  451.701551][   T31]  el0_svc_common+0xec/0x23c
[  451.701562][   T31]  do_el0_svc+0x4c/0x5c
[  451.701572][   T31]  el0_svc+0x64/0x260
[  451.701582][   T31]  el0t_64_sync_handler+0x44/0x104
[  451.701592][   T31]  el0t_64_sync+0x198/0x19c
[  451.701639][   T31] 
[  451.701639][   T31] Showing all locks held in the system:
[  451.701644][   T31] locks held by kworker/1:0/24: 3, on CPU#1:
[  451.701651][   T31]  #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  451.701678][   T31]  #1: ffff80008edd7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  451.701702][   T31]  #2: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  451.701728][   T31] locks held by khungtaskd/31: 1, last CPU#0:
[  451.701734][   T31]  #0: ffff800088d82260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188
[  451.701759][   T31] locks held by kworker/u8:2/40: 2, last CPU#1:
[  451.701765][   T31]  #0: ffff0000ce2e9940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  451.701787][   T31]  #1: ffff80008efe7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  451.701819][   T31] locks held by klogd/4329: 1, last CPU#1:
[  451.701825][   T31]  #0: ffff800088ea3130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64
[  451.701848][   T31] locks held by dhcpcd/4397: 1, on CPU#1:
[  451.701854][   T31]  #0: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  451.701877][   T31] locks held by getty/4489: 2, on CPU#0:
[  451.701883][   T31]  #0: ffff0000d0fc10a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[  451.701907][   T31]  #1: ffff80009256b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78
[  451.701933][   T31] locks held by udevd/4987: 1, on CPU#0:
[  451.701939][   T31]  #0: ffff0000c75fb350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880
[  451.701959][   T31] locks held by kworker/u8:14/5022: 6, on CPU#1:
[  451.701966][   T31]  #0: ffff0000c004e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  451.701988][   T31]  #1: ffff800092957c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  451.702010][   T31]  #2: ffff800089e7e4e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x104/0x6c4
[  451.702033][   T31]  #3: ffff0000d6d29128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x108/0x30c
[  451.702057][   T31]  #4: ffff0000d6d28258 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x30c
[  451.702080][   T31]  #5: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  451.702105][   T31] locks held by kworker/u8:25/6882: 3, last CPU#1:
[  451.702111][   T31]  #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  451.702134][   T31]  #1: ffff800095997c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  451.702160][   T31]  #2: ffff800088d82260 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x210/0x144c
[  451.702185][   T31] locks held by syz-executor/8473: 2, last CPU#0:
[  451.702191][   T31]  #0: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  451.702214][   T31]  #1: ffff800088d82260 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0xbc/0x364
[  451.702235][   T31] locks held by syz-executor/8478: 1, on CPU#1:
[  451.702241][   T31]  #0: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  451.702265][   T31] locks held by syz-executor/8553: 1, on CPU#1:
[  451.702271][   T31]  #0: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock+0x38/0x10c
[  451.702293][   T31] locks held by syz-executor/8587: 1, on CPU#1:
[  451.702299][   T31]  #0: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock+0x38/0x10c
[  451.702320][   T31] locks held by syz-executor/8637: 1, on CPU#1:
[  451.702326][   T31]  #0: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock+0x38/0x10c
[  451.702349][   T31] locks held by syz-executor/8690: 1, on CPU#1:
[  451.702355][   T31]  #0: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock+0x38/0x10c
[  451.702376][   T31] locks held by dhcpcd/8713: 2, on CPU#1:
[  451.702382][   T31]  #0: ffff0000f12b1f00 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4
[  451.702407][   T31]  #1: ffff800088d878e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x30c/0x66c
[  451.702429][   T31] 
[  451.702432][   T31] =============================================
[  451.702432][   T31] 
[  451.702438][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  451.816745][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT 
[  451.818743][   T31] Tainted: [L]=SOFTLOCKUP
[  451.819568][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  451.821561][   T31] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000)
[  451.823034][   T31] Call trace:
[  451.823638][   T31]  show_stack+0x2c/0x3c (C)
[  451.824454][   T31]  __dump_stack+0x30/0x40
[  451.825270][   T31]  dump_stack_lvl+0x30/0x12c
[  451.826134][   T31]  dump_stack+0x1c/0x28
[  451.826919][   T31]  vpanic+0x594/0xaf8
[  451.827692][   T31]  vpanic+0x0/0xaf8
[  451.828386][   T31]  hung_task_panic+0x0/0x2c
[  451.829228][   T31]  kthread+0x304/0x3d4
[  451.830028][   T31]  ret_from_fork+0x10/0x20
[  451.830838][   T31] SMP: stopping secondary CPUs
[  451.831860][   T31] Kernel Offset: disabled
[  451.832657][   T31] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7
[  451.833970][   T31] Memory Limit: none
[  452.221378][   T31] Rebooting in 86400 seconds..