last executing test programs:

38.576025836s ago: executing program 4 (id=30):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029009c4fb0750a770b98339db8bd9d64"], 0x18}, 0x3400c8d4)

38.575285521s ago: executing program 4 (id=31):
clock_adjtime(0xa432d3667ec576d8, &(0x7f0000000000)={0xb, 0x8a, 0x2, 0x2000000000009, 0x7, 0x800000000000000b, 0x64f, 0x2000ffffffff, 0x9655, 0x0, 0x6, 0x0, 0x5, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x81, 0x17, 0x0, 0xfffffffd, 0xc, 0x4, 0xfffffffffffffffe, 0x3, 0x6})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18)
bind$can_raw(r1, &(0x7f0000003580)={0x1d, r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0)
write$FUSE_STATX(r3, &(0x7f0000000340)={0x130, 0x0, 0x0, {0xfff, 0x0, 0x0, '\x00', {0x40, 0x1, 0x4621d334, 0x4, 0xee00, 0x0, 0xc000, '\x00', 0x80000000, 0x40, 0x0, 0x8, {0x8, 0x6}, {0x5, 0x5}, {0x8, 0x3}, {0x3, 0x9}, 0x200, 0xd, 0x3, 0x3}}}, 0x130)

38.436477856s ago: executing program 4 (id=35):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==")
mmap(&(0x7f0000118000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x810, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x1f, '\x00', @data=0x80000000, 0x2}, {0xb, '\x00', @buffer={"21e109bbd40fa1472189c967a000604fc0c88774148683d9fa93c5b07700", 0x3969fb0bb7642572}, 0x4}]})
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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")
io_setup(0x6, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
pipe2(&(0x7f0000000180), 0x80000)
faccessat2(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x300)
io_submit(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94)
add_key(0x0, 0x0, &(0x7f0000000780), 0x0, 0xfffffffffffffffa)

37.464827948s ago: executing program 4 (id=46):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48)
r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x246, &(0x7f00000002c0)="$eJzs3EFoFFcYB/BvZnebJllK2l4KhbZQSmkDIb0VekkvLQRKCKUUVIiIeFESISZ4Szx58aBnlZy8BPFm9Cg5GLwogqeoOcSLoMGDwYMeVnYnK9FsNLhxR5zfDyYzk5n3vjfs/t/sZSaAwuqLiKGIKEVEf0RUIiLZfMIP2dK3sTvXvTQWUav9+yRpnJftZ5rteiNiNiJ+j4jFNInD5Yjphb2rz5b//vnUVOWnCwt7ujt6kRvWVlf+WT8/cvLy8G/Tt+48GkliKKqvXdfuS1r8r5xEfPUhin0kknLeI2AnRo9fulvP/dcR8WMj/5VII/vwTk9+tliJX89t1/bM49vfdnKswO6r1Sr1e+BsDSicNCKqkaQDEZFtp+nAQPYb/l6pJz0yMXms/9DE1PjBvGcqYLdUI1b+utp1pfeN/D8sZfkHPl31/P83On+/vr1eyns0QCfV89+/f+aXkH8oHPmH4pJ/KC75h+KSfyiuZv6vyz8Ujvs/FJf8Q3HJPxSX/EMBpdlqc/4BgGKpdeX9BDKQl7znHwAAAAAAAAAAAAAAAAAAYKu57qWx5tKpmjfORqz9GRHlVvVLG68q+rzxt+dpUj/tlSRr1pZ937fZQZsu5vz09RcP8q1/87t868+MR8yeiIjBcnnr9y9pvirrvX35juOVA20WaNMf/+db/8V8R8pUtjswvBxxrT7/DLaaf9L4prFuPf9U39bxDh193mYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMzLAAAA//9XTm32")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000180)={@id, 0x10, 0x0, '\x00', @d})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@mpls_newroute={0x78, 0x18, 0x4, 0x70bd25, 0x25dfdbfb, {0x1c, 0x10, 0x20, 0x7, 0xff, 0x0, 0xc8, 0x7, 0x3000}, [@RTA_VIA={0x14, 0x12, {0x3, "9f24e9bcb65bd7aa40299ed522b8"}}, @RTA_VIA={0x14, 0x12, {0xa, "789a10be0124ed5cb9de89cbd971"}}, @RTA_VIA={0x14, 0x12, {0x18, "bbfb544c84e646349e67c8cba1bc"}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_DST={0x8, 0x1, {0x2}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_DST={0x8, 0x1, {0x9}}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x10)
setresuid(0x0, 0xee00, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000000)={@id={0x2, 0x0, @d}})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000200027bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800f000100626f6e645f736c61766500000c000580060005000101000008001300", @ANYRES32=r3, @ANYBLOB="077d46f1d046019de6127726481ddd503a482188014e316a306baecade"], 0x48}, 0x1, 0x0, 0x0, 0x24004805}, 0xc080)

37.06101415s ago: executing program 4 (id=54):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}]}}]}, 0x48}}, 0x4000010)

36.562624325s ago: executing program 4 (id=61):
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x3f12, 0x40, 0x3, 0x402c1})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3})
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3})
close_range(r1, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair(0x1, 0x1, 0x0, 0x0)
mmap$IORING_OFF_PBUF_RING(0x0, 0x6, 0x2, 0x10010, 0xffffffffffffffff, 0x80a2652c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)
write(r6, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000010002000008000f40fe000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)

36.523991473s ago: executing program 32 (id=61):
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x3f12, 0x40, 0x3, 0x402c1})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3})
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3})
close_range(r1, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair(0x1, 0x1, 0x0, 0x0)
mmap$IORING_OFF_PBUF_RING(0x0, 0x6, 0x2, 0x10010, 0xffffffffffffffff, 0x80a2652c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)
write(r6, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000010002000008000f40fe000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)

34.417626212s ago: executing program 0 (id=85):
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/memory/auto_online_blocks\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)="6f6e6c696e650abeb8", 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="bf16000000000000b707000001f1f0ff5070000000000000200000002c41000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff010011d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcebc7586186fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35eff00006b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f58fa48f61071f548d411353965615c24c1860fd0dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8bb07ebf6e3f16584e95607e319b2ea9778289c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba17a647a171c2fc73a8c7541c7ffaafba62195fce77382ae962f30d4a377d760040975a44aa73a4e687d06f96f0987b980f6f883534dfc71ace539eeeb08cff54e0e05d5e0563660a3664c67d0eb9cdf4eab93ab4bf1972a2acc5c5d43dc2f2b66d7493c390d042d896a1ad772f6d4c2cf38ba0"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380)=r2, 0x4)
sendmsg$sock(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="67f1", 0xfdef}], 0x1}, 0x40840)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100))
r6 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, 0xfffffffffffffffe, 0x11)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002540)=@overlay={0x80001000, 0xc, 0x4, 0x400, 0x4, {0x0, 0x2710}, {0x5, 0x2, 0x6, 0x8, 0x8, 0x3, "94b71c5c"}, 0x4, 0x3, {}, 0xde57, 0x0, r1})

34.197017022s ago: executing program 0 (id=91):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_usb_connect$hid(0x1, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x50, 0x8, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000b00)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x4, 0x3}, 0x30, 0x0)
landlock_restrict_self(r2, 0xd)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0xce1d, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}}}, 0xb8}}, 0x0) (fail_nth: 3)

32.812925555s ago: executing program 0 (id=127):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000010000000000000803000000000000000000000200000000010000000000000f02000000002e"], 0x0, 0x3f, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x1, 0x101}, 0x28)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0)

32.812696439s ago: executing program 0 (id=128):
r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f00000004c0)={[{@nodiscard}, {@noacl}, {@usrquota}, {@journal_path={'journal_path', 0x3d, 'mnt'}}, {@dax}, {@resuid}, {@init_itable_val={'init_itable', 0x3d, 0xa241}}]}, 0x0, 0x238, &(0x7f0000000940)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc4}, 0x1f, 0x0, '\x00', @c})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000002240)={@desc={0x1, 0x0, @desc4}})
syz_clone3(&(0x7f0000000080)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x4b)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x5991029, &(0x7f0000000300)={[{@noload}, {@jqfmt_vfsold}, {@data_err_ignore}, {@debug}, {@dax_never}, {@nouser_xattr}]}, 0x1, 0x4eb, &(0x7f0000000600)="$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")
getrusage(0xffffffffffffffff, 0xfffffffffffffffe)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x249, &(0x7f0000000bc0)="$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")
syz_open_dev$vim2m(0x0, 0x800, 0x2)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x105}, 0x38)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getrusage(0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101142, 0xeaff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01201800000000000000340000003400000009000000000000000000000904000000070000000000000e0100000000000000000000000000000d02000000000000000000000d000000008e9f000000000000015f002ca490fffb0c0a024c52e8e167"], 0x0, 0x55}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000140)}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x60, 0x5, 0x0, 0x7fff0000}]})

32.809659716s ago: executing program 0 (id=130):
personality(0x400000)
r0 = socket$pptp(0x18, 0x1, 0x2)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3000001, 0x4918899377305d5, r0, 0x63251000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94)
mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0xb)

32.443470071s ago: executing program 0 (id=144):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e24, @loopback}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x6, 0x0, 0x2, 0xc, 0x806, 0xfff2}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r8, 0x8b32, &(0x7f0000000040))
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8140, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$setownex(r10, 0xf, &(0x7f0000000280)={0x4})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x5, 0x8, 0x8, 0x3, 0x3})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x3, 0x0, 0x3f}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x1, 0x1, 0x33}}, &(0x7f00000004c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000340))

32.370863892s ago: executing program 33 (id=144):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e24, @loopback}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x6, 0x0, 0x2, 0xc, 0x806, 0xfff2}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r8, 0x8b32, &(0x7f0000000040))
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8140, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$setownex(r10, 0xf, &(0x7f0000000280)={0x4})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x5, 0x8, 0x8, 0x3, 0x3})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x3, 0x0, 0x3f}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x1, 0x1, 0x33}}, &(0x7f00000004c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000340))

27.655435575s ago: executing program 2 (id=227):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000400)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvfrom$inet6(r2, 0x0, 0x0, 0x2000, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(0xffffffffffffffff, &(0x7f0000004040), 0x0, 0x40000002, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x180, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x11, 0x0, 0x5], 0x1, 0x5}, {0x0, [0x1, 0x1, 0x4, 0x6, 0x20], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)

26.973454942s ago: executing program 2 (id=232):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x7d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x18}, 0x3400c8d4)

26.956968666s ago: executing program 2 (id=233):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000000000000100000dffff0f00fdffffff0400000200004e390679ac75b836e97bb8e6cc056aed8d227838d7c702ee1c946c37d2200063d638c52ae598f1b3c1a9379ae6ae5b1574c70e84054985e9a6e80bd25e0a74ab83c220986a65bee58a5ddb12984f4ee973352cd7a0abbd83e035610371e524cdc3af4edfc9835e05491846ea6e45ec79abcf2a02e0965a476c009e31c709"], &(0x7f0000001f00)=""/4096, 0x2e, 0x1000, 0x1}, 0x28)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0xb0b}, 0x14}}, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}})
ioctl$MEMREADOOB64(r0, 0xc0184d16, &(0x7f0000000380)={0x0, 0x0, 0xd3, &(0x7f0000000280)="b89aca03fbd3586336c1e86b05ed328f6582e03d428de74fb4cb3d907bbff9d559feec49ed36b1ced2340386aeefcded80500519897fde5d6ed7fdaa26e48ffaa8d489bf377820b699959ad7797c89c1f09b86f8c0c9e5aab7abbda1db498117f6369fa76adfc3cf8bd210638996fe56a52ca1b18acabb1d3096cbb80b40d5e03e7bfb673fcb62ade94af178b4642c1a3069f6c59ac24dae4ea5710a3c732b8aaabcc432ab4ba66f37e03a585282be08e325f98fc314618d2975cb2a67a1f54a4eeba8e0ec28ae318bc5b43dc506033a2404a7"})
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000003000/0x3000)=nil})

26.89710356s ago: executing program 2 (id=234):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x7d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x18}, 0x3400c8d4) (fail_nth: 1)

26.896511224s ago: executing program 2 (id=235):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write$sysctl(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
close(r1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000240)={0x80, 0x3, 0x3, 0x3}, 0x8)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000000)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
r5 = syz_pidfd_open(r3, 0x0)
process_madvise(r5, 0x0, 0x0, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
getcwd(0xfffffffffffffffe, 0xfffffffffffffec5)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_int(r7, 0x1, 0x23, &(0x7f0000000200), &(0x7f0000000280)=0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x7d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x18}, 0x1400c8d4)

26.881111475s ago: executing program 2 (id=236):
setns(0xc9, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x4a, 0x3, 0x4, 0x5}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x4000)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a00000008000000000700000004", @ANYRESDEC=r0], 0x18}}, 0x84)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x67)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/185, 0xb9}], 0x1, &(0x7f00000013c0)}, 0xc}], 0x1, 0x22, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

22.316676099s ago: executing program 6 (id=299):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) (async)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @qipcrtr={0x2a, 0x3, 0x1}, @hci={0x1f, 0x4, 0x2}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x5, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='veth0_to_bond\x00', 0x34, 0x9, 0xd62}) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2888004, 0x0, 0x1, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) (async)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) (async)
umount2(&(0x7f00000002c0)='./file0\x00', 0xd) (async)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) (async)
r4 = msgget$private(0x0, 0x200)
msgctl$IPC_INFO(r4, 0x3, &(0x7f00000003c0)=""/161) (async)
chdir(&(0x7f0000000000)='./file0\x00') (async)
openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x42142, 0x190) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01022abd7001000000250f0000f829000e0068"], 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002380)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00002001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000000000000000000000fc000000000000000000000000000001e0000001000000000000000000a96af2e28000000000000000000000000000aa32607e811c0000000200020000000000000000000000ffff7f000001fc0200000000000000000000f7000000e0000002000000000000000000000000fc0200000000000000000000000000003c000000000000000a000a00b7cd"], 0xec}}, 0x0)

22.20097836s ago: executing program 6 (id=300):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000080000800c00018008000400", @ANYRES32=r0], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

22.167370465s ago: executing program 6 (id=301):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x615}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c081}, 0x4048044)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="87632abd7080fcd2df254a0000000e0001006e657464657673696d008e9c0f0002007e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40440c4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x7, &(0x7f0000000140)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x4, 0x7f, &(0x7f0000000040)=""/127, 0x0, 0x4e}, 0x94)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x99, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="34104000", @ANYRES16=r4, @ANYBLOB="10002abd7000fddbdf250100000008002c00ff030000050037000000000005002f0001000000050030000100000008000600", @ANYRES32=r5, @ANYBLOB="050029000100000008000600", @ANYRES32=r6, @ANYBLOB="08003b0003000000"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x5)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0) (async)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x615}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c081}, 0x4048044) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="87632abd7080fcd2df254a0000000e0001006e657464657673696d008e9c0f0002007e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40440c4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x7, &(0x7f0000000140)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x4, 0x7f, &(0x7f0000000040)=""/127, 0x0, 0x4e}, 0x94) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x99, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) (async)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="34104000", @ANYRES16=r4, @ANYBLOB="10002abd7000fddbdf250100000008002c00ff030000050037000000000005002f0001000000050030000100000008000600", @ANYRES32=r5, @ANYBLOB="050029000100000008000600", @ANYRES32=r6, @ANYBLOB="08003b0003000000"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x5) (async)

22.097100061s ago: executing program 6 (id=302):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(0x0, 0x3000, 0x2000003, 0x12, r0, 0x8000000)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000240)=0x8)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)=0x2)
socket$inet6(0xa, 0x3, 0x1) (async)
r1 = socket$inet6(0xa, 0x3, 0x1)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in6=@private1, 0x4e24, 0x0, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x90b, 0xffffffffffffffcf, 0x3, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x5, 0xc}, 0xd9, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4004d3, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x7, 0xfffffc01, 0x3, 0xfffffffb}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in6=@private1, 0x4e24, 0x0, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x90b, 0xffffffffffffffcf, 0x3, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x5, 0xc}, 0xd9, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4004d3, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x7, 0xfffffc01, 0x3, 0xfffffffb}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) (async)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) (async)
setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, 0x0) (async)
ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, 0x0)
ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000080)={0x5, "26000b2b62234a3f805334dc7c4e5f6dc0c2ac6a76f322462bd20111297ed991", 0x3, 0x8, 0xfffffffd, 0xd91, 0x8, 0x2, 0x5, 0x3})
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000580))
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) (async)
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]})
ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000140)={0x0, 0x8, 0x2})
r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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")
r7 = openat(r6, &(0x7f0000000080)='./file1\x00', 0xc2040, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
write$ppp(r5, &(0x7f0000000200)="7d9d", 0x2)
syz_clone(0xa020000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
eventfd2(0x9, 0x0) (async)
eventfd2(0x9, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

21.994211927s ago: executing program 6 (id=304):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x58, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:usb_device_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40002}, 0x28000080)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x30, r1, 0x5, 0x0, 0x20000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004850}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000004000000000000000000000904000000000000000000000184d9fcb20998055d"], 0x0, 0x5c, 0x0, 0x1}, 0x28)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002980)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16, @ANYRES64, @ANYBLOB="01ce6671a3b30f673148672100038bbb4413ea284b892438cdddda3da4c78d940655fbd68a286059c5766f98f85fb413503eaf8c90a24dda1e09f68cd741168d69dae50652ca7b67c5b0a27ab80ff9afa5000443de8c748e1d5beabee7c1346b215f641ae190d56ea4ab81bacd909929deb5757040e8d5b2752ea779c30f600bd516a68d881e7fc7289826d49e35134a94e27f115c8195a0f152cbd840ffdb008356c72319cceb43ccb1280556efdf0fdf582fd3cfc830dff1787f000000b7400f5aef57b6dcbfde7af6012383adb085c40e4c295c9fd9e750a42400e58523d24b8eecd75caabcee22347bdb78b72b400d080a044ebde5d39ad91ff0ef75aa244381cf00cd6fe9b9a92a9968104bf02481022af426853287e521a4e3cfe480f984efcea1359ff932ebd3bc75aefea41074799f3502a7472a6686b4011a41d7f0cfb25b3dc3077b4e8ded17cfff2b1d59bc12f637436690f5ca91ee999ec138f6ce66522e652939a37409edb78f9ae18489f9d2b73c81609399f0d123f1721171bd72c012623f04d8965d3e574e82a40d5798ab36af821c9b308731422ba3858b9895ace14068ea58f8cb6060c205caf209a73628eff5b9270a4a55c2d7fc59a4fe6e023bd424d8b010e2232d1b2e6ca603b466b2c82afff4a8cc469e8664d54769fc97df122b3ff8c34354dad4e0beb3826e72e538c0595caa056984ab8974af7cdae5bde6a12f412fe2a876aa191e78e91fbf780e2f4a20f57d41376b29f990ce63aa6edf622d2203fee37df269abf869d13b175852b775fff70491d1e5d1311b7eef954a101ddb98c5ba2b312528485ece7aff23cc6fee599d04a0fca71a5970cf0fc82b49640cc3fabbc401dead4f83aa0c4072a9e98ab5afb790be17961fc073e2f8f800000000000000005089d6db5ad893ee9b22b9250d01980952d0a3e0076c877556fa43f90cb574fd6ad67398ac4d9f8ff4e3ef09f99220928602523adc2289b51328ac152bd7edc66d4e962cbc2d2b0c5f8e48384eff563a10787b0199642385e811504e7168804114842d51f42dd6937515fa64b2fd14ef427072c6556b99171bd00165a9aada7173f001679ac791ee67188c670f583f7b1f8df68b97f4dcb5652f2b13aa941b7ff56c48fb7162e91ef53c70938a92e4bf55d65319f74766a309722f767fc8f3db2a194a2f098336601be2edcbcc9b562f2fc64e2deff9a16e84f1e8bc5fb82c91f4d10e34f5a093fc4fcbdb89342274857c8e6aa8864b5007cede80ff5931bff340780a3b43bc0466340c195a515f779d0333dd467bb665508d9c89e18e86d1975e273f937e3bd100"/958, @ANYRESOCT=0x0, @ANYRESOCT], 0x1, 0x1f0, &(0x7f0000000800)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x58, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:usb_device_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40002}, 0x28000080) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x30, r1, 0x5, 0x0, 0x20000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004850}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000004000000000000000000000904000000000000000000000184d9fcb20998055d"], 0x0, 0x5c, 0x0, 0x1}, 0x28) (async)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002980)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16, @ANYRES64, @ANYBLOB="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"/958, @ANYRESOCT=0x0, @ANYRESOCT], 0x1, 0x1f0, &(0x7f0000000800)="$eJzslc1qFEEQx38905tJdA85ewoYTC6a7ATENzAP4AO4bMYYnPUjs6C7BFy95OJBfImAT+FB0LsHEcFLPCjoIeIpIis9Xd3OsguTaAgE+g9LfXTVv6p3uqtvFw+KBPh9sNNhnhKKJh+VQgNLyvoOZ6z8IXIk+KKt3RL/S5GfRRb9wbtnVh3caed5tl30axSloC4mH2EVKc94kJ5SzEXWUr99Ou5RTA2OgCPt50QUU21iqRfbLU1mPR/zJNNiJJdTaP7flYVjnBu7U6v8bI4fia8n3ViDIwQn/1MCvOdXs/4zfXhhP+fUmFjS5yZuyllTomNlFcj4Kq4/ifheGu8PdjpGuSlTzPg27M9diTLGGK8rMRc0DEHFjDyPLqclLAErve79laI/uLzVbW9mm9ndNF27uvrmvFzR0WPYyrNVVWnDXGrcXAISiCPLWK43gE9/14dUoCqtGZwDJTPXU7rhvHyxkjgHUSW3ymF5X/n6ifhiutzgErPAw6FagBT7by1i2DS3zNbWUcRitHSlTzgkYrZcuNK5l2/solAubQ/tOVr7NLyRimEKZWvX/PZ3RS6KXBe5J3JfpHu73JukS4ZvYi0PYYZH7V5vu3y8rOZ9qfel875yJFXda6hcJwkBAQEBAQEBAWcEfwIAAP//KzlAMA==") (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async)

21.174821649s ago: executing program 6 (id=305):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1})
readv(r0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x38110, 0xffffffffffffffff, 0xffff9000)
userfaultfd(0x80001) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) (async)
readv(r0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x38110, 0xffffffffffffffff, 0xffff9000) (async)

21.094467881s ago: executing program 34 (id=305):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1})
readv(r0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x38110, 0xffffffffffffffff, 0xffff9000)
userfaultfd(0x80001) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) (async)
readv(r0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x38110, 0xffffffffffffffff, 0xffff9000) (async)

15.525450538s ago: executing program 7 (id=352):
syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
setresuid(0x0, 0xee01, 0x0)
r3 = getpgid(0xffffffffffffffff)
syz_open_procfs$namespace(r3, &(0x7f0000002000)='ns/net\x00')
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405"], 0x48}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

15.420918331s ago: executing program 7 (id=354):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x408, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r7=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x9, 0x7fff0000}]})
clock_settime(0x1ed5d7403, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="2e9b3d0007e23dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a1906921937150b647d5c0bf7b517775f391ab85153d1a84d1754fe885c9afc52f064806ff", 0x46}], 0x1)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0)
getsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
pwritev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="4799", 0x2}], 0x1, 0x82e, 0x8001)

15.136240698s ago: executing program 7 (id=358):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x4d}]})
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3)

15.104831782s ago: executing program 7 (id=359):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x3}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) (async)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async)
prctl$PR_MCE_KILL(0x21, 0x3, 0x1)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, 0x0) (async)
bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000050) (async)
waitid(0x1, 0x0, 0x0, 0x61000006, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x12, 0x34, @random="8d1b096efbe581a15104a4d28c28"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5e}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001)

14.990686635s ago: executing program 7 (id=362):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)}, 0x4048043)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0x1, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x7, @empty, 0x4}}, 0x9, 0x1, 0xfffffff6, 0x9, 0xad, 0x6, 0xf2}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c)

14.978230751s ago: executing program 7 (id=363):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) (async)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES64=r3, @ANYRESHEX=r0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES64=r3, @ANYRESHEX=r0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
pipe2$9p(&(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x0)
ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000100)={0x1, &(0x7f0000000a00)=[{0x5, '\x00', @buffer={"6d0b38a8b97684fc78ba87047a1e01ed357562399d453382a043537c730d2d5f", 0x20}}]})
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',.'])
sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) (async)
sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)
socket$l2tp(0x2, 0x2, 0x73)
r6 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
memfd_secret(0x0) (async)
r7 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0)
ftruncate(r7, 0x51a9497)
ioctl$MEMGETREGIONCOUNT(r6, 0x80044d07, &(0x7f0000000040)) (async)
ioctl$MEMGETREGIONCOUNT(r6, 0x80044d07, &(0x7f0000000040))
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec774000) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec774000)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x18) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0)
process_vm_readv(0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) (async)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
move_pages(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000080), 0x0, 0x0)

11.564661286s ago: executing program 35 (id=236):
setns(0xc9, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x4a, 0x3, 0x4, 0x5}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x4000)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a00000008000000000700000004", @ANYRESDEC=r0], 0x18}}, 0x84)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x67)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/185, 0xb9}], 0x1, &(0x7f00000013c0)}, 0xc}], 0x1, 0x22, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

10.006957219s ago: executing program 5 (id=421):
socket$kcm(0x1e, 0x2, 0x0) (async)
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80)
r1 = socket$kcm(0x1e, 0x4, 0x0)
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
connect$tipc(r3, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x3}}, 0x10) (async)
connect$tipc(r3, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x3}}, 0x10)
sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff2500021d07540006a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0xffffffffffffff49) (async)
sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff2500021d07540006a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0xffffffffffffff49)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef)

9.865014154s ago: executing program 5 (id=424):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1810714, &(0x7f0000000240)={[{@test_dummy_encryption}, {@init_itable_val}, {@dioread_nolock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@nojournal_checksum}, {@minixdf}, {@nouid32}, {@errors_remount}, {@lazytime}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xdf, 0x478, &(0x7f0000000c00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9.814291627s ago: executing program 5 (id=426):
clock_getres(0x3, 0x0)

9.720932366s ago: executing program 5 (id=427):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, @tid=r0}, &(0x7f0000000140))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
waitid(0x1, r0, 0x0, 0x1, 0x0)
r1 = getpgid(r0)
r2 = syz_pidfd_open(r1, 0x0)
process_madvise(r2, &(0x7f0000000480)=[{0x0, 0x2c}, {&(0x7f0000000000)='\x00', 0x1}], 0x2, 0x4, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
chdir(&(0x7f0000000380)='./file0\x00')
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x5)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x14985, 0x3, 0x3}, 0x18, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
recvmsg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
landlock_restrict_self(r5, 0x1)
connect$unix(r6, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0)

8.883872934s ago: executing program 5 (id=432):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async, rerun: 64)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') (rerun: 64)
preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/41, 0x29}], 0x1, 0x0, 0x0)
write$sysctl(r3, &(0x7f0000000080)='4\x00', 0x2)
writev(r3, &(0x7f00000003c0), 0x100000000000022d) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="5fb5ac00000500000000fb7c14b83496fd00000000000080000000f0a563924d576bd64f50bbafb0b90000f49b50012e97cae43386103c", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.532169974s ago: executing program 5 (id=436):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x48041}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x2, 0x2, 0x5, 0x5, 0x1})
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a"], 0x24}, 0x1, 0x0, 0x0, 0x20000805}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(0x0, 0x7)
syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0)
write(r5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000780)={r8, 0x2, 0x40000004, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x9], [0xfffffffc, 0x0, 0xfffffffc], [0x1, 0x0, 0x7, 0x401]})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000140)={r8, 0x0, 0xc, 0x1, 0x3, [], [0x8, 0x5, 0x7ff, 0xcb9], [0x3, 0x81, 0xfffffff8, 0x7], [0x1, 0x5, 0x9]})

8.388024111s ago: executing program 36 (id=436):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x48041}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x2, 0x2, 0x5, 0x5, 0x1})
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a"], 0x24}, 0x1, 0x0, 0x0, 0x20000805}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(0x0, 0x7)
syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0)
write(r5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000780)={r8, 0x2, 0x40000004, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x9], [0xfffffffc, 0x0, 0xfffffffc], [0x1, 0x0, 0x7, 0x401]})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000140)={r8, 0x0, 0xc, 0x1, 0x3, [], [0x8, 0x5, 0x7ff, 0xcb9], [0x3, 0x81, 0xfffffff8, 0x7], [0x1, 0x5, 0x9]})

4.58866217s ago: executing program 8 (id=480):
socket$inet6(0xa, 0x3, 0x8000000003c)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x7df483, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0xb81, 0x9}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getdents64(0xffffffffffffffff, 0x0, 0x22)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0xf, 0x201, 0x70bd2a, 0x25dfdbfb, {0x1, 0x0, 0x2}}, 0x14}}, 0x4000000)

3.698158776s ago: executing program 8 (id=491):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="f40edef05f6b100002ca55fcc4a6ac4b0cc9a6fefe2503b916b657c03bcf73589751d7e8bd255b28e9bb9ab822ad0f24bc14686e09d0f115e6cb57282a7e26671b34329c3b338c145a05a0b4734d849f41d44bb3efc4a9c637ec5aacdab3b95147646fb50d028a4fb5287c959bb6b1494e7c1832a5d0f00498ddd7f83eae803f167b055da5720771a2cdc00cac6e5b4ab0ec084094d115f39d977aad1051deca51d140661218631e44c2073de9be3169c22d7c760ea7bc3ac24f0bb939e844114d", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000fffff7ffffff080211000001"], 0x6f4}}, 0x0)

3.624907873s ago: executing program 1 (id=493):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_usb_connect$hid(0x1, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x50, 0x8, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000b00)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x4, 0x3}, 0x30, 0x0)
landlock_restrict_self(r2, 0xd)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0xce1d, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x2000000, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}}}, 0xb8}}, 0x0)

3.620057254s ago: executing program 8 (id=494):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x7d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18}, 0x3400c8d4)

3.553056842s ago: executing program 8 (id=495):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file3\x00', 0x1010041, &(0x7f0000000000)={[{@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpjquota}]}, 0x1, 0x546, &(0x7f0000000180)="$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")
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x4)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r1) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) (async)
chdir(&(0x7f0000000040)='./file0\x00') (async)
mount$9p_xen(0x0, &(0x7f0000000100)='./file3\x00', 0x0, 0x32048, 0x0)

3.396858492s ago: executing program 8 (id=496):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x2, 0x6, 0x3ee3a0bb753ce0b, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20044040)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="008400000000040014001a80100004800c000180"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
close(r0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f0000000100)={0xa, 0x4e65, 0x80000, @dev={0xfe, 0x80, '\x00', 0x7b}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x18}, 0x3400c8d4)

3.000041883s ago: executing program 1 (id=498):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c)
read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000025c0)=r1) (async)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000025c0)=r1)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x11b}, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0xa}, 0x60)
getsockopt$inet_buf(r3, 0x118, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040))

2.876907998s ago: executing program 8 (id=499):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@mblk_io_submit}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x1000)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00', 0x1}, 0x18)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x1}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3)
sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x301}, 0x14}}, 0x0)
mremap(&(0x7f0000a47000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2.87034268s ago: executing program 1 (id=501):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00')
ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000298000/0x4000)=nil, 0x4000, 0x6)
munlockall()
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfd, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
ioctl$KDGKBLED(r1, 0x4b64, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00')
readlinkat(r6, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/72, 0x48)

2.827020967s ago: executing program 37 (id=499):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@mblk_io_submit}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x1000)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00', 0x1}, 0x18)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x1}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3)
sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x301}, 0x14}}, 0x0)
mremap(&(0x7f0000a47000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2.823647543s ago: executing program 1 (id=504):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', <r2=>0x0})
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000300))
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00', 0x126)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000280)={{<r6=>0xffffffffffffffff, &(0x7f0000000000)='\x92\x00', 0x202, &(0x7f0000000080)={@_ha_fsid={[0x400, 0xc0000000]}, {0x3, 0x1000, 0x6, 0x1}}, 0x80000001, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1}, {[0x7e6f6e44, 0x800, 0x5, 0x8]}, 0x0, 0x85, &(0x7f00000001c0)=""/133})
listen(r6, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="1100070022010ee0b50599c4ee0507272700000020006e"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.959939304s ago: executing program 1 (id=510):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f00000008c0)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x3, 0x2, {{0x34, 0x4, 0x0, 0x39, 0xd0, 0x68, 0x0, 0x10, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101, {[@ssrr={0x89, 0x23, 0x5, [@remote, @multicast1, @multicast2, @loopback, @local, @remote, @private=0xa010101, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x53, 0x3, 0x3, [{@private=0xa010100}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x3a}}, {@multicast1, 0x7f}, {@multicast2, 0x3}]}, @timestamp_prespec={0x44, 0x3c, 0xc2, 0x3, 0x4, [{@private=0xa010102, 0x4}, {@private=0xa010100, 0x6}, {@private=0xa010100, 0x1}, {@local, 0x7b5}, {@rand_addr=0x64010102, 0x3}, {@multicast2}, {@loopback, 0x10000}]}, @timestamp={0x44, 0x14, 0xd9, 0x0, 0x9, [0x8, 0x9, 0x148c19a2, 0x6]}, @timestamp={0x44, 0x1c, 0x8e, 0x0, 0x9, [0x1, 0x9, 0x7fff, 0x6, 0x8, 0x101]}]}}}}})
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1a, 0x1a, 0x4, [@datasec={0xf, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x5, 0xa0000}], "10bd"}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000300)=""/140, 0x38, 0x8c, 0x0, 0xffffffff, 0x10000, @value=r0}, 0x28)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r6=>r1, {0x1000}}, '.\x00'})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES32, @ANYBLOB="0300000092000000070000000300000080410000", @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02270102f942036e83579214221a9bf0ecffff02000000040000000000000000f5ff20000087e34acd61322809c37fa509e927022cdacff6963fec514c5dfe289d46fdd7288b2c96d98f473cb63324f0903f1baef2fec70f2901c89918442a475914f45af222587e6c8b25d2cfc19deda7b496223b8528c7555e407cbe4d5376fd13f4d1dda007e83f3c60202494d7061d910b220b725434d024230d3205e47be4512664e78d22ed3b2bdb4a1128ac9f336ae9c3f74ca2de1d24ebec79101120481326f881b2d3", @ANYBLOB="572bb6c3bf44b9eb00578dd03794b38611a67cef589d721f326594cc0a87826ca9723e6c022e8ebbb010edce8cde349c86d8fbb9e79ed32fb70282e95635fa1ec7f0b95d506471b5537dc2f57bccc71d92ceebe06db825bbfff930525b0a5f183141cbc1a9d8", @ANYRESHEX=r0, @ANYBLOB="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"], 0x50)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x400, 0x8}, 0xc)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00'}, 0x18)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r13, @ANYBLOB="00000000000000001c001a801800048014000680"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=@raw=[@exit, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x200}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x48}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa2c, 0x0, 0x0, 0x0, 0x98}], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xfe, &(0x7f00000001c0)=""/254, 0x41100, 0x13, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0xf, 0x1, 0x100}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000740)=[r5, r6, 0x1, r7, r8, r9, r10, r11], &(0x7f0000000780)=[{0x2, 0x3, 0xe, 0x2}, {0x5, 0x3, 0x3, 0xa}], 0x10, 0xa3d0}, 0x94)
ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000001cc0)="293f93e852af2a43b4db9b22db0b0ea727b0d9b60ff303b4fa43b8635da8b3dd1e915db5d5a224231db27e040744b01a7bccd0160785946bc5b7fdf9df5901b933cbe643877a0c26d6f771c8193f8d7c911bbb452ee19faae378290bbb2bb92bce82e6aa561aa9b34e733018f66c4c47f15d64af21a7fd7761f5af880d62f1c9c131288f0e3a3450d1b54acbec23199610e465d1b7228f20e181fa99d804b8a020143f8b79b7e572710775b19653ad91378abfe437")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
futex_waitv(&(0x7f0000004040)=[{0x6, &(0x7f0000003f80), 0x2}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x7d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x18}, 0x3400c8d4)

1.72846793s ago: executing program 1 (id=512):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffc5, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}]}]}, 0x20}}, 0x4000080)

1.679816071s ago: executing program 38 (id=512):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffc5, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}]}]}, 0x20}}, 0x4000080)

623.387944ms ago: executing program 3 (id=524):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1082, 0xfffffffb, 0x89}) (async)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x31, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

544.176137ms ago: executing program 3 (id=525):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x2}}, 0x10, 0x0}, 0x0)
r1 = syz_io_uring_setup(0x29d8, &(0x7f0000000540)={0x0, 0x2600, 0xc00, 0x2, 0xf}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r6=>0x0})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0xe6eedc45313651a9, 0x94, 0x1}, 0x9c)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002380)=@newtfilter={0x3a08, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x39d4, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0xfff0}}, @TCA_MATCHALL_ACT={0x13cc, 0x2, [@m_nat={0xa4, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x7c, 0x6, "16d21b790807cf325acbfeff710876e5466f9c0941495cdd465378bfa75c86a6fb15ce4bfc1e4fbe574620b38294c9ec86791b187eefba3d700efd53be5ad1a551db075aa9cc28971a80e5ba50ac0e7ac72a8795309aab616093d8e752b61b69e592fab5aa72dc938ceac9afdad9342b986caebada5e15eb"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x1278, 0x5, 0x0, 0x0, {{0xb}, {0x114c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x3, 0xffff, 0x8, 0x101, 0x0, 0xed4, 0x0, 0x6, 0x10000, 0x3, 0x1, 0x1, 0x0, 0x1, 0xfffffffb, 0x0, 0x8, 0x75, 0x8, 0x4, 0x5, 0xa, 0xfffffffb, 0x10, 0x5e29, 0x3ff, 0x9, 0x7dea, 0x7fff, 0xfffffffa, 0x7, 0x0, 0xb, 0x4, 0x8, 0x8, 0x2, 0x8001, 0x9, 0x1, 0x811, 0x7, 0xdb, 0x179b, 0x6, 0x3, 0x3, 0xc, 0x3ff, 0x8, 0x0, 0x7fffffff, 0x30000000, 0x180, 0x5, 0x9, 0xc, 0x1, 0x5, 0x7, 0x10001, 0x6, 0x2, 0x5, 0xfffffff3, 0x6, 0x7, 0x3, 0x0, 0x7f, 0xfff, 0x617e, 0x9, 0x8, 0x9, 0x0, 0x5a, 0x1, 0x7fffffff, 0x2ef2, 0xfe8c, 0xfffffff8, 0x101, 0x8, 0x8, 0x8, 0x4, 0x5, 0x3, 0xffff588c, 0x8a, 0x6, 0x80, 0x9, 0x2, 0x9f, 0x4, 0x81, 0x0, 0x449c46eb, 0x10, 0xa912, 0x0, 0x0, 0x1716, 0x10001, 0x200, 0x4, 0x7, 0x0, 0x4, 0x7, 0x1, 0x7, 0x35, 0x401, 0x800, 0xfee7, 0x8, 0x1, 0x5, 0x4, 0x10001, 0x10001, 0x12048fde, 0x100, 0x1520, 0xa, 0x6, 0x4, 0x9, 0x7, 0xc0dd, 0x1ff, 0x10001, 0x12, 0x2, 0xa, 0x2, 0xfffffeff, 0x6, 0x9, 0x7, 0x74, 0x115e, 0x4, 0x8001, 0x7, 0x3f, 0x3, 0x30000000, 0x80000000, 0x8, 0x5, 0xedce, 0x3ff, 0xfff, 0x1, 0x3ff, 0xfffffffa, 0x10001, 0x7, 0x3ff, 0x1, 0x195, 0x5, 0x7f, 0x80, 0xa, 0x8, 0x8, 0x8, 0x8, 0x1, 0x0, 0x800, 0xc, 0x40, 0xd6a, 0xad, 0x3, 0xfffffffa, 0x8, 0xe0000000, 0x5, 0x7ff, 0xfc, 0x8, 0x3ff, 0x1, 0xeb, 0x8, 0x2, 0x6, 0x90c4, 0xf765, 0x10, 0x6, 0x5, 0xffff5304, 0xffffff01, 0x1, 0xfff, 0x200, 0x9, 0x4, 0x4, 0x2, 0x5, 0x80000000, 0x2, 0x8c, 0x7f, 0xb6d, 0x10001, 0x33, 0x5, 0x4, 0x6, 0x0, 0x7, 0x1, 0x7, 0x0, 0xb82f, 0x4, 0x2, 0x10001, 0x3, 0xdd24, 0xfffeffff, 0x6, 0xfff, 0xffff, 0x3, 0x7, 0x1, 0x3, 0x4, 0xe, 0x1000, 0x8, 0x2, 0x5, 0x6, 0x9, 0x1a35156, 0x5, 0x47, 0xfffffff1, 0x5, 0xab4, 0x6, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc0b}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x1, 0x3, 0x8000, {0x2, 0x0, 0x5, 0x81, 0x6, 0x5}, {0x7f, 0x1, 0xa79e, 0xfffc, 0x100, 0x2}, 0x2, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9fc9}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x5, 0x1, 0x7, 0xfffffffa, {0x1, 0x1, 0x9, 0x401, 0x3, 0x4}, {0xe9, 0x0, 0x3, 0x400, 0x4, 0x2c}, 0xbfd, 0x7}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x35}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x65, 0xb, 0xc3c, 0x9, 0xfffffff0, 0x98c, 0x401, 0xffc00000, 0x5, 0x8001, 0x0, 0x14dfdb37, 0x0, 0x2, 0x7b50, 0xda10, 0x7, 0x3, 0x8, 0x40, 0x200000, 0xc, 0x5, 0xfffffc01, 0x5, 0x3, 0x7f1, 0x6, 0x5, 0x23, 0x4, 0x9, 0x1, 0x0, 0x8, 0xd, 0xff, 0x4, 0xa, 0x40, 0x6, 0x9, 0x3, 0x7, 0x3ff, 0x3, 0x5, 0x7fffffff, 0x0, 0x2, 0x8, 0xff, 0x3, 0x6, 0x800, 0x3, 0x3, 0x3, 0x6, 0xfff, 0xc0, 0x80, 0xd, 0xc, 0x1, 0x3, 0x7, 0x57, 0xda, 0xdbe, 0xbeae, 0x7, 0x0, 0xbe35, 0x8, 0x6, 0x7fffffff, 0x7, 0x7, 0x5, 0x7f, 0x0, 0xff, 0x4, 0x4, 0x3, 0x37ab, 0x8, 0x3, 0x400, 0xc, 0x1, 0x4, 0x401, 0x27, 0x5, 0x31, 0x33fa, 0x3, 0x7, 0x4, 0xfffffff9, 0x5, 0x14, 0x4f1, 0x5d6d, 0xce1, 0xffffffff, 0x4, 0xffff, 0x8, 0xfffffffe, 0x800, 0x77, 0xfffffffe, 0x3, 0x200, 0x7, 0x4, 0x9, 0x8a, 0x7, 0x10001, 0x4, 0x31af, 0x4, 0x2, 0x3, 0x8000, 0x95, 0x6, 0x10001, 0xa6fd, 0x9, 0x2, 0x9, 0xd0, 0x1000, 0x5, 0x7fffffff, 0x8, 0x0, 0x80000000, 0x35, 0x0, 0x4040000, 0x0, 0x3, 0x9, 0x3660, 0x3, 0x7fff, 0x33, 0xffffffff, 0x80, 0xc5, 0x2, 0xf, 0x5, 0x7, 0x9, 0x2, 0x8, 0x6, 0x6, 0x5, 0x8, 0x1c, 0xffff, 0x3, 0x51a3, 0x2, 0x9, 0x7, 0x5a, 0x6, 0xfffffffb, 0xfffff38e, 0x1, 0xfffffffd, 0x6, 0x0, 0x2, 0x0, 0x4, 0x0, 0x5, 0x5, 0x5, 0x1ff, 0x9, 0x0, 0x7, 0xf0, 0x223, 0x9, 0xe25, 0x3, 0x8, 0xfff, 0x10001, 0x3, 0x9, 0x6, 0x7ff, 0x4, 0xf, 0x3, 0x2, 0x5, 0x38e, 0x1, 0x0, 0x0, 0x3, 0x8, 0x0, 0x1, 0x5, 0x8, 0x1, 0x0, 0x0, 0xa2, 0xfffffff6, 0x4, 0x10001, 0x3, 0x4, 0x0, 0x8001, 0x8, 0x0, 0x401, 0x2, 0x4b, 0x2, 0x5, 0x4, 0x5, 0x0, 0x7ff, 0xffffffce, 0x7d5, 0x1, 0x2, 0xffff907a, 0x3, 0x8, 0x1, 0xc9ac, 0x547, 0x4, 0x0, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x76, 0x0, 0x2, {0x2, 0x1, 0x8, 0x400, 0x2, 0x8}, {0x0, 0x2, 0x8, 0x1, 0xdf7, 0x1}, 0x62f, 0x0, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x7, 0x2, 0x4, 0x9, 0x5, 0x9, 0x0, 0xffffffff, 0x2, 0xfffffff8, 0x4, 0x200, 0x6, 0x5, 0xa, 0x80, 0x5, 0xc, 0xffc00000, 0x8, 0x1ff, 0x800, 0x200, 0x6, 0x401, 0x59a57cc8, 0xffffffff, 0xffffffff, 0x2, 0x40, 0x1ff, 0x4, 0x3, 0xfffffff8, 0x431, 0x977, 0x3, 0x7fffffff, 0xdd, 0x8001, 0x7f, 0x9e12, 0xffffffff, 0x6, 0x1, 0x5, 0x8, 0x9, 0x9, 0x8, 0x8001, 0x80000000, 0x6, 0x7f000000, 0x4, 0x1bc0, 0x4, 0xffff, 0x23ef, 0x2, 0x4, 0x0, 0x2, 0x4, 0x2, 0x4, 0x6, 0x9, 0x9, 0x80, 0xe086, 0xff, 0x4, 0x80000000, 0x6, 0x26f, 0x5, 0x7, 0x4, 0xffff4214, 0xfff, 0x6, 0x7ff, 0x7, 0x1, 0xa, 0x7, 0x9, 0x7, 0x3ff, 0x8, 0x9, 0x2, 0x7fff, 0xb24, 0x80000001, 0x2, 0xf9, 0x2, 0x5, 0x2, 0x7, 0x100, 0x9, 0xb49, 0x5, 0x40, 0x5, 0x3b, 0xffffff81, 0xf249, 0x40, 0x5, 0x5, 0x10, 0x9, 0x7, 0x9, 0x0, 0x6, 0x4, 0x5, 0xa, 0x7, 0x1, 0xe, 0x3, 0x2, 0x6, 0xe93, 0x10, 0x66b, 0xfffffffe, 0x2, 0x9a55, 0xffff7883, 0x1, 0x7, 0x4, 0x5, 0x400, 0x0, 0x1, 0x9, 0xff, 0x0, 0x9, 0x3, 0x6, 0xfffffff5, 0x9, 0x41c7, 0x0, 0x9, 0x2, 0x50, 0xe1f, 0x4e, 0xba1, 0xfff, 0x1, 0x0, 0xc14, 0x2, 0x8, 0x9, 0xfffffff8, 0x9, 0x8f, 0xb, 0x1, 0x1, 0xffffffff, 0x0, 0x0, 0xf91, 0xb434, 0x0, 0x9, 0x9, 0x3, 0xb, 0xf37, 0x4, 0x0, 0x80000000, 0x0, 0xfffffe01, 0x80000001, 0x1, 0xf4c7, 0x0, 0x400, 0xfffffffc, 0xcf, 0x84, 0x3, 0x1, 0x7fff, 0x7fff, 0x1, 0x2, 0x7e09886c, 0x7f, 0x7fff, 0xfc2, 0xd, 0x4, 0x40004, 0x7, 0xa7, 0x8, 0x5, 0xa2c, 0x2, 0xfffffffb, 0xfffffffa, 0x10, 0x9, 0x81, 0x3, 0xfffffff7, 0x3, 0x9, 0xffffff25, 0x8, 0x200, 0xe, 0xfffffffe, 0x4, 0x2, 0x947, 0xfffffff7, 0x7, 0x4, 0xc0000000, 0x1909, 0x8, 0xddb, 0x55804a44, 0xffffb919, 0x8, 0x9, 0x80, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x7ff80000, 0x0, 0x1db5, 0x3024, 0xffff7fff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x2, 0x0, 0x42fc, 0x0, 0x7, 0x1, 0x0, 0xa223, 0x5, 0x9, 0x3, 0x2, 0x5, 0x9, 0xf0, 0x54, 0x400, 0x4, 0x9, 0x5, 0x1, 0xffffffff, 0x7f, 0xd, 0x10001, 0x1, 0x5, 0x7, 0x0, 0x6329, 0x5, 0x40, 0xa6, 0x3, 0xb, 0x19c0000, 0x7fffffff, 0x740c, 0x9, 0x1, 0x3, 0xfffffbff, 0x6, 0x4fd8, 0xffffff81, 0x8, 0xd7, 0x4, 0x40, 0x1, 0x66, 0x6, 0x8, 0xffffff95, 0x1, 0x2, 0x1, 0x500000, 0x200, 0x9, 0x63, 0x2, 0xf, 0x1, 0xfffffff7, 0xffffffff, 0x4, 0x4, 0xfffffff2, 0x5, 0x208, 0x5, 0xffffc15e, 0x7, 0x5, 0x1ff, 0x9, 0x6, 0x9, 0x9, 0x0, 0x479, 0x0, 0x8, 0x2, 0x5, 0xd, 0x3, 0x80000000, 0x9, 0x227, 0x37, 0x0, 0x5, 0x8, 0xfffff801, 0x9, 0x97e, 0x3ff, 0xff, 0x1, 0x0, 0x0, 0x10001, 0x2, 0x3, 0x200, 0x139b0174, 0xd, 0x6, 0x5, 0x200, 0x2, 0x7fffffff, 0x3, 0x7ff, 0x9, 0xf, 0x40, 0xfffffff8, 0x6, 0x0, 0x2, 0x7fff, 0xfffffffd, 0xf, 0xffffffff, 0x9, 0x5, 0x2, 0xa87, 0x9, 0x6, 0x0, 0x73000000, 0x8000, 0xff, 0xfffffffd, 0x7, 0x3, 0x9, 0x3, 0x3, 0xc, 0xffff, 0x4, 0x4, 0xffffffff, 0xfffffffe, 0xfffffffb, 0x4, 0x8090, 0x6, 0x5, 0xdc3b, 0x9, 0x6, 0x4, 0x4, 0xb, 0x8, 0xffffffff, 0x7d, 0x1, 0x7, 0x1c, 0x2b, 0x4, 0x3, 0xfa, 0x5, 0x4, 0x1, 0x4, 0xcae2, 0x0, 0x1, 0xb, 0x80000001, 0x4, 0x0, 0x1, 0xfffffc00, 0x5f, 0x8, 0x0, 0x8000, 0x7, 0x4cc, 0x5, 0x3, 0x0, 0x6, 0x1abe07ef, 0x400, 0x8, 0x7fff, 0x0, 0x5, 0x6, 0x400, 0xc3, 0x40, 0x9, 0xffff, 0x7, 0x8, 0x1, 0x2, 0x0, 0x3, 0xf, 0x5c8, 0x1, 0x3, 0x80000000, 0x8, 0xffff, 0x7, 0x40, 0x8, 0x0, 0x2, 0x0, 0x6, 0x4, 0x5, 0xfffff8ca, 0xce, 0x7, 0x10000, 0x4, 0x9, 0x1ff, 0x688, 0x3c, 0x7, 0xffff, 0x5, 0x0, 0x5, 0xd, 0x3946, 0x9a, 0x92, 0x70b5447d, 0x8, 0x4, 0x7fffffff, 0x800, 0x4, 0x401, 0x2c, 0x3, 0x5]}]]}, {0x103, 0x6, "c6b1253ea4c52181e557fda7fd5dd68a295d670d7e8b33d87c7f319a0330b3b2cbd27d988457314679d7d355840d5642709715f6557e0374d0f12d702f2438fe4239cf20f0ce9d7c9c3f3d46fe71c1b818d28d887dcfdc4cfe6a1d3aa2e45f5dc2246a9a8a448b5b7e7adc41be56f6df2039f6a7e24ccc03cd68294883249ed36f48a480103b6654e461b25a96e607c635c9a2393ad5e101e7d43ed2700c52854e67419bfb1745287136d44bd8553cd3bc2b26bc26f54b1c0f4b7b78484e9a4ffc2ca9aacf27cc9259ac19142e6630829a516e379a81e4de66abdae6968aca89f58dcbb6dcfabb0c9b1e949cf25325775d9ea3b1ad97004dad5047cbe2e609"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0xac, 0x1b, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2d8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x397}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7ff, 0x8, 0xffffffffffffffff, 0x4, 0x2}, 0x1}}]}, {0x4a, 0x6, "ee0ecb5d58165847ca9fd3dc188fedd4e3304a0bf8e08c6aba44bc1b2c057fe4569184f52a95347d00c928e99f7127eb9168d18eb0df83be608fd804ee84d69a4ecd3f69c441"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1}}, @TCA_MATCHALL_ACT={0x25ec, 0x2, [@m_nat={0x150, 0x19, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x370, 0x3, 0x1, 0xffffffff}, @local, @local, 0xffffffff}}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x138, 0xc, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff6, 0x2}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0xa4, 0x16, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xeb53fd7, 0x2, 0x10000000, 0x703, 0x9}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe, 0x2, 0x7, 0x80, 0x8}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7, 0xffffffffffffffff, 0x9, 0x8}, 0xc}}]}, {0x20, 0x6, "d55525bbdf0a6d9669be26a1c9f3f2577af8d0d484fd1cc09d62975b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x2058, 0x1d, 0x0, 0x0, {{0xb}, {0x102c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0x8, 0xddd, 0x1, 0x0, 0x200, 0x100000, 0x7, 0x3, 0x6, 0x695, 0x10001, 0x1, 0x4009, 0xf241, 0x7, 0xfffff4d6, 0x2, 0x101, 0xfff, 0xf8cb, 0x3a, 0x4, 0x4, 0x0, 0x7, 0x9, 0x1, 0x0, 0x3, 0x2, 0x1, 0x9, 0x1, 0x6, 0x9, 0x40, 0x5, 0x2, 0x8, 0x8, 0x76, 0x1, 0xc00, 0x10001, 0xe1, 0x4e, 0x9, 0xffffff01, 0x6, 0x9, 0x4, 0xfffffff8, 0xfffffffa, 0x47, 0x55, 0x9, 0x6, 0x6, 0x2, 0x3ff, 0xffffffff, 0x3, 0x5, 0x5, 0xf, 0x0, 0xe2, 0x5, 0x9, 0x7, 0x5, 0xfffffffd, 0xffffffff, 0xf6, 0x6, 0x3, 0xfffffff8, 0x42, 0x6, 0x1, 0x7, 0xc7, 0x3, 0x3, 0xa79, 0x8, 0xd, 0x5, 0x6, 0x2, 0x4, 0x439, 0x8001, 0x4, 0x6, 0x791, 0x1, 0x6, 0x1, 0x2, 0x5146, 0x6, 0x9, 0x84, 0x298178b0, 0x7, 0x80, 0x6, 0xfffffff8, 0x9, 0x800, 0x7, 0x5f48c3ca, 0x9, 0x92, 0x7, 0x0, 0x0, 0x101, 0x2, 0xb5e967, 0x6, 0x10001, 0x6, 0x8000, 0xaef2, 0x9, 0x2, 0x4, 0x5, 0x0, 0x7, 0x0, 0xe548, 0x5099062b, 0x3, 0x80000000, 0x9891, 0xaf54, 0x3, 0x4000, 0x0, 0x6ac, 0xef0, 0x1, 0x80, 0x7, 0x8, 0xfffffffb, 0x4, 0xdd, 0x4, 0x9, 0x4f, 0x8, 0x9, 0x1, 0x0, 0xe4c, 0x5, 0x10001, 0x97, 0x7, 0x0, 0x10, 0x3, 0x2, 0xb, 0x1, 0xff, 0x5, 0x4907, 0x90, 0x7, 0x45, 0xc7bc, 0x5, 0x0, 0xf, 0x101, 0x3, 0x9, 0x9, 0x80000001, 0x400, 0x3, 0x7, 0xc, 0x1ff, 0xc, 0x7, 0x1, 0x6, 0x1, 0x8, 0x9, 0x2, 0x100, 0x5b, 0x205, 0x8, 0x1, 0x7, 0x8001, 0x3, 0x31b0, 0x7fffffff, 0x4, 0x6, 0x6, 0x1, 0x9, 0x800, 0x3, 0x1ff, 0x9, 0x6, 0x9, 0x0, 0x10d1, 0xe, 0x8a7a, 0x0, 0x1, 0x6, 0x100, 0x5, 0x6, 0x0, 0x101, 0x5, 0x92, 0x5, 0x1, 0x9, 0x80000000, 0x9, 0xfffff594, 0x8, 0x2, 0x2, 0x2, 0x400, 0x6, 0x0, 0xfffffffc, 0x2, 0x8, 0x4, 0x3, 0x0, 0x2, 0x1, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0xa33d, 0x7fff, 0x6, 0x7, 0x0, 0x6, 0x4, 0x0, 0x4, 0x9, 0xb25, 0x9, 0x8, 0xff, 0x7, 0x5, 0x2d61, 0x81b, 0xffffffff, 0x6, 0xffff, 0x1ff, 0x0, 0x2, 0x81, 0x4, 0x2, 0x7, 0x10000, 0x101, 0x6, 0x8, 0x1, 0x2, 0x0, 0x42, 0x200, 0xf, 0x80000001, 0x7, 0x20000, 0xc, 0x7f, 0xd, 0x5, 0x6, 0x4, 0x1, 0x9, 0x1, 0x3c29, 0x2, 0xfff, 0xffffffff, 0x1, 0x8, 0x0, 0x800, 0x2, 0x9, 0x8, 0xc4, 0x6, 0x7, 0x10, 0x80, 0x639, 0x10000, 0xa, 0x4ad, 0xe, 0xfffffff9, 0x9, 0x80000001, 0x7, 0x2, 0x100, 0x7, 0x5, 0x1400000, 0x0, 0x5, 0x3, 0x8d, 0x7, 0x7, 0xfffff3a0, 0x1ea6f3e5, 0x8, 0x9, 0x2fb9d9f6, 0x2, 0x5, 0x7fffffff, 0x9, 0x9, 0x8, 0xd, 0x5, 0x8, 0x7, 0x10001, 0x800, 0x1a, 0x1, 0x7, 0x41a, 0x5, 0x1, 0xfff, 0xffffff13, 0x7f, 0x9, 0x5, 0x8, 0x6, 0x2, 0x2b, 0x6, 0x4, 0x1, 0x8, 0x4, 0x5, 0x233, 0x2, 0x2, 0x3, 0x7, 0x4, 0x7, 0x1760, 0x4, 0x0, 0xfffffff6, 0x8, 0x8, 0x0, 0x80000001, 0x9c9b, 0x0, 0x8000, 0x7ff, 0x80000000, 0x9, 0x7, 0x3, 0x100, 0x3, 0xad, 0x6, 0xd2, 0x9, 0x9, 0x7, 0x4, 0x0, 0x787b, 0x802000, 0x7ff, 0xdf, 0x81, 0x401, 0x0, 0x9, 0xf9, 0x9, 0x7, 0xe, 0x7fff, 0x80000000, 0x8, 0x80000000, 0x3, 0x491, 0x80000000, 0xffff, 0x8, 0xc5, 0xf, 0x4, 0x80000000, 0x3, 0x5, 0xd, 0x9, 0x8, 0xffffffff, 0x2f9, 0x0, 0x3, 0x0, 0xfffffffe, 0x6, 0xe, 0x4, 0x8, 0x7, 0x7, 0xba, 0xff, 0x94c5, 0xc79, 0xffffffff, 0xa, 0x10, 0x3, 0x1, 0x4, 0x9, 0x5, 0x0, 0x1, 0x1000, 0x5, 0xffffffff, 0xffff7891, 0x10001, 0x6, 0x9, 0x7, 0x670, 0x800, 0x7, 0x7, 0x9, 0x1, 0x7fff, 0x1000, 0x7, 0x9, 0x2, 0x6, 0x6, 0x3, 0xffffff5c, 0x1, 0xaaa000, 0x8000, 0x0, 0x7e3, 0x3a2e, 0x9, 0x7, 0x7, 0xa969, 0x6, 0x4, 0x8, 0x7, 0x6, 0x5, 0x1, 0x6, 0x9, 0x81]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x10000, 0x3, 0x471, 0x0, 0x1, 0x10000, 0xb, 0x4eb8, 0x80000000, 0x5, 0xd6, 0x6, 0x6, 0xfffffffe, 0x2, 0x81, 0xdd7, 0x8, 0x5, 0xfffffffd, 0x3, 0x5, 0x5, 0x5a4, 0x4, 0x5, 0x1, 0x4, 0x3, 0x100, 0x800, 0x7ce, 0x7812a2d2, 0x10, 0xf199b38, 0x6, 0xffffffff, 0x0, 0x5, 0xd, 0x0, 0x2, 0x6a4dcf23, 0xfff, 0x313d, 0x101, 0x8, 0x80000001, 0xe3, 0x10000, 0x10000, 0x1, 0xffffffff, 0x5, 0x3, 0x2, 0x5, 0x1, 0x2, 0x81, 0x5, 0xfffffffa, 0x3, 0x0, 0x9, 0x101, 0xd27, 0xe02f, 0x5, 0xb, 0x8, 0xc, 0x5, 0x6, 0xd, 0x9, 0x7ff, 0x4, 0x8, 0x6, 0x2, 0x7, 0x1, 0x0, 0x6, 0xa, 0x4, 0x401, 0x15f2, 0x3fc, 0x7, 0x4, 0x8001, 0x10000, 0xd, 0x7fffffff, 0x6, 0x7, 0x83, 0x9, 0xc, 0x6, 0x3, 0xe, 0x9, 0x4, 0x7, 0x1000, 0x7, 0x3, 0x0, 0x10001, 0x5, 0x40, 0x10001, 0x9, 0xc, 0x100, 0x4, 0x8, 0x3ff, 0x80, 0x7fff, 0x4, 0x9, 0x4, 0x8, 0x6, 0x200, 0x8, 0xc, 0x5, 0x7e23, 0x3, 0x4, 0x100, 0xfffffe01, 0x6, 0x0, 0x7, 0x8, 0x6, 0x9, 0x7, 0xfffffffd, 0x10001, 0x7, 0x1000, 0x7, 0xfffffff8, 0x1, 0x1, 0x7ff, 0x400, 0x200, 0x0, 0x7ff, 0x2, 0x7ff, 0xd, 0x30cb1699, 0x8, 0x20082, 0x80000000, 0x9, 0x7, 0x0, 0xffffffff, 0x7, 0x4cd3, 0xa00000, 0x61b77214, 0xfffffffe, 0x2, 0x7fff, 0x9, 0x0, 0x9, 0x1000, 0x3236, 0x1, 0xfffffffe, 0x9, 0x5, 0xb91, 0x9, 0xfffffffc, 0x41a1, 0x8, 0x4, 0x0, 0x2000000, 0x2, 0xfff, 0xfffff000, 0x8, 0x0, 0x401, 0x140, 0xfae, 0x6, 0x5, 0x2, 0xe, 0x9, 0xfffffff8, 0x400, 0xd9d, 0x4, 0x2, 0x1, 0x2, 0x228, 0x9, 0x5baa, 0x2, 0xb259, 0x3, 0x1, 0x8, 0x3, 0x66, 0x995c, 0x68a, 0x101, 0x3, 0x704, 0x3, 0x7fff, 0x4, 0x8000, 0x0, 0x3, 0x1, 0x9, 0x577, 0x8, 0x7, 0x9e, 0x1, 0x3, 0x4, 0x6, 0x5, 0x5, 0x8, 0x7, 0x6b11, 0x7fff, 0x2, 0x8001, 0x0, 0xa0, 0x4, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0xf6, 0x4, 0x7fffffff, 0x3, 0x3, 0xffbe, 0x80000000, 0xfb9, 0xd150, 0x5, 0x6, 0x1, 0x9, 0x4, 0xfff, 0xde, 0x0, 0xf, 0x5, 0x6, 0xe1, 0xfff, 0x0, 0x0, 0x4f1c, 0xffffff46, 0x7ff, 0x9, 0x2, 0x40, 0x2, 0xced, 0x88e, 0xffff, 0xfffffff4, 0xffffff7b, 0x2, 0x200, 0xe, 0x3, 0x5, 0x0, 0xfffffff8, 0x5, 0x7, 0x9, 0x4a8, 0x7, 0x7, 0x64, 0x7, 0x4a, 0x9, 0xfff, 0x7, 0x7f, 0x9, 0x9, 0xffffffff, 0x7, 0x3, 0x3, 0x77b19af4, 0x4, 0x1, 0x7fffffff, 0x4, 0x2, 0x7, 0x2, 0x5, 0x80000, 0x10000, 0x0, 0x4, 0x6f, 0xf1, 0xc, 0x9, 0x6d5, 0x6f940000, 0x8764, 0x4, 0x5, 0xff, 0xffffffff, 0x5, 0x3, 0xfff, 0xe, 0x7266, 0xc, 0x1, 0x401, 0x5, 0xffffdf42, 0x7, 0x6, 0x7ab, 0x0, 0x9, 0x3, 0x3, 0x80000000, 0x40, 0x8000, 0x10001, 0xfff, 0x6, 0x9, 0x7, 0x7, 0x51d7a9e0, 0xfff, 0x6, 0x9, 0x5, 0x1, 0xfff, 0xff, 0x9b, 0x62a2, 0x80000000, 0x6, 0xd8, 0x7, 0xc0, 0x1fe, 0xd, 0x80, 0xd1, 0x4d42, 0x9, 0x5704, 0x5, 0x1ff, 0x1, 0x1ff, 0x4, 0xfbc3143e, 0x1, 0x8, 0x8, 0x0, 0x7, 0x1ff, 0xfffeffff, 0xfffff029, 0x5, 0x401, 0x10, 0xfff, 0x1, 0x0, 0x8, 0x2, 0x0, 0x9, 0x7, 0x40, 0x9792, 0x0, 0xef44, 0x6, 0x7, 0x2, 0x370, 0xfffff560, 0x5, 0x2f4, 0x5, 0x7, 0x5, 0x7, 0x5, 0x7fff, 0x6, 0x6, 0x900, 0x1, 0xf, 0x5, 0x9, 0x9, 0x7f, 0x7, 0xca4b, 0xfff, 0x0, 0x9, 0x8, 0x5, 0x4, 0x1, 0x7, 0x6, 0x8001, 0xf, 0x400, 0x200, 0x4, 0xdd, 0x9, 0x9, 0x10001, 0x789631c9, 0xfff, 0x0, 0x2, 0xd, 0x1afeb6eb, 0x6, 0x2, 0x5, 0x3, 0x9735, 0x284, 0x7, 0x2, 0x9, 0x80000001, 0x3, 0xfffeffff, 0x0, 0x5, 0xf, 0x2, 0x4, 0x4, 0x6, 0x5c, 0x4, 0x1ff, 0x10, 0x6, 0xfffffff9, 0xff, 0x1, 0x1, 0xf, 0x2, 0x81, 0x5460, 0x0, 0x6, 0x2, 0x1, 0x4, 0x4, 0x1, 0x2, 0x3, 0x9, 0x40000000]}]]}, {0x1004, 0x6, "70c0ef75d3ad484496f9eec05d1af903454465bccff1d93ad6f85bd16e2d943d1cdc9768611ae1010e72ab1170ea8d52313fe334c59c906b45f99a4688138b08a90d28505faba398200c1f62f6c73c7f0fa80d3b64a3421210f72001243542662d7bb08ededdc8e129c49d8daad88f1341215123a433ca2a48467a7d15287aee1f336f545dc914708b82b3ae75352ff7051d75eb7291e5d69d17562fa68eda7702dcae6b50d7e54c5b856876610a96acf7155d6db294101447a09e6b938bb9ae3c27ce07a60f90d9bbe4b80af4902c9eda24700884bcc02adb4fba9645a213c11248cdb4de69e3849954bd0f9323ab522cbce9aabcee15270483c48b815c1922d1a9c75985d0bafd4a2c6f16536f74bfcae27b2653e014e142c8410cb9235669e5c595e9e4470d4ca845e8e49f2416002530a82acc928a7b0e543d8e6f88e6354aaf7f6752712efc059092583c0749a6c478e0094920d2e775f4b7ce3705e7a655fb9e86834ebb2cea2c5648b5b76c2a0494fbf47d332c778143eff47348e405d099c3b1a8e31ad7014fc83c669c21184057701d2d9a30436a664862ef24325e9ce5b7b3844a306d118da45e1ead306d7f47420f06693858d5fcd202e775ab2da07d1c54848b219513a9f24ba8d87c1b0a705ab3fcfbc61dc4cade367a9665b1b52ae04d912a919d1b783f7191fe68333803af42c5cf6260679a3226412cc17e56a67edc61e5562a8e1460500a393a365705f4a602dcc0fc79fd2ec210a8fd77f8ca4f143b179182e02717c548ba737da9601bb2d35526ffee794a58fed437afe8c5141384d1b6378a384a653115b8b68a11235bce2320d00c6d7bb9a227f0ba66b4edb3b6916569e063b515e931092deabab76e775c89922445fec5764af489069cfc5d0e5e353be92c545fde009a1545b3ce894d384e60d19b95514ff2a4ca2568a8cfc8d132504f89c83e2a2ba44106aa211b57c65c4165328ec99460145ee830d621edce4a611d73897dda7789ec4ff2a1c1874fb669db8e26087322c79c4e7ac4b87c116c52a07878536baa8d6acf2b1652de76002fb572a8e6ff6c766a0fe76e0019aa1bbee6d0119430d8d8b893b414317171fa9eca2d7ff4dbc4e7775e260c9bb593b57ce1320723533c46d79b68d2d3d1fb416dd29bbe5d685c7b86c67714f91bb7dabf54ac89dd7ca927636cd170d00299f9bbba4ec3ccc14b38895f516ba92b89206bfc7b83cf2917e7ba9de2db4094ca72a732226f6e383f9beef37fa49cb585a931d80d2a9eea8d4a19b9afc6c9ef98da448f27bac4e7c536e4c4c41a20fb7c3454f163f4d258999869430672f2f09bb8a7450658ff4411d1f93ca530a46a13f3466dbb7a4380018b19f2e42453541a46cba40c67fcc5bf7d598613a449a4a226b7b8a4ca8da4953b08f3bf97f152ad54d6b8e8db67789d092a5086df9a9c0fe412bd5ad1c69330d9f5b252f775695103f1bab8d3f909dc067936b00898bc93060d47bc7827cd58dff2e7b9d909977cb07a46bf6981bab8eefc027cb664fd63995de6120c4f5bd08fb48a75b9dac97e17425a87d2ca093d277d0aebaed1b658c387cf1b9fce06fc828f8e54f86d86ec869a682b3e9377268edf84ecf61658254d53cf49e8b729acbd444e0e3177f2db8598ab22662972213d32dfcec34b9aa6d0647cda8cecd9a07bc0f6e81fe9441b4c40c16d1d96f94953ff1d30ba28835505990bfb1b41304d3fbbb4f413a801f3a5188c6c81f18e758a92b5ef4133b28a5530f7f96c46fd5fd4c20c559cf281f302f7524ef51a80496061719c8f5fc384fea360812705931cdf10d472a23661f95049444b236527a88ec2258873e444b4b320644436ad7092c9556cd77190e872fde19b6ec5ec4a95f42d6cab71561a03cf51f3be13d52c4723bd2718ce94dbfe924fcf8ef80cbcd23b9f9bf975d284e43cfd136c1b03a3e2f6bb311e1c1f43b1f68eb44f0f7a92ee73e1b69bf0ad013b6867cd6f4e91cfbefe2a4757c0c8129a9320ee8da65013a43383bb63084d2ecc9bda443400e2d39985aa044f9fc5e593618bb340a74e38112adb1261924b72658749bc443c47ade003f0e1f8714ef3f6fd37bb7a6a5480cb3b333b5890c92eab257d25b70a6b7ed88f44417cb831cc8ccee557b2bd540c334499862776986fb647f35b46204eb319b3a367e38e80fb7b2c44aab8806b1764151cb505170c49543fbe05be8fa466b3c180a74adbc8fe8b80582ccc41fb6ceeeb5069102016320f29b58666fc6982859de8ed039dc3036ed98839cf268b733572744406b36ba3bf104fa9a0558c3c95c7edf1926fdf2487d5f7b6e66525e0a95c2c6b3ab7d9b34abe3e4b2d76dcd271e05b9a8fa4872ab1b6af2636f1094abdbb00a6fdbcbe2babf77932fbdd0220a359bdf9753dd2cb460ff56117ff0a1ffb178f95b221551da81b31a6520ead4abba1b9300acf1838f800ef74fad7b46d3cc088dcd80ec9744149cd81a43293013e108a416dcf82a4b343d0a08be07d8dbb0b6e1204c753d79cf14bbfe39f97f488f33a82a610bab4bbf7096079dd1a970719d0d4210c12d60015373fc5f9b1b8571fc910c9ae1900ef6ccc2a86af1d19f1457770e87d8d5254bb785199123e5b41b0f8a50603a20934077c047b807db3e2e60e847c63614802123a0960d5b9a7524547e7e73d1464f409549bcd057d34ca58ed766577b493d7a83a3bec94d6b7a9ffc803ddca9f4cb02c5aad1019c071c79f4c070ce5bf8af903aa6e3a0b1d506e7be219759297bcbefac7072a079ad45c42f4b76f48c2b6084423627d1aa2ec15b648aeb2d265071437d080b5cda19bbe9c575420b8d054a15fcd5fc38ca7726c6708e09da121630761385a27f4463834c1ccee4abafd4f3f8d8705a06db31612660fbeb2caace73927a48b6731d7a91e63069b15f182203b04b34d9cc08bfa9bf7fbc9456f0008d338d1b2a91a7a7df48a5b21a192dcc4266d918434f22ef6a83686f3281a491a2139122a0fed1f719fdb36201b9e7259512862c325ca349666864df213fd5edc7546bcf289cced1ebd6efb4cfff48668a3b20e132b716c30f64bff38522d763f1430d5067ce801c4a3f968d924f3fcae7666b2c1aa7a9c460faf8d4fa4cfe92d64813c7994c57e53c3e3c0e9cce03656cd0ea4675db743309c493487264e6c4a8cfffb0ac7a2fa4b48412282658b85b0c65282fdf692a0137b1937e7f9a7e3820b50860451ccd6652e6d0e059c5bcccc5b809433382a15e991f2ba412b1c86445f35ef9e04ab8dae2ea1fbc2df08e755026acef79a147c924bd893116b2d297a202b79ae25512ec8bb24d4d4d80ee34152a1b975e43c1bb88d7eccc8f124368f07f70d1d64b27fea0216498bbb7cf2e60b6cf9f6caa7e2a765d95ddc30d6522e505a89dca13f623bb0375a6efe25d35ef2ad8582ec3b84443e867fc4fa18f476d470dd95c3498a5e766dbbe8b5e080cafa8c816e19bb4343749b9f6edcc6fc31b5f26a2e42272d7e2c1e330ab20618eb409e8a9d4f4e6dd1980acaa726e0442b5f22aa716ddbec0e888ac099fedae244f2c73be79f9e59a44b1145004d05d836dd20009317b70367b3c82043cdb831dd85b5bec0106f1d44e11086839833188bc72288bf3bd2ff712c85a92a8aeed38e8883976cb9a697a3657650ad95450ffc8cd3ea84c43cb03b2fa32cb3c93c82cbdaee8a3c3acdc49a2fc3057175f972eaa38afbe1692a74507a5a6d1782ef73761d8ffcae8b18c8915011d5fb5568632b0daff76128a151010a6b7572ceb3f68d3204a8269c2c3afe33ab00a0defe2ea797c35f2e9c66b879cf99a82056d7dd1be366f41287f13f3394fc61e402fffaa2040db7915c382ce21eabbbba0d4f204e5a18b68ff877be94047a10470711e38d31fc9114693c6c2a3f9456c99bad49e8de6e36d5e2da0ce25987c212c77419f674c8cdb8cfa162fc9eb4ea69f34ab44e9c8fe2aa0db3fe13164017c513b6e6965fc22f53868fc2e028a1fa5263cf8ae6996c8ae5767e039bba600ccf79f639608e838d5f0eb4f2e0e588f9b6391bf5d54f0fd1e116654f2b55668a255badbe8d1b60f2db081032f2073dc9a2cd42c6ce6a37be340b7e140643349c99340833d3ac0c2e005918c7f6334bd4b5033dbd6696dba79275a5349cd99e7ce1a0f82e16b8acb3ce77caf5f523087fd9afc14080485038446bb81f46f89b6199448d67e412f18459c407dc4249dd881d60f5e5050efe0481393edf91bc7c88ec905f7d71a9e3f457cf5bb36ecb5fe80f6dda70d53bb77e7e4fee81aab1bf5851e290231e58bb03f91e6d388250147078f2483f1483f636e67313e4d7983d22c730f07c6a4106be24d13a322a314a4bcacb2ba22634ea5f7ea2f3605beaf2482033a7faea0843ddf7c1628d8b257afa0baa5b3a2c27ca6b2cfd67583ef12a8846bb1251d2f64fa2e9991acc03f376a957de8d8a4443da20024a255513028dc061d6e5cd8df1f2f6f9070aef408bec5f26870797bc564378e7a7f1bc2c6d83f96afa12394a3a815f6bce25e0633f0652461d22c3080543e8ed9b3b6524b8287af4d221ace30b4431a16ee00899a065b3e488b80484740fa00f728d992c531fd9dd85c421f3b5065f2d228a3feafd31ee57a087ecb076510990840959e61accffc60e9c8207989ae61be40867504459e0af29bfab07844dce8beb5ea0cd7fb2f87377edea43223a87921fa0f5028354f72f16503ed682f796b79b8fce37a4419252dbaeb9d422c6fec9bb0f1ea0ef41bce3ce7c90d8583e19c0d1cd45e613e88dc27fc452aff4f5823bcd6064f6f2dc947b916f60ed62d8f9af9c972de3440b3bbd0ec423e906732da7910d057db5fde0243060cc67fa7bd86c780aa5aaa198bcd81cc168253fe4a3869b9ad1a1b567393385f0e888590b6276d11e5135caca2badf3dbb0df69f71ef0fece2d6c6281ca473698f0161ac9793c2082e64cce3cfee7edbc8cb091a20ffa283984cc7828d4dc1a422bb7cf5d98d5d2572719897a128f4fcf9ea55c291f815b79fe7cef99a5ae884e1cca57d0de51d3034e5feca6f3243d90a4bef909a79293c7a0eaaa07cf59685df2f84226bbc0d1fe31b17f0b41888f94c2e7b9774e65124efe9a978d51ff2d4b84f48ba1444eb73cb9cf5f48939e74f29ae9935c38372e0a5095fb83607f0bbed8d6a52bdbf64eb238fd3415a3c46c0ddaa1f420fdcbeacfc25e2e8fd607e9b1ea58d366f2d09af268ef70fd1e13cc2a4ad4abd8729acf0596cb259ca3673457ed90f0aa11a1eef4d8c3cb3dadf545d7c2ded8fcf4fc909e2145ab73220a3a7e20f4b98afa691654e230fa23e3a12d0426e10911c280470fc372382d6285ef8578e2f40a89b7ebe466f2507292ceef548c65382fc866fab3ba671fdbc02fb213d8a3e84416babcc09eb7a5698e78d03431270e88724d31dc9deec49f8a7cdd411518cd991919202cf4f40984e4541e8950a8fea153de4b11e92fe36d63e20f7b453839c308d26e6c35186696545f9baf531c8f71bc29561f8dfe283ff7bc5e1ffa1f3662e72395cfd7d048f3f7d76cf502fa102dbefa9644b5bb522b44ba15aae35c988ad8985bb90767a0c0e1b1b6a2850d1ed230addfb89258312de1ec8f5c02a313c498446814eba9b4b25e232b8607e28572e6de0253eaca9f5fb93e65a5c425b6d2ac9194be816550e73130ce5e672667e7318c771bd2972ddb481301f96b205ce27d3b8bedb9640af5057f4757abb7c797902552bd861b598aa5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xcc, 0x3, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}]}, {0x9b, 0x6, "762635722a72a9f5fdb2b1ad21a1615844634b6de924b20c45ddadb879aaec6ec3902da47e79a41c64354d02ddf328def47aeb35b982d7174d5f345fee4421cbed8ff9c8f534c793b4d44fd7929dd4e7f0eae759549ef5f1bf0efd3a9711ae6320e8ea9988f2a0c4cc55df294596ff4cfbc74fb8aae62d143269e1035dac0d616834913a501edf4324254c3f47b946b39d9660571daff5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x6c, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x9ee3}]}, {0x3b, 0x6, "a2545db4080ca1938a61988d4876fdb04ce6b044947f26b99749dfafac515323ae794ecefe71d9f0da494d6a25afc6895009e677130124"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x12c, 0x17, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x8fa, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x4, 0x4, 0x0, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x4, 0xffffffffffffffff, 0xfbaf, 0x2}}]}, {0xc1, 0x6, "6fd7d9a6bd67c6d50dbd07978511383c7076387e7041efe2da9114e5612ccb6d915fd188c0de166e0d49b73bd304f620b11246e590b3a76c878ff62df4ba0ce27d298423229a52bf94fd21e8673b0247036c3013d83558fe37dbef94f95bf895579d0d8fcea868147d4169e73cacd5f0d485c76b28300a1f15f36983bdc2750c94d71f3113b8cbeb101b8c9ceb52eb5dff3e0595d75c2cd10ff8f08c0d9535be05a0a7d0ac6909d48720834cbaa04d46a068bb03b42aa40e845c9adfac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x3a08}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_uring_enter(r1, 0x1, 0x1, 0x61, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x28, {0x2, 0x4}, 0x9}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000200)='1-1\x00', 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="2000000001070102000000000006000003000000090001007379df07d8d6e018"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000800)
mount$nfs4(&(0x7f0000000040)='/', 0x0, 0x0, 0x197841, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r10, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="8e4e71cc", @ANYRES16=0x0, @ANYBLOB="020025bd7000ffdbdf250400000024000380050008000a000000050008000300000008000500000000000800050064010101080005000000008014000280080005000b00000006000b000a0000000800060004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x24004800}, 0x80)
r11 = syz_io_uring_setup(0x41e4, &(0x7f0000000540)={0x0, 0xc2b1, 0x400, 0xfffffffe, 0x348, 0x0, 0x0}, &(0x7f0000000280)=<r12=>0x0, &(0x7f0000000140)=<r13=>0x0, &(0x7f00000001c0)=<r14=>0x0)
r15 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x143500, 0x8)
faccessat2(r15, &(0x7f0000000340)='./file0\x00', 0x14a, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r12, r13, r14, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r11, 0x1, 0x1, 0x1, 0x0, 0x0)

364.038818ms ago: executing program 9 (id=526):
r0 = syz_open_dev$loop(&(0x7f00000022c0), 0x400, 0x800)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000002300))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/189, 0x1a, 0xbd, 0x1}, 0x28)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000000000000000b512000a20000000000a01040000000000000000020000000900010073797a300000000064000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c000100"], 0xac}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
syz_open_dev$loop(&(0x7f00000022c0), 0x400, 0x800) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000002300)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/189, 0x1a, 0xbd, 0x1}, 0x28) (async)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000000000000000b512000a20000000000a01040000000000000000020000000900010073797a300000000064000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c000100"], 0xac}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async)

281.404992ms ago: executing program 3 (id=527):
pipe2(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x18)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000140))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='nfsd 127.0.0.  3600\n', 0x14)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x62000, 0xc1)
sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @empty, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x802000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d0d0684654cea54d925b3905cb6870784776b3cd53b19fc045ee267b29c5ba7f957bd3776c18d663ffba1294825b3b3bdb3ee743e06ee5f7af9d42c2f894dff2578c9cec5f1f2975300ccdb383dd76e273089f90a391c5cb108e63ad17f3647abd34005e06978020a20914d4d69288ccacb64eaf1d08f0f84918ff27d569684c116d5a2a5e5a7c16ae3b911ef09e5630b19bce18a6d87138c2dde92671d53ff90128d2c1c5e665d41861893b5d8c02ff790ae6e", @ANYRESHEX=r2, @ANYBLOB=',\x00'])
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x1)

281.010892ms ago: executing program 9 (id=528):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x40400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@inlinecrypt}, {@nouser_xattr}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x94)
r6 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x8)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r5, r7}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r7, 0x0, 0x0, 0xce2c, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0), 0x0, 0x0}, 0x40)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0)
copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xae8, 0x863, 0x0)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x2)
r10 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)
r11 = fsmount(r10, 0x1, 0x0)
fchdir(r11)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2040, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000016c0)={0x24, r13, 0x1, 0x70bd2b, 0x25dbdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44051}, 0x24000004)
write$P9_ROPEN(r0, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x2, 0x3, 0x2}, 0x3}}, 0x18)
ioctl$XFS_IOC_FREE_EOFBLOCKS(r9, 0x8080583a, &(0x7f0000000100)={0x100, 0xff, 0xa, 0x901, 0x3, 0x0, 0x3ff})

174.466766ms ago: executing program 3 (id=529):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0x1, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c)

172.809574ms ago: executing program 3 (id=530):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1})
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
r3 = accept4$inet(r1, 0x0, &(0x7f0000000140), 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r3, r2})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r4)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r7, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="93b246752530c7bd77443ad4a79ccdc7fee3191b506c0a6805ba902a938da6e1f56dc6e4d68e43be29feeeeed3348e56b0cf5881bee594e2cd6ce620b0aa3d6a730a7e3991e70996"], 0x5c}, 0x1, 0x0, 0x0, 0x856}, 0x0)

170.905171ms ago: executing program 9 (id=531):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0)
landlock_restrict_self(r0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000180)={[{@dax_inode}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@dioread_lock}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x489, &(0x7f0000001280)="$eJzs3MtvVNUfAPDvvdMCP17tD/EBolaJsfHR0oLKwo1GExf4SHSBsqptIYRCDa2JECLVGHRBoiS6RlbGxL/AnRsjrkxMXOnekBBlA7IwNXfmXmynM31OpwPz+SQD58w5c8/5zr1n7rn3zDSAttWT/ZNEbI6I3yKiq5KdXaGn8t+Na2eG/752ZjiJ6ek3/kzK9a5fOzNcVC1etynP9KYR6cdJ3shsE6dOHxsaGxs9mef7J4+/2z9x6vRTR48PHRk9MnpicP/+fXsHnn1m8OmGxJnFdX3nB+O7drz81oVXhg9eeOfyt1l/N+flM+NYlnVzn+rJAv9ruqy67NH434qaazVbZqSTjjXsCEtSiohsd3WWx39XlD599fyhvKwrXvpojbsHrKLs3LS+fvHU9Hy+jnmLgVaXGMTQpooTfXb9WzyaNPVoCVefr1wAZXHfyB+Vko5I8zqdVde3jdQTEQenPv/n4NTNi9GI+xAAAAs4P/zlgXiy1vwvjXtm1Nuar6F0R8T/I2JbRNwVEdsj4u6Ict17I+K+JbZfvTQ0d/6TXllWYIuUzf+ey9e2Zs//itlfdJfy3JZy/J3J4aNjo3vy96Q3Otdn+YG5m761ge9f/OWzeu1X5n83LxaPrP1iLphv5kpH1Q26kaHJofKktAGufhixs6NW/EkUyzhJROyIiJ1L2/TWInH08W921au0cPzzaMA60/SliMcq+38qquIvJPOvT/ZviLHRPf3FUTHXTz+fe71e+yuKvwGy/b9x9vGfl3x1Kk90H7p8KaJYr52IJa9cnvv9k7rXNMs9/tclb5Y/j4pl1/eHJidPDkSsSw6U87OeH/zvtUW+qJ/F37u79vjflr8m2//3R0R2ED8QEQ9GxEN53x+OiEciYvc88f/4Qv2yVtj/IzU//24d/93JzPX6ZSRKx374rl77i9v/+8qp3vyZ8uffAhbbwZW8dwAAAHC7SMvfgU/SvlvpNO3rq3yHf3tsTMfGJyafODz+3omRynflu6MzLe50dc24HzqQTOVbrOQH83vFRfne/L7xF6Uo5/uGx8dG1jh2aHeb6oz/zB+lte4dsOpqraMN1vhBG3DnqR7/6ezs2dea2RmgqfxeG9rXAuM/bVY/gOZz/of2VWv8n63KWwuAO5PzP7Qv4x/al/EP7atq/Jfi17XqCdBEK/ldf8MTG6Jpba2P1gj59k1E2hLdWFRi8X8PYrUTb7dGNxaRWOtPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMb4NwAA//8AgfAV")
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x4)

118.036048ms ago: executing program 9 (id=532):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r1, 0x0, 0x3400c8d4)

79.401456ms ago: executing program 9 (id=533):
r0 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xed\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0)
fsetxattr(r0, &(0x7f0000000240)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f00000001c0)=""/36, &(0x7f0000000080)=0xfffffe75)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000000)={{0x21, @loopback, 0x4e24, 0x4, 'wrr\x00', 0x0, 0x4, 0x3f}, {@rand_addr=0x64010102, 0x4e22, 0x0, 0x7fff, 0xffff0000, 0x4}}, 0x44)
fremovexattr(r0, &(0x7f00000000c0)=@known='user.incfs.id\x00')

272.126µs ago: executing program 3 (id=534):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_usb_connect$hid(0x1, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x50, 0x8, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000b00)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x4, 0x3}, 0x30, 0x0)
landlock_restrict_self(r2, 0xd)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0xce1d, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x200000000000000, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}}}, 0xb8}}, 0x0)

0s ago: executing program 9 (id=535):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='a '], 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00')
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KDSKBLED(r1, 0xc0686611, 0x20000081)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) (async)
write(r0, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) (async)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='a '], 0x9) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$KDSKBLED(r1, 0xc0686611, 0x20000081) (async)

kernel console output (not intermixed with test programs):

sbhid 1-1:0.0: can't add hid device: -71
[   37.339584][ T4816] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   37.351509][ T4816] usb 1-1: USB disconnect, device number 2
[   37.466975][ T5092] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   37.469662][ T5092] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   37.470184][ T5092] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   37.472619][ T5092] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   37.473557][ T5092] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   37.475623][ T5092] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   37.488883][ T5092] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   37.491159][ T5092] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   37.528355][ T4404] 8021q: adding VLAN 0 to HW filter on device eth0
[   37.539023][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.555509][   T40] hsr_slave_0: left promiscuous mode
[   37.556873][   T40] hsr_slave_1: left promiscuous mode
[   37.558212][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   37.559727][   T40] batman_adv: batadv0: Removing interface: batadv_slave_0
[   37.561468][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   37.562889][   T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[   37.568891][   T40] veth1_macvtap: left promiscuous mode
[   37.570148][   T40] veth0_macvtap: left promiscuous mode
[   37.571225][   T40] veth1_vlan: left promiscuous mode
[   37.572621][   T40] veth0_vlan: left promiscuous mode
[   37.603333][   T10] binder: undelivered TRANSACTION_ERROR: 29201
[   37.690476][   T40] team0 (unregistering): Port device team_slave_1 removed
[   37.698661][   T40] team0 (unregistering): Port device team_slave_0 removed
[   37.751965][ T5092] 8021q: adding VLAN 0 to HW filter on device team0
[   37.759096][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.759156][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.759763][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.759783][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.022696][ T5194] netlink: 88 bytes leftover after parsing attributes in process `syz.1.82'.
[   38.026157][ T5194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'.
[   38.115561][ T5206] set_capacity_and_notify: 1 callbacks suppressed
[   38.115604][ T5206] loop0: detected capacity change from 0 to 512
[   38.118040][ T5206] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   38.118055][ T5206] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   38.142900][ T5206] EXT4-fs (loop0): 1 truncate cleaned up
[   38.143497][ T5206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.146629][ T5194] loop1: detected capacity change from 0 to 1024
[   38.274279][ T5194] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[   38.310405][ T4404] 8021q: adding VLAN 0 to HW filter on device eth1
[   38.375772][   T50] Bluetooth: hci0: command tx timeout
[   38.375814][   T50] Bluetooth: hci4: command tx timeout
[   38.375831][   T50] Bluetooth: hci2: command tx timeout
[   38.375926][ T5208] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   38.376731][ T5208] EXT4-fs (loop0): Remounting filesystem read-only
[   38.408364][ T4726] Bluetooth: hci1: command tx timeout
[   38.427909][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.473186][ T4726] Bluetooth: hci3: command tx timeout
[   38.524637][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.601608][ T5092] veth0_vlan: entered promiscuous mode
[   38.635142][ T5092] veth1_vlan: entered promiscuous mode
[   38.656915][ T5092] veth0_macvtap: entered promiscuous mode
[   38.660561][ T5092] veth1_macvtap: entered promiscuous mode
[   38.666359][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.669726][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.679053][   T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.685384][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.686393][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.686478][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.705352][ T3814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.705389][ T3814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.719063][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.719094][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.757540][ T5266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.757739][ T5266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.790052][ T5269] loop5: detected capacity change from 0 to 1024
[   38.799076][ T5269] EXT4-fs: Ignoring removed orlov option
[   38.818940][ T5269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.833824][ T4404] 8021q: adding VLAN 0 to HW filter on device eth2
[   38.836602][ T5272] syz.1.94 uses obsolete (PF_INET,SOCK_PACKET)
[   38.842793][ T5269] EXT4-fs error (device loop5): ext4_lookup:1785: inode #16: comm syz.5.62: unexpected EA_INODE flag
[   38.887548][ T5092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.957882][ T4891] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[   39.026395][ T4404] 8021q: adding VLAN 0 to HW filter on device eth3
[   39.057182][ T5315] loop1: detected capacity change from 0 to 512
[   39.061002][ T5315] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   39.062337][ T5315] EXT4-fs (loop1): mount failed
[   39.127350][ T4891] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[   39.128095][ T4891] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[   39.128114][ T4891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[   39.128125][ T4891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   39.128141][ T4891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.163887][ T5324] binder: 5323:5324 ioctl c0306201 20000100 returned -14
[   39.166519][ T4891] usb 1-1: config 0 descriptor??
[   39.171127][ T5260] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   39.208665][ T5326] loop1: detected capacity change from 0 to 512
[   39.209133][ T5326] EXT4-fs: Ignoring removed nomblk_io_submit option
[   39.212223][ T5326] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   39.212423][ T5326] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[   39.212565][ T5326] EXT4-fs (loop1): orphan cleanup on readonly fs
[   39.221681][ T5326] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.103: bg 0: block 15: invalid block bitmap
[   39.227032][ T5326] loop1: lost filesystem error report for type 5 error -117
[   39.228073][ T5326] EXT4-fs (loop1): Remounting filesystem read-only
[   39.230067][ T5326] EXT4-fs (loop1): 1 truncate cleaned up
[   39.230647][ T5326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   39.237248][ T5334] overlay: ./file1 is not a directory
[   39.367242][ T5349] loop5: detected capacity change from 0 to 1024
[   39.372355][ T5349] EXT4-fs: Ignoring removed bh option
[   39.375336][ T5349] EXT4-fs: inline encryption not supported
[   39.377808][ T5354] IPv6: addrconf: prefix option has invalid lifetime
[   39.380310][ T5349] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   39.399581][ T4722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.428581][ T4891] usbhid 1-1:0.0: can't add hid device: -71
[   39.428666][ T4891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   39.430197][ T4891] usb 1-1: USB disconnect, device number 3
[   39.432619][ T5349] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.109: lblock 2 mapped to illegal pblock 2 (length 1)
[   39.432685][ T5349] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   39.433212][    C0] EXT4-fs (loop5): initial error at time 39: ext4_map_blocks:791: inode 3: block 2
[   39.433259][    C0] EXT4-fs (loop5): last error at time 39: ext4_map_blocks:791: inode 3: block 2
[   39.435953][ T5349] Quota error (device loop5): qtree_write_dquot: dquota write failed
[   39.436004][ T5349] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.109: lblock 0 mapped to illegal pblock 48 (length 1)
[   39.436027][ T5349] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   39.436172][ T5349] Quota error (device loop5): v2_write_file_info: Can't write info structure
[   39.436192][ T5349] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.109: Failed to acquire dquot type 0
[   39.436215][ T5349] loop5: lost filesystem error report for type 5 error -117
[   39.436461][ T5349] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem
[   39.436480][ T5349] loop5: lost filesystem error report for type 5 error -117
[   39.436976][ T5349] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.109: mark_inode_dirty error
[   39.437006][ T5349] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   39.437208][ T5349] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[   39.437274][ T5349] EXT4-fs (loop5): 1 orphan inode deleted
[   39.437755][ T5349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.471263][ T1344] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[   39.476308][ T1344] Quota error (device loop5): remove_tree: Can't read quota data block 1
[   39.478253][ T1344] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 0
[   39.488642][ T5360] use of bytesused == 0 is deprecated and will be removed in the future,
[   39.488681][ T5360] use the actual size instead.
[   39.492319][   T10] kernel read not supported for file [fscontext] (pid: 10 comm: kworker/0:1)
[   39.508339][ T1344] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm kworker/u8:6: lblock 2 mapped to illegal pblock 2 (length 1)
[   39.522158][ T1344] Quota error (device loop5): qtree_write_dquot: dquota write failed
[   39.522624][ T1344] EXT4-fs error (device loop5): ext4_write_dquot:7021: comm kworker/u8:6: Failed to commit dquot type 0
[   39.525948][ T1344] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[   39.667073][ T5377] syz.3.117 (5377): drop_caches: 4
[   39.691523][ T5092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.691666][ T5092] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0
[   39.691680][ T5092] loop5: lost filesystem error report for type 5 error -117
[   39.697355][ T5092] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem
[   39.700833][ T5092] loop5: lost filesystem error report for type 5 error -117
[   39.703381][ T5092] EXT4-fs error (device loop5): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error
[   39.707197][ T5092] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   39.744859][ T5392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.748509][ T5386] vlan2: entered promiscuous mode
[   39.748552][ T5386] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   39.748658][ T5386] vlan2: entered allmulticast mode
[   39.748668][ T5386] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   39.756680][ T5392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.776466][ T5394] loop5: detected capacity change from 0 to 512
[   39.778161][ T5394] EXT4-fs: user quota file already specified
[   39.845704][ T5392] Injecting memory failure for pfn 0x139f4a at process virtual address 0x20003000
[   39.853820][ T5392] Memory failure: 0x139f4a: recovery action for clean LRU page: Recovered
[   39.853862][ T5392] Injecting memory failure for pfn 0x139f49 at process virtual address 0x20004000
[   39.854051][ T5392] Memory failure: 0x139f49: recovery action for clean LRU page: Recovered
[   39.891470][ T5403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'.
[   39.961988][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'.
[   39.998423][ T5411] loop0: detected capacity change from 0 to 128
[   40.000424][ T5411] ext4: Unknown parameter 'noacl'
[   40.027907][ T5411] loop0: detected capacity change from 0 to 512
[   40.036129][ T5411] loop0: detected capacity change from 0 to 128
[   40.152270][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.245850][ T5439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.249615][ T5439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.257540][ T5439] FAULT_INJECTION: forcing a failure.
[   40.257540][ T5439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   40.257576][ T5439] CPU: 0 UID: 0 PID: 5439 Comm: syz.2.139 Not tainted syzkaller #0 PREEMPT 
[   40.257589][ T5439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   40.257596][ T5439] Call trace:
[   40.257601][ T5439]  show_stack+0x2c/0x3c (C)
[   40.257623][ T5439]  __dump_stack+0x30/0x40
[   40.257636][ T5439]  dump_stack_lvl+0xd8/0x12c
[   40.257646][ T5439]  dump_stack+0x1c/0x28
[   40.257656][ T5439]  should_fail_ex+0x41c/0x590
[   40.257665][ T5439]  should_fail+0x14/0x24
[   40.257671][ T5439]  should_fail_usercopy+0x20/0x30
[   40.257678][ T5439]  _copy_from_iter+0x188/0x1064
[   40.257687][ T5439]  netlink_sendmsg+0x570/0x948
[   40.257698][ T5439]  __sock_sendmsg+0xc8/0x17c
[   40.257707][ T5439]  ____sys_sendmsg+0x3d0/0x6c8
[   40.257717][ T5439]  ___sys_sendmsg+0x198/0x224
[   40.257726][ T5439]  __sys_sendmsg+0x158/0x204
[   40.257735][ T5439]  __arm64_sys_sendmsg+0x88/0x9c
[   40.257744][ T5439]  invoke_syscall+0x98/0x244
[   40.257754][ T5439]  el0_svc_common+0xec/0x23c
[   40.257764][ T5439]  do_el0_svc+0x4c/0x5c
[   40.257773][ T5439]  el0_svc+0x64/0x260
[   40.257782][ T5439]  el0t_64_sync_handler+0x44/0x104
[   40.257790][ T5439]  el0t_64_sync+0x198/0x19c
[   40.304913][ T5441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'.
[   40.439136][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.441020][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.442667][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.444284][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.445760][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.447144][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.448565][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.450111][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.452644][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.454207][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.455586][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.457108][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.458518][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.459886][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.461492][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.463114][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.464678][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.466076][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.467561][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.469077][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.470542][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.472019][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.473866][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.475309][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.476785][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.478348][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.480000][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.481527][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.483114][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.484814][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.486440][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.487979][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.489566][ T5453] SQUASHFS error: Failed to read block 0x4de: -5
[   40.490153][ T3748] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.564136][ T4726] Bluetooth: hci3: command tx timeout
[   40.574340][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   40.578168][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   40.578866][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   40.579430][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   40.579681][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   40.586011][ T3748] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.691554][ T3748] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.781238][ T3748] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.806165][ T5475] EXT4-fs: Ignoring removed bh option
[   40.806199][ T5475] EXT4-fs: Ignoring removed mblk_io_submit option
[   40.809654][ T5475] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   40.827415][ T5475] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.148: bad orphan inode 131083
[   40.827461][ T5475] loop5: lost filesystem error report for type 5 error -117
[   40.834133][ T5475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.890770][ T5092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.957431][ T5480] syz.2.149: attempt to access beyond end of device
[   40.957431][ T5480] loop2: rw=8388608, sector=17179852707, nr_sectors = 1 limit=512
[   41.088488][ T3748] bridge_slave_1: left allmulticast mode
[   41.088534][ T3748] bridge_slave_1: left promiscuous mode
[   41.088641][ T3748] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.092005][ T3748] bridge_slave_0: left allmulticast mode
[   41.092041][ T3748] bridge_slave_0: left promiscuous mode
[   41.092118][ T3748] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.215668][ T5506] capability: warning: `syz.2.152' uses deprecated v2 capabilities in a way that may be insecure
[   41.274076][ T5513] ext4: Bad value for 'auto_da_alloc'
[   41.366026][ T5518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.367816][ T5518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.400811][ T3748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   41.417739][ T3748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   41.443096][ T5533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.444465][ T3748] bond0 (unregistering): Released all slaves
[   41.445963][ T5533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.449393][ T5533] FAULT_INJECTION: forcing a failure.
[   41.449393][ T5533] name failslab, interval 1, probability 0, space 0, times 0
[   41.452715][ T5533] CPU: 1 UID: 0 PID: 5533 Comm: syz.1.159 Not tainted syzkaller #0 PREEMPT 
[   41.452742][ T5533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   41.452748][ T5533] Call trace:
[   41.452752][ T5533]  show_stack+0x2c/0x3c (C)
[   41.452778][ T5533]  __dump_stack+0x30/0x40
[   41.452794][ T5533]  dump_stack_lvl+0xd8/0x12c
[   41.452805][ T5533]  dump_stack+0x1c/0x28
[   41.452815][ T5533]  should_fail_ex+0x41c/0x590
[   41.452824][ T5533]  should_failslab+0xc4/0x120
[   41.452832][ T5533]  kmem_cache_alloc_noprof+0x94/0x5d8
[   41.452841][ T5533]  skb_clone+0x1ac/0x320
[   41.452852][ T5533]  __netlink_deliver_tap+0x364/0x6f4
[   41.452863][ T5533]  netlink_deliver_tap+0x1d8/0x1dc
[   41.452872][ T5533]  netlink_unicast+0x5dc/0x7f8
[   41.452880][ T5533]  netlink_sendmsg+0x648/0x948
[   41.452889][ T5533]  __sock_sendmsg+0xc8/0x17c
[   41.452898][ T5533]  ____sys_sendmsg+0x3d0/0x6c8
[   41.452907][ T5533]  ___sys_sendmsg+0x198/0x224
[   41.452917][ T5533]  __sys_sendmsg+0x158/0x204
[   41.452926][ T5533]  __arm64_sys_sendmsg+0x88/0x9c
[   41.452935][ T5533]  invoke_syscall+0x98/0x244
[   41.452949][ T5533]  el0_svc_common+0xec/0x23c
[   41.452960][ T5533]  do_el0_svc+0x4c/0x5c
[   41.452970][ T5533]  el0_svc+0x64/0x260
[   41.452980][ T5533]  el0t_64_sync_handler+0x44/0x104
[   41.452990][ T5533]  el0t_64_sync+0x198/0x19c
[   41.465691][ T4404] 8021q: adding VLAN 0 to HW filter on device eth4
[   41.465954][ T5461] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.465980][ T5461] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.466061][ T5461] bridge_slave_0: entered allmulticast mode
[   41.466855][ T5461] bridge_slave_0: entered promiscuous mode
[   41.468262][ T5461] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.468315][ T5461] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.468373][ T5461] bridge_slave_1: entered allmulticast mode
[   41.468949][ T5461] bridge_slave_1: entered promiscuous mode
[   41.495224][ T5461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.499629][ T5461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.511298][ T5461] team0: Port device team_slave_0 added
[   41.514008][ T5461] team0: Port device team_slave_1 added
[   41.523278][ T5461] batman_adv: batadv0: Adding interface: batadv_slave_0
[   41.524975][ T5461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   41.528020][ T5461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   41.528820][ T5461] batman_adv: batadv0: Adding interface: batadv_slave_1
[   41.528829][ T5461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   41.528844][ T5461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   41.602730][ T5461] hsr_slave_0: entered promiscuous mode
[   41.608532][ T5461] hsr_slave_1: entered promiscuous mode
[   41.608801][ T5461] debugfs: 'hsr0' already exists in 'hsr'
[   41.608824][ T5461] Cannot create hsr debugfs directory
[   41.704094][ T4404] 8021q: adding VLAN 0 to HW filter on device eth5
[   41.769009][ T5461] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   41.783672][ T5461] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   41.784083][ T5461] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   41.788383][ T5461] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   41.796800][ T5461] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   41.801815][ T5461] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   41.808649][ T3748] hsr_slave_0: left promiscuous mode
[   41.809879][ T3748] hsr_slave_1: left promiscuous mode
[   41.810154][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   41.810166][ T3748] batman_adv: batadv0: Removing interface: batadv_slave_0
[   41.814195][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   41.814222][ T3748] batman_adv: batadv0: Removing interface: batadv_slave_1
[   41.820438][ T3748] veth1_macvtap: left promiscuous mode
[   41.821581][ T3748] veth0_macvtap: left promiscuous mode
[   41.823741][ T3748] veth1_vlan: left promiscuous mode
[   41.824777][ T3748] veth0_vlan: left promiscuous mode
[   41.957573][ T3748] team0 (unregistering): Port device team_slave_1 removed
[   41.961817][ T3748] team0 (unregistering): Port device team_slave_0 removed
[   42.017452][ T5577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.017663][ T5577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.047047][ T5461] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   42.049481][ T5461] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   42.050291][ T4404] 8021q: adding VLAN 0 to HW filter on device eth6
[   42.098225][ T5461] 8021q: adding VLAN 0 to HW filter on device bond0
[   42.106409][ T5461] 8021q: adding VLAN 0 to HW filter on device team0
[   42.111785][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.111839][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.112385][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.112404][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.304890][ T5461] 8021q: adding VLAN 0 to HW filter on device batadv0
[   42.345795][ T5623] 9p: Unknown access argument 18446744073709551615: -34
[   42.364749][ T5627] [U] V�3��Fپ"S��/��4:�XTZ�W�T��LW��=
[   42.366004][ T5627] [U] J"�E:��"


[   42.366022][ T5627] [U] W
[   42.398370][ T5627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   42.398522][ T5627] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[   42.398536][ T5627] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (64851!=55237)
[   42.398579][ T5627] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled
[   42.408957][ T5627] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.172: Invalid inode table block 0 in block_group 0
[   42.425514][ T5636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.427810][ T5636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.431352][ T5636] FAULT_INJECTION: forcing a failure.
[   42.431352][ T5636] name failslab, interval 1, probability 0, space 0, times 0
[   42.431386][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: syz.1.174 Not tainted syzkaller #0 PREEMPT 
[   42.431399][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   42.431404][ T5636] Call trace:
[   42.431407][ T5636]  show_stack+0x2c/0x3c (C)
[   42.431425][ T5636]  __dump_stack+0x30/0x40
[   42.431436][ T5636]  dump_stack_lvl+0xd8/0x12c
[   42.431446][ T5636]  dump_stack+0x1c/0x28
[   42.431455][ T5636]  should_fail_ex+0x41c/0x590
[   42.431464][ T5636]  should_failslab+0xc4/0x120
[   42.431472][ T5636]  kmem_cache_alloc_noprof+0x94/0x5d8
[   42.431480][ T5636]  skb_clone+0x1ac/0x320
[   42.431491][ T5636]  dev_queue_xmit_nit+0x280/0x920
[   42.431500][ T5636]  dev_hard_start_xmit+0xac/0x9d4
[   42.431508][ T5636]  __dev_queue_xmit+0xed4/0x2bc0
[   42.431516][ T5636]  __netlink_deliver_tap+0x484/0x6f4
[   42.431533][ T5636]  netlink_deliver_tap+0x1d8/0x1dc
[   42.431542][ T5636]  netlink_unicast+0x5dc/0x7f8
[   42.431551][ T5636]  netlink_sendmsg+0x648/0x948
[   42.431561][ T5636]  __sock_sendmsg+0xc8/0x17c
[   42.431572][ T5636]  ____sys_sendmsg+0x3d0/0x6c8
[   42.431581][ T5636]  ___sys_sendmsg+0x198/0x224
[   42.431590][ T5636]  __sys_sendmsg+0x158/0x204
[   42.431599][ T5636]  __arm64_sys_sendmsg+0x88/0x9c
[   42.431608][ T5636]  invoke_syscall+0x98/0x244
[   42.431618][ T5636]  el0_svc_common+0xec/0x23c
[   42.431628][ T5636]  do_el0_svc+0x4c/0x5c
[   42.431637][ T5636]  el0_svc+0x64/0x260
[   42.431647][ T5636]  el0t_64_sync_handler+0x44/0x104
[   42.431655][ T5636]  el0t_64_sync+0x198/0x19c
[   42.460846][ T5627] loop5: lost filesystem error report for type 5 error -117
[   42.462973][    C1] EXT4-fs (loop5): error count since last fsck: 1
[   42.463003][    C1] EXT4-fs (loop5): initial error at time 42: __ext4_get_inode_loc:4886
[   42.463030][    C1] EXT4-fs (loop5): last error at time 42: __ext4_get_inode_loc:4886
[   42.478201][ T5627] EXT4-fs (loop5): Remounting filesystem read-only
[   42.478262][ T5627] EXT4-fs (loop5): get root inode failed
[   42.478270][ T5627] EXT4-fs (loop5): mount failed
[   42.487098][ T4404] 8021q: adding VLAN 0 to HW filter on device eth7
[   42.506056][ T5461] veth0_vlan: entered promiscuous mode
[   42.511958][ T5461] veth1_vlan: entered promiscuous mode
[   42.588674][ T5640] Bluetooth: MGMT ver 1.23
[   42.643010][ T4726] Bluetooth: hci0: command tx timeout
[   42.644950][ T4726] Bluetooth: hci3: command tx timeout
[   42.805236][ T5461] veth0_macvtap: entered promiscuous mode
[   42.818252][ T5461] veth1_macvtap: entered promiscuous mode
[   42.827473][ T5461] batman_adv: batadv0: Interface activated: batadv_slave_0
[   42.828527][ T5461] batman_adv: batadv0: Interface activated: batadv_slave_1
[   42.874473][ T3748] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.874667][ T3748] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.874745][ T3748] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.874761][ T3748] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.888300][ T5649] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   42.894488][ T5649] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264)
[   42.894532][ T5649] FAT-fs (loop2): Filesystem has been set read-only
[   42.928645][ T3748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   42.928673][ T3748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.939053][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   42.939091][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.135121][ T5673] set_capacity_and_notify: 6 callbacks suppressed
[   43.135355][ T5673] loop6: detected capacity change from 0 to 512
[   43.135735][ T5673] EXT4-fs: Ignoring removed bh option
[   43.135746][ T5673] EXT4-fs: Ignoring removed nobh option
[   43.135753][ T5673] EXT4-fs: Ignoring removed mblk_io_submit option
[   43.138184][ T5673] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   43.138768][ T5673] EXT4-fs (loop6): revision level too high, forcing read-only mode
[   43.138861][ T5673] EXT4-fs (loop6): orphan cleanup on readonly fs
[   43.139307][ T5673] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 4
[   43.139334][ T5673] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota
[   43.139606][ T5673] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.183: Failed to acquire dquot type 1
[   43.139621][ T5673] loop6: lost filesystem error report for type 5 error -5
[   43.140134][ T5673] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.183: Invalid block bitmap block 0 in block_group 0
[   43.140151][ T5673] loop6: lost filesystem error report for type 5 error -117
[   43.141317][ T5673] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.183: Invalid block bitmap block 0 in block_group 0
[   43.141334][ T5673] loop6: lost filesystem error report for type 5 error -117
[   43.142165][ T5673] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.183: Invalid block bitmap block 0 in block_group 0
[   43.142185][ T5673] loop6: lost filesystem error report for type 5 error -117
[   43.142363][ T5673] Quota error (device loop6): write_blk: dquota write failed
[   43.142399][ T5673] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[   43.142411][ T5673] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.183: Failed to acquire dquot type 1
[   43.142420][ T5673] loop6: lost filesystem error report for type 5 error -28
[   43.142983][    C0] EXT4-fs (loop6): error count since last fsck: 5
[   43.142997][    C0] EXT4-fs (loop6): last error at time 43: ext4_acquire_dquot:7041
[   43.145959][ T5673] Quota error (device loop6): write_blk: dquota write failed
[   43.146007][ T5673] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.183: Failed to acquire dquot type 1
[   43.146020][ T5673] loop6: lost filesystem error report for type 5 error -28
[   43.148441][ T5673] EXT4-fs (loop6): 1 orphan inode deleted
[   43.150836][ T5673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   43.200991][ T5461] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.226417][ T5679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.229310][ T5679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.323840][ T5690] netlink: 58 bytes leftover after parsing attributes in process `syz.3.189'.
[   43.451520][ T5697] netlink: 12 bytes leftover after parsing attributes in process `syz.6.191'.
[   43.451872][ T5697] sch_tbf: burst 2500 is lower than device nlmon0 mtu (3776) !
[   43.488984][ T5699] loop1: detected capacity change from 0 to 512
[   43.491893][ T5699] EXT4-fs: Ignoring removed bh option
[   43.491936][ T5699] EXT4-fs: Ignoring removed mblk_io_submit option
[   43.494033][ T5699] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   43.495191][ T5699] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   43.495289][ T5699] EXT4-fs (loop1): orphan cleanup on readonly fs
[   43.495667][ T5699] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.192: Failed to acquire dquot type 1
[   43.495680][ T5699] loop1: lost filesystem error report for type 5 error -5
[   43.495915][ T5699] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.192: Invalid block bitmap block 0 in block_group 0
[   43.495928][ T5699] loop1: lost filesystem error report for type 5 error -117
[   43.496152][ T5699] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.192: Invalid block bitmap block 0 in block_group 0
[   43.496164][ T5699] loop1: lost filesystem error report for type 5 error -117
[   43.496287][ T5699] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.192: Invalid block bitmap block 0 in block_group 0
[   43.496447][ T5699] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.192: Failed to acquire dquot type 1
[   43.496745][ T5699] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.192: Failed to acquire dquot type 1
[   43.496899][ T5699] EXT4-fs (loop1): 1 orphan inode deleted
[   43.498678][ T5699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   43.539435][ T5702] tap0: tun_chr_ioctl cmd 1074025698
[   43.545119][ T4722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.550927][ T5704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.552910][ T5704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.558878][ T5704] FAULT_INJECTION: forcing a failure.
[   43.558878][ T5704] name failslab, interval 1, probability 0, space 0, times 0
[   43.558920][ T5704] CPU: 0 UID: 0 PID: 5704 Comm: syz.3.194 Not tainted syzkaller #0 PREEMPT 
[   43.558933][ T5704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   43.558941][ T5704] Call trace:
[   43.558945][ T5704]  show_stack+0x2c/0x3c (C)
[   43.558964][ T5704]  __dump_stack+0x30/0x40
[   43.558975][ T5704]  dump_stack_lvl+0xd8/0x12c
[   43.558986][ T5704]  dump_stack+0x1c/0x28
[   43.558995][ T5704]  should_fail_ex+0x41c/0x590
[   43.559004][ T5704]  should_failslab+0xc4/0x120
[   43.559012][ T5704]  __kmalloc_cache_noprof+0x94/0x5ec
[   43.559021][ T5704]  xfrm_policy_alloc+0x84/0x264
[   43.559031][ T5704]  xfrm_policy_construct+0x50/0x53c
[   43.559042][ T5704]  xfrm_add_policy+0x1c0/0x58c
[   43.559051][ T5704]  xfrm_user_rcv_msg+0x4e0/0x950
[   43.559060][ T5704]  netlink_rcv_skb+0x238/0x414
[   43.559070][ T5704]  xfrm_netlink_rcv+0x80/0x9c
[   43.559079][ T5704]  netlink_unicast+0x600/0x7f8
[   43.559087][ T5704]  netlink_sendmsg+0x648/0x948
[   43.559096][ T5704]  __sock_sendmsg+0xc8/0x17c
[   43.559106][ T5704]  ____sys_sendmsg+0x3d0/0x6c8
[   43.559115][ T5704]  ___sys_sendmsg+0x198/0x224
[   43.559124][ T5704]  __sys_sendmsg+0x158/0x204
[   43.559133][ T5704]  __arm64_sys_sendmsg+0x88/0x9c
[   43.559142][ T5704]  invoke_syscall+0x98/0x244
[   43.559152][ T5704]  el0_svc_common+0xec/0x23c
[   43.559162][ T5704]  do_el0_svc+0x4c/0x5c
[   43.559171][ T5704]  el0_svc+0x64/0x260
[   43.559181][ T5704]  el0t_64_sync_handler+0x44/0x104
[   43.559189][ T5704]  el0t_64_sync+0x198/0x19c
[   43.718708][ T5723] binder: 5722:5723 tried to acquire reference to desc 0, got 1 instead
[   43.719072][ T5723] binder_alloc: 5722: pid 5722 spamming oneway? 1 buffers allocated for a total size of 4096
[   43.719614][ T5723] netlink: 96 bytes leftover after parsing attributes in process `syz.6.201'.
[   43.721616][ T1949] binder: undelivered TRANSACTION_COMPLETE
[   43.721632][ T1949] binder: undelivered TRANSACTION_COMPLETE
[   43.730353][ T1949] binder: undelivered transaction 16, process died.
[   43.730476][ T1949] binder: undelivered transaction 15, process died.
[   44.062678][ T5736] netlink: 24 bytes leftover after parsing attributes in process `syz.6.205'.
[   44.237263][ T5746] FAULT_INJECTION: forcing a failure.
[   44.237263][ T5746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   44.237300][ T5746] CPU: 1 UID: 0 PID: 5746 Comm: syz.6.208 Not tainted syzkaller #0 PREEMPT 
[   44.237315][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   44.237322][ T5746] Call trace:
[   44.237326][ T5746]  show_stack+0x2c/0x3c (C)
[   44.237346][ T5746]  __dump_stack+0x30/0x40
[   44.237358][ T5746]  dump_stack_lvl+0xd8/0x12c
[   44.237369][ T5746]  dump_stack+0x1c/0x28
[   44.237378][ T5746]  should_fail_ex+0x41c/0x590
[   44.237386][ T5746]  should_fail+0x14/0x24
[   44.237393][ T5746]  should_fail_usercopy+0x20/0x30
[   44.237400][ T5746]  _inline_copy_from_user+0x3c/0x174
[   44.237411][ T5746]  do_ipt_set_ctl+0x664/0xc38
[   44.237421][ T5746]  nf_setsockopt+0xa0/0xe4
[   44.237428][ T5746]  ip_setsockopt+0x118/0x128
[   44.237438][ T5746]  udp_setsockopt+0xa8/0xc0
[   44.237446][ T5746]  sock_common_setsockopt+0xb0/0xcc
[   44.237457][ T5746]  do_sock_setsockopt+0x1f0/0x330
[   44.237466][ T5746]  __sys_setsockopt+0x104/0x170
[   44.237475][ T5746]  __arm64_sys_setsockopt+0xc8/0xe4
[   44.237484][ T5746]  invoke_syscall+0x98/0x244
[   44.237495][ T5746]  el0_svc_common+0xec/0x23c
[   44.237504][ T5746]  do_el0_svc+0x4c/0x5c
[   44.237514][ T5746]  el0_svc+0x64/0x260
[   44.237529][ T5746]  el0t_64_sync_handler+0x44/0x104
[   44.237538][ T5746]  el0t_64_sync+0x198/0x19c
[   44.298515][ T5751] loop3: detected capacity change from 0 to 2048
[   44.310625][ T5751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.317224][ T5751] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.210: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   44.329504][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.368362][ T5760] binder: 5758:5760 BC_DEAD_BINDER_DONE 0000000000000000 not found
[   44.368392][ T5760] binder: 5758:5760 unknown command 0
[   44.368417][ T5760] binder: 5758:5760 ioctl c0306201 200001c0 returned -22
[   44.423107][ T5762] loop3: detected capacity change from 0 to 8
[   44.440613][ T5762] SQUASHFS error: Unable to read directory block [631:26]
[   44.507078][ T5765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.509566][ T5765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.574716][ T5775] loop2: detected capacity change from 0 to 2048
[   44.595482][ T5775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.609751][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.631423][ T5780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.631636][ T5780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.713134][   T50] Bluetooth: hci3: command tx timeout
[   44.713201][   T50] Bluetooth: hci0: command tx timeout
[   45.120598][ T5785] netlink: 'syz.5.219': attribute type 2 has an invalid length.
[   45.158119][ T5802] loop5: detected capacity change from 0 to 256
[   45.158527][ T5802] vfat: Unknown parameter 'u'
[   45.225911][ T5809] netlink: 'syz.5.226': attribute type 1 has an invalid length.
[   45.238315][ T5809] TCP: TCP_TX_DELAY enabled
[   45.244606][ T5809] binder: 5808:5809 ioctl c0306201 20000100 returned -14
[   45.351683][ T5813] FAULT_INJECTION: forcing a failure.
[   45.351683][ T5813] name failslab, interval 1, probability 0, space 0, times 0
[   45.351720][ T5813] CPU: 1 UID: 0 PID: 5813 Comm: syz.3.228 Not tainted syzkaller #0 PREEMPT 
[   45.351736][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   45.351742][ T5813] Call trace:
[   45.351747][ T5813]  show_stack+0x2c/0x3c (C)
[   45.351771][ T5813]  __dump_stack+0x30/0x40
[   45.351784][ T5813]  dump_stack_lvl+0xd8/0x12c
[   45.351796][ T5813]  dump_stack+0x1c/0x28
[   45.351807][ T5813]  should_fail_ex+0x41c/0x590
[   45.351816][ T5813]  should_failslab+0xc4/0x120
[   45.351825][ T5813]  __kvmalloc_node_noprof+0x160/0x7d8
[   45.351835][ T5813]  xt_alloc_table_info+0x58/0xc4
[   45.351845][ T5813]  do_ipt_set_ctl+0x850/0xc38
[   45.351855][ T5813]  nf_setsockopt+0xa0/0xe4
[   45.351862][ T5813]  ip_setsockopt+0x118/0x128
[   45.351872][ T5813]  udp_setsockopt+0xa8/0xc0
[   45.351881][ T5813]  sock_common_setsockopt+0xb0/0xcc
[   45.351890][ T5813]  do_sock_setsockopt+0x1f0/0x330
[   45.351900][ T5813]  __sys_setsockopt+0x104/0x170
[   45.351909][ T5813]  __arm64_sys_setsockopt+0xc8/0xe4
[   45.351918][ T5813]  invoke_syscall+0x98/0x244
[   45.351928][ T5813]  el0_svc_common+0xec/0x23c
[   45.351938][ T5813]  do_el0_svc+0x4c/0x5c
[   45.351947][ T5813]  el0_svc+0x64/0x260
[   45.351957][ T5813]  el0t_64_sync_handler+0x44/0x104
[   45.351965][ T5813]  el0t_64_sync+0x198/0x19c
[   45.810441][ T5828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.812259][ T5828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.966383][ T5834] FAULT_INJECTION: forcing a failure.
[   45.966383][ T5834] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   45.966426][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz.2.234 Not tainted syzkaller #0 PREEMPT 
[   45.966440][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   45.966446][ T5834] Call trace:
[   45.966450][ T5834]  show_stack+0x2c/0x3c (C)
[   45.966472][ T5834]  __dump_stack+0x30/0x40
[   45.966484][ T5834]  dump_stack_lvl+0xd8/0x12c
[   45.966495][ T5834]  dump_stack+0x1c/0x28
[   45.966505][ T5834]  should_fail_ex+0x41c/0x590
[   45.966519][ T5834]  should_fail+0x14/0x24
[   45.966527][ T5834]  should_fail_usercopy+0x20/0x30
[   45.966536][ T5834]  _inline_copy_from_user+0x3c/0x174
[   45.966550][ T5834]  copy_msghdr_from_user+0xb8/0x194
[   45.966561][ T5834]  ___sys_sendmsg+0x14c/0x224
[   45.966571][ T5834]  __sys_sendmsg+0x158/0x204
[   45.966580][ T5834]  __arm64_sys_sendmsg+0x88/0x9c
[   45.966589][ T5834]  invoke_syscall+0x98/0x244
[   45.966600][ T5834]  el0_svc_common+0xec/0x23c
[   45.966609][ T5834]  do_el0_svc+0x4c/0x5c
[   45.966619][ T5834]  el0_svc+0x64/0x260
[   45.966628][ T5834]  el0t_64_sync_handler+0x44/0x104
[   45.966637][ T5834]  el0t_64_sync+0x198/0x19c
[   46.048793][ T5839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.049027][ T5839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.425410][ T5845] fuse: Unknown parameter 'fsuuid'
[   46.510986][ T5849] netlink: 72 bytes leftover after parsing attributes in process `syz.6.240'.
[   46.511033][ T5849] netlink: 40 bytes leftover after parsing attributes in process `syz.6.240'.
[   46.515709][ T5849] loop6: detected capacity change from 0 to 512
[   46.528489][ T5849] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a840c018, mo2=0082]
[   46.528555][ T5849] System zones: 2-12, 7-7
[   46.528827][ T5849] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #17: comm syz.6.240: iget: immutable or append flags not allowed on symlinks
[   46.528847][ T5849] loop6: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[   46.528963][ T5849] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.240: couldn't read orphan inode 17 (err -117)
[   46.529493][ T5849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.560169][ T5461] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.597720][ T5852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.599288][ T5852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.631012][ T5855] netlink: 32 bytes leftover after parsing attributes in process `syz.3.242'.
[   46.656860][ T5858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'.
[   46.660086][ T5858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'.
[   46.794221][   T50] Bluetooth: hci0: command tx timeout
[   46.845457][ T5867] FAULT_INJECTION: forcing a failure.
[   46.845457][ T5867] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   46.845503][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: syz.3.246 Not tainted syzkaller #0 PREEMPT 
[   46.845522][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   46.845528][ T5867] Call trace:
[   46.845532][ T5867]  show_stack+0x2c/0x3c (C)
[   46.845558][ T5867]  __dump_stack+0x30/0x40
[   46.845570][ T5867]  dump_stack_lvl+0xd8/0x12c
[   46.845580][ T5867]  dump_stack+0x1c/0x28
[   46.845590][ T5867]  should_fail_ex+0x41c/0x590
[   46.845598][ T5867]  should_fail+0x14/0x24
[   46.845605][ T5867]  should_fail_usercopy+0x20/0x30
[   46.845612][ T5867]  _inline_copy_from_user+0x3c/0x174
[   46.845623][ T5867]  move_addr_to_kernel+0x88/0x168
[   46.845632][ T5867]  __copy_msghdr+0x2e0/0x3d4
[   46.845641][ T5867]  copy_msghdr_from_user+0xe8/0x194
[   46.845651][ T5867]  ___sys_sendmsg+0x14c/0x224
[   46.845660][ T5867]  __sys_sendmsg+0x158/0x204
[   46.845669][ T5867]  __arm64_sys_sendmsg+0x88/0x9c
[   46.845679][ T5867]  invoke_syscall+0x98/0x244
[   46.845689][ T5867]  el0_svc_common+0xec/0x23c
[   46.845699][ T5867]  do_el0_svc+0x4c/0x5c
[   46.845708][ T5867]  el0_svc+0x64/0x260
[   46.845718][ T5867]  el0t_64_sync_handler+0x44/0x104
[   46.845726][ T5867]  el0t_64_sync+0x198/0x19c
[   46.929512][ T5869] FAULT_INJECTION: forcing a failure.
[   46.929512][ T5869] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   46.929553][ T5869] CPU: 1 UID: 0 PID: 5869 Comm: syz.1.247 Not tainted syzkaller #0 PREEMPT 
[   46.929568][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   46.929574][ T5869] Call trace:
[   46.929578][ T5869]  show_stack+0x2c/0x3c (C)
[   46.929600][ T5869]  __dump_stack+0x30/0x40
[   46.929612][ T5869]  dump_stack_lvl+0xd8/0x12c
[   46.929623][ T5869]  dump_stack+0x1c/0x28
[   46.929632][ T5869]  should_fail_ex+0x41c/0x590
[   46.929640][ T5869]  should_fail+0x14/0x24
[   46.929647][ T5869]  should_fail_usercopy+0x20/0x30
[   46.929654][ T5869]  _inline_copy_from_user+0x3c/0x174
[   46.929666][ T5869]  copy_from_sockptr_offset+0x7c/0xc0
[   46.929675][ T5869]  do_ipt_set_ctl+0x874/0xc38
[   46.929684][ T5869]  nf_setsockopt+0xa0/0xe4
[   46.929692][ T5869]  ip_setsockopt+0x118/0x128
[   46.929702][ T5869]  udp_setsockopt+0xa8/0xc0
[   46.929711][ T5869]  sock_common_setsockopt+0xb0/0xcc
[   46.929720][ T5869]  do_sock_setsockopt+0x1f0/0x330
[   46.929730][ T5869]  __sys_setsockopt+0x104/0x170
[   46.929739][ T5869]  __arm64_sys_setsockopt+0xc8/0xe4
[   46.929748][ T5869]  invoke_syscall+0x98/0x244
[   46.929758][ T5869]  el0_svc_common+0xec/0x23c
[   46.929768][ T5869]  do_el0_svc+0x4c/0x5c
[   46.929778][ T5869]  el0_svc+0x64/0x260
[   46.929787][ T5869]  el0t_64_sync_handler+0x44/0x104
[   46.929795][ T5869]  el0t_64_sync+0x198/0x19c
[   47.045680][ T5874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.045882][ T5874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.092052][ T5876] netlink: 'syz.3.250': attribute type 1 has an invalid length.
[   47.098750][ T5876] bond1: entered promiscuous mode
[   47.098964][ T5876] 8021q: adding VLAN 0 to HW filter on device bond1
[   47.119375][ T5876] 8021q: adding VLAN 0 to HW filter on device bond1
[   47.121095][ T5876] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[   47.136398][ T5876] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode
[   47.142778][ T5876] bond1: (slave gre1): making interface the new active one
[   47.145935][ T5876] gre1: entered promiscuous mode
[   47.146828][ T5876] bond1: (slave gre1): Enslaving as an active interface with an up link
[   47.165678][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'.
[   47.196326][ T5876] bond1 (unregistering): (slave gre1): Releasing backup interface
[   47.196394][ T5881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.196557][ T5881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.200919][ T5876] gre1: left promiscuous mode
[   47.201804][ T5881] FAULT_INJECTION: forcing a failure.
[   47.201804][ T5881] name failslab, interval 1, probability 0, space 0, times 0
[   47.201819][ T5881] CPU: 0 UID: 0 PID: 5881 Comm: syz.6.252 Not tainted syzkaller #0 PREEMPT 
[   47.201829][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   47.201834][ T5881] Call trace:
[   47.201837][ T5881]  show_stack+0x2c/0x3c (C)
[   47.201855][ T5881]  __dump_stack+0x30/0x40
[   47.201867][ T5881]  dump_stack_lvl+0xd8/0x12c
[   47.201876][ T5881]  dump_stack+0x1c/0x28
[   47.201886][ T5881]  should_fail_ex+0x41c/0x590
[   47.201894][ T5881]  should_failslab+0xc4/0x120
[   47.201903][ T5881]  kmem_cache_alloc_noprof+0x94/0x5d8
[   47.201912][ T5881]  skb_clone+0x1ac/0x320
[   47.201923][ T5881]  __netlink_deliver_tap+0x364/0x6f4
[   47.201933][ T5881]  netlink_deliver_tap+0x1d8/0x1dc
[   47.201942][ T5881]  __netlink_sendskb+0x78/0xd0
[   47.201950][ T5881]  netlink_sendskb+0x2c/0xdc
[   47.201958][ T5881]  netlink_unicast+0x2c0/0x7f8
[   47.201967][ T5881]  netlink_ack+0x570/0x890
[   47.201975][ T5881]  netlink_rcv_skb+0x21c/0x414
[   47.201984][ T5881]  xfrm_netlink_rcv+0x80/0x9c
[   47.201994][ T5881]  netlink_unicast+0x600/0x7f8
[   47.202002][ T5881]  netlink_sendmsg+0x648/0x948
[   47.202011][ T5881]  __sock_sendmsg+0xc8/0x17c
[   47.202020][ T5881]  ____sys_sendmsg+0x3d0/0x6c8
[   47.202029][ T5881]  ___sys_sendmsg+0x198/0x224
[   47.202038][ T5881]  __sys_sendmsg+0x158/0x204
[   47.202047][ T5881]  __arm64_sys_sendmsg+0x88/0x9c
[   47.202057][ T5881]  invoke_syscall+0x98/0x244
[   47.202067][ T5881]  el0_svc_common+0xec/0x23c
[   47.202076][ T5881]  do_el0_svc+0x4c/0x5c
[   47.202086][ T5881]  el0_svc+0x64/0x260
[   47.202095][ T5881]  el0t_64_sync_handler+0x44/0x104
[   47.202103][ T5881]  el0t_64_sync+0x198/0x19c
[   47.274115][ T5876] bond1 (unregistering): Released all slaves
[   47.316582][ T5884] geneve2: entered promiscuous mode
[   47.316621][ T5884] geneve2: entered allmulticast mode
[   47.380828][ T5886] loop3: detected capacity change from 0 to 512
[   47.384994][ T5886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   47.386348][ T5886] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.254: bad orphan inode 131083
[   47.387557][ T5886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.394354][ T5886] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[   47.410083][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.428751][ T5889] loop3: detected capacity change from 0 to 1024
[   47.475303][ T5889] EXT4-fs warning (device loop3): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop3.
[   47.560400][ T5900] FAULT_INJECTION: forcing a failure.
[   47.560400][ T5900] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   47.560437][ T5900] CPU: 0 UID: 0 PID: 5900 Comm: syz.3.258 Not tainted syzkaller #0 PREEMPT 
[   47.560449][ T5900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   47.560455][ T5900] Call trace:
[   47.560459][ T5900]  show_stack+0x2c/0x3c (C)
[   47.560483][ T5900]  __dump_stack+0x30/0x40
[   47.560496][ T5900]  dump_stack_lvl+0xd8/0x12c
[   47.560506][ T5900]  dump_stack+0x1c/0x28
[   47.560521][ T5900]  should_fail_ex+0x41c/0x590
[   47.560530][ T5900]  should_fail+0x14/0x24
[   47.560537][ T5900]  should_fail_usercopy+0x20/0x30
[   47.560545][ T5900]  _inline_copy_from_user+0x3c/0x174
[   47.560557][ T5900]  ____sys_sendmsg+0x254/0x6c8
[   47.560567][ T5900]  ___sys_sendmsg+0x198/0x224
[   47.560577][ T5900]  __sys_sendmsg+0x158/0x204
[   47.560586][ T5900]  __arm64_sys_sendmsg+0x88/0x9c
[   47.560595][ T5900]  invoke_syscall+0x98/0x244
[   47.560605][ T5900]  el0_svc_common+0xec/0x23c
[   47.560615][ T5900]  do_el0_svc+0x4c/0x5c
[   47.560624][ T5900]  el0_svc+0x64/0x260
[   47.560634][ T5900]  el0t_64_sync_handler+0x44/0x104
[   47.560642][ T5900]  el0t_64_sync+0x198/0x19c
[   47.773906][ T5920] tmpfs: Bad value for 'mpol'
[   47.790709][ T5922] loop5: detected capacity change from 0 to 256
[   48.029239][ T5924] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   48.029540][ T5924] FAT-fs (loop3): Filesystem has been set read-only
[   48.092119][ T5917] vfat: Unknown parameter 'xP�dU �z��g٩��to��Iss3upǟ�`6�4x�BW�L3�/����|���a��x5K6��o?V1f�\���'
[   48.408127][ T5941] set_capacity_and_notify: 2 callbacks suppressed
[   48.411160][ T5941] loop1: detected capacity change from 0 to 256
[   48.425002][ T5941] sctp: [Deprecated]: syz.1.269 (pid 5941) Use of int in maxseg socket option.
[   48.425002][ T5941] Use struct sctp_assoc_value instead
[   48.556269][ T5948] loop6: detected capacity change from 0 to 512
[   48.629392][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'.
[   48.732573][ T5965] loop1: detected capacity change from 0 to 128
[   49.053278][   T50] Bluetooth: hci0: command tx timeout
[   49.474283][   T30] kauditd_printk_skb: 7 callbacks suppressed
[   49.483312][   T30] audit: type=1326 audit(49.460:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.3.279" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979228 code=0x7ffc0000
[   49.488563][   T30] audit: type=1326 audit(49.460:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.3.279" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa7979228 code=0x7ffc0000
[   49.492929][   T30] audit: type=1326 audit(49.460:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm=FF exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979228 code=0x7ffc0000
[   49.497314][   T30] audit: type=1326 audit(49.460:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm=FF exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa7979228 code=0x7ffc0000
[   49.501985][   T30] audit: type=1326 audit(49.460:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm=FF exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979228 code=0x7ffc0000
[   49.506674][   T30] audit: type=1326 audit(49.470:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm=FF exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa7979228 code=0x7ffc0000
[   49.598578][   T30] audit: type=1326 audit(49.580:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm=FF exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979228 code=0x7ffc0000
[   49.603875][   T30] audit: type=1326 audit(49.580:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm=FF exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979228 code=0x7ffc0000
[   49.715413][ T6012] FAULT_INJECTION: forcing a failure.
[   49.715413][ T6012] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   49.715450][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz.5.280 Not tainted syzkaller #0 PREEMPT 
[   49.715466][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   49.715472][ T6012] Call trace:
[   49.715476][ T6012]  show_stack+0x2c/0x3c (C)
[   49.715497][ T6012]  __dump_stack+0x30/0x40
[   49.715508][ T6012]  dump_stack_lvl+0xd8/0x12c
[   49.715518][ T6012]  dump_stack+0x1c/0x28
[   49.715533][ T6012]  should_fail_ex+0x41c/0x590
[   49.715542][ T6012]  should_fail+0x14/0x24
[   49.715549][ T6012]  should_fail_usercopy+0x20/0x30
[   49.715557][ T6012]  simple_read_from_buffer+0xc4/0x238
[   49.715567][ T6012]  proc_fail_nth_read+0x1a8/0x248
[   49.715576][ T6012]  vfs_read+0x230/0x8c8
[   49.715584][ T6012]  ksys_read+0x12c/0x228
[   49.715590][ T6012]  __arm64_sys_read+0x84/0x98
[   49.715597][ T6012]  invoke_syscall+0x98/0x244
[   49.715608][ T6012]  el0_svc_common+0xec/0x23c
[   49.715617][ T6012]  do_el0_svc+0x4c/0x5c
[   49.715627][ T6012]  el0_svc+0x64/0x260
[   49.715636][ T6012]  el0t_64_sync_handler+0x44/0x104
[   49.715645][ T6012]  el0t_64_sync+0x198/0x19c
[   49.816945][ T6023] overlayfs: failed to resolve './file0': -2
[   49.917408][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.282'.
[   50.061094][   T30] audit: type=1400 audit(50.050:10): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6038 comm="syz.6.289" saddr=63.255.255.255 src=20001 daddr=172.20.20.170
[   50.310125][ T6063] loop6: detected capacity change from 0 to 256
[   50.322840][ T6064] syzkaller0: entered promiscuous mode
[   50.322879][ T6064] syzkaller0: entered allmulticast mode
[   50.401902][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.294'.
[   50.502744][    T9] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0
[   50.503127][    T9] wiimote 0005:057E:0306.0001: New device registered
[   50.597727][ T6084] process 'syz.1.298' launched '/dev/fd/5' with NULL argv: empty string added
[   50.706064][ T6075] wiimote 0005:057E:0306.0001: Device removed
[   50.856359][ T6110] loop6: detected capacity change from 0 to 1024
[   50.872735][ T6110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.887120][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.5.303'.
[   50.902142][ T5461] EXT4-fs error (device loop6): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /36/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   50.907626][ T5461] EXT4-fs error (device loop6): ext4_empty_dir:3091: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   50.911743][ T5461] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.'
[   50.916659][ T5461] EXT4-fs error (device loop6): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /36/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   50.921608][ T5461] EXT4-fs error (device loop6): ext4_empty_dir:3091: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   50.922908][ T6113] loop5: detected capacity change from 0 to 256
[   50.986854][ T5461] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.'
[   50.989184][ T5461] EXT4-fs error (device loop6): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /36/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   50.999137][ T5461] EXT4-fs error (device loop6): ext4_empty_dir:3091: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   51.005164][ T5461] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.'
[   51.005393][ T5461] EXT4-fs error (device loop6): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /36/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   51.011724][ T5461] EXT4-fs error (device loop6): ext4_empty_dir:3091: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   51.013145][ T5461] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.'
[   51.013334][ T5461] EXT4-fs error (device loop6): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /36/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   51.018310][ T5461] EXT4-fs error (device loop6): ext4_empty_dir:3091: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   51.018535][ T5461] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.'
[   51.019052][ T5461] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.'
[   51.019481][ T5461] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.'
[   51.020031][ T5461] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.'
[   51.020458][ T5461] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.'
[   51.022019][ T5461] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.'
[   51.513253][    T9] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1)
[   51.533404][    T9] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input3
[   51.539539][    T9] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input4
[   51.555068][    T9] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input2
[   51.708116][ T5461] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.754275][ T3723] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.815773][ T3723] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.876079][ T4726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   51.876716][ T4726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   51.876975][ T4726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   51.877662][ T4726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   51.877929][ T4726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   51.961471][ T3723] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.028481][ T3723] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.101138][ T6127] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.103129][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.103268][ T6127] bridge_slave_0: entered allmulticast mode
[   52.103782][ T6127] bridge_slave_0: entered promiscuous mode
[   52.104664][ T6127] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.104687][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.104744][ T6127] bridge_slave_1: entered allmulticast mode
[   52.105137][ T6127] bridge_slave_1: entered promiscuous mode
[   52.122534][ T6127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.123745][ T6127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.130956][ T6127] team0: Port device team_slave_0 added
[   52.132166][ T6127] team0: Port device team_slave_1 added
[   52.140448][ T6127] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.141922][ T6127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   52.147168][ T6127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.151596][ T6127] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.153296][ T6127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   52.158882][ T6127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.199872][ T6127] hsr_slave_0: entered promiscuous mode
[   52.200237][ T6127] hsr_slave_1: entered promiscuous mode
[   52.200484][ T6127] debugfs: 'hsr0' already exists in 'hsr'
[   52.200493][ T6127] Cannot create hsr debugfs directory
[   52.216623][ T3723] bridge_slave_1: left allmulticast mode
[   52.216658][ T3723] bridge_slave_1: left promiscuous mode
[   52.216734][ T3723] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.220868][ T3723] bridge_slave_0: left allmulticast mode
[   52.222058][ T3723] bridge_slave_0: left promiscuous mode
[   52.224228][ T3723] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.295723][ T3723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.305626][ T3723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.334036][ T3723] bond0 (unregistering): Released all slaves
[   52.424035][ T6127] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   52.425354][ T6127] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   52.425696][ T6127] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   52.428404][ T6127] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   52.428760][ T6127] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   52.430831][ T6127] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   52.431481][ T6127] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   52.438878][ T6127] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   52.684220][ T4404] 8021q: adding VLAN 0 to HW filter on device eth8
[   52.691737][ T3723] hsr_slave_0: left promiscuous mode
[   52.694083][ T3723] hsr_slave_1: left promiscuous mode
[   52.694372][ T3723] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.694385][ T3723] batman_adv: batadv0: Removing interface: batadv_slave_0
[   52.695429][ T3723] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.695441][ T3723] batman_adv: batadv0: Removing interface: batadv_slave_1
[   52.702554][ T3723] veth1_macvtap: left promiscuous mode
[   52.702607][ T3723] veth0_macvtap: left promiscuous mode
[   52.702660][ T3723] veth1_vlan: left promiscuous mode
[   52.702694][ T3723] veth0_vlan: left promiscuous mode
[   52.838050][ T3723] team0 (unregistering): Port device team_slave_1 removed
[   52.843318][ T3723] team0 (unregistering): Port device team_slave_0 removed
[   52.918307][ T6127] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.927495][ T6175] syzkaller0: entered promiscuous mode
[   52.927547][ T6175] syzkaller0: entered allmulticast mode
[   52.937470][ T6175] tipc: Started in network mode
[   52.937514][ T6175] tipc: Node identity 06753b063553, cluster identity 4711
[   52.937637][ T6175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.939511][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.313'.
[   52.939534][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.313'.
[   52.940977][ T6127] 8021q: adding VLAN 0 to HW filter on device team0
[   52.960082][ T3748] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.960135][ T3748] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.964078][ T3748] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.964139][ T3748] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.978648][ T6175] tipc: Resetting bearer <eth:syzkaller0>
[   52.994610][ T6174] tipc: Resetting bearer <eth:syzkaller0>
[   53.004431][ T6174] tipc: Disabling bearer <eth:syzkaller0>
[   53.030720][ T6127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   53.241304][ T6127] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.369031][ T6127] veth0_vlan: entered promiscuous mode
[   53.379787][ T6127] veth1_vlan: entered promiscuous mode
[   53.391742][ T6127] veth0_macvtap: entered promiscuous mode
[   53.398698][ T6127] veth1_macvtap: entered promiscuous mode
[   53.405960][ T6127] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.409960][ T6127] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.416919][ T3723] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.417079][ T3723] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.417096][ T3723] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.417113][ T3723] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.481382][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.481419][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.510091][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.510130][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.626181][ T6240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.315'.
[   53.628285][ T6240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.315'.
[   53.683347][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.315'.
[   53.684452][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.315'.
[   53.780897][ T6253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.781110][ T6253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.865269][ T6253] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   53.867686][ T6253] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   53.913271][   T50] Bluetooth: hci0: command tx timeout
[   53.920684][ T6253] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   53.920717][ T6253] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   54.028559][ T6270] loop5: detected capacity change from 0 to 256
[   54.034219][ T6253] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   54.034253][ T6253] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[   54.055530][ T6270] netlink: 64 bytes leftover after parsing attributes in process `syz.5.319'.
[   54.060710][ T6270] syzkaller1: entered promiscuous mode
[   54.060949][ T6270] syzkaller1: entered allmulticast mode
[   54.207527][ T4404] 8021q: adding VLAN 0 to HW filter on device eth9
[   54.330773][ T6253] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   54.330805][ T6253] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   54.492793][ T6253] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   54.492824][ T6253] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   54.558003][ T6303] loop1: detected capacity change from 0 to 512
[   54.610273][ T6303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.690148][ T4722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.765777][ T6318] netlink: 32 bytes leftover after parsing attributes in process `syz.1.325'.
[   54.766124][ T4404] 8021q: adding VLAN 0 to HW filter on device eth10
[   54.786950][ T6322] vlan3: entered allmulticast mode
[   54.786986][ T6322] veth0_vlan: entered allmulticast mode
[   54.816160][ T6318] loop1: detected capacity change from 0 to 2048
[   54.851486][ T6318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.853912][ T6318] netlink: 200 bytes leftover after parsing attributes in process `syz.1.325'.
[   54.877693][ T4722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.253906][ T4404] 8021q: adding VLAN 0 to HW filter on device eth11
[   55.854682][ T6388] loop7: detected capacity change from 0 to 1024
[   55.869931][ T6382] loop5: detected capacity change from 0 to 512
[   55.985084][ T6388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.122307][ T6401] mmap: syz.5.338 (6401) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   56.161427][ T6127] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   56.190501][ T6127] EXT4-fs error (device loop7): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[   56.198902][ T6127] EXT4-fs (loop7): Remounting filesystem read-only
[   56.238522][ T6127] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.423907][ T6425] bond1: entered allmulticast mode
[   56.527393][ T6438] hub 8-0:1.0: USB hub found
[   56.527943][ T6438] hub 8-0:1.0: 8 ports detected
[   57.219604][ T6454] tmpfs: Bad value for 'mpol'
[   57.375018][ T6473] loop3: detected capacity change from 0 to 512
[   57.378519][ T6473] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   57.381072][ T6473] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.349: corrupted in-inode xattr: invalid ea_ino
[   57.381643][ T6473] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   57.382862][ T6473] EXT4-fs (loop3): get orphan inode failed
[   57.383552][ T6473] EXT4-fs (loop3): mount failed
[   57.487637][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'.
[   57.496851][ T6481] syzkaller0: entered promiscuous mode
[   57.496888][ T6481] syzkaller0: entered allmulticast mode
[   57.675055][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.675266][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.248249][ T6540] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.364'.
[   58.271901][ T6543] Bluetooth: MGMT ver 1.23
[   58.271961][ T6543] Bluetooth: hci0: load_link_keys: too big key_count value 16128
[   58.551847][ T6555] loop1: detected capacity change from 0 to 4096
[   58.565966][ T6555] EXT4-fs error (device loop1): ext4_quota_enable:7232: inode #3: comm syz.1.366: unexpected EA_INODE flag
[   58.566009][ T6555] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   58.566384][ T6555] EXT4-fs error (device loop1): ext4_quota_enable:7235: comm syz.1.366: Bad quota inode: 3, type: 0
[   58.566403][ T6555] fserror_report: 5 callbacks suppressed
[   58.566412][ T6555] loop1: lost filesystem error report for type 5 error -117
[   58.566556][ T6555] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   58.566740][ T6555] EXT4-fs (loop1): mount failed
[   59.103512][ T6568] 9p: Bad value for 'rfdno'
[   59.174725][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'.
[   59.175482][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'.
[   59.337929][ T6584] loop3: detected capacity change from 0 to 512
[   59.360121][ T6584] EXT4-fs (loop3): 1 truncate cleaned up
[   59.372749][ T6584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.382014][ T6589] xt_hashlimit: size too large, truncated to 1048576
[   59.382083][ T6589] xt_hashlimit: max too large, truncated to 1048576
[   59.418307][ T6584] netlink: 11 bytes leftover after parsing attributes in process `syz.3.374'.
[   59.702637][ T6584] input: syz0 as /devices/virtual/input/input6
[   59.706768][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.378'.
[   59.710019][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.378'.
[   59.815180][ T6617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.815377][ T6617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.871660][ T6619] loop5: detected capacity change from 0 to 512
[   59.898351][ T6619] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.381: iget: bad extended attribute block 134217728
[   59.898411][ T6619] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   59.898666][ T6619] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.381: couldn't read orphan inode 15 (err -117)
[   59.898682][ T6619] loop5: lost filesystem error report for type 5 error -117
[   59.899255][ T6619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.976705][ T5092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.030544][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.382'.
[   60.058286][ T6623] team0: Port device team_slave_0 removed
[   60.083892][ T6624] netlink: 40 bytes leftover after parsing attributes in process `syz.5.382'.
[   60.127418][    T9] asus 0018:0B05:0101.0002: unknown main item tag 0x0
[   60.127463][    T9] asus 0018:0B05:0101.0002: unknown main item tag 0x0
[   60.127474][    T9] asus 0018:0B05:0101.0002: unknown main item tag 0x0
[   60.127484][    T9] asus 0018:0B05:0101.0002: unknown main item tag 0x0
[   60.127495][    T9] asus 0018:0B05:0101.0002: unknown main item tag 0x0
[   60.127504][    T9] asus 0018:0B05:0101.0002: unknown main item tag 0x0
[   60.127519][    T9] asus 0018:0B05:0101.0002: unknown main item tag 0x0
[   60.127529][    T9] asus 0018:0B05:0101.0002: unknown main item tag 0x0
[   60.127539][    T9] asus 0018:0B05:0101.0002: unknown main item tag 0x0
[   60.127548][    T9] asus 0018:0B05:0101.0002: unknown main item tag 0x0
[   60.128135][    T9] asus 0018:0B05:0101.0002: hidraw0: I2C HID v0.00 Device [syz0] on syz0
[   60.230547][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.306465][    T9] asus 0018:0B05:0101.0002: Asus handshake 5d failed to send: -5
[   60.306502][    T9] asus 0018:0B05:0101.0002: Failed to initialize 0x5d: -5.
[   60.345871][ T6640] loop3: detected capacity change from 0 to 256
[   60.401480][ T6640] nfs4: Unknown parameter 'admeo'
[   60.641111][ T6654] 9pnet_virtio: no channels available for device 127.0.0.1
[   60.780738][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.395'.
[   60.820913][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.821130][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.836576][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.838556][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.306111][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'.
[   61.306227][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.310174][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.344415][ T4726] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   61.346696][ T4726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   61.348664][ T4726] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   61.350816][ T4726] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   61.352564][ T4726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   61.386972][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   61.388634][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   61.390362][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   61.391521][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   61.391782][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   61.397789][ T6689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.402'.
[   61.444612][ T6695] loop3: detected capacity change from 0 to 256
[   61.447993][ T6695] vfat: Bad value for 'utf8'
[   61.487683][ T6703] loop1: detected capacity change from 0 to 256
[   61.594901][ T3723] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.702713][ T6723] loop1: detected capacity change from 0 to 8192
[   62.571831][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.576912][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.577084][ T6685] bridge_slave_0: entered allmulticast mode
[   62.584194][ T6685] bridge_slave_0: entered promiscuous mode
[   62.602145][ T3723] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.607261][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.607314][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.607459][ T6685] bridge_slave_1: entered allmulticast mode
[   62.608004][ T6685] bridge_slave_1: entered promiscuous mode
[   62.640052][ T6685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.646342][ T6685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.670677][ T6685] team0: Port device team_slave_0 added
[   62.682031][ T6685] team0: Port device team_slave_1 added
[   62.691336][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.692821][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.697854][ T6685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.700933][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.708769][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.708821][ T6685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.724752][ T3723] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.754343][ T6751] loop1: detected capacity change from 0 to 256
[   62.756098][ T6751] vfat: Unknown parameter 'shortnar'
[   62.759781][ T6685] hsr_slave_0: entered promiscuous mode
[   62.762541][ T6685] hsr_slave_1: entered promiscuous mode
[   62.764315][ T6685] debugfs: 'hsr0' already exists in 'hsr'
[   62.765944][ T6685] Cannot create hsr debugfs directory
[   62.825344][ T6764] loop3: detected capacity change from 0 to 512
[   62.834983][ T6764] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 9734659)!
[   62.835019][ T6764] EXT4-fs (loop3): group descriptors corrupted!
[   62.876931][ T3723] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.901084][ T6773] loop3: detected capacity change from 0 to 256
[   62.901555][ T6773] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   62.955659][ T6685] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   62.958412][ T6685] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   62.958769][ T6685] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   62.962320][ T6685] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   62.974096][ T6685] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   62.977116][ T6685] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   62.977497][ T6685] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   62.990020][ T6685] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.006703][ T6786] binder: 6777:6786 ioctl c0306201 0 returned -14
[   63.010691][ T6788] loop5: detected capacity change from 0 to 512
[   63.012319][ T6788] EXT4-fs: Ignoring removed bh option
[   63.014374][ T6778] binder: 6777:6778 ioctl c0306201 0 returned -14
[   63.018917][ T6788] EXT4-fs (loop5): Test dummy encryption mode enabled
[   63.042795][ T6788] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.092023][ T5092] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[   63.099439][ T3723] bridge_slave_1: left promiscuous mode
[   63.101891][ T3723] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.118935][ T3723] bridge_slave_0: left allmulticast mode
[   63.120315][ T3723] bridge_slave_0: left promiscuous mode
[   63.121577][ T3723] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.179511][ T6811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.206677][ T6811] EXT4-fs (loop5): shut down requested (1)
[   63.210008][ T6811] overlayfs: failed to get metacopy (-5)
[   63.242233][ T3723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.264439][ T3723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.268695][ T6818] overlayfs: failed to get metacopy (-5)
[   63.269750][ T6818] overlayfs: failed to get origin (-5)
[   63.282923][ T3723] bond0 (unregistering): Released all slaves
[   63.309428][ T6685] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.314252][ T6685] 8021q: adding VLAN 0 to HW filter on device team0
[   63.316482][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.316527][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.322480][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.322529][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.433597][ T4726] Bluetooth: hci5: command tx timeout
[   63.484751][ T4404] 8021q: adding VLAN 0 to HW filter on device eth12
[   63.491694][ T3723] hsr_slave_0: left promiscuous mode
[   63.493403][ T3723] hsr_slave_1: left promiscuous mode
[   63.493683][ T3723] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.493702][ T3723] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.499042][ T3723] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.499057][ T3723] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.513441][ T3723] veth1_macvtap: left promiscuous mode
[   63.513489][ T3723] veth0_macvtap: left promiscuous mode
[   63.513543][ T3723] veth1_vlan: left promiscuous mode
[   63.513580][ T3723] veth0_vlan: left promiscuous mode
[   63.609877][ T3723] team0 (unregistering): Port device team_slave_1 removed
[   63.616058][ T3723] team0 (unregistering): Port device team_slave_0 removed
[   63.700259][ T6685] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.812616][ T6685] veth0_vlan: entered promiscuous mode
[   63.818923][ T6685] veth1_vlan: entered promiscuous mode
[   63.831886][ T6685] veth0_macvtap: entered promiscuous mode
[   63.838161][ T6685] veth1_macvtap: entered promiscuous mode
[   63.854625][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.857028][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.871440][ T4404] 8021q: adding VLAN 0 to HW filter on device eth13
[   63.925886][ T3723] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.966712][ T3724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.966746][ T3724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.980260][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.980293][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.993841][   T40] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.994304][   T40] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.994326][   T40] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.104588][ T6877] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.201824][ T6893] EXT4-fs: Ignoring removed oldalloc option
[   64.207413][ T6893] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   64.212261][ T6893] EXT4-fs (loop1): 1 truncate cleaned up
[   64.212766][ T6893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.218993][ T6881] syzkaller0: entered promiscuous mode
[   64.223731][ T6881] syzkaller0: entered allmulticast mode
[   64.224532][ T6877] syzkaller1: entered promiscuous mode
[   64.224557][ T6877] syzkaller1: entered allmulticast mode
[   64.355124][ T6615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.489263][  T866] cfg80211: failed to load regulatory.db
[   64.499910][ T1595] ieee802154 phy0 wpan0: encryption failed: -22
[   64.499966][ T1595] ieee802154 phy1 wpan1: encryption failed: -22
[   64.600141][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.604979][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.606782][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.610754][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.615113][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.999811][ T4404] 8021q: adding VLAN 0 to HW filter on device eth14
[   65.028670][ T3724] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.138229][ T4722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.139909][ T3724] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.250433][ T3724] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.321418][ T6936] set_capacity_and_notify: 3 callbacks suppressed
[   65.321455][ T6936] loop3: detected capacity change from 0 to 256
[   65.329914][ T6940] netlink: 'syz.1.444': attribute type 10 has an invalid length.
[   65.342809][ T6940] syz_tun: entered promiscuous mode
[   65.355724][ T6940] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[   65.355753][ T6940] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   65.356513][ T6940] vhci_hcd vhci_hcd.0: Device attached
[   65.357733][ T6941] binder: 6937:6941 IncRefs 0 refcount change on invalid ref 0 ret -22
[   65.360524][ T6942] usbip_core: unknown command
[   65.360534][ T6942] vhci_hcd: unknown pdu 2297167198
[   65.360541][ T6942] usbip_core: unknown command
[   65.362324][ T6941] netlink: 'syz.8.445': attribute type 12 has an invalid length.
[   65.362337][ T6941] netlink: 'syz.8.445': attribute type 29 has an invalid length.
[   65.362346][ T6941] netlink: 148 bytes leftover after parsing attributes in process `syz.8.445'.
[   65.369239][   T39] vhci_hcd vhci_hcd.1: stop threads
[   65.370016][   T39] vhci_hcd vhci_hcd.1: release socket
[   65.370156][   T39] vhci_hcd vhci_hcd.1: disconnect device
[   65.420051][ T3724] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.437219][ T4404] 8021q: adding VLAN 0 to HW filter on device eth15
[   65.439974][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.447076][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.448968][ T6901] bridge_slave_0: entered allmulticast mode
[   65.450171][ T6901] bridge_slave_0: entered promiscuous mode
[   65.451353][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.451451][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.451540][ T6901] bridge_slave_1: entered allmulticast mode
[   65.451989][ T6901] bridge_slave_1: entered promiscuous mode
[   65.465051][ T6901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.468419][ T6901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.477045][ T6901] team0: Port device team_slave_0 added
[   65.489881][ T6901] team0: Port device team_slave_1 added
[   65.497464][ T6958] loop8: detected capacity change from 0 to 512
[   65.497891][ T6958] EXT4-fs: Ignoring removed mblk_io_submit option
[   65.513239][ T4726] Bluetooth: hci5: command tx timeout
[   65.521257][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.522940][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.529374][ T6958] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.449: corrupted in-inode xattr: e_value size too large
[   65.529403][ T6958] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   65.532684][ T6958] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.449: couldn't read orphan inode 15 (err -117)
[   65.532721][ T6958] loop8: lost filesystem error report for type 5 error -117
[   65.534662][    C0] EXT4-fs (loop8): error count since last fsck: 2
[   65.534673][    C0] EXT4-fs (loop8): initial error at time 65: ext4_iget_extra_inode:5180: inode 15
[   65.534688][    C0] EXT4-fs (loop8): last error at time 65: ext4_orphan_get:1404
[   65.538461][ T6958] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.547843][ T6901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.549488][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.549498][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.549517][ T6901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.572319][ T6901] hsr_slave_0: entered promiscuous mode
[   65.574699][ T6685] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.577970][ T6901] hsr_slave_1: entered promiscuous mode
[   65.579642][ T6901] debugfs: 'hsr0' already exists in 'hsr'
[   65.580778][ T6901] Cannot create hsr debugfs directory
[   65.613559][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'.
[   65.615418][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.451'.
[   65.651815][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.651962][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.651995][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.653741][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'.
[   65.653761][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.451'.
[   65.684534][ T3724] bridge_slave_1: left allmulticast mode
[   65.684572][ T3724] bridge_slave_1: left promiscuous mode
[   65.684647][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.687144][ T3724] bridge_slave_0: left allmulticast mode
[   65.687158][ T3724] bridge_slave_0: left promiscuous mode
[   65.687226][ T3724] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.875802][ T3724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.896801][ T6998] binder: tried to use weak ref as strong ref
[   65.896834][ T6998] binder: 6996:6998 Acquire 1 refcount change on invalid ref 0 ret -22
[   65.897301][ T6997] binder: 6996:6997 got transaction to invalid handle, 1
[   65.897311][ T6997] binder: 6996:6997 cannot find target node
[   65.897326][ T6997] binder: 6996:6997 transaction call to 0:0 failed 21/29201/-22, code 0 size 72-24 line 3252
[   65.897424][ T6998] binder: 6996:6998 got transaction to invalid handle, 3
[   65.897432][ T6998] binder: 6996:6998 cannot find target node
[   65.897442][ T6998] binder: 6996:6998 transaction call to 0:0 failed 22/29201/-22, code 0 size 80-24 line 3252
[   65.906435][ T3724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.910398][ T4816] binder: undelivered TRANSACTION_ERROR: 29201
[   65.910445][ T4816] binder: undelivered TRANSACTION_ERROR: 29201
[   65.954443][ T7003] loop1: detected capacity change from 0 to 1024
[   65.974601][ T3724] bond0 (unregistering): Released all slaves
[   65.977622][ T3724] bond1 (unregistering): Released all slaves
[   65.982151][ T7003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   65.999999][ T4404] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.017016][ T4722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   66.070043][ T3724] tipc: Left network mode
[   66.249283][ T6901] netdevsim netdevsim9 netdevsim0: renamed from eth0
[   66.255207][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.259600][ T6901] netdevsim netdevsim9 netdevsim1: renamed from eth1
[   66.269190][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.272472][ T6901] netdevsim netdevsim9 netdevsim2: renamed from eth2
[   66.280016][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.282914][ T6901] netdevsim netdevsim9 netdevsim3: renamed from eth3
[   66.298639][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.318074][ T7017] loop1: detected capacity change from 0 to 4096
[   66.328866][ T7017] EXT4-fs (loop1): Test dummy encryption mode enabled
[   66.330496][ T7017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.348157][ T7017] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[   66.405370][ T6901] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.449737][ T6901] 8021q: adding VLAN 0 to HW filter on device team0
[   66.451874][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.451926][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.464090][ T3724] hsr_slave_0: left promiscuous mode
[   66.465344][ T3724] hsr_slave_1: left promiscuous mode
[   66.465575][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.465587][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.466619][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.466630][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.753105][ T4726] Bluetooth: hci2: command tx timeout
[   66.763581][ T3724] veth1_macvtap: left promiscuous mode
[   66.763634][ T3724] veth0_macvtap: left promiscuous mode
[   66.763692][ T3724] veth1_vlan: left promiscuous mode
[   66.763732][ T3724] veth0_vlan: left promiscuous mode
[   66.847535][ T7037] loop3: detected capacity change from 0 to 1024
[   66.851086][ T7037] ext4: Unknown parameter 'defcontext'
[   66.978080][ T3724] team0 (unregistering): Port device team_slave_1 removed
[   67.059520][ T4404] 8021q: adding VLAN 0 to HW filter on device eth16
[   67.062926][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.063001][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.392118][ T4722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.451534][ T7057] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   67.593197][ T4726] Bluetooth: hci5: command tx timeout
[   67.630224][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.469'.
[   67.630265][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.469'.
[   67.630289][ T7078] netlink: 592 bytes leftover after parsing attributes in process `syz.3.469'.
[   67.640929][ T7084] loop1: detected capacity change from 0 to 8
[   67.658948][ T7084] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   67.658981][ T7084] unable to read xattr id index table
[   67.659416][ T7084] SQUASHFS error: zlib decompression failed, data probably corrupt
[   67.659430][ T7084] SQUASHFS error: Failed to read block 0x9b: -5
[   67.659437][ T7084] SQUASHFS error: Unable to read metadata cache entry [99]
[   67.659444][ T7084] SQUASHFS error: Unable to read inode 0x127
[   67.664694][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'.
[   67.665331][ T7084] netlink: 'syz.1.470': attribute type 1 has an invalid length.
[   67.665344][ T7084] netlink: 'syz.1.470': attribute type 2 has an invalid length.
[   67.678167][ T6901] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.812042][ T4404] 8021q: adding VLAN 0 to HW filter on device eth17
[   67.867522][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.869780][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.900204][ T6901] veth0_vlan: entered promiscuous mode
[   67.903612][ T6901] veth1_vlan: entered promiscuous mode
[   67.916220][ T6901] veth0_macvtap: entered promiscuous mode
[   67.928052][ T6901] veth1_macvtap: entered promiscuous mode
[   67.932888][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.935717][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.988057][ T3814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.988395][ T3814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.006021][ T1344] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.006197][ T1344] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.006226][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.006235][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.006409][ T1344] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.006897][ T1344] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.131377][ T4404] 8021q: adding VLAN 0 to HW filter on device eth18
[   68.148151][ T7135] netlink: 'syz.8.478': attribute type 3 has an invalid length.
[   68.149759][ T7135] netlink: 152 bytes leftover after parsing attributes in process `syz.8.478'.
[   68.197113][ T7145] loop9: detected capacity change from 0 to 1024
[   68.202057][ T7145] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   68.202263][ T7145] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   68.211447][ T7145] EXT4-fs (loop9): revision level too high, forcing read-only mode
[   68.211626][ T7145] EXT4-fs (loop9): orphan cleanup on readonly fs
[   68.221777][ T7145] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #3: block 3: comm syz.9.479: lblock 3 mapped to illegal pblock 3 (length 1)
[   68.221825][ T7145] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   68.224958][    C0] EXT4-fs (loop9): error count since last fsck: 1
[   68.224978][    C0] EXT4-fs (loop9): initial error at time 68: ext4_map_blocks:833: inode 3: block 3
[   68.224996][    C0] EXT4-fs (loop9): last error at time 68: ext4_map_blocks:833: inode 3: block 3
[   68.237069][ T7145] Quota error (device loop9): write_blk: dquota write failed
[   68.237116][ T7145] Quota error (device loop9): find_free_dqentry: Can't write quota data block 3
[   68.237201][ T7145] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[   68.237241][ T7145] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.479: Failed to acquire dquot type 0
[   68.237261][ T7145] loop9: lost filesystem error report for type 5 error -117
[   68.245417][ T7145] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 3: comm syz.9.479: lblock 3 mapped to illegal pblock 3 (length 1)
[   68.245460][ T7145] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   68.250359][ T7145] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[   68.250405][ T7145] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.479: Failed to acquire dquot type 0
[   68.250437][ T7145] loop9: lost filesystem error report for type 5 error -117
[   68.256697][ T7145] EXT4-fs error (device loop9): ext4_free_blocks:6718: comm syz.9.479: Freeing blocks not in datazone - block = 0, count = 4096
[   68.256727][ T7145] loop9: lost filesystem error report for type 5 error -117
[   68.270917][ T7145] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 3: comm syz.9.479: lblock 3 mapped to illegal pblock 3 (length 1)
[   68.276939][ T7145] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   68.284669][ T7135] fuse: Bad value for 'fd'
[   68.287680][ T7145] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[   68.287726][ T7145] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.479: Failed to acquire dquot type 0
[   68.287759][ T7145] loop9: lost filesystem error report for type 5 error -117
[   68.297614][ T7145] EXT4-fs (loop9): 1 orphan inode deleted
[   68.300993][ T7145] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   68.312577][ T7145] EXT4-fs (loop9): shut down requested (1)
[   68.400129][ T4404] 8021q: adding VLAN 0 to HW filter on device eth19
[   68.420220][ T6901] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.798931][ T4726] Bluetooth: hci2: command tx timeout
[   68.821581][ T4816] IPVS: starting estimator thread 0...
[   68.823563][ T7184] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   68.831854][ T7184] loop1: detected capacity change from 0 to 512
[   68.897291][ T7184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.955644][ T7184] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.485: corrupted xattr block 33: invalid header
[   68.958927][ T7195] Injecting memory failure for pfn 0x122efe at process virtual address 0x20001000
[   68.963028][ T7184] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.485: corrupted xattr block 33: invalid header
[   68.963352][ T7184] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.485: corrupted xattr block 33: invalid header
[   68.970388][ T7195] Memory failure: 0x122efe: Sending SIGBUS to syz.1.485:7195 due to hardware memory corruption
[   68.970493][ T7195] Memory failure: 0x122efe: recovery action for dirty LRU page: Recovered
[   68.970527][ T7195] Injecting memory failure for pfn 0x219270 at process virtual address 0x20002000
[   68.970579][ T7195] Memory failure: 0x219270: unhandlable page.
[   68.970586][ T7195] Memory failure: 0x219270: recovery action for get hwpoison page: Ignored
[   68.984414][ T7187] IPVS: using max 60 ests per chain, 144000 per kthread
[   69.004028][ T7199] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0
[   69.004801][ T7198] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0
[   69.048250][ T7202] loop3: detected capacity change from 0 to 512
[   69.056615][ T7202] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.488: inode has both inline data and extents flags
[   69.056651][ T7202] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   69.059774][ T7202] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.488: couldn't read orphan inode 15 (err -117)
[   69.059812][ T7202] loop3: lost filesystem error report for type 5 error -117
[   69.063795][    C0] EXT4-fs (loop3): error count since last fsck: 2
[   69.063810][    C0] EXT4-fs (loop3): initial error at time 69: ext4_orphan_get:1399: inode 15
[   69.063826][    C0] EXT4-fs (loop3): last error at time 69: ext4_orphan_get:1404
[   69.076248][ T7202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.083762][ T4722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.140662][ T7213] loop9: detected capacity change from 0 to 128
[   69.141161][ T7213] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   69.146947][ T7213] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   69.272251][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.276770][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.397357][ T7234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   69.423420][ T7234] EXT4-fs (loop8): revision level too high, forcing read-only mode
[   69.423455][ T7234] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002]
[   69.423496][ T7234] System zones: 0-1, 15-15, 18-18, 34-34
[   69.423652][ T7234] EXT4-fs (loop8): orphan cleanup on readonly fs
[   69.423688][ T7234] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0
[   69.423729][ T7234] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   69.423744][ T7234] EXT4-fs (loop8): Cannot turn on quotas: error -22
[   69.424381][ T7234] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.495: bg 0: block 40: padding at end of block bitmap is not set
[   69.424406][ T7234] loop8: lost filesystem error report for type 5 error -117
[   69.425578][ T7234] EXT4-fs (loop8): Remounting filesystem read-only
[   69.425654][ T7234] EXT4-fs (loop8): 1 truncate cleaned up
[   69.426119][ T7234] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   69.888534][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.916455][   T40] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.967737][ T6685] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.028191][   T40] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.031023][ T7254] xt_NFQUEUE: number of total queues is 0
[   70.098019][   T40] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.106702][   T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   70.107694][   T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   70.110817][   T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   70.119364][   T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   70.121141][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   70.157853][ T7263] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   70.185517][   T40] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.318470][ T7274] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   70.471409][ T7279] set_capacity_and_notify: 1 callbacks suppressed
[   70.471464][ T7279] loop9: detected capacity change from 0 to 512
[   70.477196][   T40] bridge_slave_1: left allmulticast mode
[   70.478354][   T40] bridge_slave_1: left promiscuous mode
[   70.479757][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.485942][   T40] bridge_slave_0: left allmulticast mode
[   70.487169][   T40] bridge_slave_0: left promiscuous mode
[   70.488645][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.490903][ T7279] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.518852][ T6901] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.556232][ T7283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.559624][ T7283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.602533][   T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.628925][   T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.664020][   T40] bond0 (unregistering): Released all slaves
[   70.708278][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.712743][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.712928][ T7259] bridge_slave_0: entered allmulticast mode
[   70.717210][ T7259] bridge_slave_0: entered promiscuous mode
[   70.724837][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.729087][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.730564][ T7259] bridge_slave_1: entered allmulticast mode
[   70.732116][ T7259] bridge_slave_1: entered promiscuous mode
[   70.744238][ T7259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.747034][ T7259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.792184][ T7259] team0: Port device team_slave_0 added
[   70.794679][ T7259] team0: Port device team_slave_1 added
[   70.802496][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.804110][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.809804][ T7259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.812662][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.816224][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.821094][ T7259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.874317][   T50] Bluetooth: hci2: command tx timeout
[   70.875787][ T4404] 8021q: adding VLAN 0 to HW filter on device eth20
[   70.940135][ T7306] __nla_validate_parse: 3 callbacks suppressed
[   70.940392][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'.
[   70.960115][ T7259] hsr_slave_0: entered promiscuous mode
[   70.961637][ T7259] hsr_slave_1: entered promiscuous mode
[   70.963253][ T7259] debugfs: 'hsr0' already exists in 'hsr'
[   70.964295][ T7259] Cannot create hsr debugfs directory
[   71.020196][   T40] hsr_slave_0: left promiscuous mode
[   71.021479][   T40] hsr_slave_1: left promiscuous mode
[   71.021763][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.021774][   T40] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.025952][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.025979][   T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.031677][   T40] veth1_macvtap: left promiscuous mode
[   71.031728][   T40] veth0_macvtap: left promiscuous mode
[   71.031777][   T40] veth1_vlan: left promiscuous mode
[   71.031860][   T40] veth0_vlan: left promiscuous mode
[   71.158741][   T40] team0 (unregistering): Port device team_slave_1 removed
[   71.162646][   T40] team0 (unregistering): Port device team_slave_0 removed
[   71.248053][ T7311] bond1: Removing last arp target with arp_interval on
[   71.272926][ T4726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   71.283634][ T4726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   71.287145][ T4726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   71.291002][ T4726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   71.293947][ T4726] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   71.440301][ T4404] 8021q: adding VLAN 0 to HW filter on device eth21
[   71.666829][   T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.675863][ T7368] Soft offlining pfn 0x13e8ff at process virtual address 0x20000000
[   71.681635][ T7368] Soft offlining pfn 0x13e268 at process virtual address 0x20001000
[   71.682130][ T7368] Soft offlining pfn 0x122e40 at process virtual address 0x20002000
[   71.694555][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.694598][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.694732][ T7316] bridge_slave_0: entered allmulticast mode
[   71.695208][ T7316] bridge_slave_0: entered promiscuous mode
[   71.695919][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.695943][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.695999][ T7316] bridge_slave_1: entered allmulticast mode
[   71.696398][ T7316] bridge_slave_1: entered promiscuous mode
[   71.711417][ T7316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.715061][ T7316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.725089][ T7316] team0: Port device team_slave_0 added
[   71.727443][ T7316] team0: Port device team_slave_1 added
[   71.736150][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.737798][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.742779][ T7316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.745765][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.755603][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.761610][ T7316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.858393][   T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.871748][ T7316] hsr_slave_0: entered promiscuous mode
[   71.874685][ T7316] hsr_slave_1: entered promiscuous mode
[   71.881275][ T7316] debugfs: 'hsr0' already exists in 'hsr'
[   71.887370][ T7316] Cannot create hsr debugfs directory
[   71.971600][   T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.005084][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.006991][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.015160][ T4404] 8021q: adding VLAN 0 to HW filter on device eth22
[   72.039017][ T7400] bridge_slave_0: left allmulticast mode
[   72.039066][ T7400] bridge_slave_0: left promiscuous mode
[   72.039173][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.044729][ T7400] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   72.070454][ T7400] netlink: 'syz.3.520': attribute type 4 has an invalid length.
[   72.072933][   T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.095751][ T7259] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   72.102539][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.114021][ T7259] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   72.124727][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.131492][ T7259] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   72.138957][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.139483][ T7259] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   72.146288][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.153522][   T50] Bluetooth: hci3: command tx timeout
[   72.255978][   T40] bridge_slave_1: left allmulticast mode
[   72.256016][   T40] bridge_slave_1: left promiscuous mode
[   72.256105][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.261572][   T40] bridge_slave_0: left allmulticast mode
[   72.261608][   T40] bridge_slave_0: left promiscuous mode
[   72.262378][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.379230][   T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.388903][   T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.404136][   T40] bond0 (unregistering): Released all slaves
[   72.435637][ T7259] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.440774][ T7259] 8021q: adding VLAN 0 to HW filter on device team0
[   72.448974][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.449029][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.449580][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.449605][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.462308][ T7259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.561482][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.9.526'.
[   72.561539][ T7473] netlink: 20 bytes leftover after parsing attributes in process `syz.9.526'.
[   72.638376][ T7259] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.646802][ T7489] loop9: detected capacity change from 0 to 512
[   72.705713][   T40] hsr_slave_0: left promiscuous mode
[   72.713242][   T40] hsr_slave_1: left promiscuous mode
[   72.724016][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.724054][   T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.739408][   T40] veth1_macvtap: left promiscuous mode
[   72.740564][   T40] veth0_macvtap: left promiscuous mode
[   72.741700][   T40] veth1_vlan: left promiscuous mode
[   72.742745][   T40] veth0_vlan: left promiscuous mode
[   72.762233][ T7498] overlayfs: failed lookup in lower (newroot/17, name='file0', err=-40): overlapping layers
[   72.839434][ T7506] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20004
[   72.872489][ T7510] vhci_hcd vhci_hcd.0: remove, state 4
[   72.872587][ T7510] usb usb3: USB disconnect, device number 1
[   72.878810][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.879046][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.925296][ T1344] vhci_hcd vhci_hcd.0: stop threads
[   72.925330][ T1344] vhci_hcd vhci_hcd.0: release socket
[   72.925362][ T1344] vhci_hcd vhci_hcd.0: disconnect device
[   72.926751][   T39] vhci_hcd vhci_hcd.0: stop threads
[   72.926763][   T39] vhci_hcd vhci_hcd.0: release socket
[   72.926777][   T39] vhci_hcd vhci_hcd.0: disconnect device
[   72.926826][   T39] vhci_hcd vhci_hcd.0: stop threads
[   72.926835][   T39] vhci_hcd vhci_hcd.0: release socket
[   72.926845][   T39] vhci_hcd vhci_hcd.0: disconnect device
[   72.926881][   T39] vhci_hcd vhci_hcd.0: stop threads
[   72.926887][   T39] vhci_hcd vhci_hcd.0: release socket
[   72.926896][   T39] vhci_hcd vhci_hcd.0: disconnect device
[   72.926931][   T39] vhci_hcd vhci_hcd.0: stop threads
[   72.926936][   T39] vhci_hcd vhci_hcd.0: release socket
[   72.926944][   T39] vhci_hcd vhci_hcd.0: disconnect device
[   72.927000][   T39] vhci_hcd vhci_hcd.0: stop threads
[   72.927005][   T39] vhci_hcd vhci_hcd.0: release socket
[   72.927013][   T39] vhci_hcd vhci_hcd.0: disconnect device
[   72.927044][   T39] vhci_hcd vhci_hcd.0: stop threads
[   72.927049][   T39] vhci_hcd vhci_hcd.0: release socket
[   72.927057][   T39] vhci_hcd vhci_hcd.0: disconnect device
[   72.927087][   T39] vhci_hcd vhci_hcd.0: stop threads
[   72.927091][   T39] vhci_hcd vhci_hcd.0: release socket
[   72.927099][   T39] vhci_hcd vhci_hcd.0: disconnect device
[   72.927146][ T7510] vhci_hcd vhci_hcd.0: USB bus 3 deregistered
[   72.941546][ T7510] vhci_hcd vhci_hcd.0: remove, state 4
[   72.941574][ T7510] usb usb2: USB disconnect, device number 1
[   72.954218][   T50] Bluetooth: hci2: command tx timeout
[   72.969640][ T1344] vhci_hcd vhci_hcd.0: stop threads
[   72.970932][ T1344] vhci_hcd vhci_hcd.0: release socket
[   72.971944][ T1344] vhci_hcd vhci_hcd.0: disconnect device
[   72.973429][ T1344] vhci_hcd vhci_hcd.0: stop threads
[   72.973472][ T7510] vhci_hcd vhci_hcd.0: USB bus 2 deregistered
[   72.975506][ T1344] vhci_hcd vhci_hcd.0: release socket
[   72.976487][ T1344] vhci_hcd vhci_hcd.0: disconnect device
[   72.977465][ T1344] ==================================================================
[   72.977475][ T1344] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x5c/0x7c
[   72.977498][ T1344] Read of size 1 at addr ffff0000cad6c6c8 by task kworker/u8:6/1344
[   72.977505][ T1344] 
[   72.977514][ T1344] CPU: 0 UID: 0 PID: 1344 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT 
[   72.977525][ T1344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   72.977531][ T1344] Workqueue: usbip_event event_handler
[   72.977548][ T1344] Call trace:
[   72.977551][ T1344]  show_stack+0x2c/0x3c (C)
[   72.977566][ T1344]  __dump_stack+0x30/0x40
[   72.977577][ T1344]  dump_stack_lvl+0xd8/0x12c
[   72.977587][ T1344]  print_address_description+0xb0/0x238
[   72.977596][ T1344]  print_report+0x68/0x84
[   72.977603][ T1344]  kasan_report+0x8c/0xc4
[   72.977613][ T1344]  __kasan_check_byte+0x3c/0x54
[   72.977621][ T1344]  lock_acquire+0xa4/0x364
[   72.977629][ T1344]  _raw_spin_lock_irqsave+0x5c/0x7c
[   72.977638][ T1344]  event_handler+0x238/0x460
[   72.977646][ T1344]  process_scheduled_works+0x788/0x10b8
[   72.977655][ T1344]  worker_thread+0x798/0xbd0
[   72.977663][ T1344]  kthread+0x304/0x3d4
[   72.977671][ T1344]  ret_from_fork+0x10/0x20
[   72.977678][ T1344] 
[   72.977680][ T1344] Allocated by task 1:
[   72.977684][ T1344]  kasan_save_track+0x40/0x78
[   72.977691][ T1344]  kasan_save_alloc_info+0x40/0x50
[   72.977699][ T1344]  __kasan_kmalloc+0x9c/0xb4
[   72.977706][ T1344]  __kmalloc_noprof+0x340/0x6b8
[   72.977713][ T1344]  __usb_create_hcd+0x70/0x7ec
[   72.977722][ T1344]  usb_create_hcd+0x3c/0x50
[   72.977729][ T1344]  vhci_hcd_probe+0x108/0x3b4
[   72.977737][ T1344]  platform_probe+0x100/0x1a4
[   72.977744][ T1344]  really_probe+0x29c/0x800
[   72.977752][ T1344]  __driver_probe_device+0x1e0/0x350
[   72.977760][ T1344]  driver_probe_device+0x6c/0x19c
[   72.977767][ T1344]  __device_attach_driver+0x198/0x2f8
[   72.977775][ T1344]  bus_for_each_drv+0x144/0x1dc
[   72.977782][ T1344]  __device_attach+0x248/0x390
[   72.977790][ T1344]  device_initial_probe+0x90/0xc8
[   72.977798][ T1344]  bus_probe_device+0x58/0x120
[   72.977805][ T1344]  device_add+0x6cc/0x9e0
[   72.977810][ T1344]  platform_device_add+0x3dc/0x6f0
[   72.977815][ T1344]  platform_device_register_full+0x4fc/0x5ac
[   72.977821][ T1344]  vhci_hcd_init+0x1b0/0x2ec
[   72.977830][ T1344]  do_one_initcall+0x274/0xc38
[   72.977838][ T1344]  do_initcall_level+0x12c/0x1c4
[   72.977846][ T1344]  do_initcalls+0x70/0xd0
[   72.977853][ T1344]  do_basic_setup+0x7c/0x90
[   72.977861][ T1344]  kernel_init_freeable+0x268/0x3a8
[   72.977868][ T1344]  kernel_init+0x24/0x1dc
[   72.977876][ T1344]  ret_from_fork+0x10/0x20
[   72.977882][ T1344] 
[   72.977883][ T1344] Freed by task 7510:
[   72.977886][ T1344]  kasan_save_track+0x40/0x78
[   72.977893][ T1344]  kasan_save_free_info+0x54/0x6c
[   72.977901][ T1344]  __kasan_slab_free+0x74/0xa4
[   72.977908][ T1344]  kfree+0x188/0x690
[   72.977913][ T1344]  usb_put_hcd+0x124/0x16c
[   72.977921][ T1344]  vhci_hcd_remove+0xd8/0xfc
[   72.977928][ T1344]  platform_remove+0x6c/0x88
[   72.977934][ T1344]  device_remove+0xc4/0x134
[   72.977941][ T1344]  device_release_driver_internal+0x124/0x20c
[   72.977950][ T1344]  device_driver_detach+0x48/0x58
[   72.977957][ T1344]  unbind_store+0xc0/0xf0
[   72.977964][ T1344]  drv_attr_store+0x80/0xa4
[   72.977972][ T1344]  sysfs_kf_write+0xe0/0x108
[   72.977980][ T1344]  kernfs_fop_write_iter+0x260/0x3b8
[   72.977987][ T1344]  vfs_write+0x51c/0xa0c
[   72.977993][ T1344]  ksys_write+0x12c/0x228
[   72.977998][ T1344]  __arm64_sys_write+0x84/0x98
[   72.978003][ T1344]  invoke_syscall+0x98/0x244
[   72.978012][ T1344]  el0_svc_common+0xec/0x23c
[   72.978020][ T1344]  do_el0_svc+0x4c/0x5c
[   72.978028][ T1344]  el0_svc+0x64/0x260
[   72.978034][ T1344]  el0t_64_sync_handler+0x44/0x104
[   72.978041][ T1344]  el0t_64_sync+0x198/0x19c
[   72.978047][ T1344] 
[   72.978049][ T1344] Last potentially related work creation:
[   72.978052][ T1344]  kasan_save_stack+0x40/0x6c
[   72.978058][ T1344]  kasan_record_aux_stack+0xb0/0xc8
[   72.978066][ T1344]  insert_work+0x54/0x1a0
[   72.978072][ T1344]  __queue_work+0xdd8/0x1440
[   72.978078][ T1344]  queue_work_on+0xc0/0x130
[   72.978086][ T1344]  usb_hcd_giveback_urb+0x29c/0x350
[   72.978093][ T1344]  unlink1+0x244/0x2e8
[   72.978101][ T1344]  usb_hcd_unlink_urb+0xe4/0x1dc
[   72.978108][ T1344]  usb_kill_urb+0x108/0x31c
[   72.978117][ T1344]  hub_quiesce+0x1c0/0x29c
[   72.978123][ T1344]  hub_suspend+0x6b8/0x858
[   72.978130][ T1344]  usb_suspend_both+0x2e8/0x918
[   72.978136][ T1344]  usb_runtime_suspend+0x5c/0x110
[   72.978142][ T1344]  __rpm_callback+0x124/0x2f8
[   72.978148][ T1344]  rpm_callback+0x70/0x1a0
[   72.978153][ T1344]  rpm_suspend+0x43c/0xf74
[   72.978161][ T1344]  __pm_runtime_suspend+0xf8/0x144
[   72.978169][ T1344]  usb_new_device+0xad4/0x11f8
[   72.978175][ T1344]  register_root_hub+0x224/0x568
[   72.978183][ T1344]  usb_add_hcd+0x944/0xdec
[   72.978191][ T1344]  vhci_hcd_probe+0x13c/0x3b4
[   72.978198][ T1344]  platform_probe+0x100/0x1a4
[   72.978204][ T1344]  really_probe+0x29c/0x800
[   72.978211][ T1344]  __driver_probe_device+0x1e0/0x350
[   72.978219][ T1344]  driver_probe_device+0x6c/0x19c
[   72.978227][ T1344]  __device_attach_driver+0x198/0x2f8
[   72.978235][ T1344]  bus_for_each_drv+0x144/0x1dc
[   72.978242][ T1344]  __device_attach+0x248/0x390
[   72.978249][ T1344]  device_initial_probe+0x90/0xc8
[   72.978257][ T1344]  bus_probe_device+0x58/0x120
[   72.978264][ T1344]  device_add+0x6cc/0x9e0
[   72.978269][ T1344]  platform_device_add+0x3dc/0x6f0
[   72.978274][ T1344]  platform_device_register_full+0x4fc/0x5ac
[   72.978280][ T1344]  vhci_hcd_init+0x1b0/0x2ec
[   72.978287][ T1344]  do_one_initcall+0x274/0xc38
[   72.978295][ T1344]  do_initcall_level+0x12c/0x1c4
[   72.978303][ T1344]  do_initcalls+0x70/0xd0
[   72.978310][ T1344]  do_basic_setup+0x7c/0x90
[   72.978317][ T1344]  kernel_init_freeable+0x268/0x3a8
[   72.978325][ T1344]  kernel_init+0x24/0x1dc
[   72.978333][ T1344]  ret_from_fork+0x10/0x20
[   72.978338][ T1344] 
[   72.978339][ T1344] Second to last potentially related work creation:
[   72.978342][ T1344]  kasan_save_stack+0x40/0x6c
[   72.978349][ T1344]  kasan_record_aux_stack+0xb0/0xc8
[   72.978357][ T1344]  insert_work+0x54/0x1a0
[   72.978363][ T1344]  __queue_work+0xdd8/0x1440
[   72.978368][ T1344]  queue_work_on+0xc0/0x130
[   72.978376][ T1344]  usb_hcd_giveback_urb+0x29c/0x350
[   72.978383][ T1344]  usb_hcd_submit_urb+0xedc/0x169c
[   72.978391][ T1344]  usb_submit_urb+0xd44/0x1458
[   72.978399][ T1344]  usb_start_wait_urb+0x104/0x478
[   72.978404][ T1344]  usb_control_msg+0x1e8/0x378
[   72.978412][ T1344]  hub_ext_port_status+0x158/0x578
[   72.978418][ T1344]  hub_activate+0x59c/0x15c4
[   72.978425][ T1344]  hub_init_func2+0x24/0x34
[   72.978432][ T1344]  process_scheduled_works+0x788/0x10b8
[   72.978439][ T1344]  worker_thread+0x798/0xbd0
[   72.978446][ T1344]  kthread+0x304/0x3d4
[   72.978451][ T1344]  ret_from_fork+0x10/0x20
[   72.978457][ T1344] 
[   72.978458][ T1344] The buggy address belongs to the object at ffff0000cad6c000
[   72.978458][ T1344]  which belongs to the cache kmalloc-8k of size 8192
[   72.978466][ T1344] The buggy address is located 1736 bytes inside of
[   72.978466][ T1344]  freed 8192-byte region [ffff0000cad6c000, ffff0000cad6e000)
[   72.978473][ T1344] 
[   72.978475][ T1344] The buggy address belongs to the physical page:
[   72.978479][ T1344] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ad68
[   72.978485][ T1344] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   72.978491][ T1344] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[   72.978499][ T1344] page_type: f5(slab)
[   72.978505][ T1344] raw: 05ffc00000000040 ffff0000c0002280 dead000000000122 0000000000000000
[   72.978514][ T1344] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[   72.978520][ T1344] head: 05ffc00000000040 ffff0000c0002280 dead000000000122 0000000000000000
[   72.978525][ T1344] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[   72.978531][ T1344] head: 05ffc00000000003 fffffdffc32b5a01 00000000ffffffff 00000000ffffffff
[   72.978536][ T1344] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   72.978539][ T1344] page dumped because: kasan: bad access detected
[   72.978542][ T1344] 
[   72.978543][ T1344] Memory state around the buggy address:
[   72.978547][ T1344]  ffff0000cad6c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   72.978551][ T1344]  ffff0000cad6c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   72.978555][ T1344] >ffff0000cad6c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   72.978559][ T1344]                                               ^
[   72.978562][ T1344]  ffff0000cad6c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   72.978566][ T1344]  ffff0000cad6c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   72.978569][ T1344] ==================================================================
[   72.978572][ T1344] Disabling lock debugging due to kernel taint
[   72.990430][   T40] team0 (unregistering): Port device team_slave_1 removed
[   72.995309][   T40] team0 (unregistering): Port device team_slave_0 removed
[   73.023259][ T1344] @֙� : stop threads
[   73.023269][ T1344] @֙� : release socket
[   73.023278][ T1344] @֙� : disconnect device
[   73.023291][ T1344] @֙� : stop threads
[   73.023297][ T1344] @֙� : release socket
[   73.023304][ T1344] @֙� : disconnect device
[   73.023317][ T1344] @֙� : stop threads
[   73.023322][ T1344] @֙� : release socket
[   73.023330][ T1344] @֙� : disconnect device
[   73.023342][ T1344] @֙� : stop threads
[   73.023346][ T1344] @֙� : release socket
[   73.023354][ T1344] @֙� : disconnect device
[   73.023365][ T1344] @֙� : stop threads
[   73.023370][ T1344] @֙� : release socket
[   73.023378][ T1344] @֙� : disconnect device
[   73.023389][ T1344] @֙� : stop threads
[   73.023394][ T1344] @֙� : release socket
[   73.023401][ T1344] @֙� : disconnect device
[   73.087395][ T4404] 8021q: adding VLAN 0 to HW filter on device eth23
[   73.113955][ T7259] veth0_vlan: entered promiscuous mode
[   73.118069][ T7259] veth1_vlan: entered promiscuous mode
[   73.140322][ T7259] veth0_macvtap: entered promiscuous mode
[   73.141680][ T7259] veth1_macvtap: entered promiscuous mode
[   73.154544][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.161993][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.172465][ T1344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.172550][ T1344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.172577][ T1344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.172595][ T1344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.209829][ T3724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.209863][ T3724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.219298][ T3724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.219321][ T3724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.250441][   T40] IPVS: stop unused estimator thread 0...
[   73.353073][   T50] Bluetooth: hci4: command tx timeout
[   73.518295][ T7316] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.521056][ T7316] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   73.522875][ T7316] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.533741][ T7316] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   73.536839][ T7316] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.539690][ T7316] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   73.541645][ T7316] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.543952][ T7316] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   73.562107][ T7316] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.570908][ T7316] 8021q: adding VLAN 0 to HW filter on device team0
[   73.578068][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.578113][ T3724] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.581435][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.581471][ T3724] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.675676][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.685827][ T7316] veth0_vlan: entered promiscuous mode
[   73.689179][ T7316] veth1_vlan: entered promiscuous mode
[   73.697800][ T7316] veth0_macvtap: entered promiscuous mode
[   73.700029][ T7316] veth1_macvtap: entered promiscuous mode
[   73.705180][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.709544][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.712747][   T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.712837][   T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.712890][   T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.739546][ T3724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.739579][ T3724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.743237][   T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.751539][ T3724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.751572][ T3724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.244763][   T50] Bluetooth: hci3: command tx timeout
[   74.683473][ T4404] 8021q: adding VLAN 0 to HW filter on device eth0
[   74.798230][ T4404] 8021q: adding VLAN 0 to HW filter on device eth1
[   74.899463][ T4404] 8021q: adding VLAN 0 to HW filter on device eth2
[   74.998621][ T4404] 8021q: adding VLAN 0 to HW filter on device eth3
[   75.443193][   T50] Bluetooth: hci4: command tx timeout
[   76.313014][   T50] Bluetooth: hci3: command tx timeout
[   77.513142][   T50] Bluetooth: hci4: command tx timeout
[   78.393329][   T50] Bluetooth: hci3: command tx timeout
[   79.593070][   T50] Bluetooth: hci4: command tx timeout