last executing test programs:

1m49.695729682s ago: executing program 2 (id=3):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/comedi0\x00', 0x0, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x8000001, 0xf, &(0x7f0000000600)=[0x7, 0x3ff, 0x2, 0x0, 0x7fdceb0a, 0x6, 0xa816, 0x101, 0x7, 0xa0, 0x6, 0xc6, 0x2, 0x8, 0x7fff], 0x1, 0x5}]})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x101000000000007, &(0x7f0000000740)={<r2=>0xffffffffffffffff}, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x30, 0x0, @in={0x1b, 0x4e21, @multicast1}, @ib={0x1b, 0x0, 0x0, {}, 0xfffbfffffffffffc, 0x100000000000001, 0x2}}}, 0x118)
r3 = syz_clone(0x1080, &(0x7f0000000000)="aeb3a4f44ea99f1ce7d30e8cd682cde833f5f7dc1556fc0a28f6671aa00be07efeb1a4ae78ec2904dc1b04ab5628f3153781bbe410a1d8a005fbab2ff15fb55b22e5fc0f0bee14b8627d2b7a6a0d121eb5864105bea0c6065d5d2ce4908b412bdd84cfe215f985c2c9747fec4df1f2086a971ea30a60147735b69bf12c4fd760b11cfbc9fbb2d2ef7f0226cdda0889880433204998ec1b916b0d807b41d0c9ec94e815e67a7cb838310b4e1e", 0xac, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000003c0)="ac87a57eaa037143dbf57eac2a6737e8b38408b533a68df405eb4179496ff813ebb7dc26dc25568c78db376bd611843846c726a8fdbc5d89035237b8b181161f4045adf6ba39d0f00c62fe58ee7eeae314703992d30debd86f1a8f39acf2d4f3422a3e2703818492b7dc27e111661764c94c6008f466b832f909fd22a2daaa42040578209fa6912fe0ecef008012e5e0646e7e87b4c5d6943971733d39b5d9cd")
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000640)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
fcntl$setown(r1, 0x8, r3)

1m49.626372525s ago: executing program 2 (id=6):
unshare(0x20000000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000400f2ffffff00000100000001000000"])
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, 0x1f7)
fanotify_init(0x0, 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
epoll_create1(0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x11, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYRES64=r3, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20001844}, 0x4c885)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000440)='L', 0x1, 0x7ffffffe)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000480)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000500), 0xd)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x40040c0)

1m49.500017857s ago: executing program 2 (id=7):
r0 = syz_io_uring_setup(0x10, &(0x7f0000000000), &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x4, 0x0, r0, 0x0, 0x1, 0x8, 0x2, 0x0, {0x0, 0x0, r0, 0xa809}})
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}})
io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x20, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5cdd}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x104, 0x7b, &(0x7f0000000540)=""/123, 0xe07f350b254e2761, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xa, 0x4, 0xfffff001}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001080)=[r4, r4, r5, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x1, 0xf, 0xb}, {0x0, 0x3, 0x13, 0x4}, {0x4, 0x3, 0x4, 0x1}, {0x2, 0x3, 0x0, 0x6}, {0x2, 0x5, 0x7, 0x5}, {0x5, 0x3, 0xc}], 0x10, 0x9}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@map=<r7=>r5, 0xb, 0x1, 0xfffffffc, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e00)={'syztnl0\x00', &(0x7f0000000d80)={'gre0\x00', <r10=>0x0, 0x8, 0x1, 0x0, 0x6, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x68, 0x0, 0x7, 0x2f, 0x0, @private=0xa010100, @remote, {[@lsrr={0x83, 0x27, 0x66, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64011100, @broadcast, @multicast1, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, @local]}]}}}}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f00000010c0)='./file1\x00', 0x210000, &(0x7f0000001100)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f00000011c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000001740)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0), 0x4008, &(0x7f0000001800)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000001840)='./file0\x00')
setresuid(0x0, 0xee00, 0x0)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r11, &(0x7f00000018c0)={0x1d, r10, 0x1, {0x1, 0xff}, 0xfe}, 0x18)
setreuid(0xffffffffffffffff, 0xee00)
setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x41, 0x2)
mknodat(0xffffffffffffff9c, &(0x7f0000001880)='./file5\x00', 0x61c0, 0x700)
r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000e40), 0x242600, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x18, 0x23, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xab}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d40)='GPL\x00', 0xfc3, 0x0, 0x0, 0x41100, 0x2, '\x00', r10, 0x0, r12, 0x8, &(0x7f0000000e80)={0x200, 0x4}, 0x8, 0x10, &(0x7f0000000ec0)={0x4, 0x7, 0x1, 0x7b8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000f00)=[r7, r4], &(0x7f0000000f40)=[{0x4, 0x4, 0x6, 0x1}, {0x5, 0x5, 0x8, 0x7}, {0x1, 0x1, 0x5, 0xf}, {0x4, 0x2, 0x8, 0x4}, {0x1, 0x3, 0x10, 0x8}, {0x5, 0x5, 0x2, 0xb}], 0x10, 0x7fffffff}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x7, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xea83}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0x8, 0x7, 0x6, 0xc, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x71}]}, &(0x7f0000000a00)='GPL\x00', 0x5d, 0xcf, &(0x7f0000000a40)=""/207, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x24, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@cgroup=r9, r6, 0x30, 0xc, 0x0, @void, @value=r13, @void, @void, r8}, 0x20)
syz_mount_image$vfat(&(0x7f0000001900), &(0x7f0000001940)='./file1\x00', 0x4814, &(0x7f0000001980)=ANY=[], 0x1, 0x27e, &(0x7f00000019c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000001c40)='./file1\x00', 0x14b302, 0x8c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002040080000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m49.466549569s ago: executing program 0 (id=1):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x2, 0x2, 0x8, "79794e9234c689ea2f33d0130a04aeda28cdb34affbe4e884a7c5520837a1b01", 0x42303159})
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
mkdirat(r1, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00')
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2200000, &(0x7f00000002c0)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f0000000380)="$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")
mount$bind(&(0x7f0000000900)='.\x00', &(0x7f0000000940)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001e00)='./sys\x00', &(0x7f0000001e40)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001e80)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r4, &(0x7f0000001ec0)='tcpci 0x50\x00', 0xb)
recvmmsg(r3, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40000020, 0x0)
mount$bind(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
mount$bind(&(0x7f00000009c0)='./file0/../file0\x00', &(0x7f0000000a00)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000a40)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x19)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
fstat(r5, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000001b80)=@md0, r6, &(0x7f0000001c40)={0x515, 0x9, 0x1, 0x1})
mount$bind(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', 0x0, 0x3c5093, 0x0)
mount$bind(&(0x7f0000000b00)='.\x00', &(0x7f0000000b40)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
pread64(r2, &(0x7f0000000b80)=""/4096, 0x1000, 0xd33)
ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000001d40)={0x4, 0x0, 0x5, 0x80800})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001f00)=ANY=[@ANYBLOB="50000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000cb1507003000128008000100736974002400028008000300ac14141006000e001f0000000500d962ec0a000044000006000d004be60000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)
write(r7, &(0x7f0000000180)="6e04000500", 0x5)

1m49.257209636s ago: executing program 2 (id=9):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00')
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="000014000a000100000000000000000008000f00", @ANYRES32], 0x30}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=@newlink={0x40, 0x10, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4f26c, 0xc000}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x48080)
mmap(&(0x7f0000030000/0x3000)=nil, 0x3000, 0x5, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001980), 0x202, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000019c0)=0xd)
readv(r3, &(0x7f0000001a00)=[{&(0x7f0000001a40)=""/228, 0xe4}], 0x1)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
lseek(r0, 0x39, 0x0)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000016c0)='syz_tun\x00', 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000001700)=0x1, 0x4)
bind$inet6(r4, &(0x7f0000001740)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r4, &(0x7f0000001780)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
syz_emit_ethernet(0xde, &(0x7f00000017c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ffde2a", 0xa8, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0xffc}, {"e29f47d298a2f3141ef067002628c47ce2f4d2360af8426424d257eced376d67f61a4555a9bc32231bb9bd005e389c9a10b5b963bfc4fd94fbf31e4680ab6ab62ffe75e5c50654ee982dd1efaf4ad3ba3d540d79140c02de99dce902e0ae167eacc7042f275c68765e5487f5e177396c68e79ddad7f76f4e3913ff073ab5f82813484ddf0cd9f7d8f7e49f5fec50e566ba152c4c"}}}}}}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, 0x0, 0x0}, 0x20)
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00')
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x10, &(0x7f0000001280)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cd000000b70000000200000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000013c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x65)
acct(&(0x7f0000001180)='./file0\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000001400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000001440)={r7, r7, 0xc, 0x0, 0x0, 0xe, 0x1, 0xc45, 0x2, 0x9, 0x2, 0x1, 'syz1\x00'})
ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f00000015c0))

1m49.075263522s ago: executing program 0 (id=10):
r0 = socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000440), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6)
mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000580), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c005f4d479ac157ac04acb269792b35e9663e84c002000000fa0200d0b7ef4a3c3d97e83b713c5b811a3e01bea86c"])
mount(0x0, &(0x7f0000000800)='./trace\x00', &(0x7f0000000840)='tracefs\x00', 0x0, 0x0)
r4 = io_uring_setup(0x3eae, &(0x7f0000000880)={0x0, 0x0, 0x10000, 0x10000, 0x1a1})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)=""/4095, 0x440000}], 0x100000000000011a)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000210425b970000000000000000000", @ANYRESHEX=r0, @ANYBLOB="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"], 0x48}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1100000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0xa, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4)
bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000001c0)=0x9, 0x4)
getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000001a00)={0x0, 0xffff, 0xa, 0x8, 0x1, 0xe, 0x8c1b, 0x0, {0x2, @in={{0x2, 0x4e20, @loopback}}, 0xff, 0x0, 0x3, 0x0, 0x4}}, &(0x7f0000001ac0)=0xb0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r6, &(0x7f0000000440), &(0x7f0000000480)=@udp=r0}, 0x20)
close(0x3)

1m47.390644094s ago: executing program 2 (id=19):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1d3942, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x6}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1)
setreuid(0xffffffffffffffff, 0xee01)
openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x10042, 0x0)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000480)={0x0, 0x595f, 0x10000, 0x0, 0x51, 0x0, r1}, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000005c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r1, r1, &(0x7f0000000640)={0x2000}, 0x3, 0x0, 0x1})
io_uring_enter(r3, 0x7c65, 0xa334, 0x1, 0x0, 0x0)
sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000200)=@in={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={<r7=>0x2, 0x2}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100)={r7, 0x8}, 0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x80000001, 0x30}, 0xc)
r8 = dup(r0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x5, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]}, 0x1a7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000680), 0x0)

1m47.346722052s ago: executing program 32 (id=19):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1d3942, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x6}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1)
setreuid(0xffffffffffffffff, 0xee01)
openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x10042, 0x0)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000480)={0x0, 0x595f, 0x10000, 0x0, 0x51, 0x0, r1}, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000005c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r1, r1, &(0x7f0000000640)={0x2000}, 0x3, 0x0, 0x1})
io_uring_enter(r3, 0x7c65, 0xa334, 0x1, 0x0, 0x0)
sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000200)=@in={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={<r7=>0x2, 0x2}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100)={r7, 0x8}, 0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x80000001, 0x30}, 0xc)
r8 = dup(r0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x5, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]}, 0x1a7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000680), 0x0)

1m46.27989325s ago: executing program 0 (id=26):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000400f2ffffff00000100000001000000"])

1m46.11371361s ago: executing program 33 (id=26):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000400f2ffffff00000100000001000000"])

1m42.894625695s ago: executing program 6 (id=51):
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x3, 0x4, 0xb66, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000003980)={'wg1\x00', <r1=>0x0})
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000039c0)={@local, @empty, r1}, 0xc)
r2 = fsopen(&(0x7f00000037c0)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x82)
fchdir(r3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000000)=0x6)
sched_setaffinity(0x0, 0x0, 0x0)
socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(0x0, r0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
fchown(r4, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000003840)='.\x00', 0xfffffffb)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003a40)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000003b00)={0x2c, r6, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "9432"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x2c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000003b80)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003c40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="2a003300d0000800080211000001080211000000505050505050"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
mkdirat(r4, &(0x7f0000003880)='./file1\x00', 0x14e174135c0b87bf)
r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0)
read$FUSE(r12, &(0x7f0000001700)={0x2020}, 0xfffffec1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1m42.035467819s ago: executing program 6 (id=64):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r2)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000001c40), 0x4)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000001c80), 0x4)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000001d80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x12000018}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x5c, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xf}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfa}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x24}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x3fb0feb5af41d4cc}, 0x800)
sendmsg$xdp(r2, &(0x7f0000001c00)={&(0x7f0000000100)={0x2c, 0x6, r3, 0x31}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000000140)="11dc86170dc892bbe7ed4298fd6f52b87f4e31c23280240ca7d8f21d398b50480b3f5dd8006b258c1c13e80bd3c87267c30570f75d76bb08acc563d7c2c80d469c93077a824c7822ee177b50650162db137a14a7d08099aa07ec6d2e2595b543f4382155d4dee897bbb10cc53dfda3a4756e35a11dbbf332176cd8a092cff09cee0604f6494c8636aceebba3206c9a17f75d712b07a51dfd296739457a06362076cf596cb7761abb46c4546ca67b2a5dcd85c51837d513b0", 0xb8}, {&(0x7f0000000300)="cb410725fbe54c7efa545e3728f7f3635780b73b785230ad5a461be8a2d6837ae5a8ff6249122089a62cab1c63fa6b8e792156f1bb9bc1df648115ad7e2696708cfe666b9b015e51a127ade7bb470e9d4689c89e5ef7e62f5e4489e11fbde8ed17500ff6cf692ab11b90ce13a96b71dd251d196d828ae6f73c66e568c680f72fbd4d4abe4eff5391b8dedddf34487098dc157dcf15b91d96c406", 0x9a}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="fe4d19a210d2302a5ff4a1f6436403bbb6785608bd38b2b9ea01e3c64aae5f5b05cc6d1f41864e60931e73d72fd6e0258c515342d8638a5bb9e2118bdb2fd9088c6dfb57df55f337494088d722c8769bca82e6c1a0a09391147e7a51d068ed281109d19751210e10a9a5139a9cb8", 0x6e}, {&(0x7f0000001a40)="23c947", 0x3}, {&(0x7f0000001a80)="779900ea005c701406860e219345bbf21f9ccfe724bdf2b634e0a75e133042e8b5b92953de2c54c1fad26fc061bedfde7b42dd861d41f3ee4a42975f6e2daffa8b9f90c7a0b93c5d8d8bf91bd41dafae304ca3f0da38ab3d289702380e39dfce239c8afaf39c1cb646f7c9202768f61760e02eed8eecdaa310fe14ecb2c2239485d2a1fac6d9bff7976fd2fd2a96bd6e4f4d8f95c1a8511967d6bf6b241fdd80fe19aad698460f4fd0529cd9d9a30a79b6a9a12e57c2f4773b43f1bea802156c46a8bec85e6fdb8f2799acd15f2f3512abd25e92879c92", 0xd7}], 0x6, 0x0, 0x0, 0x4000}, 0x40)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r6=>r1, {0x2}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x9, &(0x7f0000000240)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xa}, @map_fd={0x18, 0xb, 0x1, 0x0, r6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @exit], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)

1m41.645284854s ago: executing program 6 (id=67):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
syz_open_dev$vim2m(&(0x7f0000000000), 0x1f7ff6, 0x2)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10001, &(0x7f0000000280), 0x1, 0x582, &(0x7f0000000300)="$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")
mount$9p_fd(0x0, &(0x7f00000008c0)='.\x00', &(0x7f0000000900), 0x90, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}}, 0x4000000)

1m41.471260401s ago: executing program 6 (id=71):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x200000, &(0x7f00000004c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000580)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=")
setxattr$trusted_overlay_upper(&(0x7f0000000b00)='./file0/file0\x00', &(0x7f0000000b40), &(0x7f0000000b80)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000bc0)='./file0/file0\x00', &(0x7f0000000c00), &(0x7f0000000c40)=ANY=[], 0x835, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100b, 0x4})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47})
r3 = dup3(r2, r1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001080)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001140)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1e, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001240)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xfff1}, {0xfff2, 0xfff1}}}, 0x24}}, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@release={0x40046304}]})
r11 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x9, 0xf, 0x52, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa8, 0x40, 0x7, 0xb5}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r0)
r12 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'bridge_slave_0\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r13, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000d80)={'erspan0\x00', 0x0, 0x700, 0x700, 0x4, 0x7, {{0x1c, 0x4, 0x2, 0x0, 0x70, 0x64, 0x0, 0xfb, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0x5e, [@multicast2, @broadcast, @multicast2, @loopback]}, @timestamp={0x44, 0x14, 0x14, 0x0, 0x6, [0x9, 0x1, 0x7, 0x4]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x7c, [@private=0xa010101, @loopback, @local, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x87, 0x3, 0x4, [{@empty, 0x9}, {@local, 0x4}, {@empty, 0xd}]}]}}}}})

1m41.301291244s ago: executing program 6 (id=75):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d00010000000800060009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRESHEX=r0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000002b40)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000002b80)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000002bc0), 0x28)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000002c00)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28)
setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000002c40), 0x44)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400, 0x5210}, [@IFLA_MAP={0x24, 0xe, {0x63d2, 0x5, 0x8001, 0x7, 0x4, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x24004814)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test\x00', 0x777)
futex(0x0, 0x100, 0x0, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000002880), r3)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x40, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x1)
write(r3, &(0x7f0000000300)='0', 0x1)
read$FUSE(r3, &(0x7f00000004c0)={0x2020}, 0x2020)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r7=>0x0})
r8 = fsopen(&(0x7f0000002680)='efivarfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000026c0)='uid', &(0x7f0000002700)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002b00)=ANY=[@ANYBLOB="2c0000003e000701fdbfffff05000010017c00000400fc800c000180060006003b0000000800028004"], 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4010)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)={0x28, r6, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x28}}, 0x0)
ioctl(0xffffffffffffffff, 0x6, &(0x7f0000002980)="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")

1m41.194396657s ago: executing program 6 (id=76):
mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./proc\x00', 0x3f) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./proc\x00', 0x3f)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000d00)='proc\x00', 0x4000, 0x0) (async)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000d00)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000fc0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000fc0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmsg(r1, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x10102) (async)
recvmsg(r1, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x10102)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x3, @private2, 0xfffffffc}, 0x45)
write(r0, &(0x7f0000000d80)='3', 0x4e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={<r3=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000e40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c76657272696f6e3d3970a35230302e752c00"]) (async)
mount$9p_fd(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c76657272696f6e3d3970a35230302e752c00"])
write$P9_RVERSION(r5, &(0x7f0000000f80)=ANY=[@ANYBLOB="150000006bffff"], 0x15)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan1\x00'})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x4, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94)
ioctl$BTRFS_IOC_ENCODED_WRITE(r6, 0x40809440, &(0x7f0000000800)={&(0x7f00000007c0)=[{&(0x7f0000000640)="7338bcf32d25fe584c5ed2aa7d8f17def122812e0626f4d523ac65e6474beed4992b73372395ef4a0502fe52148a769f273c7f9feae56baac912d8", 0x3b}, {&(0x7f0000000680)="e448c1dcedf63c1ae30fcc9f2d1dae0814c67072d28797e00918f56a13cf484cd0c65c51dd542ad9e86a7eb346882c791fbb150634cad5f7f9e55b2e4cbe8e66158e45dc17e524a3c951f68cfd51b7b095a322ee423963c74a778f62d1344d01fd34ca10737ea366151948e880e16ee35cd613888a276ab6b4e3a24a1e9d542589239a634efd889d96c45f56fa169dc4bd", 0x91}, {&(0x7f0000000740)="35e6a67c79aa0e3034a925b107b30f5cb38c7452a37296c2b0443ba45516187297794f90293e8454d5f28d6a5178c8615a4fe7699a7fdf71de9f1135565c852a9b13be46ba4a45ea20a6be4ca727b27facb2", 0x52}], 0x3, 0x0, 0x0, 0x8, 0x82, 0x20001, 0x4, 0x4})
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000140)=<r9=>0x0)
fcntl$setsig(r6, 0xa, 0x3e) (async)
fcntl$setsig(r6, 0xa, 0x3e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r10, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbd8abc89b6f59ec", 0x0, 0x1ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="011aaf653d6a9b1b7d00080800000000000000000000000000000000f82173bf8afe9fb16672b046fa8caa027f87e155b3ec96f6cba0e068054d79fbdb19faf2a310ac712ea0488fe1ee1b0c", @ANYRES32=r9, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4000)
recvfrom$inet_nvme(r1, &(0x7f0000001080)=""/211, 0xd3, 0x2000, &(0x7f0000001180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast1}, 0x2, 0x2, 0x3, 0x1}}, 0x80)
sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000001200)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r8, @ANYBLOB="000427bd7000fadbdf251d00000008001e0040000000a3001f00723c72e177afb8e9d3fb418f073ac883a7e0f88b1695c588a296ed8729038c0d7ca88782f431e6b70fb2ed3009041add9f350fe4970d82fa6ccbb8038898a41b083a3fe4a02fd4a733a5382af3b0bb582eb0b24830668aa4e5d005031e0178e41e4792cc2a81edc8dabf9e427c7e303fe47c7c112af105cef0e7b2515b7922450d0165b9896c186ab8b9ff25b40d68fc7c83039659d86d0d5973193c423e8b0008000100", @ANYRES32=r6, @ANYBLOB="29081f0001b5ea084efcd0d431d871314984552346b3895b943d824467ee7217eca500"/52], 0xf4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f00000003c0)='GPL\x00', 0x110, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f00000003c0)='GPL\x00', 0x110, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x10060000)

1m26.126942517s ago: executing program 34 (id=76):
mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./proc\x00', 0x3f) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./proc\x00', 0x3f)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000d00)='proc\x00', 0x4000, 0x0) (async)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000d00)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000fc0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000fc0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmsg(r1, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x10102) (async)
recvmsg(r1, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x10102)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x3, @private2, 0xfffffffc}, 0x45)
write(r0, &(0x7f0000000d80)='3', 0x4e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={<r3=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000e40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c76657272696f6e3d3970a35230302e752c00"]) (async)
mount$9p_fd(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c76657272696f6e3d3970a35230302e752c00"])
write$P9_RVERSION(r5, &(0x7f0000000f80)=ANY=[@ANYBLOB="150000006bffff"], 0x15)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan1\x00'})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x4, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94)
ioctl$BTRFS_IOC_ENCODED_WRITE(r6, 0x40809440, &(0x7f0000000800)={&(0x7f00000007c0)=[{&(0x7f0000000640)="7338bcf32d25fe584c5ed2aa7d8f17def122812e0626f4d523ac65e6474beed4992b73372395ef4a0502fe52148a769f273c7f9feae56baac912d8", 0x3b}, {&(0x7f0000000680)="e448c1dcedf63c1ae30fcc9f2d1dae0814c67072d28797e00918f56a13cf484cd0c65c51dd542ad9e86a7eb346882c791fbb150634cad5f7f9e55b2e4cbe8e66158e45dc17e524a3c951f68cfd51b7b095a322ee423963c74a778f62d1344d01fd34ca10737ea366151948e880e16ee35cd613888a276ab6b4e3a24a1e9d542589239a634efd889d96c45f56fa169dc4bd", 0x91}, {&(0x7f0000000740)="35e6a67c79aa0e3034a925b107b30f5cb38c7452a37296c2b0443ba45516187297794f90293e8454d5f28d6a5178c8615a4fe7699a7fdf71de9f1135565c852a9b13be46ba4a45ea20a6be4ca727b27facb2", 0x52}], 0x3, 0x0, 0x0, 0x8, 0x82, 0x20001, 0x4, 0x4})
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000140)=<r9=>0x0)
fcntl$setsig(r6, 0xa, 0x3e) (async)
fcntl$setsig(r6, 0xa, 0x3e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r10, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbd8abc89b6f59ec", 0x0, 0x1ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="011aaf653d6a9b1b7d00080800000000000000000000000000000000f82173bf8afe9fb16672b046fa8caa027f87e155b3ec96f6cba0e068054d79fbdb19faf2a310ac712ea0488fe1ee1b0c", @ANYRES32=r9, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4000)
recvfrom$inet_nvme(r1, &(0x7f0000001080)=""/211, 0xd3, 0x2000, &(0x7f0000001180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast1}, 0x2, 0x2, 0x3, 0x1}}, 0x80)
sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000001200)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r8, @ANYBLOB="000427bd7000fadbdf251d00000008001e0040000000a3001f00723c72e177afb8e9d3fb418f073ac883a7e0f88b1695c588a296ed8729038c0d7ca88782f431e6b70fb2ed3009041add9f350fe4970d82fa6ccbb8038898a41b083a3fe4a02fd4a733a5382af3b0bb582eb0b24830668aa4e5d005031e0178e41e4792cc2a81edc8dabf9e427c7e303fe47c7c112af105cef0e7b2515b7922450d0165b9896c186ab8b9ff25b40d68fc7c83039659d86d0d5973193c423e8b0008000100", @ANYRES32=r6, @ANYBLOB="29081f0001b5ea084efcd0d431d871314984552346b3895b943d824467ee7217eca500"/52], 0xf4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f00000003c0)='GPL\x00', 0x110, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f00000003c0)='GPL\x00', 0x110, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x10060000)

1m25.466819238s ago: executing program 4 (id=304):
r0 = fsopen(&(0x7f0000000000)='esdfs\x00', 0x0) (async)
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x10080)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@directio}, {@access_user}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'Y'}}, {@permit_directio}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@flag='nolazytime'}]}})
fsopen(&(0x7f0000000200)='incremental-fs\x00', 0x0) (async, rerun: 32)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0xd, &(0x7f0000000240)=@raw=[@ldst={0x3, 0x2, 0x1, 0xb, 0xa, 0x8, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x30000000}}], &(0x7f00000002c0)='syzkaller\x00', 0xfffffff7, 0x1000, &(0x7f0000000300)=""/4096, 0x40f00, 0x3a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001340)={0x4, 0x9, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001380)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000013c0)=[{0x2, 0x2, 0x3, 0x2}, {0x1, 0x3, 0x5, 0x7}, {0x4, 0x5, 0xb, 0x9}, {0x4, 0x4, 0x2, 0x9}, {0x5, 0x1, 0x6, 0x1}, {0x2, 0x4, 0x1, 0x2}], 0x10, 0xb}, 0x94) (rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6gre0\x00', &(0x7f0000001500)={'ip6gre0\x00', <r4=>0x0, 0x29, 0x6, 0xa, 0x10, 0xf9fcaf2878eb658a, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7800, 0x80000001, 0x6}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000015c0)={r3, r4, 0x25, 0x19, @void}, 0x10)
ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001640)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x52a, '\x00', r4, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) (async, rerun: 64)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@func={0xf, 0x0, 0x0, 0xc, 0x2}, @var={0x9, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x61, 0x61, 0x5f, 0x61, 0x61, 0x0]}}, &(0x7f0000001940)=""/205, 0x3c, 0xcd, 0x1}, 0x28) (async, rerun: 64)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b40)=@o_path={&(0x7f0000001b00)='./file0\x00', 0x0, 0x2010, r1}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b80)={0x1, <r8=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x1c, &(0x7f00000016c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfd6, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x1, 0xd, 0x4, 0x7, 0x18, 0x1}, @ldst={0x1, 0x2, 0x2, 0xa, 0xb, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x77}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f00000017c0)='GPL\x00', 0xc81d, 0xc1, &(0x7f0000001800)=""/193, 0x41000, 0x4d, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000001a80)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001ac0)={0x5, 0x5, 0xbdc, 0xf}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001bc0)=[r7, r8, 0x1], &(0x7f0000001c00)=[{0x4, 0x5, 0xb, 0x5}, {0x0, 0x1, 0xc, 0x8}, {0x1, 0x1, 0xb, 0x8}, {0x5, 0x2, 0x5, 0xc}, {0x0, 0x4}, {0x3, 0x4, 0x6, 0x5}, {0x3, 0x2, 0xf, 0x7}], 0x10, 0x67a9}, 0x94) (async)
write$P9_RMKNOD(r2, &(0x7f0000001d40)={0x14, 0x13, 0x2, {0x80, 0x2, 0x2}}, 0x14) (async)
getxattr(&(0x7f0000001d80)='./file1\x00', &(0x7f0000001dc0)=@random={'os2.', '@\xb1&[-:++\x00'}, &(0x7f0000001e00)=""/232, 0xe8) (async)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x48, 0x7, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x400c081) (async)
statx(0xffffffffffffffff, &(0x7f00000020c0)='./file0\x00', 0x800, 0x80, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
fstat(r1, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x880000, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x2}}], [{@hash}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, 'access=user'}}, {@dont_hash}]}}, 0x0, 0x0, &(0x7f0000002380)="a73315ea2aa447683308ccaf00d375bb0537519c61eed16d66dd4d3c8c31fafb76a92a50745587472f98b757903864d634dba6b3030a23de11ae63e9fb178aa97b") (async)
r11 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000002400)={0x0, 0xee00, r10}, 0xc) (async)
fcntl$setflags(r0, 0x2, 0x1) (async)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000002480)={0x3, &(0x7f0000002440)=[{0x5, 0x1}, {0x89a9, 0xf, 0x1f, 0xe1}, {0x2, 0x4, 0x1, 0x200}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000024c0)={{0x1, 0x1, 0x18, <r12=>r8, {0xffffffff}}, './file1\x00'})
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000002540), r12)
sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000002640)={&(0x7f0000002500), 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x60, r13, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x60}}, 0xc000)
r14 = openat$rnull_attr(0xffffffffffffff9c, &(0x7f0000002680)={'/sys/kernel/config/rnull/syzrnull', 0x0, '/blocksize\x00'}, 0x2, 0x0)
read(r14, &(0x7f00000026c0)=""/4096, 0x1000) (async, rerun: 32)
ioctl$EVIOCSCLOCKID(r12, 0x400445a0, &(0x7f00000036c0)) (rerun: 32)

1m24.586784773s ago: executing program 4 (id=321):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633"], 0x6f4}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'xfrm0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0x200, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x6}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5, 0x6, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000c00)={[{@sysvgroups}, {@barrier}, {@dax_never}, {@init_itable}, {@test_dummy_encryption}, {@grpjquota, 0x2e}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x4da, &(0x7f0000000140)="$eJzs3MtrHdUfAPDvTF59J+2vv0cfPxutYrCatGnVLlyoKHQjCLrQjRDTtNSmrTQRbCm2FalL8S9Ql4Lgyo0rBRF1pbjVvQhFuml1IVfmzkw6yc29vTdJE839fOAm58wj53zPzJl77pw7CaBrDWc/kogtEfFTRAzm2fkbDOe/bt24NPn7jUuTSdRqL/yW1Le7eePSZLlpud/mIjOSRqTvJLFnkXJnLlw8PTE9PXW+yI/Nnnl9bObCxUdOnZk4OXVy6uz40aNHDh96/LHxR1ckziyum7vfOrd317GX339ushavfvvJQORxx4I4ckPLLnM4hjdERC1ze2l//ecDy/7rfy9bK+mkdw0rQkd6IiI7XH31/j8YPXH74A3Gs2/PZb5aowoCd0323rS9YWlP8TvN37yAdaocoTaTFCP7VasQsErKd/zs82/5Ws3xx1q7/lR+ecvivlW88jW9kWarhvJP7D1N9v/PMsvfEhEvXfnjg+wVi96HAABYWV9k45+HFxv/pfPGNtuKOZShiDgQETsi4l8RsTMi/l2Mg/4bEf/rsPzhBfnG8c8PG5cUWJuy8d8TxdxW/nplLv5cMpfbWo+/LzlxanrqYNEmI9E3cOIONfzymR/fa7ZuuDL+y15ZHcqxYFGPX3sH5u9zfGJ2YqnxLnT9asTu3mr8ZfsnczMBWQvsiojdS/j7WZudeujjvVl62+bG9Y3xZyPtavwtrMA8U+2jiAfz438lFsRfSvKSms1Pjm2I6amDY+VZ0ei77689X833VdJ5/JVI2ohpQ+dhNpUd/02x+PGvK7tBOV8703kZ135+t+lnmsbjn2TtUVGc/5U+lp3//cmL9XR/sezNidnZ84ci+osF85aP3963zJfbZ/GP7F8s/jS7xv35YbHfnojITuL/R8Q9EbGvqPu9EXFfROxvEf83T9//WusWatX/764s/uOtjn/EUFKdr29M9EbTVXmi5/TXnzcrv73r35F6aqRY0s71r0V15iWW03YAAADwT5HW56CTdLRMV25O7YxN6fS5mdkDw/HG2eP5XPVQ9KXlna7Byv3QQ8W94TI/viB/OCK2179DtLGeH508N711LQMH6s/qzOv/kaajo/m6X5p96QVYPzqaR6s+HfjpZytfGWBVeV4Tupf+D91L/4fupf9D91qs/1+OuLUGVQFWmfd/6F6d9X9XC1hP9GjoXvo/dKXGR+LLf7TQ3vPzzRI7ji1r9yUkyoja26s2eFeqcaXzvXpmLlxdwWpERP3fZ2SJaNimNlBZUhvIv825tLIibb1Nf2PpiyQur+5JUibSO27z5BKbpYPEviIxEBHt7nW5rVZdoRMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgHfgrAAD//4QVwTA=")

1m24.359506753s ago: executing program 4 (id=324):
r0 = io_uring_setup(0x1, &(0x7f0000002780)={0x0, 0x0, 0x3800, 0x2})
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, 0x0, 0xb8ffffffffff0f00)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000002800), 0x0, &(0x7f0000002840), 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
timer_create(0x3, &(0x7f00000028c0)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000004940)={0x1, 0x0, [{0x0, 0x106, &(0x7f0000004980)=""/262}]})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000004ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004b00)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000004b80)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000004bc0)={@my=0x1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004c00)={&(0x7f0000004c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000004c80)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)=""/57, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0)
read$FUSE(r1, &(0x7f0000006980)={0x2020}, 0x135c)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000000740)={0x2020}, 0x2020)
r5 = socket$inet(0x2, 0x2, 0x1)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000700)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x3, 0x0, 0x3, 0x0, {0xa, 0x4e20, 0xf08, @remote, 0x80000000}}}, 0x32)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x31b, &(0x7f00000003c0)="$eJzs3ctLW1kcwPFfYp4+RlfDMMzAwYFhYPBihNnNYmRQGAzMoGZgHChc67UNuSaSG4RIqS4K3XbdhYsuS6Gb7roppVs3pX9AXzs37ipUesrNfXhNLjFNqa9+PwtzvOf3u+fknHM1HvVm7/c7a5VVx3ivUyIvJEpviWT98rOdVz8uPB32PlFqdnqxMKVUUkT+v/Fg/Elj6N9H3zzOyu7Ylb39qbe7PyyKfFi8LklVdlRVa63Vcq3WSLjJK2WnYij1j22ZjqXKVceqN5TZqjeXbUut2rX19aYyqysjg+t1y3GUWW2qitVUjZpq1JvKvGaWq8owDDUyKBCRsbCU7KhLdEss3T/QWvbdCcpui9Y6Jno7KKT9x+zndRbnSdv8d43tWBwDX7JnOA0HOhXOf+aE+cfl413/r+/2cv3j8ln4b2luulicmVcqJ7J2e6O0UfIevfqXQ1IWWyzZmf916VDcNeKThPtx9q/izKRqGZOf17b8/K2NkvfNYXrVzy/IqPs6JZIvQX7By1fH89MyGMkPXnTE5U8F+ZKM5Gfkl58i7RsyKs+vSk1sWWmd5yj/ZkGpP/8utrWfb8UBAAAAAAAAAHARGSp0tH+fCH/VmzeMbOsvPlr17tG8e9iN8wLC/fVJGZXD+P35ydj9/ZR8nzrDJw4AAAAAwFfEaW5WTNu26p9ekB5iBu7luzSRFhG3IHJr3O1M1xN+6/e4rco9R0xWRkQ6zzPQS5/9Qv43r72H837H5MSsuf4Hs89CUkSiR7x/1sh4uzQislkxh2PHx0l2XwCtukQ4hhOZzpE3bTt3es/UturZyJyK1jo2WHL9Lexs7BPspZA4DI58FxujE3Y6Jt0d3qMYM4gJLsyTWv8j/nLoXghXQtJbG7adax+oiTfeee0uXzTehVt8AAAAAC6QyA9OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjPR1J7bgvv3Hq8R/i/jOW7K1v0889/0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcA59DAAA//8BRaKg")
read$FUSE(r4, &(0x7f0000002900)={0x2020}, 0x2020)

1m23.651498388s ago: executing program 1 (id=332):
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x400080)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000012c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/4096, 0x1000, 0x0, &(0x7f0000001200)=""/170, 0xaa}, &(0x7f0000001300)=0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x6, 0xd, &(0x7f0000001480)=ANY=[@ANYBLOB="180000000200000000000000ff7f000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000008b704000000000000850000003300000085000000a000000095"], &(0x7f0000001500)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r2, 0x2000012, 0xe, 0x0, &(0x7f00000015c0)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4054}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})

1m23.555297519s ago: executing program 1 (id=334):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r1, 0x7, 0x104, 0x7ff})
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000380)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_STATX(r2, &(0x7f00000023c0)={0x130, 0x0, r3, {0x303c, 0x70, 0x0, '\x00', {0x10, 0x8, 0x8, 0x7, 0x0, 0x0, 0x6000, '\x00', 0x8001, 0x6, 0x4, 0x10, {0x2, 0x1000}, {0x0, 0x80000000}, {0x8, 0x5}, {0x7d73, 0x80}, 0xb9b2, 0xffff, 0x6e, 0x3a87}}}, 0x130)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
r4 = eventfd2(0x200, 0x80801)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r4)

1m23.487463982s ago: executing program 5 (id=335):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file2\x00', 0x8, &(0x7f0000000600)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f0000000980)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x10b442, 0x79) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x10b442, 0x79)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000080)=""/68, &(0x7f0000000100)=0x44) (async)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000080)=""/68, &(0x7f0000000100)=0x44)
openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file2\x00', 0x42, 0xf)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
capset(0x0, &(0x7f0000000040)={0x200002, 0x200003, 0x800, 0x2, 0x7})
ioctl$TCFLSH(r1, 0x5608, 0x0)

1m23.486754735s ago: executing program 4 (id=336):
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc41e, &(0x7f0000000240)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@oldalloc}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@dioread_nolock}, {@nogrpid}], [], 0x2c}, 0x1, 0x47a, &(0x7f0000000300)="$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")
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000840)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000008c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000940), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000980), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6)
bind$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000a80)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000ac0)={0x2, 0x4e23, @multicast2}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fffffff8000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb7030000080000547d03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m23.441304667s ago: executing program 1 (id=337):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 22)

1m23.403128963s ago: executing program 1 (id=338):
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/rpc\x00')
openat(r0, &(0x7f0000000840)='auth.unix.ip/channel\x00', 0x80882, 0x10)
openat(r0, &(0x7f0000000880)='./file0\x00', 0x40, 0x8)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002)
read(r2, &(0x7f0000000140)=""/150, 0x96)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0)
fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000040), &(0x7f0000000200)=ANY=[], 0x401, 0x1)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000780)={'\x00', 0x7fff, 0x0, 0xffff, 0x7fffffff, 0x1, <r4=>0x0})
sched_setscheduler(r4, 0x2, &(0x7f0000000800))
execveat(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000280)='TIPC\x00', &(0x7f00000002c0)='^}]!b:\\\x00', &(0x7f0000000300)='TIPC\x00', &(0x7f0000000340)='-!$}&#\x00', &(0x7f0000000380)='-\\^.\xd2\x00', &(0x7f00000003c0)='TIPC\x00', &(0x7f0000000400)='TIPC\x00', &(0x7f0000000440)='\xb0}\x00', &(0x7f00000006c0)='\b\x00\x00\x00\x00\x16\xd8\xd4\xbe)\xe7b\xbd\x17\xc6\xf5v\x9e\xc0\xcd\x14^', &(0x7f00000004c0)='\x00\x00\x00\x00\x00']}, &(0x7f0000000740)={[&(0x7f0000000580)='\x00', &(0x7f0000000640)=')[-+!^\x81\'}^\\*#@:-\x00', &(0x7f0000000680)='TIPC\x00', &(0x7f0000000200)='$$\x00', &(0x7f0000000700)='\x00']}, 0x400)

1m23.377290213s ago: executing program 5 (id=339):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000300)='blacklist\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)='[,\v]@+\x00', 0x0)
add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
keyctl$join(0x1, 0x0)
connect$unix(r2, &(0x7f0000000480)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000500), 0x0, 0x800)
recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r4=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_open_dev$dri(&(0x7f0000000680), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f00000006c0)={0x1, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50)

1m23.05333065s ago: executing program 1 (id=342):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20000043}, 0x0) (async, rerun: 32)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b00000008000a007f000001", 0x54}], 0x1}, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x202, 0x1000, @empty}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r4) (rerun: 32)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x14, r6, 0x100, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40080) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000e40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000001}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b00)={0x300, r5, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xba, 0x5b, "e043bcbe3bbfc0fd345666dbb8bebf660f40fde99381b4f6a69d9152f58ba8af34b5024e752696bcb1e7dd1a5e318ab8075b741097326bc4284085b256b6417253621e59a15adf5765df23632569e5f0ff330d2a34abeb0a82102da276a74cfc6b1182a83c6da55c55c2203105f0a15dd7161b438c6d461e823b17d3db0c31d117f5720f2a1c4c0b68055e4ab0c87c6a6336b90b3287f4abd322df5a433c7bef9995b8a1c98f5ca8368fd1a1d16b7a684c0cf7b6a4d7"}, @NL80211_ATTR_FRAME_MATCH={0xdb, 0x5b, "679c69152263d67ce0e33f3fe6fe0dd4dae00ec69a808635d0a05b08d4c375c855fbc89f85678bbc5e734f58873644baae545c450f54ddbb983dc09712351979421320c733364e23c37e2f1a67e6f0b28b4cbbde6acb31a03f2a40e3f2c3bde79be4580637d69fbd992b7d5813839664d7298c666b3611dc904e85e5da411a740522510776cf14cee3d09f3f0e95dc2545cd74646341929470f67838e5233f1fb4e864d72fa5debdc3aad1cb30b04265169e9eeb1a64cb7bec19312b8748422d73739da2d3e279b1bcd7f39e3e957d555ea58cea7f548c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0x87, 0x5b, "a816b7d50980be1c4b97c2927c353a9bf479ee6859e0e94f016e5dda0d393da5a8b622c2d3b208c16e2724e83c163dbf25144abcc68a7a631de8543889b60a8f4434e4fe5c94a4f2a0d53d553011c00fc3a3e10ea25b0c1d84fc0dd43dc19207b607158d924b9efc9ff866889f3737424ec629dcdffd6d8da192a8c60de5778f4fdfc7"}, @NL80211_ATTR_FRAME_MATCH={0x33, 0x5b, "00f6cd541c07734e498faf78ed9551c8ce0ccefd594710e1085f3f359de3bd701a382c19719047c887fda0b0dbcd5e"}, @NL80211_ATTR_FRAME_MATCH={0x88, 0x5b, "55a71fffcd5330f4ac8e4bfef8de744f73182c8f713f77a07768c10338f1be4dd2a01db341a283d6e2136563a15efd2ba5fe47f211e3279b1bdec348d30b9f17e04c9dae2e8b6d30c47932e8dee015fd01ee91d24b63c11402ce49ee0d6adf78a04c1e9db65c0db636ab7032744e7c6a1153c0eb429009f23444d9420231190d2d333134"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x300}, 0x1, 0x0, 0x0, 0x40000}, 0x4000081)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r8, &(0x7f0000000100)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async)
connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e1f, 0x2200005, @local, 0x1}, 0x1c) (async)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000680)={0xffffff, 0x6, 0x200004, 0x3}, 0x10)
write(r9, &(0x7f00000006c0)="240000001a005f0214f9f407000904001f00000000000005000000000800040081000000", 0x24) (async, rerun: 32)
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880)

1m22.804078323s ago: executing program 3 (id=352):
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1ef)
lsetxattr$security_capability(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)=@v3={0x3000000, [{0x181, 0x3}, {0x4, 0x1ff}], 0xee01}, 0x18, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x2c3)
mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
truncate(&(0x7f0000000500)='./file0/file1\x00', 0xe2)

1m22.731537508s ago: executing program 7 (id=353):
socket(0x2, 0x80805, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001740)='./proc\x00', &(0x7f0000000040)='bfs\x00', 0xb050c9, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a80)='./proc/thread-self/fail-nth\x00', 0x202, 0x150)
write(r0, &(0x7f0000001ac0)='27', 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)

1m22.731147053s ago: executing program 7 (id=354):
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c000000", @ANYRES16], 0x1c}}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x2404c0c0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000020000000b000000000000001c98dce5819c94ba8ab4cea5540cb9e91ab21dfe4e9ba56000396a7cdd092908498654de03b67997daba3c2b7239f99e4027d3b480ae6e36092bcfa379d596eaec2afb46fc501531cc07b7db5f33f769a1e57f9d305d9edf7ef3e6"], 0x103080)

1m22.717386105s ago: executing program 7 (id=355):
get_mempolicy(0x0, &(0x7f0000000240), 0x2, &(0x7f0000000000/0x4000)=nil, 0x3)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x474c, 0x4)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@sndinfo={0x0, 0x84, 0x2, {0x3, 0x8207, 0xfa, 0x4c7ce0d4}}], 0x5a, 0x2000c880}, 0x26008881)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000000240), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000280)=0x80, 0x4)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000600)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000000640), 0x291962b, 0x45833af92e4b39ff, 0x0)
r1 = syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000002140)='./bus\x00', 0x4c84, &(0x7f0000000140)=ANY=[], 0x1, 0x1cf, &(0x7f0000004c80)="$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")
r2 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x3801012, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB="2c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030663465652c616c6c6f775f6f746865722c6673757569643d35623536626664622d633935642d323431382d376561312d6163cc62033134302c646f6e745f6d6561737572652c646566636f6e746578743d73797361646d5f752c646f6e745f61707072616973652c736d61636b66737472616e736d7574653d7371756173686673002c736d61636b66737472616e736d7574653d7371756173686673002c6f626a5f726f6c653d2c736d61636b66736861743d7371756173686673002c00"], 0x1, 0x0, &(0x7f00000002c0)="67ca8d34955190753e0b9fda70d1fddaf1a3e09574051fd14b87b7d0d8bf63fb866c912bd3a99c22d720")
renameat(r2, &(0x7f0000000300)='./bus/file0\x00', r1, &(0x7f0000000340)='./bus\x00')

1m22.690560272s ago: executing program 3 (id=356):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'team_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000004}, 0x4}}]}, {}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000300)=0x401, 0x4)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000340)=0x800001, 0x4)
r4 = socket$inet(0x2, 0x1, 0x43)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000003c0)=0xffffffffffffff40, 0x4)
bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @multicast2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x17d)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80c019, &(0x7f0000000140)=ANY=[@ANYBLOB='gd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00'])
read$FUSE(r5, &(0x7f0000001240)={0x2020, 0x0, <r6=>0x0}, 0x2020)
llistxattr(&(0x7f0000003280)='./file0\x00', 0x0, 0x0)
write$FUSE_INIT(r5, &(0x7f00000032c0)={0x50, 0x0, r6, {0x7, 0x21, 0x3, 0x8000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r7=>r2, {r3}}, './file0\x00'})
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x1411, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x200c1)
read$FUSE(r5, &(0x7f0000003340)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r5, &(0x7f0000005380)={0x10, 0xffffffffffffffda, r8}, 0x10)
llistxattr(&(0x7f00000053c0)='./file0\x00', 0x0, 0x3)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffff000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x0)

1m22.603408439s ago: executing program 3 (id=357):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2e03, 0x0) (async)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000) (async)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) (async)
read$nsim_bool(0xffffffffffffffff, &(0x7f0000000180)=""/69, 0x45) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r2 = add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000580)="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", 0x1cd, 0xfffffffffffffffd) (async)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r0)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r3, 0x4, 0x401, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) (async)
r4 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, r4)
keyctl$link(0x8, r2, r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r8}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r10, &(0x7f0000000480), 0x0}, 0x20) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
ptrace(0x10, r12) (async, rerun: 64)
waitid(0x1, r12, 0x0, 0x61000006, 0x0) (rerun: 64)
syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000500)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x2000, @fd=r11, 0xffffffffffffff01, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) (async)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000400)={&(0x7f0000000480)={0x3c, r1, 0x1, 0x4, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0xd, 0x0, @udp='udp:syz0\x00'}}}}, 0x3c}}, 0x0)

1m22.598787341s ago: executing program 4 (id=358):
r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04081020"], 0x7)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@multiplanar_userptr={0x3, 0x6, 0x4, 0x400, 0x7, {}, {0x1, 0x8, 0xb5, 0xe, 0x8, 0x5, "62cf2c9f"}, 0x2, 0x2, {0x0}, 0x7ff})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')

1m22.528740918s ago: executing program 7 (id=359):
unshare(0x8040480) (async)
mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x5) (async)
r0 = msgget$private(0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000009500000500000a70000000060a010400000000000000000a00000144000480400001800b0001007461726765740000300002800800024000000002140003007339f2179455afb9fdd672ba010000000d000100434f4e4e4d41524b000000000900020073797a32000000000900010073797a31"], 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000040)=0x9, 0x4) (async)
r3 = io_uring_setup(0x3d47, &(0x7f0000000080)={0x0, 0x5278, 0x4000, 0x2, 0x18b})
fcntl$dupfd(r2, 0x0, r3) (async)
msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/4}, 0xc, 0x2, 0x3000)

1m22.42140278s ago: executing program 5 (id=360):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 24)

1m22.339347579s ago: executing program 7 (id=361):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], <r1=>0x0, 0xeb, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x8d, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x80010, r0, 0xd545a000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0xa8, 0x1e8, 0xfeffffff, 0x290, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'dummy0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x89, 0x1, 0xa}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id=0x67, @gre_key=0x4}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x2, 0x0, 0x40200, 0x3a806}, [@IFLA_TXQLEN={0x8}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c8e5}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x20, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff48}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m22.338880325s ago: executing program 5 (id=362):
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0x8, 0x1, 0x0, [{@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe, 0x2}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/2728], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0xffffffffffffff45, 0x10, &(0x7f0000001140)}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r0, 0x108, 0xe, 0x0, &(0x7f0000001200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001240)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001280)='./dev\x00', &(0x7f00000012c0)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./dev/md0\x00', 0x2, 0x0)
socket(0xa, 0x5, 0x0)
ioctl(r2, 0x933, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7749}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}}, 0x40400d0)
write(r1, &(0x7f0000000480)='3', 0x4e)
capset(&(0x7f00000004c0)={0x20071026}, 0x0)
r4 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setreuid(r5, 0x0)
mount$binder(0x0, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000200), 0x80, &(0x7f0000000500)={[{@max={'max', 0x3d, 0x3}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x3}}], [{@fowner_eq={'fowner', 0x3d, r5}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x36, 0x66, 0x39, 0x31, 0x64, 0x66, 0x31], 0x2d, [0x31, 0x32, 0x64, 0x33], 0x2d, [0x63, 0x63, 0x33, 0x62], 0x2d, [0x66, 0x37, 0x66, 0x66], 0x2d, [0x37, 0x33, 0x33, 0x35, 0x5a, 0x35, 0x67, 0xd]}}}, {@flag='rw'}, {@flag='nomand'}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, '\xff\xff'}}, {@euid_gt}]})

1m22.291547414s ago: executing program 7 (id=363):
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000400000000000000000000000100000000000000fcceafffffffffff0000000000000000"], 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x0)
mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000540)="ebfa0e80ceb3dc4c43c215dc4dade38ff8c84ace0200bebe5b179f12cf39c48c2d4b61ce76443644c1dc73113bee39b5796edc2a8f551d6fa7", 0x39}], 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd05, &(0x7f00000005c0)="0400000002000000000000007e0100003801")
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newtaction={0x8a0, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x800004, 0x1, 0x1, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x80000005, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, 0xfffffffb, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x34b7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfffffff9, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000000, 0x9, 0x8000000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0x9, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x80000, 0xfb9, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x3, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x6, 0xfffffffd, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x0, 0x0, 0x3, 0x0, 0xff}, 0x0, 0xfffffffe}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a0}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf2505000000200001800d0001007568a5fa7fcd5b96c559d1"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000001c0)=<r7=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/enable\x00', 0x100, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x207102, 0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
write$nci(r2, &(0x7f0000000880)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000640)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f0000000680)={0x1d, r9, 0x8000000000000003, {}, 0xfd}, 0x18)
r10 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000006c0)={'vcan0\x00'})

1m22.25785837s ago: executing program 3 (id=364):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESDEC, @ANYBLOB="c5ce1bae33c91520022860834995bd440de70a56f9060000000000c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1de6b4d593fe5"], 0x40, 0x2cf, &(0x7f0000000600)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000a40)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a7624a, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000980)='net/mcfilter\x00')
preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/46, 0x2e}], 0x1, 0x1, 0x10003ff)
mount$fuse(0x0, &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000100001000200000000404182fa27d87fabc94dd0af099fb2360000000500000a64000000060a010400000000000000000a0000010900e9ff72797a3100000000300004802c0001800800eb006f6d700020000280080001400000001008000240000000010c00038005000100400000000900020073797a3200000000050007501c000000140000091100010000000000000000000500000a5416d9c4b15e3887b80eccc7524821afb690114b9a0311949b2b636c34a75360e244a7b1e54bd62f78fb400f63be0cc0936fc39c7975c4228dbda19c2f3f960121ae"], 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4a23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xe73c}, 0x70bd2a, 0x40003504, 0x2, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x20048041}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x1000000000000192, 0x1000000000000192, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x9}, 0x8070bd2d, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000900)={0x8000141, 0x7, 0x20, 0x7, 0x38, "737b27e90e2947801cf3a246ada40a9fd86000"})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000940)=0xd)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000030801020000000000000000020000021c00048008000440ffff0000010000000000ff3808000340000000030900010073797a310000000006000240930000000900010073797a3000000000050003003a0000001c000480080007400000000208000940000000060800014000000003050003001100000005000300060000001c0004800800014000000001080001400000000808000140000000052400048008000140000000080800014a0000000108000140000000060800014000000007"], 0xc4}, 0x1, 0x0, 0x0, 0x20008040}, 0xc805)

1m22.143576771s ago: executing program 1 (id=365):
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c000000", @ANYRES16], 0x1c}}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x2404c0c0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000020000000b000000000000001c98dce5819c94ba8ab4cea5540cb9e91ab21dfe4e9ba56000396a7cdd092908498654de03b67997daba3c2b7239f99e4027d3b480ae6e36092bcfa379d596eaec2afb46fc501531cc07b7db5f33f769a1e57f9d305d9edf7ef3e6"], 0x103080)

1m22.131440264s ago: executing program 5 (id=366):
socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000711232000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000711232000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000004, 0x3}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000004, 0x3}, 0x50)
socket$xdp(0x2c, 0x3, 0x0)
r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x7)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1)

1m22.113393626s ago: executing program 5 (id=367):
prctl$PR_SET_ENDIAN(0x14, 0x2) (async)
prctl$PR_SET_ENDIAN(0x14, 0x42383261c0010d5e)
prctl$PR_SET_ENDIAN(0x14, 0x2) (async)
prctl$PR_SET_ENDIAN(0x14, 0x1) (async)
prctl$PR_SET_ENDIAN(0x14, 0x0) (async)
prctl$PR_SET_ENDIAN(0x14, 0x2)
prctl$PR_SET_ENDIAN(0x14, 0x1)
prctl$PR_SET_ENDIAN(0x14, 0x0)
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x11100, 0x84f1c382cd956e98, 0x20}, 0x18) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x11) (async)
prctl$PR_SET_ENDIAN(0x14, 0x1) (async, rerun: 32)
prctl$PR_SET_ENDIAN(0x14, 0x1) (async, rerun: 32)
prctl$PR_SET_ENDIAN(0x14, 0x2)
prctl$PR_SET_ENDIAN(0x14, 0x1)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x3d)
sendmmsg$alg(r0, &(0x7f0000002200)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="a1264e8fceadb3b3adc3384db4c6fc97c01c69a9b7445206a4c7f9ab56307ec88335dcf6b2fe5f69262f1ce27275187b11844e725ea1ee0a0f13", 0x3a}, {&(0x7f0000000240)="b45f41afc600ef0523dd21ab12c9cdae685ae716345144ae7cb0609451baa0f1f8b15b3ed61103be165cf8b4d4e4931fc6915d2e84177398b49ac77c3fc1b7641368e71c47b6575c95021c1e7883405f748daf0b71adc8d6173eb59c8e4f582c5721e5a760377dd7a36566816abf467da9bbb00adb94b29bab1faa67f6653168365ad70ded65ec2a73bde5daaef6400a4a9621dc0a440cdb38e10cddd55c28376b6147df03e23b05", 0xa8}], 0x2, &(0x7f0000000340)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x21, "644132824a3fbf5166567dfcc8d041f7e2f92da32fe451d5305c167c488dd3e3a4"}, @op={0x18}, @op={0x18}, @iv={0x28, 0x117, 0x2, 0xe, "30700e63b618b38f049dce811061"}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}], 0x1120}, {0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001480)="5609d822da33ca43e507924858a7d12fe328a05b69267124ec8f600189ebfcb6ebc2fc49a6d5bbb0132ebccf0af8f4130cae650ddbaf97ef639d85fcb419abbcd33882d44c99de9e16388704cf357a94dad281bb4903d22d34a9a85d1ac90640853dd3d9ab8f2006f33524513736bb4f1126e3412addcb4b8eb622ebb34676ec8859c7d2e28f7920d4d8ffca4b90dced51742aa19267d32370616810dcbb88d75141208c9202cb58c7bb4f72a2a03899b710b6f8ba7a01a4d0ee7511f81b0399a421", 0xc2}, {&(0x7f0000001580)="c545ae2f0d7fe13ad8bb3aa34844020e944dd617025f3202607315a85309b358c1255a7f8c5f8de4fba37f21bf8fb7ca90210abf", 0x34}, {&(0x7f00000015c0)="a560c6e5ab827e129f3735ee416fbc814528b37e9147b76d98d5cfdf18df8c0b4a9d1556bd5b55b2f8be3d628dd45b7d344e15037665b96939a0a5b47361353e1eeecfedd3011d9f7c8cd29a9152f98c68f9f3388862d3a27fbb7dbd1c68c3ed82774b8f209856e33e9c897db85a798e372df3c33908f78610c3bbab3f9d5b42c975d0ec0c7a7abb8179009e7235b18bec369db4f829869f332c9ff8d0f7fbef02065b5f35c1307d7e", 0xa9}, {&(0x7f0000001680)="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", 0xfb}, {&(0x7f0000001780)="cbb53158fccb257c9b3531b77c7a8150a5", 0x11}, {&(0x7f00000017c0)="2913cc5353eb444cd24318903f223c3290de336abaf693219b5eba865428bd08d9b579cc6a376ae9a55e5072854e01787c788c3d6c5f92aecbe4bf85aba446f02f341351c031ec6dcc91208ac3bb54230293d99c8e1a9f8d375c9d38a88b5db66c97f1901a2cd2b0711b8689d0b1812c", 0x70}, {&(0x7f0000001840)="ba7c94cb048b3744e8121cb68f1f124995dd8ff6335457a58d95d702cc49ca26085133e3c39e3ead425c131308bad5171565b91079f8a2878ae7de43dcf5ec8128124d91f9ce1e83a529164251bafcbaaaaa648a0d74ec7d47134e4b689790508f375b45409f8b3f0180e7300f3a8a540aab5cddb81205e13db4f9b535849a5f99d07bd4bf1c7d8eb6cfe71ef4467e43700cbbcd879abb160bcd5d521eff6041bf178df43cd2e206d33b7fbf97745a530357c7700ddd1cd8ba25c65e6f94c6ec17806260f189d98bf06b5546fd677f7fe79da120c22c495b828074703ff37c477a59382985f53bca4e91d1", 0xeb}, {&(0x7f0000001940)="b1febe09cc74d36af16537408e785ee9c114a0a13c004e716a8000b24963af28", 0x20}, {&(0x7f0000001980)="d800be1e5c3cc078ce9a3b0ee7e9fb29402bcff45013c399266a67f306acbf8a97287286e6d54368b09d6db3df47569fc6cc86f73a3dc408fe957119eff32e72abd1d6bba9695a88595a03523addc3a04ed3058af0db28d5bc80093192fb6263b46b42ba5dbfdd933639f860c5890b6199a742e00866fe7f11d46d5c8ef92d1ce312dc596df2c88c199396d011dbd2ea9fc47dc147a46bd681da77ae217994259f9dc347db2eaf7aa2157b2bfcaf18dcdff239f8634836401d61be90d5395edf886ddc5ec4c1eb56a69cad42c88dfc1a1dcf599d3cad99017a25e49952bfd09b669d84fcc80ecc0a70cd038ad9531cb8b59cee0f322478b960", 0xf9}, {&(0x7f0000001a80)="14638e7fd80c26a5acc1dd064fb4c1e027b413fa596aaf89021bc26c1d158b6b43fa3abb5a2d989b86719d86547a8d6a86df484ea536b6a9e2840decf30d53d94bd1d771cc987cf813c0c794ba80c1e629", 0x51}], 0xa, &(0x7f0000001bc0)=[@iv={0xf0, 0x117, 0x2, 0xd6, "62f2ee526da40fe923658472a130440759e19669beadbf4d52fcb903b497972ee0f90a013aa74942b335dc9e701aaa203b838ff0e65e55b163480f213f6a750caa77f097f2a35be551cccb867d4f29d1f1aec4eb7f24cd420e3f7209cc80e4de62d31a2f3061d324b5b650bac438bdaa4bfd4586ea3ad396422a35d32e5a5c2df9dc5277ba3dc590f3c10bfd08d6eb57f45853b8675fcc43e3fa937fe7295ad957dfcfe10789306477e52d56747f25aacc2c0ade9e80bf6c2a18007a0ee139fdaf7f37b2485c95b1295fa69cb19b7a2ddbd35d9e42e0"}], 0xf0, 0x4000000}, {0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)="d750bf2e584e76ae1c849e511b190a209b48bb4d7a6c6c3c9b607279aecce6ee6293c07ade1d2feabbb7d486abc595329eb3672108df1ed00c61adb3ccff39586da52f8f2814b253febc439add091e14b53c72b2d714fd21fa8c7c653da0a15a784898ef7ccf6ea0577782cd114030b514d279f04ca7ae1f2e906cd45154b3c2cdd69aa8ff2effd509a2d5bd37c2", 0x8e}], 0x1, &(0x7f0000001dc0)=[@assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x58, 0x117, 0x2, 0x3e, "c1b1536b7a9db3b2fcc498bfa82f243b5851b74137b69aeca4df914ed395a2cf94f59ccd53ad9e98c4293a41d67b645d8fb91e84eca2b5858e4a831c055b"}, @iv={0x118, 0x117, 0x2, 0xfd, "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"}, @iv={0x80, 0x117, 0x2, 0x67, "5b3a03634e75d0b4beab5640ba11b0e1c141f311041b539a4e86cf9680797737a53a60a9b87315e824ca1e76fd9985b46397a6d7e870bd42d4bee5aba8213bbd9e50350bcf5f4b7eaae46060d3bf7d58adbc7897d6564823b282dcb83bd6811b38c0838383f1ca"}, @op={0x18}, @iv={0x118, 0x117, 0x2, 0xfe, "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"}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @iv={0x88, 0x117, 0x2, 0x6e, "007d5b81b8bff60141bf89c08f54050bc4383351ea131a0c890d1091156bb936dfadd166d4f92486302b19f8624b715db390ae07b487b0d0818876583ce3ece95b6df8c641ff7d7d299f7269a2f68fbfdc4880d11f9159356337127927660cd173da51d3c7c3b978c72974141cfc"}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x408, 0x80}], 0x3, 0x20000010) (async)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000022c0)={0x1f, 0x2, @any, 0x4, 0x2}, 0xe)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x6a) (async)
prctl$PR_SET_ENDIAN(0x14, 0x1) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002340)=@generic={&(0x7f0000002300)='./file0\x00', r0}, 0x18)
prctl$PR_SET_ENDIAN(0x14, 0x1) (async, rerun: 32)
prctl$PR_SET_ENDIAN(0x14, 0x1) (async, rerun: 32)
prctl$PR_SET_ENDIAN(0x14, 0x1) (async)
prctl$PR_SET_ENDIAN(0x14, 0x2) (async)
msgget(0x3, 0x0) (async)
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000023c0), r0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x28, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4000004)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000024c0)={{0x3, 0x1, 0x9f, 0x25e}, 'syz1\x00', 0x4f})

1m22.003463854s ago: executing program 4 (id=368):
r0 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x181083)
r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20020, 0x4)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)='7', 0x1)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x4a, 0x7)
setreuid(0xee01, 0xee01)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="0000000000001300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'lo\x00'})
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @loopback}, 0x64)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="e00000027f00000100"], 0x1c)
close(r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000003800010025bd7000fcffffff30970000"], 0x14}, 0x1, 0x0, 0x0, 0x20004812}, 0x40080)
ioctl$NBD_DO_IT(r0, 0xab03)

1m21.969633368s ago: executing program 3 (id=369):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f00009bc000/0x1000)=nil, 0x1000, 0x3, 0x4000010, 0xffffffffffffffff, 0xeb88d000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
getsockname$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x20)
r3 = socket$inet(0x2, 0xa, 0x80004)
r4 = fcntl$dupfd(r3, 0x406, r3)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private1, 0x10000}, 0x1c)

1m21.726646992s ago: executing program 3 (id=370):
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000003c0)=@multiplanar_userptr={0x2bb4, 0x6, 0x4, 0x0, 0x60, {0x0, 0x2710}, {0x1, 0xc, 0x1, 0x7, 0x3, 0x3, "8cf2bf71"}, 0x7, 0x2, {&(0x7f0000000340)=[{0x0, 0x26b, {&(0x7f00000002c0)}, 0x3ff}, {0xfffffff8, 0xd, {&(0x7f0000000300)}, 0x328}]}, 0xf66c})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1a}}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000008000000000000d000000911176000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}, 0x94)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000003c0)=@multiplanar_userptr={0x2bb4, 0x6, 0x4, 0x0, 0x60, {0x0, 0x2710}, {0x1, 0xc, 0x1, 0x7, 0x3, 0x3, "8cf2bf71"}, 0x7, 0x2, {&(0x7f0000000340)=[{0x0, 0x26b, {&(0x7f00000002c0)}, 0x3ff}, {0xfffffff8, 0xd, {&(0x7f0000000300)}, 0x328}]}, 0xf66c}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1a}}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000008000000000000d000000911176000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}, 0x94) (async)

0s ago: executing program 35 (id=363):
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000400000000000000000000000100000000000000fcceafffffffffff0000000000000000"], 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x0)
mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000540)="ebfa0e80ceb3dc4c43c215dc4dade38ff8c84ace0200bebe5b179f12cf39c48c2d4b61ce76443644c1dc73113bee39b5796edc2a8f551d6fa7", 0x39}], 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd05, &(0x7f00000005c0)="0400000002000000000000007e0100003801")
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newtaction={0x8a0, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x800004, 0x1, 0x1, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x80000005, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, 0xfffffffb, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x34b7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfffffff9, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000000, 0x9, 0x8000000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0x9, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x80000, 0xfb9, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x3, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x6, 0xfffffffd, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x0, 0x0, 0x3, 0x0, 0xff}, 0x0, 0xfffffffe}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a0}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf2505000000200001800d0001007568a5fa7fcd5b96c559d1"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000001c0)=<r7=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/enable\x00', 0x100, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x207102, 0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
write$nci(r2, &(0x7f0000000880)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000640)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f0000000680)={0x1d, r9, 0x8000000000000003, {}, 0xfd}, 0x18)
r10 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000006c0)={'vcan0\x00'})

kernel console output (not intermixed with test programs):

set [0, 0] type 1 family 0 port 8472 - 0
[   41.720961][   T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   41.720975][   T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   41.733592][ T5437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.250435][ T4718] Bluetooth: hci4: command tx timeout
[   42.352491][ T5446] EXT4-fs: test_dummy_encryption requires encrypt feature
[   42.465468][ T5455] netlink: 'syz.4.90': attribute type 5 has an invalid length.
[   42.539548][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.616124][ T5461] EXT4-fs: Ignoring removed oldalloc option
[   42.618805][ T5461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   42.656325][ T5461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.667060][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.670121][ T4832] rxe_eth0 speed is unknown, defaulting to 1000
[   42.686425][ T5472] FAULT_INJECTION: forcing a failure.
[   42.686425][ T5472] name failslab, interval 1, probability 0, space 0, times 0
[   42.686444][ T5472] CPU: 0 UID: 0 PID: 5472 Comm: syz.4.94 Not tainted syzkaller #0 PREEMPT 
[   42.686454][ T5472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   42.686458][ T5472] Call trace:
[   42.686461][ T5472]  show_stack+0x2c/0x3c (C)
[   42.686479][ T5472]  __dump_stack+0x30/0x40
[   42.686489][ T5472]  dump_stack_lvl+0xd8/0x12c
[   42.686499][ T5472]  dump_stack+0x1c/0x28
[   42.686508][ T5472]  should_fail_ex+0x418/0x58c
[   42.686516][ T5472]  should_failslab+0xc4/0x120
[   42.686524][ T5472]  __kmalloc_node_noprof+0x10c/0x6e4
[   42.686533][ T5472]  __vmalloc_node_range_noprof+0x43c/0xe9c
[   42.686543][ T5472]  __vmalloc_node_noprof+0xec/0x14c
[   42.686551][ T5472]  __vmalloc_noprof+0x64/0x8c
[   42.686559][ T5472]  bpf_prog_alloc_no_stats+0x60/0x4e8
[   42.686569][ T5472]  bpf_prog_alloc+0x48/0x110
[   42.686577][ T5472]  bpf_prog_load+0x5e0/0x1554
[   42.686585][ T5472]  __sys_bpf+0x7d4/0x82c
[   42.686593][ T5472]  __arm64_sys_bpf+0xd0/0xec
[   42.686601][ T5472]  invoke_syscall+0x98/0x244
[   42.686611][ T5472]  el0_svc_common+0xec/0x23c
[   42.686620][ T5472]  do_el0_svc+0x4c/0x5c
[   42.686629][ T5472]  el0_svc+0x60/0x1d8
[   42.686637][ T5472]  el0t_64_sync_handler+0x44/0x104
[   42.686644][ T5472]  el0t_64_sync+0x198/0x19c
[   42.707682][ T5474] tipc: Started in network mode
[   42.707703][ T5474] tipc: Node identity ac1414aa, cluster identity 4711
[   42.708521][ T5474] tipc: New replicast peer: 172.20.20.187
[   42.709067][ T5474] tipc: Enabled bearer <udp:syz0>, priority 10
[   42.722740][ T5478] input: syz0 as /devices/virtual/input/input6
[   42.769107][ T5487] random: crng reseeded on system resumption
[   42.782907][ T5487] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   42.782921][ T5487] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   42.808068][ T5487] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.97: bad orphan inode 16
[   42.808100][ T5487] loop4: lost filesystem error report for type 5 error -117
[   42.808277][ T5487] ext4_test_bit(bit=15, block=18) = 1
[   42.808290][ T5487] is_bad_inode(inode)=0
[   42.808295][ T5487] NEXT_ORPHAN(inode)=83886080
[   42.808299][ T5487] max_ino=32
[   42.808303][ T5487] i_nlink=0
[   42.810396][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   42.810409][    C1] EXT4-fs (loop4): initial error at time 42: ext4_orphan_get:1429
[   42.810424][    C1] EXT4-fs (loop4): last error at time 42: ext4_orphan_get:1429
[   42.826787][ T5487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.843364][ T3682] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   42.843399][ T3682] EXT4-fs error (device loop4): ext4_release_dquot:7106: comm kworker/u8:8: Failed to release dquot type 1
[   42.846786][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.884960][ T5502] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777'
[   43.050308][ T4718] Bluetooth: hci3: command tx timeout
[   43.822208][ T4820] tipc: Node number set to 2886997162
[   43.935310][ T5572] FAULT_INJECTION: forcing a failure.
[   43.935310][ T5572] name failslab, interval 1, probability 0, space 0, times 0
[   43.935337][ T5572] CPU: 1 UID: 0 PID: 5572 Comm: syz.3.104 Not tainted syzkaller #0 PREEMPT 
[   43.935348][ T5572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   43.935353][ T5572] Call trace:
[   43.935356][ T5572]  show_stack+0x2c/0x3c (C)
[   43.935377][ T5572]  __dump_stack+0x30/0x40
[   43.935387][ T5572]  dump_stack_lvl+0xd8/0x12c
[   43.935397][ T5572]  dump_stack+0x1c/0x28
[   43.935406][ T5572]  should_fail_ex+0x418/0x58c
[   43.935415][ T5572]  should_failslab+0xc4/0x120
[   43.935423][ T5572]  kmem_cache_alloc_noprof+0x94/0x5d4
[   43.935431][ T5572]  __kernfs_new_node+0xf0/0x7d8
[   43.935441][ T5572]  kernfs_new_node+0xe8/0x130
[   43.935450][ T5572]  __kernfs_create_file+0x60/0x2e0
[   43.935459][ T5572]  sysfs_add_file_mode_ns+0x1e8/0x2a4
[   43.935469][ T5572]  internal_create_group+0x550/0xb30
[   43.935476][ T5572]  internal_create_groups+0x64/0x138
[   43.935483][ T5572]  sysfs_create_groups+0x2c/0x3c
[   43.935491][ T5572]  device_add_attrs+0x17c/0x4e4
[   43.935500][ T5572]  device_add+0x420/0x9e0
[   43.935508][ T5572]  netdev_register_kobject+0x184/0x328
[   43.935520][ T5572]  register_netdevice+0xd74/0x14c0
[   43.935528][ T5572]  gtp_newlink+0x648/0xa74
[   43.935539][ T5572]  rtnl_newlink_create+0x294/0x6b8
[   43.935548][ T5572]  rtnl_newlink+0xfe4/0x138c
[   43.935556][ T5572]  rtnetlink_rcv_msg+0x66c/0x9bc
[   43.935564][ T5572]  netlink_rcv_skb+0x238/0x414
[   43.935574][ T5572]  rtnetlink_rcv+0x28/0x38
[   43.935582][ T5572]  netlink_unicast+0x600/0x7f8
[   43.935591][ T5572]  netlink_sendmsg+0x648/0x948
[   43.935601][ T5572]  __sock_sendmsg+0xc8/0x17c
[   43.935610][ T5572]  ____sys_sendmsg+0x3d0/0x6c8
[   43.935619][ T5572]  ___sys_sendmsg+0x198/0x224
[   43.935628][ T5572]  __sys_sendmsg+0x158/0x204
[   43.935642][ T5572]  __arm64_sys_sendmsg+0x88/0x9c
[   43.935652][ T5572]  invoke_syscall+0x98/0x244
[   43.935662][ T5572]  el0_svc_common+0xec/0x23c
[   43.935677][ T5572]  do_el0_svc+0x4c/0x5c
[   43.935687][ T5572]  el0_svc+0x60/0x1d8
[   43.935695][ T5572]  el0t_64_sync_handler+0x44/0x104
[   43.935703][ T5572]  el0t_64_sync+0x198/0x19c
[   44.028410][ T5589] syzkaller0: entered promiscuous mode
[   44.028427][ T5589] syzkaller0: entered allmulticast mode
[   44.142318][ T5610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.112'.
[   44.152852][ T5614] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   44.152852][ T5614] The task syz.1.112 (5614) triggered the difference, watch for misbehavior.
[   44.215069][ T5627] 9pnet_virtio: no channels available for device ./proc/file0
[   44.215952][ T5627] FAULT_INJECTION: forcing a failure.
[   44.215952][ T5627] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   44.215973][ T5627] CPU: 0 UID: 0 PID: 5627 Comm: syz.4.115 Not tainted syzkaller #0 PREEMPT 
[   44.215985][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   44.215993][ T5627] Call trace:
[   44.215997][ T5627]  show_stack+0x2c/0x3c (C)
[   44.216017][ T5627]  __dump_stack+0x30/0x40
[   44.216030][ T5627]  dump_stack_lvl+0xd8/0x12c
[   44.216043][ T5627]  dump_stack+0x1c/0x28
[   44.216054][ T5627]  should_fail_ex+0x418/0x58c
[   44.216064][ T5627]  should_fail_alloc_page+0xec/0x10c
[   44.216073][ T5627]  prepare_alloc_pages+0x194/0x484
[   44.216083][ T5627]  __alloc_frozen_pages_noprof+0x180/0x578
[   44.216092][ T5627]  alloc_pages_mpol+0x1fc/0x3d0
[   44.216103][ T5627]  alloc_frozen_pages_noprof+0xc4/0x10c
[   44.216113][ T5627]  alloc_pages_noprof+0x30/0x148
[   44.216122][ T5627]  get_free_pages_noprof+0x1c/0xbc
[   44.216131][ T5627]  __kasan_populate_vmalloc+0x48/0x1d0
[   44.216143][ T5627]  alloc_vmap_area+0xcd8/0x12ec
[   44.216153][ T5627]  __get_vm_area_node+0x210/0x32c
[   44.216163][ T5627]  __vmalloc_node_range_noprof+0x2a0/0xe9c
[   44.216174][ T5627]  __vmalloc_node_noprof+0xec/0x14c
[   44.216184][ T5627]  __vmalloc_noprof+0x64/0x8c
[   44.216194][ T5627]  bpf_prog_alloc_no_stats+0x60/0x4e8
[   44.216205][ T5627]  bpf_prog_alloc+0x48/0x110
[   44.216214][ T5627]  bpf_prog_load+0x5e0/0x1554
[   44.216224][ T5627]  __sys_bpf+0x7d4/0x82c
[   44.216233][ T5627]  __arm64_sys_bpf+0xd0/0xec
[   44.216242][ T5627]  invoke_syscall+0x98/0x244
[   44.216255][ T5627]  el0_svc_common+0xec/0x23c
[   44.216266][ T5627]  do_el0_svc+0x4c/0x5c
[   44.216277][ T5627]  el0_svc+0x60/0x1d8
[   44.216286][ T5627]  el0t_64_sync_handler+0x44/0x104
[   44.216294][ T5627]  el0t_64_sync+0x198/0x19c
[   44.332004][ T4718] Bluetooth: hci4: command tx timeout
[   44.367501][ T5656] FAULT_INJECTION: forcing a failure.
[   44.367501][ T5656] name failslab, interval 1, probability 0, space 0, times 0
[   44.367520][ T5656] CPU: 0 UID: 0 PID: 5656 Comm: syz.5.119 Not tainted syzkaller #0 PREEMPT 
[   44.367529][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   44.367534][ T5656] Call trace:
[   44.367537][ T5656]  show_stack+0x2c/0x3c (C)
[   44.367555][ T5656]  __dump_stack+0x30/0x40
[   44.367569][ T5656]  dump_stack_lvl+0xd8/0x12c
[   44.367579][ T5656]  dump_stack+0x1c/0x28
[   44.367589][ T5656]  should_fail_ex+0x418/0x58c
[   44.367597][ T5656]  should_failslab+0xc4/0x120
[   44.367606][ T5656]  __kmalloc_cache_noprof+0x94/0x5fc
[   44.367615][ T5656]  bpf_prog_alloc_no_stats+0xdc/0x4e8
[   44.367624][ T5656]  bpf_prog_alloc+0x48/0x110
[   44.367632][ T5656]  bpf_prog_load+0x5e0/0x1554
[   44.367640][ T5656]  __sys_bpf+0x7d4/0x82c
[   44.367648][ T5656]  __arm64_sys_bpf+0xd0/0xec
[   44.367656][ T5656]  invoke_syscall+0x98/0x244
[   44.367672][ T5656]  el0_svc_common+0xec/0x23c
[   44.367681][ T5656]  do_el0_svc+0x4c/0x5c
[   44.367691][ T5656]  el0_svc+0x60/0x1d8
[   44.367699][ T5656]  el0t_64_sync_handler+0x44/0x104
[   44.367706][ T5656]  el0t_64_sync+0x198/0x19c
[   44.397229][ T5654] set_capacity_and_notify: 25 callbacks suppressed
[   44.397240][ T5654] loop4: detected capacity change from 0 to 2048
[   44.397779][ T5654] ext4: Unknown parameter 'nouser_xattr'
[   44.491381][ T5677] netlink: 36 bytes leftover after parsing attributes in process `syz.5.122'.
[   44.494721][ T5677] loop5: detected capacity change from 0 to 512
[   44.523120][ T5677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.784565][ T4960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.824310][ T5695] loop5: detected capacity change from 0 to 8192
[   44.861636][ T5695]  loop5: p1 p2 < > p3 p4 < p5 >
[   44.861650][ T5695] loop5: partition table partially beyond EOD, truncated
[   44.861746][ T5695] loop5: p1 size 1342439424 extends beyond EOD, truncated
[   44.862681][ T5695] loop5: p2 start 16384 is beyond EOD, truncated
[   44.862693][ T5695] loop5: p3 start 67108864 is beyond EOD, truncated
[   44.863793][ T5695] loop5: p5 size 1342439424 extends beyond EOD, truncated
[   44.914507][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[   44.915193][ T5039] udevd[5039]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   44.916270][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[   44.942179][ T5704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.126'.
[   44.942202][ T5704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'.
[   44.971331][ T5707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'.
[   45.034278][ T5720] FAULT_INJECTION: forcing a failure.
[   45.034278][ T5720] name failslab, interval 1, probability 0, space 0, times 0
[   45.034297][ T5720] CPU: 0 UID: 0 PID: 5720 Comm: syz.3.130 Not tainted syzkaller #0 PREEMPT 
[   45.034307][ T5720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   45.034311][ T5720] Call trace:
[   45.034314][ T5720]  show_stack+0x2c/0x3c (C)
[   45.034332][ T5720]  __dump_stack+0x30/0x40
[   45.034343][ T5720]  dump_stack_lvl+0xd8/0x12c
[   45.034353][ T5720]  dump_stack+0x1c/0x28
[   45.034362][ T5720]  should_fail_ex+0x418/0x58c
[   45.034371][ T5720]  should_failslab+0xc4/0x120
[   45.034379][ T5720]  __kmalloc_flags_noprof+0x140/0x724
[   45.034388][ T5720]  alloc_slab_obj_exts+0x70/0x1bc
[   45.034395][ T5720]  __memcg_slab_post_alloc_hook+0x408/0x824
[   45.034406][ T5720]  __kmalloc_cache_noprof+0x348/0x5fc
[   45.034414][ T5720]  bpf_prog_alloc_no_stats+0xdc/0x4e8
[   45.034423][ T5720]  bpf_prog_alloc+0x48/0x110
[   45.034431][ T5720]  bpf_prog_load+0x5e0/0x1554
[   45.034439][ T5720]  __sys_bpf+0x7d4/0x82c
[   45.034447][ T5720]  __arm64_sys_bpf+0xd0/0xec
[   45.034454][ T5720]  invoke_syscall+0x98/0x244
[   45.034464][ T5720]  el0_svc_common+0xec/0x23c
[   45.034474][ T5720]  do_el0_svc+0x4c/0x5c
[   45.034483][ T5720]  el0_svc+0x60/0x1d8
[   45.034491][ T5720]  el0t_64_sync_handler+0x44/0x104
[   45.034498][ T5720]  el0t_64_sync+0x198/0x19c
[   45.232774][ T5750] loop1: detected capacity change from 0 to 512
[   45.233473][ T5750] EXT4-fs: Ignoring removed oldalloc option
[   45.248533][ T5750] EXT4-fs (loop1): 1 truncate cleaned up
[   45.249276][ T5750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.271217][ T5757] loop3: detected capacity change from 0 to 512
[   45.272597][ T5757] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   45.274172][ T5757] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002]
[   45.274266][ T5757] EXT4-fs (loop3): orphan cleanup on readonly fs
[   45.274451][ T5757] EXT4-fs error (device loop3): ext4_quota_enable:7257: comm syz.3.136: Bad quota inum: 3, type: 1
[   45.274466][ T5757] loop3: lost filesystem error report for type 5 error -117
[   45.276734][ T5757] EXT4-fs warning (device loop3): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=3). Please run e2fsck to fix.
[   45.276884][ T5757] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   45.298380][ T5757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   45.313488][ T5750] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.134: bg 0: block 491: padding at end of block bitmap is not set
[   45.317987][ T5750] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   45.318160][ T5750] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.134: invalid indirect mapped block 234881024 (level 0)
[   45.318183][ T5750] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   46.006039][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.032468][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.057446][ T5797] FAULT_INJECTION: forcing a failure.
[   46.057446][ T5797] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   46.057463][ T5797] CPU: 1 UID: 0 PID: 5797 Comm: syz.3.142 Not tainted syzkaller #0 PREEMPT 
[   46.057472][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   46.057477][ T5797] Call trace:
[   46.057480][ T5797]  show_stack+0x2c/0x3c (C)
[   46.057497][ T5797]  __dump_stack+0x30/0x40
[   46.057508][ T5797]  dump_stack_lvl+0xd8/0x12c
[   46.057518][ T5797]  dump_stack+0x1c/0x28
[   46.057527][ T5797]  should_fail_ex+0x418/0x58c
[   46.057535][ T5797]  should_fail+0x14/0x24
[   46.057541][ T5797]  should_fail_usercopy+0x20/0x30
[   46.057549][ T5797]  strncpy_from_user+0x48/0x388
[   46.057558][ T5797]  strncpy_from_bpfptr+0x54/0x68
[   46.057568][ T5797]  bpf_prog_load+0xa30/0x1554
[   46.057576][ T5797]  __sys_bpf+0x7d4/0x82c
[   46.057584][ T5797]  __arm64_sys_bpf+0xd0/0xec
[   46.057592][ T5797]  invoke_syscall+0x98/0x244
[   46.057602][ T5797]  el0_svc_common+0xec/0x23c
[   46.057612][ T5797]  do_el0_svc+0x4c/0x5c
[   46.057621][ T5797]  el0_svc+0x60/0x1d8
[   46.057629][ T5797]  el0t_64_sync_handler+0x44/0x104
[   46.057636][ T5797]  el0t_64_sync+0x198/0x19c
[   46.111693][ T5805] loop3: detected capacity change from 0 to 512
[   46.193466][ T5808] loop1: detected capacity change from 0 to 512
[   46.288959][ T5820] loop3: detected capacity change from 0 to 256
[   46.289285][ T5820] vfat: Unknown parameter '00000000000000000000000ÿNDvG]·�S]ß›u;PË;Þ<žTþí™ÚvÖ:fÄÌ{{dÚ@Oì(hÓç][òÿ«ð9NSRgföèÞG�Ÿ:%Ûàëú5>¥ãÞuOa^'iÉÅ…Î^›ZH¥üõZ<R&iÁæ
[   46.289285][ T5820] Ñz
5~ú]kRŽ¾NŠ™BLIÁøx°æêdK¾áBf
‚'¨o/ŽB®­«ö¾Â¿Qs¿8ì)õË}Z
z¯`ŸF'
[   46.384836][ T5840] loop4: detected capacity change from 0 to 512
[   46.391832][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'.
[   46.464485][ T5844] loop5: detected capacity change from 0 to 512
[   46.495925][ T5844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.509692][ T4960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.592223][ T5859] netlink: 80 bytes leftover after parsing attributes in process `syz.5.159'.
[   46.623221][ T5867] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   46.623250][ T5867] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   46.642391][ T5867] EXT4-fs (loop1): 1 truncate cleaned up
[   46.642876][ T5867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.726663][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.743543][ T5876] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   46.760024][ T5880] FAULT_INJECTION: forcing a failure.
[   46.760024][ T5880] name failslab, interval 1, probability 0, space 0, times 0
[   46.760041][ T5880] CPU: 1 UID: 0 PID: 5880 Comm: syz.5.165 Not tainted syzkaller #0 PREEMPT 
[   46.760051][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   46.760055][ T5880] Call trace:
[   46.760058][ T5880]  show_stack+0x2c/0x3c (C)
[   46.760075][ T5880]  __dump_stack+0x30/0x40
[   46.760086][ T5880]  dump_stack_lvl+0xd8/0x12c
[   46.760095][ T5880]  dump_stack+0x1c/0x28
[   46.760105][ T5880]  should_fail_ex+0x418/0x58c
[   46.760113][ T5880]  should_failslab+0xc4/0x120
[   46.760121][ T5880]  __kmalloc_cache_node_noprof+0x98/0x618
[   46.760130][ T5880]  __get_vm_area_node+0x188/0x32c
[   46.760143][ T5880]  __vmalloc_node_range_noprof+0x2a0/0xe9c
[   46.760152][ T5880]  __vmalloc_node_noprof+0xec/0x14c
[   46.760161][ T5880]  __vmalloc_noprof+0x64/0x8c
[   46.760169][ T5880]  bpf_check+0xd90/0x2414
[   46.760180][ T5880]  bpf_prog_load+0xf4c/0x1554
[   46.760189][ T5880]  __sys_bpf+0x7d4/0x82c
[   46.760197][ T5880]  __arm64_sys_bpf+0xd0/0xec
[   46.760204][ T5880]  invoke_syscall+0x98/0x244
[   46.760214][ T5880]  el0_svc_common+0xec/0x23c
[   46.760224][ T5880]  do_el0_svc+0x4c/0x5c
[   46.760233][ T5880]  el0_svc+0x60/0x1d8
[   46.760241][ T5880]  el0t_64_sync_handler+0x44/0x104
[   46.760248][ T5880]  el0t_64_sync+0x198/0x19c
[   46.798483][ T5887] use of bytesused == 0 is deprecated and will be removed in the future,
[   46.798505][ T5887] use the actual size instead.
[   46.838993][ T5885] netlink: 'syz.1.164': attribute type 21 has an invalid length.
[   46.839035][ T5885] netlink: 132 bytes leftover after parsing attributes in process `syz.1.164'.
[   46.839047][ T5885] netlink: 'syz.1.164': attribute type 1 has an invalid length.
[   46.925455][ T5907] Bluetooth: MGMT ver 1.23
[   46.984110][ T5909] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.173: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840
[   46.984133][ T5909] loop5: lost filesystem error report for type 5 error -117
[   46.985267][ T5909] EXT4-fs (loop5): 1 orphan inode deleted
[   46.985740][ T5909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.047781][ T5919] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   47.065279][ T5922] FAULT_INJECTION: forcing a failure.
[   47.065279][ T5922] name failslab, interval 1, probability 0, space 0, times 0
[   47.065297][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.1.176 Not tainted syzkaller #0 PREEMPT 
[   47.065306][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   47.065311][ T5922] Call trace:
[   47.065314][ T5922]  show_stack+0x2c/0x3c (C)
[   47.065332][ T5922]  __dump_stack+0x30/0x40
[   47.065342][ T5922]  dump_stack_lvl+0xd8/0x12c
[   47.065352][ T5922]  dump_stack+0x1c/0x28
[   47.065361][ T5922]  should_fail_ex+0x418/0x58c
[   47.065369][ T5922]  should_failslab+0xc4/0x120
[   47.065377][ T5922]  kmem_cache_alloc_node_noprof+0x98/0x604
[   47.065385][ T5922]  alloc_vmap_area+0x210/0x12ec
[   47.065395][ T5922]  __get_vm_area_node+0x210/0x32c
[   47.065403][ T5922]  __vmalloc_node_range_noprof+0x2a0/0xe9c
[   47.065412][ T5922]  __vmalloc_node_noprof+0xec/0x14c
[   47.065420][ T5922]  __vmalloc_noprof+0x64/0x8c
[   47.065428][ T5922]  bpf_check+0xd90/0x2414
[   47.065439][ T5922]  bpf_prog_load+0xf4c/0x1554
[   47.065447][ T5922]  __sys_bpf+0x7d4/0x82c
[   47.065459][ T5922]  __arm64_sys_bpf+0xd0/0xec
[   47.065467][ T5922]  invoke_syscall+0x98/0x244
[   47.065477][ T5922]  el0_svc_common+0xec/0x23c
[   47.065487][ T5922]  do_el0_svc+0x4c/0x5c
[   47.065496][ T5922]  el0_svc+0x60/0x1d8
[   47.065504][ T5922]  el0t_64_sync_handler+0x44/0x104
[   47.065511][ T5922]  el0t_64_sync+0x198/0x19c
[   47.273088][ T5930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.274223][ T5930] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #12: block 2: comm syz.4.179: lblock 0 mapped to illegal pblock 2 (length 1)
[   47.344556][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.367005][ T5935] openvswitch: netlink: Tunnel attr 7427 out of range max 16
[   47.417598][ T5944] overlayfs: failed to resolve './file0': -2
[   47.550752][ T5948] netlink: 32 bytes leftover after parsing attributes in process `syz.4.183'.
[   47.552863][ T5948] binder: 5947:5948 tried to acquire reference to desc 0, got 1 instead
[   47.553644][ T5948] binder: 5947:5948 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   47.553657][ T5948] binder: 5948 RLIMIT_NICE not set
[   47.553668][ T5948] binder: 5948 RLIMIT_NICE not set
[   47.598028][ T5953] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.185: corrupted in-inode xattr: invalid ea_ino
[   47.598056][ T5953] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   47.599218][ T5953] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.185: couldn't read orphan inode 15 (err -117)
[   47.599238][ T5953] loop3: lost filesystem error report for type 5 error -117
[   47.616932][ T5953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.425718][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.464136][ T5967] FAULT_INJECTION: forcing a failure.
[   48.464136][ T5967] name failslab, interval 1, probability 0, space 0, times 0
[   48.464155][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: syz.3.187 Not tainted syzkaller #0 PREEMPT 
[   48.464165][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   48.464170][ T5967] Call trace:
[   48.464172][ T5967]  show_stack+0x2c/0x3c (C)
[   48.464189][ T5967]  __dump_stack+0x30/0x40
[   48.464199][ T5967]  dump_stack_lvl+0xd8/0x12c
[   48.464209][ T5967]  dump_stack+0x1c/0x28
[   48.464218][ T5967]  should_fail_ex+0x418/0x58c
[   48.464226][ T5967]  should_failslab+0xc4/0x120
[   48.464234][ T5967]  kmem_cache_alloc_node_noprof+0x98/0x604
[   48.464242][ T5967]  alloc_vmap_area+0x210/0x12ec
[   48.464251][ T5967]  __get_vm_area_node+0x210/0x32c
[   48.464259][ T5967]  __vmalloc_node_range_noprof+0x2a0/0xe9c
[   48.464268][ T5967]  __vmalloc_node_noprof+0xec/0x14c
[   48.464276][ T5967]  __vmalloc_noprof+0x64/0x8c
[   48.464284][ T5967]  bpf_check+0xd90/0x2414
[   48.464295][ T5967]  bpf_prog_load+0xf4c/0x1554
[   48.464303][ T5967]  __sys_bpf+0x7d4/0x82c
[   48.464311][ T5967]  __arm64_sys_bpf+0xd0/0xec
[   48.464319][ T5967]  invoke_syscall+0x98/0x244
[   48.464329][ T5967]  el0_svc_common+0xec/0x23c
[   48.464338][ T5967]  do_el0_svc+0x4c/0x5c
[   48.464347][ T5967]  el0_svc+0x60/0x1d8
[   48.464355][ T5967]  el0t_64_sync_handler+0x44/0x104
[   48.464362][ T5967]  el0t_64_sync+0x198/0x19c
[   48.464375][ T5967] warn_alloc: 5 callbacks suppressed
[   48.464380][ T5967] syz.3.187: vmalloc error: size 3128, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   48.464407][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: syz.3.187 Not tainted syzkaller #0 PREEMPT 
[   48.464414][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   48.464418][ T5967] Call trace:
[   48.464420][ T5967]  show_stack+0x2c/0x3c (C)
[   48.464430][ T5967]  __dump_stack+0x30/0x40
[   48.464439][ T5967]  dump_stack_lvl+0xd8/0x12c
[   48.464448][ T5967]  dump_stack+0x1c/0x28
[   48.464458][ T5967]  warn_alloc+0x1c4/0x1d8
[   48.464465][ T5967]  __vmalloc_node_range_noprof+0x2c4/0xe9c
[   48.464473][ T5967]  __vmalloc_node_noprof+0xec/0x14c
[   48.464482][ T5967]  __vmalloc_noprof+0x64/0x8c
[   48.464490][ T5967]  bpf_check+0xd90/0x2414
[   48.464500][ T5967]  bpf_prog_load+0xf4c/0x1554
[   48.464508][ T5967]  __sys_bpf+0x7d4/0x82c
[   48.464516][ T5967]  __arm64_sys_bpf+0xd0/0xec
[   48.464523][ T5967]  invoke_syscall+0x98/0x244
[   48.464533][ T5967]  el0_svc_common+0xec/0x23c
[   48.464542][ T5967]  do_el0_svc+0x4c/0x5c
[   48.464551][ T5967]  el0_svc+0x60/0x1d8
[   48.464558][ T5967]  el0t_64_sync_handler+0x44/0x104
[   48.464565][ T5967]  el0t_64_sync+0x198/0x19c
[   48.464573][ T5967] Mem-Info:
[   48.464577][ T5967] active_anon:39 inactive_anon:6089 isolated_anon:0
[   48.464577][ T5967]  active_file:2598 inactive_file:4751 isolated_file:0
[   48.464577][ T5967]  unevictable:768 dirty:2009 writeback:0
[   48.464577][ T5967]  slab_reclaimable:9490 slab_unreclaimable:95160
[   48.464577][ T5967]  mapped:30462 shmem:1020 pagetables:1237
[   48.464577][ T5967]  sec_pagetables:0 bounce:0
[   48.464577][ T5967]  kernel_misc_reclaimable:0
[   48.464577][ T5967]  free:1477698 free_pcp:11302 free_cma:7616
[   48.464596][ T5967] Node 0 active_anon:156kB inactive_anon:24356kB active_file:10392kB inactive_file:19004kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:121848kB dirty:8036kB writeback:0kB shmem:4080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9620kB pagetables:4948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   48.464615][ T5967] Node 0 DMA free:3077888kB boost:0kB min:20400kB low:25500kB high:30600kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB
[   48.464637][ T5967] lowmem_reserve[]: 0 0 3637 3637 3637
[   48.464654][ T5967] Node 0 Normal free:2832904kB boost:0kB min:24652kB low:30812kB high:36972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:156kB inactive_anon:24356kB active_file:10392kB inactive_file:19004kB unevictable:3072kB writepending:8036kB zspages:0kB present:5242880kB managed:3724676kB mlocked:0kB bounce:0kB free_pcp:45208kB local_pcp:7064kB free_cma:0kB
[   48.464682][ T5967] lowmem_reserve[]: 0 0 0 0 0
[   48.464699][ T5967] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB
[   48.464754][ T5967] Node 0 Normal: 1226*4kB (UME) 438*8kB (UME) 389*16kB (UME) 199*32kB (UME) 85*64kB (UME) 31*128kB (UME) 25*256kB (UM) 15*512kB (UM) 9*1024kB (UM) 5*2048kB (UM) 676*4096kB (UM) = 2832840kB
[   48.464827][ T5967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   48.464833][ T5967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB
[   48.464840][ T5967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   48.464846][ T5967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB
[   48.464851][ T5967] 8340 total pagecache pages
[   48.464855][ T5967] 0 pages in swap cache
[   48.464858][ T5967] Free swap  = 124996kB
[   48.464861][ T5967] Total swap = 124996kB
[   48.464864][ T5967] 2097152 pages RAM
[   48.464867][ T5967] 0 pages HighMem/MovableOnly
[   48.464870][ T5967] 395935 pages reserved
[   48.464873][ T5967] 8192 pages cma reserved
[   48.464876][ T5967] 0 pages hwpoisoned
[   49.326625][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.326888][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.332181][ T5973] bond0: option min_links: invalid value (18446744073457893376)
[   49.332195][ T5973] bond0: option min_links: allowed values 0 - 2147483647
[   49.332273][ T5973] bond0: option min_links: invalid value (18446744073457893376)
[   49.332281][ T5973] bond0: option min_links: allowed values 0 - 2147483647
[   49.958699][ T5909] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   50.266895][ T4960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.324654][ T6004] set_capacity_and_notify: 5 callbacks suppressed
[   50.324669][ T6004] loop5: detected capacity change from 0 to 1024
[   50.345336][ T6004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.355013][ T6004] ip_tables: iptables: counters copy to user failed while replacing table
[   50.635575][   T24] binder: release 5947:5948 transaction 14 out, still active
[   50.635601][   T24] binder: undelivered TRANSACTION_COMPLETE
[   50.635613][   T24] binder: send failed reply for transaction 21 to 5947:5948
[   50.635744][   T24] binder: release 5947:5948 transaction 14 in, still active
[   50.635753][   T24] binder: send failed reply for transaction 14, target dead
[   50.635764][   T24] binder: undelivered TRANSACTION_COMPLETE
[   50.635772][   T24] binder: undelivered TRANSACTION_ERROR: 29189
[   50.671797][ T6013] FAULT_INJECTION: forcing a failure.
[   50.671797][ T6013] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   50.671817][ T6013] CPU: 1 UID: 0 PID: 6013 Comm: syz.4.198 Not tainted syzkaller #0 PREEMPT 
[   50.671827][ T6013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   50.671832][ T6013] Call trace:
[   50.671835][ T6013]  show_stack+0x2c/0x3c (C)
[   50.671853][ T6013]  __dump_stack+0x30/0x40
[   50.671864][ T6013]  dump_stack_lvl+0xd8/0x12c
[   50.671873][ T6013]  dump_stack+0x1c/0x28
[   50.671883][ T6013]  should_fail_ex+0x418/0x58c
[   50.671891][ T6013]  should_fail_alloc_page+0xec/0x10c
[   50.671899][ T6013]  prepare_alloc_pages+0x194/0x484
[   50.671907][ T6013]  __alloc_frozen_pages_noprof+0x180/0x578
[   50.671916][ T6013]  __alloc_pages_noprof+0x18/0x100
[   50.671923][ T6013]  alloc_pages_bulk_noprof+0x610/0x7d8
[   50.671931][ T6013]  __kasan_populate_vmalloc+0xc0/0x1d0
[   50.671941][ T6013]  alloc_vmap_area+0xcd8/0x12ec
[   50.671950][ T6013]  __get_vm_area_node+0x210/0x32c
[   50.671958][ T6013]  __vmalloc_node_range_noprof+0x2a0/0xe9c
[   50.671967][ T6013]  __vmalloc_node_noprof+0xec/0x14c
[   50.671975][ T6013]  __vmalloc_noprof+0x64/0x8c
[   50.671983][ T6013]  bpf_check+0xd90/0x2414
[   50.671994][ T6013]  bpf_prog_load+0xf4c/0x1554
[   50.672002][ T6013]  __sys_bpf+0x7d4/0x82c
[   50.672010][ T6013]  __arm64_sys_bpf+0xd0/0xec
[   50.672017][ T6013]  invoke_syscall+0x98/0x244
[   50.672027][ T6013]  el0_svc_common+0xec/0x23c
[   50.672037][ T6013]  do_el0_svc+0x4c/0x5c
[   50.672046][ T6013]  el0_svc+0x60/0x1d8
[   50.672054][ T6013]  el0t_64_sync_handler+0x44/0x104
[   50.672061][ T6013]  el0t_64_sync+0x198/0x19c
[   50.727544][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'.
[   50.813499][ T6021] loop3: detected capacity change from 0 to 128
[   50.813951][ T6021] ext4: Unknown parameter 'subj_role'
[   50.849377][ T6023] netlink: 56 bytes leftover after parsing attributes in process `syz.3.202'.
[   51.131277][ T6031] loop3: detected capacity change from 0 to 4096
[   51.131683][ T6031] EXT4-fs: Ignoring removed mblk_io_submit option
[   51.132271][ T6031] EXT4-fs (loop3): Test dummy encryption mode enabled
[   51.147029][ T6031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.216211][ T4960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.315295][ T6051] 9pnet_virtio: no channels available for device 127.0.0.1
[   51.524034][ T6057] FAULT_INJECTION: forcing a failure.
[   51.524034][ T6057] name failslab, interval 1, probability 0, space 0, times 0
[   51.524053][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.5.209 Not tainted syzkaller #0 PREEMPT 
[   51.524063][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   51.524068][ T6057] Call trace:
[   51.524070][ T6057]  show_stack+0x2c/0x3c (C)
[   51.524088][ T6057]  __dump_stack+0x30/0x40
[   51.524098][ T6057]  dump_stack_lvl+0xd8/0x12c
[   51.524108][ T6057]  dump_stack+0x1c/0x28
[   51.524117][ T6057]  should_fail_ex+0x418/0x58c
[   51.524125][ T6057]  should_failslab+0xc4/0x120
[   51.524133][ T6057]  __kmalloc_node_noprof+0x10c/0x6e4
[   51.524141][ T6057]  __vmalloc_node_range_noprof+0x43c/0xe9c
[   51.524150][ T6057]  __vmalloc_node_noprof+0xec/0x14c
[   51.524159][ T6057]  __vmalloc_noprof+0x64/0x8c
[   51.524167][ T6057]  bpf_check+0xd90/0x2414
[   51.524178][ T6057]  bpf_prog_load+0xf4c/0x1554
[   51.524186][ T6057]  __sys_bpf+0x7d4/0x82c
[   51.524194][ T6057]  __arm64_sys_bpf+0xd0/0xec
[   51.524201][ T6057]  invoke_syscall+0x98/0x244
[   51.524211][ T6057]  el0_svc_common+0xec/0x23c
[   51.524221][ T6057]  do_el0_svc+0x4c/0x5c
[   51.524230][ T6057]  el0_svc+0x60/0x1d8
[   51.524238][ T6057]  el0t_64_sync_handler+0x44/0x104
[   51.524245][ T6057]  el0t_64_sync+0x198/0x19c
[   51.984152][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.089445][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'.
[   52.094578][ T5195] Bluetooth: hci5: Frame reassembly failed (-84)
[   52.094634][   T49] Bluetooth: hci5: Frame reassembly failed (-84)
[   52.138991][ T6112] capability: warning: `syz.3.217' uses deprecated v2 capabilities in a way that may be insecure
[   52.139888][   T30] audit: type=1400 audit(52.110:2): lsm=SMACK fn=smack_file_fcntl action=denied subject="w" object="_" requested=w pid=6111 comm="syz.3.217" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12279
[   52.148672][   T30] audit: type=1400 audit(52.120:3): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=6111 comm="syz.3.217" name="fuse" dev="devtmpfs" ino=94
[   52.149421][   T30] audit: type=1400 audit(52.120:4): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=6111 comm="syz.3.217" name="48" dev="tmpfs" ino=274
[   52.150046][ T6112] netlink: 56 bytes leftover after parsing attributes in process `syz.3.217'.
[   52.235832][ T6112] tipc: Can't bind to reserved service type 2
[   52.237489][ T6115] loop4: detected capacity change from 0 to 512
[   52.238240][ T6115] EXT4-fs: Ignoring removed oldalloc option
[   52.253780][ T6115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.264937][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.287526][ T6120] loop4: detected capacity change from 0 to 1024
[   52.288188][ T6120] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   52.288202][ T6120] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[   52.288239][ T6120] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   52.291454][ T6120] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #3: comm syz.4.219: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0)
[   52.291481][ T6120] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   52.291649][ T6120] EXT4-fs (loop4): no journal found
[   52.291658][ T6120] EXT4-fs (loop4): can't get journal size
[   52.298779][ T6120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   52.318179][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.370693][ T6125] loop4: detected capacity change from 0 to 1024
[   52.371465][ T6125] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   52.371505][ T6125] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   52.377509][ T6125] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   52.377624][ T6125] EXT4-fs (loop4): orphan cleanup on readonly fs
[   52.377937][ T6125] EXT4-fs error (device loop4): ext4_read_inode_bitmap:169: comm syz.4.221: Inode bitmap for bg 0 marked uninitialized
[   52.377951][ T6125] loop4: lost filesystem error report for type 5 error -117
[   52.378126][ T6125] EXT4-fs (loop4): Remounting filesystem read-only
[   52.379892][ T6125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   52.449919][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.463427][ T6134] FAULT_INJECTION: forcing a failure.
[   52.463427][ T6134] name failslab, interval 1, probability 0, space 0, times 0
[   52.463450][ T6134] CPU: 1 UID: 0 PID: 6134 Comm: syz.5.223 Not tainted syzkaller #0 PREEMPT 
[   52.463460][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   52.463466][ T6134] Call trace:
[   52.463469][ T6134]  show_stack+0x2c/0x3c (C)
[   52.463488][ T6134]  __dump_stack+0x30/0x40
[   52.463499][ T6134]  dump_stack_lvl+0xd8/0x12c
[   52.463508][ T6134]  dump_stack+0x1c/0x28
[   52.463517][ T6134]  should_fail_ex+0x418/0x58c
[   52.463526][ T6134]  should_failslab+0xc4/0x120
[   52.463534][ T6134]  kmem_cache_alloc_noprof+0x94/0x5d4
[   52.463542][ T6134]  __kernfs_new_node+0xf0/0x7d8
[   52.463552][ T6134]  kernfs_new_node+0xe8/0x130
[   52.463561][ T6134]  __kernfs_create_file+0x60/0x2e0
[   52.463570][ T6134]  sysfs_add_file_mode_ns+0x1e8/0x2a4
[   52.463581][ T6134]  sysfs_merge_group+0x164/0x2ac
[   52.463588][ T6134]  dpm_sysfs_add+0xc8/0x258
[   52.463599][ T6134]  device_add+0x468/0x9e0
[   52.463608][ T6134]  netdev_register_kobject+0x184/0x328
[   52.463619][ T6134]  register_netdevice+0xd74/0x14c0
[   52.463627][ T6134]  geneve_newlink+0x93c/0xcd0
[   52.463636][ T6134]  rtnl_newlink_create+0x294/0x6b8
[   52.463645][ T6134]  rtnl_newlink+0xfe4/0x138c
[   52.463654][ T6134]  rtnetlink_rcv_msg+0x66c/0x9bc
[   52.463662][ T6134]  netlink_rcv_skb+0x238/0x414
[   52.463685][ T6134]  rtnetlink_rcv+0x28/0x38
[   52.463699][ T6134]  netlink_unicast+0x600/0x7f8
[   52.463711][ T6134]  netlink_sendmsg+0x648/0x948
[   52.463721][ T6134]  __sock_sendmsg+0xc8/0x17c
[   52.463731][ T6134]  ____sys_sendmsg+0x3d0/0x6c8
[   52.463741][ T6134]  ___sys_sendmsg+0x198/0x224
[   52.463750][ T6134]  __sys_sendmsg+0x158/0x204
[   52.463760][ T6134]  __arm64_sys_sendmsg+0x88/0x9c
[   52.463769][ T6134]  invoke_syscall+0x98/0x244
[   52.463779][ T6134]  el0_svc_common+0xec/0x23c
[   52.463789][ T6134]  do_el0_svc+0x4c/0x5c
[   52.463799][ T6134]  el0_svc+0x60/0x1d8
[   52.463806][ T6134]  el0t_64_sync_handler+0x44/0x104
[   52.463814][ T6134]  el0t_64_sync+0x198/0x19c
[   52.482427][ T6139] loop4: detected capacity change from 0 to 1024
[   52.483261][ T6139] EXT4-fs: Invalid want_extra_isize 129
[   52.652298][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.228'.
[   52.657907][ T6160] FAULT_INJECTION: forcing a failure.
[   52.657907][ T6160] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   52.657924][ T6160] CPU: 0 UID: 0 PID: 6160 Comm: syz.5.229 Not tainted syzkaller #0 PREEMPT 
[   52.657934][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   52.657939][ T6160] Call trace:
[   52.657942][ T6160]  show_stack+0x2c/0x3c (C)
[   52.657961][ T6160]  __dump_stack+0x30/0x40
[   52.657972][ T6160]  dump_stack_lvl+0xd8/0x12c
[   52.657982][ T6160]  dump_stack+0x1c/0x28
[   52.657991][ T6160]  should_fail_ex+0x418/0x58c
[   52.657999][ T6160]  should_fail+0x14/0x24
[   52.658006][ T6160]  should_fail_usercopy+0x20/0x30
[   52.658013][ T6160]  __arm64_sys_sysinfo+0xdc/0x234
[   52.658024][ T6160]  invoke_syscall+0x98/0x244
[   52.658035][ T6160]  el0_svc_common+0xec/0x23c
[   52.658044][ T6160]  do_el0_svc+0x4c/0x5c
[   52.658054][ T6160]  el0_svc+0x60/0x1d8
[   52.658061][ T6160]  el0t_64_sync_handler+0x44/0x104
[   52.658068][ T6160]  el0t_64_sync+0x198/0x19c
[   52.719783][ T6178] netlink: 312 bytes leftover after parsing attributes in process `syz.5.231'.
[   52.719800][ T6178] netlink: 'syz.5.231': attribute type 1 has an invalid length.
[   52.738736][ T6178] loop5: detected capacity change from 0 to 256
[   52.751449][ T6178] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   52.762771][ T6178] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   52.762787][ T6178] FAT-fs (loop5): Filesystem has been set read-only
[   52.819967][ T6188] loop3: detected capacity change from 0 to 512
[   52.821140][ T6188] ext4: Unknown parameter 'dont_appraise'
[   52.831562][ T6192] Smack: duplicate mount options
[   52.832583][ T6188] loop3: detected capacity change from 0 to 512
[   52.832803][ T6188] ext4: Unknown parameter 'dont_appraise'
[   52.854106][ T6201] EXT4-fs error (device loop5): __ext4_iget:5592: inode #11: block 1: comm syz.5.235: invalid block
[   52.854127][ T6201] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   52.854287][ T6201] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.235: couldn't read orphan inode 11 (err -117)
[   52.854298][ T6201] loop5: lost filesystem error report for type 5 error -117
[   52.857656][ T6201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.894528][ T4960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.919931][ T6212] syzkaller0: left promiscuous mode
[   52.920041][ T6212] syzkaller0: left allmulticast mode
[   52.947503][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.238'.
[   52.950091][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.950420][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.962709][ T6217] xt_MASQUERADE: bad rangesize 20224
[   52.996639][ T6223] xt_LOG: level 8 >= 8
[   52.997482][ T6217] Bluetooth: hci0: unsupported parameter 5134
[   52.997494][ T6217] Bluetooth: hci0: unsupported parameter 8192
[   52.997502][ T6217] Bluetooth: hci0: unsupported parameter 5134
[   52.997509][ T6217] Bluetooth: hci0: unsupported parameter 8192
[   53.126347][ T6253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.127779][ T6258] netlink: 16 bytes leftover after parsing attributes in process `syz.5.243'.
[   53.145087][ T4960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.683871][ T6295] xt_CT: No such helper "snmp_trap"
[   53.743235][ T6313] 
: renamed from bridge_slave_0 (while UP)
[   54.096955][ T6345] evm: overlay not supported
[   54.098849][ T6345] overlayfs: failed to get inode (-116)
[   54.098889][ T6345] overlayfs: failed to get inode (-116)
[   54.121879][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.253'.
[   54.128456][ T6347] vfat: Unknown parameter '
[   54.128456][ T6347] '
[   54.180373][ T4720] Bluetooth: hci5: command 0xfc11 tx timeout
[   54.180681][ T4718] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[   54.255203][ T6360] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[   54.255735][ T6360] EXT4-fs (loop5): orphan cleanup on readonly fs
[   54.257527][ T6360] EXT4-fs warning (device loop5): ext4_enable_quotas:7305: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   54.259279][ T6360] EXT4-fs (loop5): Cannot turn on quotas: error -22
[   54.259563][ T6360] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.258: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   54.259583][ T6360] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   54.259894][ T6360] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.258: couldn't read orphan inode 13 (err -117)
[   54.259906][ T6360] loop5: lost filesystem error report for type 5 error -117
[   54.260816][ T6360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   54.263940][ T6358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.301798][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.465122][ T6373] SET target dimension over the limit!
[   54.476430][ T6362] 9p: Bad value for 'rfdno'
[   54.618509][ T6380] vfat: Unknown parameter '0x000000000000000000000000000000000003'
[   54.756935][ T6399] binder: 6398:6399 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   54.901834][ T6418] netlink: 'syz.3.271': attribute type 2 has an invalid length.
[   54.914803][ T3682] bond0: (slave bond_slave_0): interface is now down
[   54.914819][ T3682] bond0: (slave bond_slave_1): interface is now down
[   54.919513][ T3682] bond0: now running without any active interface!
[   54.963084][ T6422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.966361][ T6422] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   54.967905][ T6422] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[   54.967924][ T6422] EXT4-fs (loop4): This should not happen!! Data will be lost
[   54.967924][ T6422] 
[   54.967933][ T6422] EXT4-fs (loop4): Total free blocks count 0
[   54.967940][ T6422] EXT4-fs (loop4): Free/Dirty block details
[   54.967950][ T6422] EXT4-fs (loop4): free_blocks=4096
[   54.967960][ T6422] EXT4-fs (loop4): dirty_blocks=32
[   54.967967][ T6422] EXT4-fs (loop4): Block reservation details
[   54.967973][ T6422] EXT4-fs (loop4): i_reserved_data_blocks=2
[   55.008668][ T6430] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   55.011906][ T6431] ext4: Unknown parameter 'euid>00000000000000000000'
[   55.026852][ T5196] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   55.028016][ T6431] ext4: Unknown parameter 'euid>00000000000000000000'
[   55.034237][ T6429] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   55.136999][ T4960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.157383][ T6443] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   55.157403][ T6443] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   55.158549][ T6440] FAULT_INJECTION: forcing a failure.
[   55.158549][ T6440] name failslab, interval 1, probability 0, space 0, times 0
[   55.158564][ T6440] CPU: 0 UID: 0 PID: 6440 Comm: syz.3.276 Not tainted syzkaller #0 PREEMPT 
[   55.158575][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   55.158580][ T6440] Call trace:
[   55.158583][ T6440]  show_stack+0x2c/0x3c (C)
[   55.158604][ T6440]  __dump_stack+0x30/0x40
[   55.158617][ T6440]  dump_stack_lvl+0xd8/0x12c
[   55.158628][ T6440]  dump_stack+0x1c/0x28
[   55.158640][ T6440]  should_fail_ex+0x418/0x58c
[   55.158649][ T6440]  should_failslab+0xc4/0x120
[   55.158664][ T6440]  kmem_cache_alloc_lru_noprof+0x98/0x5d8
[   55.158673][ T6440]  shmem_alloc_inode+0x2c/0x48
[   55.158682][ T6440]  alloc_inode+0x68/0x198
[   55.158693][ T6440]  new_inode+0x20/0x50
[   55.158705][ T6440]  shmem_get_inode+0xac/0x788
[   55.158713][ T6440]  shmem_mknod+0x140/0x2f8
[   55.158721][ T6440]  shmem_mkdir+0x40/0x84
[   55.158729][ T6440]  vfs_mkdir+0x2e4/0x46c
[   55.158740][ T6440]  filename_mkdirat+0x228/0x3f4
[   55.158751][ T6440]  __arm64_sys_mkdirat+0x9c/0xc0
[   55.158762][ T6440]  invoke_syscall+0x98/0x244
[   55.158774][ T6440]  el0_svc_common+0xec/0x23c
[   55.158786][ T6440]  do_el0_svc+0x4c/0x5c
[   55.158798][ T6440]  el0_svc+0x60/0x1d8
[   55.158807][ T6440]  el0t_64_sync_handler+0x44/0x104
[   55.158815][ T6440]  el0t_64_sync+0x198/0x19c
[   55.211167][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.276'.
[   55.216527][ T6440] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   55.224876][ T6440] bond1 (unregistering): Released all slaves
[   55.256877][ T6455] FAULT_INJECTION: forcing a failure.
[   55.256877][ T6455] name failslab, interval 1, probability 0, space 0, times 0
[   55.256897][ T6455] CPU: 1 UID: 0 PID: 6455 Comm: syz.5.281 Not tainted syzkaller #0 PREEMPT 
[   55.256907][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   55.256912][ T6455] Call trace:
[   55.256915][ T6455]  show_stack+0x2c/0x3c (C)
[   55.256934][ T6455]  __dump_stack+0x30/0x40
[   55.256947][ T6455]  dump_stack_lvl+0xd8/0x12c
[   55.256959][ T6455]  dump_stack+0x1c/0x28
[   55.256970][ T6455]  should_fail_ex+0x418/0x58c
[   55.256979][ T6455]  should_failslab+0xc4/0x120
[   55.256988][ T6455]  kmem_cache_alloc_noprof+0x94/0x5d4
[   55.256998][ T6455]  create_new_namespaces+0x48/0x50c
[   55.257009][ T6455]  unshare_nsproxy_namespaces+0x120/0x170
[   55.257020][ T6455]  ksys_unshare+0x438/0x6e0
[   55.257030][ T6455]  __arm64_sys_unshare+0x40/0x54
[   55.257040][ T6455]  invoke_syscall+0x98/0x244
[   55.257053][ T6455]  el0_svc_common+0xec/0x23c
[   55.257065][ T6455]  do_el0_svc+0x4c/0x5c
[   55.257076][ T6455]  el0_svc+0x60/0x1d8
[   55.257085][ T6455]  el0t_64_sync_handler+0x44/0x104
[   55.257093][ T6455]  el0t_64_sync+0x198/0x19c
[   55.272985][ T4878] hid-generic 0005:4C4A:090E.0002: unknown main item tag 0x0
[   55.274525][ T4878] hid-generic 0005:4C4A:090E.0002: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[   55.453178][ T6471] vxcan0: tx address claim with dlc 1
[   55.463011][ T3682] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   55.463042][ T3682] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   55.463058][ T3682] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   55.463072][ T3682] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   55.514204][ T6480] set_capacity_and_notify: 13 callbacks suppressed
[   55.514219][ T6480] loop5: detected capacity change from 0 to 1024
[   55.552316][ T6491] loop3: detected capacity change from 0 to 128
[   55.553111][ T6480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   55.571532][ T6491] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   55.621117][ T6498] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.287: lblock 0 mapped to illegal pblock 0 (length 6)
[   55.622360][ T6498] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[   55.622378][ T6498] EXT4-fs (loop5): This should not happen!! Data will be lost
[   55.622378][ T6498] 
[   55.641399][ T6510] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.287: lblock 0 mapped to illegal pblock 0 (length 1)
[   55.642218][ T5196] IPVS: starting estimator thread 0...
[   55.713965][ T4709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   55.733154][ T6511] IPVS: using max 60 ests per chain, 144000 per kthread
[   55.807165][   T60] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set
[   55.808395][   T60] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 95 with error 28
[   55.808411][   T60] EXT4-fs (loop5): This should not happen!! Data will be lost
[   55.808411][   T60] 
[   55.808418][   T60] EXT4-fs (loop5): Total free blocks count 0
[   55.808425][   T60] EXT4-fs (loop5): Free/Dirty block details
[   55.808431][   T60] EXT4-fs (loop5): free_blocks=0
[   55.808439][   T60] EXT4-fs (loop5): dirty_blocks=96
[   55.808444][   T60] EXT4-fs (loop5): Block reservation details
[   55.952968][ T6537] binder: 6532:6537 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   55.952990][ T6537] binder: 6532:6537 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   55.953001][ T6537] binder: 6537 RLIMIT_NICE not set
[   55.953030][ T6537] binder: 6532:6537 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   55.953038][ T6537] binder: 6537 RLIMIT_NICE not set
[   55.963438][ T6530] loop5: detected capacity change from 0 to 1024
[   55.967133][ T6530] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[   55.968773][ T6530] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.292: lblock 2 mapped to illegal pblock 2 (length 1)
[   55.968791][ T6530] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   55.977377][ T6530] Quota error (device loop5): qtree_write_dquot: dquota write failed
[   55.977415][ T6530] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.292: lblock 0 mapped to illegal pblock 48 (length 1)
[   55.977432][ T6530] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   55.977555][ T6530] Quota error (device loop5): v2_write_file_info: Can't write info structure
[   55.977563][ T6530] EXT4-fs error (device loop5): ext4_acquire_dquot:7070: comm syz.5.292: Failed to acquire dquot type 0
[   55.977574][ T6530] loop5: lost filesystem error report for type 5 error -117
[   55.977693][ T6530] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem
[   55.977705][ T6530] loop5: lost filesystem error report for type 5 error -117
[   55.977781][ T6530] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.292: mark_inode_dirty error
[   55.977793][ T6530] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   55.977864][ T6530] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[   55.977900][ T6530] EXT4-fs (loop5): 1 orphan inode deleted
[   55.978329][ T6530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.979912][ T6530] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.292: Invalid inode table block 1 in block_group 0
[   55.982071][ T6530] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem
[   55.982211][ T6530] EXT4-fs error (device loop5): ext4_setattr:6073: inode #2: comm syz.5.292: mark_inode_dirty error
[   55.982535][ T6530] __nla_validate_parse: 5 callbacks suppressed
[   55.982543][ T6530] netlink: 24 bytes leftover after parsing attributes in process `syz.5.292'.
[   56.003795][ T6534] binder: 6532:6534 got reply transaction with no transaction stack
[   56.003817][ T6534] binder: 6532:6534 transaction reply to 0:0 failed 27/29201/-71, code 0 size 141-24 line 3156
[   56.012882][ T6538] loop1: detected capacity change from 0 to 512
[   56.019923][ T6538] loop1: detected capacity change from 0 to 512
[   56.043858][ T6538] loop1: detected capacity change from 0 to 512
[   56.052771][ T6538] loop1: detected capacity change from 0 to 512
[   56.052860][ T4720] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   56.053810][ T4720] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   56.054158][ T4720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   56.054883][ T4720] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   56.056138][ T6538] loop1: detected capacity change from 0 to 512
[   56.057041][ T4720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   56.109390][ T6538] loop1: detected capacity change from 0 to 512
[   56.114547][ T6538] loop1: detected capacity change from 0 to 512
[   56.211488][ T6557] netlink: 104 bytes leftover after parsing attributes in process `syz.4.296'.
[   56.241403][ T6557] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   56.305712][ T4960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.311576][ T3682] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[   56.311602][ T3682] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   56.314782][ T3682] Quota error (device loop5): remove_tree: Can't read quota data block 1
[   56.314808][ T3682] EXT4-fs error (device loop5): ext4_release_dquot:7106: comm kworker/u8:8: Failed to release dquot type 0
[   56.314821][ T3682] loop5: lost filesystem error report for type 5 error -117
[   56.317245][ T4960] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[   56.317263][ T4960] loop5: lost filesystem error report for type 5 error -117
[   56.332377][ T6545] rxe_eth0 speed is unknown, defaulting to 1000
[   56.341524][ T4960] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem
[   56.341549][ T4960] loop5: lost filesystem error report for type 5 error -117
[   56.347456][ T4960] EXT4-fs error (device loop5): ext4_quota_off:7354: inode #3: comm syz-executor: mark_inode_dirty error
[   56.347489][ T4960] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   56.348221][ T4960] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[   56.348246][ T4960] loop5: lost filesystem error report for type 5 error -117
[   56.430085][ T6572] ext4: Unknown parameter 'noacl'
[   56.515809][ T6584] FAULT_INJECTION: forcing a failure.
[   56.515809][ T6584] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   56.515829][ T6584] CPU: 0 UID: 0 PID: 6584 Comm: syz.5.302 Not tainted syzkaller #0 PREEMPT 
[   56.515838][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   56.515843][ T6584] Call trace:
[   56.515845][ T6584]  show_stack+0x2c/0x3c (C)
[   56.515862][ T6584]  __dump_stack+0x30/0x40
[   56.515873][ T6584]  dump_stack_lvl+0xd8/0x12c
[   56.515882][ T6584]  dump_stack+0x1c/0x28
[   56.515891][ T6584]  should_fail_ex+0x418/0x58c
[   56.515900][ T6584]  should_fail_alloc_page+0xec/0x10c
[   56.515908][ T6584]  prepare_alloc_pages+0x194/0x484
[   56.515916][ T6584]  __alloc_frozen_pages_noprof+0x180/0x578
[   56.515924][ T6584]  alloc_pages_mpol+0x1fc/0x3d0
[   56.515933][ T6584]  alloc_frozen_pages_noprof+0xc4/0x10c
[   56.515941][ T6584]  alloc_pages_noprof+0x30/0x148
[   56.515949][ T6584]  get_free_pages_noprof+0x1c/0xbc
[   56.515957][ T6584]  __kasan_populate_vmalloc+0x48/0x1d0
[   56.515966][ T6584]  alloc_vmap_area+0xcd8/0x12ec
[   56.515975][ T6584]  __get_vm_area_node+0x210/0x32c
[   56.515983][ T6584]  __vmalloc_node_range_noprof+0x2a0/0xe9c
[   56.515992][ T6584]  __vmalloc_node_noprof+0xec/0x14c
[   56.516000][ T6584]  __vmalloc_noprof+0x64/0x8c
[   56.516008][ T6584]  bpf_prog_calc_tag+0x68/0x314
[   56.516017][ T6584]  check_and_resolve_insns+0xb4/0x1bb4
[   56.516028][ T6584]  bpf_check+0x1a50/0x2414
[   56.516038][ T6584]  bpf_prog_load+0xf4c/0x1554
[   56.516046][ T6584]  __sys_bpf+0x7d4/0x82c
[   56.516054][ T6584]  __arm64_sys_bpf+0xd0/0xec
[   56.516061][ T6584]  invoke_syscall+0x98/0x244
[   56.516071][ T6584]  el0_svc_common+0xec/0x23c
[   56.516081][ T6584]  do_el0_svc+0x4c/0x5c
[   56.516090][ T6584]  el0_svc+0x60/0x1d8
[   56.516098][ T6584]  el0t_64_sync_handler+0x44/0x104
[   56.516105][ T6584]  el0t_64_sync+0x198/0x19c
[   56.566270][ T6582]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[   56.566292][ T6582] loop4: partition table partially beyond EOD, truncated
[   56.566378][ T6582] loop4: p1 size 2305420955 extends beyond EOD, truncated
[   56.696145][ T4382] binder: undelivered TRANSACTION_ERROR: 29201
[   56.704411][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   56.784842][ T6617] bridge0: port 3(veth1_to_bridge) entered blocking state
[   56.784878][ T6617] bridge0: port 3(veth1_to_bridge) entered disabled state
[   56.784944][ T6617] veth1_to_bridge: entered allmulticast mode
[   56.785425][ T6617] veth1_to_bridge: entered promiscuous mode
[   56.785487][ T6617] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   56.785665][ T6617] bridge0: port 3(veth1_to_bridge) entered blocking state
[   56.785694][ T6617] bridge0: port 3(veth1_to_bridge) entered forwarding state
[   56.844220][ T6627] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[   56.858253][ T6627] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.308: lblock 2 mapped to illegal pblock 2 (length 1)
[   56.858275][ T6627] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   56.858430][ T6627] Quota error (device loop1): qtree_write_dquot: dquota write failed
[   56.858446][ T6627] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.308: lblock 0 mapped to illegal pblock 48 (length 1)
[   56.858459][ T6627] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   56.858527][ T6627] Quota error (device loop1): v2_write_file_info: Can't write info structure
[   56.858534][ T6627] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.308: Failed to acquire dquot type 0
[   56.858544][ T6627] loop1: lost filesystem error report for type 5 error -117
[   56.858632][ T6627] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem
[   56.858719][ T6627] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.308: mark_inode_dirty error
[   56.858729][ T6627] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   56.858787][ T6627] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[   56.858826][ T6627] EXT4-fs (loop1): 1 orphan inode deleted
[   56.872187][ T5195] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[   56.880361][ T5195] Quota error (device loop1): remove_tree: Can't read quota data block 1
[   56.880382][ T5195] EXT4-fs error (device loop1): ext4_release_dquot:7106: comm kworker/u8:10: Failed to release dquot type 0
[   56.885577][ T6627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.895278][ T6632] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.309: inode has both inline data and extents flags
[   56.895571][ T6632] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.309: couldn't read orphan inode 15 (err -117)
[   56.896110][ T6632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.942632][ T6638] xt_hashlimit: size too large, truncated to 1048576
[   56.963116][   T12] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[   56.963383][   T12] Quota error (device loop1): remove_tree: Can't read quota data block 1
[   56.963400][   T12] EXT4-fs error (device loop1): ext4_release_dquot:7106: comm kworker/u8:0: Failed to release dquot type 0
[   56.963844][ T4708] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[   56.963995][ T4708] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem
[   56.964066][ T4708] EXT4-fs error (device loop1): ext4_quota_off:7354: inode #3: comm syz-executor: mark_inode_dirty error
[   56.964147][ T4708] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[   56.976984][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.977007][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.977058][ T6545] bridge_slave_0: entered allmulticast mode
[   56.979418][ T6545] bridge_slave_0: entered promiscuous mode
[   56.984176][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.986140][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.986213][ T6545] bridge_slave_1: entered allmulticast mode
[   56.990996][ T6545] bridge_slave_1: entered promiscuous mode
[   57.024403][ T6545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.025287][ T6545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.027665][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[   57.049832][ T6545] team0: Port device team_slave_0 added
[   57.074543][ T6545] team0: Port device team_slave_1 added
[   57.115232][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.115245][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.115257][ T6545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.120116][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.120125][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.120208][ T6545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.197503][ T6545] hsr_slave_0: entered promiscuous mode
[   57.202872][ T6545] hsr_slave_1: entered promiscuous mode
[   57.204888][ T6668] FAULT_INJECTION: forcing a failure.
[   57.204888][ T6668] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   57.204904][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.3.313 Not tainted syzkaller #0 PREEMPT 
[   57.204914][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   57.204919][ T6668] Call trace:
[   57.204922][ T6668]  show_stack+0x2c/0x3c (C)
[   57.204941][ T6668]  __dump_stack+0x30/0x40
[   57.204952][ T6668]  dump_stack_lvl+0xd8/0x12c
[   57.204962][ T6668]  dump_stack+0x1c/0x28
[   57.204971][ T6668]  should_fail_ex+0x418/0x58c
[   57.204980][ T6668]  should_fail_alloc_page+0xec/0x10c
[   57.204988][ T6668]  prepare_alloc_pages+0x194/0x484
[   57.204996][ T6668]  __alloc_frozen_pages_noprof+0x180/0x578
[   57.205005][ T6668]  __alloc_pages_noprof+0x18/0x100
[   57.205012][ T6668]  alloc_pages_bulk_noprof+0x610/0x7d8
[   57.205019][ T6668]  __kasan_populate_vmalloc+0xc0/0x1d0
[   57.205030][ T6668]  alloc_vmap_area+0xcd8/0x12ec
[   57.205038][ T6668]  __get_vm_area_node+0x210/0x32c
[   57.205046][ T6668]  __vmalloc_node_range_noprof+0x2a0/0xe9c
[   57.205055][ T6668]  __vmalloc_node_noprof+0xec/0x14c
[   57.205063][ T6668]  __vmalloc_noprof+0x64/0x8c
[   57.205072][ T6668]  bpf_prog_calc_tag+0x68/0x314
[   57.205081][ T6668]  check_and_resolve_insns+0xb4/0x1bb4
[   57.205092][ T6668]  bpf_check+0x1a50/0x2414
[   57.205101][ T6668]  bpf_prog_load+0xf4c/0x1554
[   57.205109][ T6668]  __sys_bpf+0x7d4/0x82c
[   57.205117][ T6668]  __arm64_sys_bpf+0xd0/0xec
[   57.205125][ T6668]  invoke_syscall+0x98/0x244
[   57.205135][ T6668]  el0_svc_common+0xec/0x23c
[   57.205145][ T6668]  do_el0_svc+0x4c/0x5c
[   57.205154][ T6668]  el0_svc+0x60/0x1d8
[   57.205162][ T6668]  el0t_64_sync_handler+0x44/0x104
[   57.205169][ T6668]  el0t_64_sync+0x198/0x19c
[   57.205365][ T6545] debugfs: 'hsr0' already exists in 'hsr'
[   57.205375][ T6545] Cannot create hsr debugfs directory
[   57.353810][ T6545] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   57.358408][ T6545] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   57.359817][ T6545] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   57.376022][ T6688] EXT4-fs: Ignoring removed mblk_io_submit option
[   57.385974][ T6545] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   57.389502][ T6545] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   57.396313][ T6545] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   57.396617][ T6545] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   57.398244][ T6688] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[   57.399697][ T6688] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #3: block 1: comm syz.5.317: lblock 1 mapped to illegal pblock 1 (length 1)
[   57.399786][ T6688] Quota error (device loop5): write_blk: dquota write failed
[   57.399799][ T6688] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[   57.399818][ T6688] EXT4-fs error (device loop5): ext4_acquire_dquot:7070: comm syz.5.317: Failed to acquire dquot type 0
[   57.399828][ T6688] fserror_report: 7 callbacks suppressed
[   57.399833][ T6688] loop5: lost filesystem error report for type 5 error -117
[   57.400121][ T6688] EXT4-fs error (device loop5): ext4_free_blocks:6719: comm syz.5.317: Freeing blocks not in datazone - block = 0, count = 4096
[   57.400134][ T6688] loop5: lost filesystem error report for type 5 error -117
[   57.404311][ T6688] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.317: Invalid inode bitmap blk 0 in block_group 0
[   57.404330][ T6688] loop5: lost filesystem error report for type 5 error -117
[   57.404416][ T6688] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem
[   57.404426][ T6688] loop5: lost filesystem error report for type 5 error -117
[   57.404510][ T6688] EXT4-fs (loop5): 1 orphan inode deleted
[   57.428562][ T5195] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[   57.430854][ T5195] Quota error (device loop5): remove_tree: Can't read quota data block 1
[   57.430874][ T5195] EXT4-fs error (device loop5): ext4_release_dquot:7106: comm kworker/u8:10: Failed to release dquot type 0
[   57.443576][ T6545] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   57.456318][ T6694] batadv1: entered promiscuous mode
[   57.456332][ T6694] batadv1: entered allmulticast mode
[   57.483183][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.483213][ T6545] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.489621][ T6701] netlink: 28 bytes leftover after parsing attributes in process `syz.5.320'.
[   57.514135][ T6545] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.516974][ T6545] 8021q: adding VLAN 0 to HW filter on device team0
[   57.518884][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.534543][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.534569][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.537167][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.537191][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.555931][ T6545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.555947][ T6545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.594013][ T6701] netlink: zone id is out of range
[   57.594026][ T6701] netlink: zone id is out of range
[   57.594032][ T6701] netlink: zone id is out of range
[   57.594037][ T6701] netlink: zone id is out of range
[   57.594041][ T6701] netlink: zone id is out of range
[   57.594046][ T6701] netlink: zone id is out of range
[   57.594050][ T6701] netlink: zone id is out of range
[   57.594054][ T6701] netlink: zone id is out of range
[   57.628573][ T6714] EXT4-fs (loop4): Test dummy encryption mode enabled
[   57.628596][ T6714] EXT4-fs (loop4): Invalid default hash set in the superblock
[   57.662873][ T6712] ext4: Unknown parameter 'nl80211'
[   57.756512][ T6730] FAULT_INJECTION: forcing a failure.
[   57.756512][ T6730] name failslab, interval 1, probability 0, space 0, times 0
[   57.756531][ T6730] CPU: 0 UID: 0 PID: 6730 Comm: syz.5.326 Not tainted syzkaller #0 PREEMPT 
[   57.756541][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   57.756546][ T6730] Call trace:
[   57.756549][ T6730]  show_stack+0x2c/0x3c (C)
[   57.756568][ T6730]  __dump_stack+0x30/0x40
[   57.756578][ T6730]  dump_stack_lvl+0xd8/0x12c
[   57.756588][ T6730]  dump_stack+0x1c/0x28
[   57.756597][ T6730]  should_fail_ex+0x418/0x58c
[   57.756606][ T6730]  should_failslab+0xc4/0x120
[   57.756613][ T6730]  __kmalloc_node_noprof+0x10c/0x6e4
[   57.756622][ T6730]  __vmalloc_node_range_noprof+0x43c/0xe9c
[   57.756631][ T6730]  __vmalloc_node_noprof+0xec/0x14c
[   57.756639][ T6730]  __vmalloc_noprof+0x64/0x8c
[   57.756647][ T6730]  bpf_prog_calc_tag+0x68/0x314
[   57.756663][ T6730]  check_and_resolve_insns+0xb4/0x1bb4
[   57.756674][ T6730]  bpf_check+0x1a50/0x2414
[   57.756684][ T6730]  bpf_prog_load+0xf4c/0x1554
[   57.756692][ T6730]  __sys_bpf+0x7d4/0x82c
[   57.756700][ T6730]  __arm64_sys_bpf+0xd0/0xec
[   57.756708][ T6730]  invoke_syscall+0x98/0x244
[   57.756718][ T6730]  el0_svc_common+0xec/0x23c
[   57.756728][ T6730]  do_el0_svc+0x4c/0x5c
[   57.756737][ T6730]  el0_svc+0x60/0x1d8
[   57.756745][ T6730]  el0t_64_sync_handler+0x44/0x104
[   57.756752][ T6730]  el0t_64_sync+0x198/0x19c
[   57.837282][ T6545] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.903891][ T6747] FAT-fs (loop4): bogus number of reserved sectors
[   57.903906][ T6747] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   57.903913][ T6747] FAT-fs (loop4): Can't find a valid FAT filesystem
[   57.983894][ T6545] veth0_vlan: entered promiscuous mode
[   57.985868][ T6545] veth1_vlan: entered promiscuous mode
[   58.003897][ T6545] veth0_macvtap: entered promiscuous mode
[   58.009088][ T6545] veth1_macvtap: entered promiscuous mode
[   58.016739][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.023675][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.051981][ T5196] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.052016][ T5196] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.052033][ T5196] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.052048][ T5196] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.074614][ T3682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.074630][ T3682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.089826][ T5196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.089837][ T5196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.100600][ T4718] Bluetooth: hci5: command tx timeout
[   58.475175][ T6760] Illegal XDP return value 2615425152 on prog  (id 110) dev N/A, expect packet loss!
[   58.628862][ T6772] EXT4-fs: Ignoring removed orlov option
[   58.628894][ T6772] EXT4-fs: Ignoring removed oldalloc option
[   58.657971][ T6772] EXT4-fs (loop4): failed to initialize system zone (-117)
[   58.658071][ T6772] EXT4-fs (loop4): mount failed
[   58.769807][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'.
[   58.778853][ T6777] vlan1: entered promiscuous mode
[   58.781532][ T6777] macvlan2: entered promiscuous mode
[   58.782357][ T6777] vlan1: left promiscuous mode
[   59.018093][ T6788] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   59.018119][ T6788] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   59.025994][ T6788] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.341: inode has both inline data and extents flags
[   59.026010][ T6788] fserror_report: 5 callbacks suppressed
[   59.026016][ T6788] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   59.026158][ T6788] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.341: couldn't read orphan inode 15 (err -117)
[   59.026171][ T6788] loop3: lost filesystem error report for type 5 error -117
[   59.093464][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.7.344'.
[   59.117456][ T6800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.345'.
[   59.172261][ T6806] fuse: Unknown parameter 'nd'
[   59.191761][ T6810] fuse: Bad value for 'user_id'
[   59.191773][ T6810] fuse: Bad value for 'user_id'
[   59.199689][ T6810] input: syz0 as /devices/virtual/input/input9
[   59.202741][ T6812] FAULT_INJECTION: forcing a failure.
[   59.202741][ T6812] name failslab, interval 1, probability 0, space 0, times 0
[   59.202759][ T6812] CPU: 1 UID: 0 PID: 6812 Comm: syz.3.349 Not tainted syzkaller #0 PREEMPT 
[   59.202769][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   59.202774][ T6812] Call trace:
[   59.202777][ T6812]  show_stack+0x2c/0x3c (C)
[   59.202798][ T6812]  __dump_stack+0x30/0x40
[   59.202809][ T6812]  dump_stack_lvl+0xd8/0x12c
[   59.202820][ T6812]  dump_stack+0x1c/0x28
[   59.202829][ T6812]  should_fail_ex+0x418/0x58c
[   59.202837][ T6812]  should_failslab+0xc4/0x120
[   59.202845][ T6812]  __kvmalloc_node_noprof+0x160/0x7fc
[   59.202854][ T6812]  bpf_check_cfg+0x104/0x211c
[   59.202862][ T6812]  bpf_check+0x1cb0/0x2414
[   59.202873][ T6812]  bpf_prog_load+0xf4c/0x1554
[   59.202881][ T6812]  __sys_bpf+0x7d4/0x82c
[   59.202889][ T6812]  __arm64_sys_bpf+0xd0/0xec
[   59.202896][ T6812]  invoke_syscall+0x98/0x244
[   59.202906][ T6812]  el0_svc_common+0xec/0x23c
[   59.202916][ T6812]  do_el0_svc+0x4c/0x5c
[   59.202925][ T6812]  el0_svc+0x60/0x1d8
[   59.202933][ T6812]  el0t_64_sync_handler+0x44/0x104
[   59.202940][ T6812]  el0t_64_sync+0x198/0x19c
[   59.402551][ T6827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'.
[   59.402571][ T6827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'.
[   59.421236][ T6827] fuse: Unknown parameter 'gd'
[   59.522857][ T6833] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   59.646258][ T6834] cgroup: fork rejected by pids controller in /syz3
[   59.659652][ T6869] FAULT_INJECTION: forcing a failure.
[   59.659652][ T6869] name failslab, interval 1, probability 0, space 0, times 0
[   59.659677][ T6869] CPU: 0 UID: 0 PID: 6869 Comm: syz.5.360 Not tainted syzkaller #0 PREEMPT 
[   59.659688][ T6869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   59.659695][ T6869] Call trace:
[   59.659699][ T6869]  show_stack+0x2c/0x3c (C)
[   59.659717][ T6869]  __dump_stack+0x30/0x40
[   59.659727][ T6869]  dump_stack_lvl+0xd8/0x12c
[   59.659737][ T6869]  dump_stack+0x1c/0x28
[   59.659747][ T6869]  should_fail_ex+0x418/0x58c
[   59.659755][ T6869]  should_failslab+0xc4/0x120
[   59.659763][ T6869]  __kvmalloc_node_noprof+0x160/0x7fc
[   59.659772][ T6869]  bpf_check_cfg+0x154/0x211c
[   59.659781][ T6869]  bpf_check+0x1cb0/0x2414
[   59.659791][ T6869]  bpf_prog_load+0xf4c/0x1554
[   59.659799][ T6869]  __sys_bpf+0x7d4/0x82c
[   59.659807][ T6869]  __arm64_sys_bpf+0xd0/0xec
[   59.659815][ T6869]  invoke_syscall+0x98/0x244
[   59.659825][ T6869]  el0_svc_common+0xec/0x23c
[   59.659834][ T6869]  do_el0_svc+0x4c/0x5c
[   59.659844][ T6869]  el0_svc+0x60/0x1d8
[   59.659852][ T6869]  el0t_64_sync_handler+0x44/0x104
[   59.659859][ T6869]  el0t_64_sync+0x198/0x19c
[   59.819605][ T6882] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[   59.826915][ T6883] FAULT_INJECTION: forcing a failure.
[   59.826915][ T6883] name fail_futex, interval 1, probability 0, space 0, times 1
[   59.826933][ T6883] CPU: 1 UID: 0 PID: 6883 Comm: syz.5.362 Not tainted syzkaller #0 PREEMPT 
[   59.826943][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   59.826948][ T6883] Call trace:
[   59.826951][ T6883]  show_stack+0x2c/0x3c (C)
[   59.826970][ T6883]  __dump_stack+0x30/0x40
[   59.826983][ T6883]  dump_stack_lvl+0xd8/0x12c
[   59.826994][ T6883]  dump_stack+0x1c/0x28
[   59.827005][ T6883]  should_fail_ex+0x418/0x58c
[   59.827014][ T6883]  should_fail+0x14/0x24
[   59.827021][ T6883]  get_futex_key+0x1ec/0x12b0
[   59.827033][ T6883]  futex_wake+0x10c/0x594
[   59.827044][ T6883]  do_futex+0x2c4/0x378
[   59.827054][ T6883]  __arm64_sys_futex+0x2e4/0x418
[   59.827065][ T6883]  invoke_syscall+0x98/0x244
[   59.827077][ T6883]  el0_svc_common+0xec/0x23c
[   59.827088][ T6883]  do_el0_svc+0x4c/0x5c
[   59.827100][ T6883]  el0_svc+0x60/0x1d8
[   59.827109][ T6883]  el0t_64_sync_handler+0x44/0x104
[   59.827117][ T6883]  el0t_64_sync+0x198/0x19c
[   59.834858][ T6886] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   59.835320][ T6886] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   59.838049][ T6886] FAT-fs (loop3): error, corrupted directory (invalid i_start)
[   59.838060][ T6886] FAT-fs (loop3): Filesystem has been set read-only
[   59.839708][ T6886] netlink: 64 bytes leftover after parsing attributes in process `syz.3.364'.
[   60.106882][ T4709] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   60.125182][ T6907] net_ratelimit: 25 callbacks suppressed
[   60.125196][ T6907] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   60.126956][ T6907] syz.3.369 uses obsolete (PF_INET,SOCK_PACKET)
[   60.150609][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   60.150909][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   60.151121][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   60.151231][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   60.151347][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   60.151455][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   60.151563][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   60.151675][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   60.151784][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   60.172369][ T4720] Bluetooth: hci5: command tx timeout
[   60.365265][ T6909] vlan2: entered promiscuous mode
[   60.365281][ T6909] bridge0: entered promiscuous mode
[   62.389602][ T4720] Bluetooth: hci5: command tx timeout
[   63.540163][    C0] sched: DL replenish lagged too much
[   64.415417][ T4720] Bluetooth: hci5: command tx timeout
[   65.130155][    C1] net_ratelimit: 142554 callbacks suppressed
[   65.130172][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   65.130175][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   65.130231][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   65.130271][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   65.130293][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   65.130325][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   65.130425][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   65.130521][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   65.130576][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   65.130627][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   65.930496][ T1594] ieee802154 phy0 wpan0: encryption failed: -22
[   65.941678][ T1594] ieee802154 phy1 wpan1: encryption failed: -22
[   67.085578][ T4718] block nbd4: Receive control failed (result -32)
[   68.062206][ T6905] block nbd4: shutting down sockets
[   69.061887][ T6882] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0
[   70.140179][    C1] net_ratelimit: 120804 callbacks suppressed
[   70.140196][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.140213][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[   70.140242][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.140343][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.140440][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.140493][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.140533][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.140558][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.140573][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.140625][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   75.150182][    C1] net_ratelimit: 127861 callbacks suppressed
[   75.150200][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   75.150246][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   75.150250][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   75.150347][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   75.150375][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[   75.150445][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   75.150497][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   75.150537][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   75.150577][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   75.150636][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   80.160250][    C1] net_ratelimit: 132798 callbacks suppressed
[   80.160267][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   80.160363][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   80.160373][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   80.160426][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   80.160465][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   80.160479][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   80.160504][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   80.160542][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   80.160582][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   80.160591][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.170165][    C1] net_ratelimit: 139364 callbacks suppressed
[   85.170182][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.170227][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.170244][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.170278][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.170331][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.170361][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   85.170371][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.170414][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.170471][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.170514][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.782876][  T865] cfg80211: failed to load regulatory.db
[   90.180163][    C1] net_ratelimit: 146840 callbacks suppressed
[   90.180180][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   90.180208][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   90.180227][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   90.180277][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   90.180316][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   90.180327][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[   90.180355][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   90.180394][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   90.180433][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   90.180535][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   95.190203][    C1] net_ratelimit: 142542 callbacks suppressed
[   95.190221][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   95.190264][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   95.190262][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   95.190303][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   95.190368][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   95.190414][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   95.190454][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   95.190493][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   95.190499][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[   95.190532][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  100.200188][    C1] net_ratelimit: 140699 callbacks suppressed
[  100.200205][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  100.200219][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  100.200307][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  100.200377][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  100.200404][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  100.200454][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  100.200490][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  100.200493][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  100.200554][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  100.200653][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  105.210162][    C0] net_ratelimit: 133491 callbacks suppressed
[  105.210165][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  105.210179][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  105.210280][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  105.210297][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  105.210322][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  105.210362][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  105.210410][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  105.210418][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  105.210519][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  105.210613][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  110.220188][    C1] net_ratelimit: 136490 callbacks suppressed
[  110.220199][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  110.220205][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  110.220249][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  110.220298][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  110.220311][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  110.220353][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  110.220411][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  110.220452][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  110.220521][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  110.220546][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  115.230198][    C1] net_ratelimit: 139580 callbacks suppressed
[  115.230215][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  115.230264][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  115.230288][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  115.230308][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  115.230405][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  115.230420][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  115.230508][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  115.230519][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  115.230559][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  115.230598][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.240158][    C1] net_ratelimit: 140833 callbacks suppressed
[  120.240174][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.240222][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.240264][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.240303][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.240342][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.240365][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.240381][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.240419][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.240457][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.240479][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.250190][    C1] net_ratelimit: 145701 callbacks suppressed
[  125.250206][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.250248][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.250288][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.250326][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.250365][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.250404][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.250449][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.250506][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.250545][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.250568][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.270336][ T1594] ieee802154 phy0 wpan0: encryption failed: -22
[  126.281493][ T1594] ieee802154 phy1 wpan1: encryption failed: -22
[  130.260174][    C1] net_ratelimit: 145906 callbacks suppressed
[  130.260181][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  130.260192][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.260234][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.260273][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.260311][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.260350][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.260388][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.260428][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.260479][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.260540][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.270233][    C1] net_ratelimit: 145121 callbacks suppressed
[  135.270251][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.270249][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  135.270354][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.270396][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.270436][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.270475][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.270514][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.270553][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.270593][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.270631][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.280179][    C1] net_ratelimit: 146320 callbacks suppressed
[  140.280196][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.280235][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.280239][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.280281][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.280320][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.280350][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.280359][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.280398][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.280437][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.280464][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  145.290212][    C1] net_ratelimit: 150011 callbacks suppressed
[  145.290213][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  145.290228][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  145.290270][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  145.290318][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  145.290322][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  145.290358][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  145.290396][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  145.290422][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  145.290452][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  145.290532][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  150.300171][    C1] net_ratelimit: 152452 callbacks suppressed
[  150.300188][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  150.300232][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  150.300272][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  150.300313][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  150.300366][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  150.300405][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  150.300441][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  150.300452][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  150.300560][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  150.300562][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.772558][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  153.772637][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  153.772663][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  155.310161][    C1] net_ratelimit: 152530 callbacks suppressed
[  155.310178][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  155.310225][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  155.310251][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  155.310266][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  155.310307][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  155.310347][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  155.310356][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  155.310386][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  155.310426][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  155.310456][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  159.752840][ T4723] Bluetooth: hci3: command 0x0406 tx timeout
[  160.320225][    C1] net_ratelimit: 150083 callbacks suppressed
[  160.320242][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  160.320250][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  160.320340][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  160.320357][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  160.320380][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  160.320420][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  160.320458][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  160.320471][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  160.320496][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  160.320538][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  165.330174][    C1] net_ratelimit: 148553 callbacks suppressed
[  165.330192][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  165.330194][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  165.330293][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  165.330308][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  165.330334][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  165.330375][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  165.330414][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  165.330453][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  165.330492][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  165.330531][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  170.340200][    C0] net_ratelimit: 150287 callbacks suppressed
[  170.340217][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  170.340245][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  170.340310][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  170.340327][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  170.340412][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  170.340441][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  170.340527][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  170.340550][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  170.340568][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  170.340608][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  175.350167][    C1] net_ratelimit: 145750 callbacks suppressed
[  175.350185][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  175.350233][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  175.350236][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  175.350339][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  175.350348][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  175.350437][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  175.350477][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  175.350517][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  175.350555][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  175.350609][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.430179][ T4710] Bluetooth: hci4: command 0x0406 tx timeout
[  179.430212][ T4710] Bluetooth: hci5: command 0x0406 tx timeout
[  180.360181][    C1] net_ratelimit: 145372 callbacks suppressed
[  180.360198][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  180.360241][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  180.360280][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  180.360320][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  180.360376][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  180.360388][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  180.360415][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  180.360455][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  180.360493][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  180.360494][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  185.370201][    C0] net_ratelimit: 146134 callbacks suppressed
[  185.370218][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  185.370224][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.370327][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.370368][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.370421][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.370460][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.370499][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.370538][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.370576][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.370615][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  187.471295][ T1594] ieee802154 phy0 wpan0: encryption failed: -22
[  187.480570][ T1594] ieee802154 phy1 wpan1: encryption failed: -22
[  190.380180][    C1] net_ratelimit: 148158 callbacks suppressed
[  190.380196][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  190.380240][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  190.380280][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  190.380323][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  190.380424][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  190.380459][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  190.380549][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  190.380568][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  190.380589][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  190.380629][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  195.390184][    C1] net_ratelimit: 149567 callbacks suppressed
[  195.390202][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  195.390233][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  195.390247][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  195.390289][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  195.390328][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  195.390350][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  195.390372][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  195.390452][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:ce:dd:5f:64:f1, vlan:0)
[  195.390472][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  195.390571][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  200.400177][    C1] net_ratelimit: 149552 callbacks suppressed
[  200.400195][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  200.400239][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  200.400294][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  200.400396][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  200.400413][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  200.400494][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  200.400519][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  200.400534][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  200.400574][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  200.400613][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  205.410168][    C1] net_ratelimit: 149693 callbacks suppressed
[  205.410186][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  205.410234][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  205.410277][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  205.410317][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  205.410357][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  205.410397][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  205.410440][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  205.410541][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  205.410637][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  205.410647][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  210.420168][    C1] net_ratelimit: 149312 callbacks suppressed
[  210.420186][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  210.420234][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  210.420270][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  210.420275][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  210.420317][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  210.420357][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  210.420375][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  210.420400][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  210.420497][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  210.420503][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.053405][    C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x2 nice=0 stuck for 50s!
[  211.053450][    C0] Showing busy workqueues and worker pools:
[  211.053456][    C0] workqueue events: flags=0x100
[  211.053497][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=13 refcnt=14
[  211.053514][    C0]     pending: 5*nsim_dev_hwstats_traffic_work, 2*psi_avgs_work, vmstat_shepherd, 4*ovs_dp_masks_rebalance, free_obj_work
[  211.053568][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=13 refcnt=14
[  211.053584][    C0]     in-flight: 865:reg_todo for 29s
[  211.053600][    C0]     pending: psi_avgs_work, nfc_urelease_event_work, delayed_vfree_work, psi_avgs_work, 3*nsim_dev_hwstats_traffic_work, 2*psi_avgs_work, 3*ovs_dp_masks_rebalance
[  211.053655][    C0] workqueue events_unbound: flags=0x2
[  211.053664][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=15 refcnt=16
[  211.053678][    C0]     in-flight: 12:cfg80211_wiphy_work for 144s cfg80211_wiphy_work ,1457:cfg80211_wiphy_work for 62s cfg80211_wiphy_work ,3682:cfg80211_wiphy_work for 135s cfg80211_wiphy_work ,5072:cfg80211_wiphy_work for 132s cfg80211_wiphy_work ,49:cfg80211_wiphy_work for 126s cfg80211_wiphy_work ,13:cfg80211_wiphy_work for 147s cfg80211_wiphy_work ,930:cfg80211_wiphy_work for 145s cfg80211_wiphy_work
[  211.053808][    C0]     pending: macvlan_process_broadcast
[  211.053826][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=27 refcnt=28
[  211.053839][    C0]     in-flight: 5195:cfg80211_wiphy_work for 115s cfg80211_wiphy_work ,60:cfg80211_wiphy_work for 147s cfg80211_wiphy_work ,1191:cfg80211_wiphy_work for 143s cfg80211_wiphy_work
[  211.053894][    C0]     pending: 3*macvlan_process_broadcast, nsim_dev_trap_report_work, 2*macvlan_process_broadcast, nsim_dev_trap_report_work, 3*cfg80211_wiphy_work, 2*nsim_dev_trap_report_work, cfg80211_wiphy_work, macvlan_process_broadcast, toggle_allocation_gate, nsim_dev_trap_report_work, flush_memcg_stats_dwork, cfg80211_wiphy_work, 3*nsim_dev_trap_report_work
[  211.053978][    C0] workqueue events_power_efficient: flags=0x82
[  211.053983][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=4 refcnt=5
[  211.053996][    C0]     in-flight: 5196:gc_worker for 10s
[  211.054014][    C0]     pending: 3*check_lifetime
[  211.054027][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=8 refcnt=9
[  211.054040][    C0]     pending: check_lifetime, neigh_periodic_work, wg_ratelimiter_gc_entries, check_lifetime, 2*neigh_managed_work, crda_timeout_work, do_cache_clean
[  211.054093][    C0] workqueue events_dfl_long: flags=0x2
[  211.054099][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=7 refcnt=8
[  211.054111][    C0]     pending: 7*defense_work_handler
[  211.054126][    C0] workqueue mm_percpu_wq: flags=0x108
[  211.054130][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=4 MAYDAY
[  211.054145][    C0]     pending: vmstat_update
[  211.054156][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.054170][    C0]     pending: vmstat_update
[  211.054225][    C0] workqueue ipv6_addrconf: flags=0x6000a
[  211.054230][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=6 MAYDAY
[  211.054243][    C0]     pending: mayday_cursor_func, addrconf_verify_work
[  211.054264][    C0] workqueue bat_events: flags=0x6000a
[  211.054268][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=51 MAYDAY
[  211.054281][    C0]     in-flight: 2855(RESCUER):batadv_dat_purge for 8s
[  211.054299][    C0]     pending: mayday_cursor_func
[  211.054309][    C0]     inactive: batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_mcast_mla_update, batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, 5*batadv_mcast_mla_update, 2*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_purge_orig, 6*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_purge_orig, 8*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_purge_orig, 5*batadv_tt_purge
[  211.054470][    C0] workqueue hci0: flags=0x20012
[  211.054474][    C0]   pwq 9: cpus=0-1 node=0 flags=0x6 nice=-20 active=1 refcnt=4
[  211.054490][    C0]     in-flight: 4720:hci_cmd_sync_work for 59s
[  211.054509][    C0] workqueue hci1: flags=0x20012
[  211.054513][    C0]   pwq 9: cpus=0-1 node=0 flags=0x6 nice=-20 active=1 refcnt=4
[  211.054527][    C0]     in-flight: 4718:hci_cmd_sync_work for 59s
[  211.054545][    C0] workqueue hci2: flags=0x20012
[  211.054549][    C0]   pwq 9: cpus=0-1 node=0 flags=0x6 nice=-20 active=1 refcnt=4
[  211.054563][    C0]     in-flight: 4711:hci_cmd_sync_work for 59s
[  211.054582][    C0] workqueue bond0: flags=0x2000a
[  211.054586][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=6 MAYDAY
[  211.054599][    C0]     pending: bond_arp_monitor
[  211.054610][    C0] workqueue wg-kex-wg0: flags=0x124
[  211.054615][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.054629][    C0]     in-flight: 4832:wg_packet_handshake_receive_worker for 51s
[  211.054646][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.054665][    C0]     pending: wg_packet_handshake_receive_worker
[  211.054678][    C0] workqueue wg-kex-wg0: flags=0x6
[  211.054683][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  211.054696][    C0]     in-flight: 40:wg_packet_handshake_send_worker for 33s
[  211.054714][    C0] workqueue wg-crypt-wg0: flags=0x128
[  211.054719][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=3 refcnt=6 MAYDAY
[  211.054733][    C0]     in-flight: 4807:wg_packet_encrypt_worker for 57s wg_packet_encrypt_worker
[  211.054754][    C0]     pending: wg_packet_tx_worker
[  211.054765][    C0] workqueue wg-kex-wg1: flags=0x6
[  211.054770][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3
[  211.054783][    C0]     pending: 2*wg_packet_handshake_send_worker
[  211.054795][    C0] workqueue wg-crypt-wg1: flags=0x128
[  211.054800][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=3 refcnt=6 MAYDAY
[  211.054814][    C0]     pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker
[  211.054835][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=2 refcnt=3
[  211.054849][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker
[  211.054865][    C0] workqueue wg-kex-wg2: flags=0x124
[  211.054869][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.054884][    C0]     pending: wg_packet_handshake_receive_worker
[  211.054895][    C0] workqueue wg-kex-wg2: flags=0x6
[  211.054900][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  211.054912][    C0]     pending: wg_packet_handshake_send_worker
[  211.054925][    C0] workqueue wg-crypt-wg2: flags=0x128
[  211.054929][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=4 MAYDAY
[  211.054944][    C0]     pending: wg_packet_encrypt_worker
[  211.054954][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.054968][    C0]     pending: wg_packet_encrypt_worker
[  211.054978][    C0] workqueue wg-kex-wg0: flags=0x124
[  211.054982][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.054997][    C0]     pending: wg_packet_handshake_receive_worker
[  211.055009][    C0] workqueue wg-kex-wg0: flags=0x6
[  211.055014][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  211.055027][    C0]     pending: wg_packet_handshake_send_worker
[  211.055038][    C0] workqueue wg-crypt-wg0: flags=0x128
[  211.055042][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=3 refcnt=6 MAYDAY
[  211.055057][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker
[  211.055078][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.055092][    C0]     pending: wg_packet_encrypt_worker
[  211.055102][    C0] workqueue wg-kex-wg1: flags=0x124
[  211.055106][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.055121][    C0]     pending: wg_packet_handshake_receive_worker
[  211.055133][    C0] workqueue wg-kex-wg1: flags=0x6
[  211.055138][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  211.055150][    C0]     pending: wg_packet_handshake_send_worker
[  211.055162][    C0] workqueue wg-crypt-wg1: flags=0x128
[  211.055167][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=3 refcnt=6 MAYDAY
[  211.055181][    C0]     pending: wg_packet_tx_worker, wg_packet_decrypt_worker, wg_packet_encrypt_worker
[  211.055202][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.055216][    C0]     pending: wg_packet_encrypt_worker
[  211.055226][    C0] workqueue wg-kex-wg2: flags=0x124
[  211.055231][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.055245][    C0]     in-flight: 9:wg_packet_handshake_receive_worker for 56s
[  211.055262][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.055276][    C0]     pending: wg_packet_handshake_receive_worker
[  211.055286][    C0] workqueue wg-crypt-wg2: flags=0x128
[  211.055291][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=4 MAYDAY
[  211.055305][    C0]     pending: wg_packet_encrypt_worker
[  211.055315][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.055330][    C0]     pending: wg_packet_encrypt_worker
[  211.055341][    C0] workqueue wg-kex-wg0: flags=0x6
[  211.055346][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  211.055359][    C0]     pending: wg_packet_handshake_send_worker
[  211.055370][    C0] workqueue wg-crypt-wg0: flags=0x128
[  211.055375][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=3 refcnt=6 MAYDAY
[  211.055389][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker
[  211.055410][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.055424][    C0]     pending: wg_packet_tx_worker
[  211.055434][    C0] workqueue wg-kex-wg1: flags=0x124
[  211.055438][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.055453][    C0]     pending: wg_packet_handshake_receive_worker
[  211.055465][    C0] workqueue wg-kex-wg1: flags=0x6
[  211.055470][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3
[  211.055483][    C0]     pending: 2*wg_packet_handshake_send_worker
[  211.055495][    C0] workqueue wg-crypt-wg1: flags=0x128
[  211.055500][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=4 refcnt=7 MAYDAY
[  211.055514][    C0]     in-flight: 4797:wg_packet_decrypt_worker for 57s wg_packet_decrypt_worker
[  211.055534][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker
[  211.055550][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.055564][    C0]     pending: wg_packet_encrypt_worker
[  211.055574][    C0] workqueue wg-kex-wg2: flags=0x124
[  211.055579][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.055593][    C0]     pending: wg_packet_handshake_receive_worker
[  211.055604][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.055618][    C0]     pending: wg_packet_handshake_receive_worker
[  211.055629][    C0] workqueue wg-kex-wg2: flags=0x6
[  211.055634][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  211.055647][    C0]     pending: wg_packet_handshake_send_worker
[  211.055662][    C0] workqueue wg-crypt-wg2: flags=0x128
[  211.055667][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=4 MAYDAY
[  211.055684][    C0]     pending: wg_packet_encrypt_worker
[  211.055694][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.055708][    C0]     pending: wg_packet_encrypt_worker
[  211.055723][    C0] workqueue hci3: flags=0x20012
[  211.055727][    C0]   pwq 9: cpus=0-1 node=0 flags=0x6 nice=-20 active=1 refcnt=4
[  211.055741][    C0]     in-flight: 4721:hci_cmd_sync_work for 54s
[  211.055759][    C0] workqueue wg-kex-wg0: flags=0x6
[  211.055765][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  211.055777][    C0]     pending: wg_packet_handshake_send_worker
[  211.055789][    C0] workqueue wg-crypt-wg0: flags=0x128
[  211.055793][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=5 MAYDAY
[  211.055808][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker
[  211.055823][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.055837][    C0]     pending: wg_packet_encrypt_worker
[  211.055848][    C0] workqueue wg-kex-wg1: flags=0x124
[  211.055853][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.055867][    C0]     pending: wg_packet_handshake_receive_worker
[  211.055878][    C0] workqueue wg-kex-wg1: flags=0x6
[  211.055883][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  211.055896][    C0]     pending: wg_packet_handshake_send_worker
[  211.055908][    C0] workqueue wg-crypt-wg1: flags=0x128
[  211.055912][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=3 refcnt=6 MAYDAY
[  211.055926][    C0]     pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker
[  211.055947][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=2 refcnt=3
[  211.055961][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker
[  211.055977][    C0] workqueue wg-kex-wg2: flags=0x124
[  211.055981][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3
[  211.055995][    C0]     in-flight: 4820:wg_packet_handshake_receive_worker for 53s
[  211.056011][    C0]     pending: wg_packet_handshake_receive_worker
[  211.056022][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.056036][    C0]     pending: wg_packet_handshake_receive_worker
[  211.056047][    C0] workqueue wg-crypt-wg2: flags=0x128
[  211.056051][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=5 MAYDAY
[  211.056065][    C0]     in-flight: 1077:wg_packet_tx_worker for 53s
[  211.056081][    C0]     pending: wg_packet_encrypt_worker
[  211.056091][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.056105][    C0]     pending: wg_packet_encrypt_worker
[  211.056117][    C0] workqueue hci4: flags=0x20012
[  211.056121][    C0]   pwq 9: cpus=0-1 node=0 flags=0x6 nice=-20 active=1 refcnt=4
[  211.056136][    C0]     in-flight: 51:hci_cmd_sync_work for 33s
[  211.056154][    C0] workqueue wg-kex-wg0: flags=0x6
[  211.056159][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  211.056172][    C0]     pending: wg_packet_handshake_send_worker
[  211.056184][    C0] workqueue wg-crypt-wg0: flags=0x128
[  211.056188][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=5 MAYDAY
[  211.056202][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker
[  211.056218][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.056232][    C0]     pending: wg_packet_encrypt_worker
[  211.056242][    C0] workqueue wg-kex-wg1: flags=0x124
[  211.056246][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.056261][    C0]     pending: wg_packet_handshake_receive_worker
[  211.056273][    C0] workqueue wg-crypt-wg1: flags=0x128
[  211.056277][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=3 refcnt=6 MAYDAY
[  211.056292][    C0]     pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker
[  211.056312][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.056326][    C0]     pending: wg_packet_tx_worker
[  211.056336][    C0] workqueue wg-kex-wg2: flags=0x124
[  211.056341][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.056354][    C0]     pending: wg_packet_handshake_receive_worker
[  211.056365][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.056379][    C0]     pending: wg_packet_handshake_receive_worker
[  211.056390][    C0] workqueue wg-kex-wg2: flags=0x6
[  211.056394][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  211.056407][    C0]     in-flight: 6914:wg_packet_handshake_send_worker for 4s
[  211.056426][    C0] workqueue wg-crypt-wg2: flags=0x128
[  211.056430][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=4 MAYDAY
[  211.056445][    C0]     pending: wg_packet_encrypt_worker
[  211.056455][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.056469][    C0]     pending: wg_packet_encrypt_worker
[  211.056480][    C0] workqueue krds_cp_wq#1/0: flags=0x20002
[  211.056485][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4
[  211.056497][    C0]     pending: rds_send_worker
[  211.056509][    C0] workqueue krds_cp_wq#1/1: flags=0x20002
[  211.056513][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4
[  211.056526][    C0]     pending: rds_send_worker
[  211.056537][    C0] workqueue krds_cp_wq#2/0: flags=0x20002
[  211.056541][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4
[  211.056554][    C0]     pending: rds_send_worker
[  211.056565][    C0] workqueue krds_cp_wq#2/1: flags=0x20002
[  211.056569][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4
[  211.056581][    C0]     pending: rds_send_worker
[  211.056592][    C0] workqueue krds_cp_wq#2/2: flags=0x20002
[  211.056597][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4
[  211.056609][    C0]     pending: rds_send_worker
[  211.056620][    C0] workqueue krds_cp_wq#2/4: flags=0x20002
[  211.056624][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4
[  211.056637][    C0]     pending: rds_send_worker
[  211.056649][    C0] workqueue krds_cp_wq#4/0: flags=0x20002
[  211.056653][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4
[  211.056668][    C0]     pending: rds_connect_worker
[  211.056683][    C0] workqueue hci5: flags=0x20012
[  211.056687][    C0]   pwq 9: cpus=0-1 node=0 flags=0x6 nice=-20 active=1 refcnt=4
[  211.056701][    C0]     in-flight: 4723:hci_cmd_sync_work for 33s
[  211.056720][    C0] workqueue wg-crypt-wg0: flags=0x128
[  211.056724][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=5 MAYDAY
[  211.056739][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker
[  211.056754][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.056768][    C0]     pending: wg_packet_encrypt_worker
[  211.056778][    C0] workqueue wg-kex-wg1: flags=0x6
[  211.056784][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  211.056796][    C0]     pending: wg_packet_handshake_send_worker
[  211.056808][    C0] workqueue wg-crypt-wg1: flags=0x128
[  211.056812][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=5 MAYDAY
[  211.056827][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker
[  211.056842][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.056856][    C0]     pending: wg_packet_encrypt_worker
[  211.056866][    C0] workqueue wg-kex-wg2: flags=0x124
[  211.056870][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.056884][    C0]     pending: wg_packet_handshake_receive_worker
[  211.056895][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.056910][    C0]     pending: wg_packet_handshake_receive_worker
[  211.056920][    C0] workqueue wg-crypt-wg2: flags=0x128
[  211.056924][    C0]   pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=5 MAYDAY
[  211.056939][    C0]     pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker
[  211.056955][    C0]   pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2
[  211.056969][    C0]     pending: wg_packet_encrypt_worker
[  211.056984][    C0] pool 2: cpus=0 node=0 flags=0x2 nice=0 hung=50s workers=7 manager: 10
[  211.057006][    C0] pool 6: cpus=1 node=0 flags=0x2 nice=0 hung=29s workers=8 manager: 4799 idle: 24 4382 4821 4878 26 4806
[  211.057052][    C0] pool 8: cpus=0-1 flags=0x6 nice=0 hung=4s workers=14 manager: 6915
[  211.057069][    C0] pool 9: cpus=0-1 node=0 flags=0x6 nice=-20 hung=0s workers=8 manager: 4722 idle: 4710
[  211.057092][    C0] Showing backtraces of busy workers in stalled worker pools:
[  211.057097][    C0] pool 2:
[  211.057100][    C0] task:kworker/0:3     state:R  running task     stack:0     pid:4797  tgid:4797  ppid:2      task_flags:0x4208060 flags:0x20000010
[  211.057115][    C0] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker
[  211.057124][    C0] Call trace:
[  211.057127][    C0]  __switch_to+0x2b4/0x6e4 (T)
[  211.057140][    C0]  __schedule+0x135c/0x2b00
[  211.057149][    C0]  preempt_schedule_common+0xd4/0x190
[  211.057160][    C0]  preempt_schedule+0x60/0x78
[  211.057169][    C0]  __local_bh_enable_ip+0x16c/0x234
[  211.057178][    C0]  kernel_neon_begin+0x29c/0x400
[  211.057188][    C0]  poly1305_blocks+0x110/0x204
[  211.057199][    C0]  poly1305_update+0x168/0x39c
[  211.057210][    C0]  chacha20poly1305_crypt_sg_inplace+0x888/0xc30
[  211.057221][    C0]  chacha20poly1305_decrypt_sg_inplace+0x6c/0x94
[  211.057232][    C0]  wg_packet_decrypt_worker+0x490/0xa00
[  211.057241][    C0]  process_scheduled_works+0x91c/0x1250
[  211.057251][    C0]  worker_thread+0x798/0xbd0
[  211.057260][    C0]  kthread+0x304/0x3d4
[  211.057268][    C0]  ret_from_fork+0x10/0x20
[  211.057277][    C0] pool 2:
[  211.057279][    C0] task:kworker/0:0     state:R  running task     stack:0     pid:9     tgid:9     ppid:2      task_flags:0x4208060 flags:0x00000010
[  211.057292][    C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker
[  211.057301][    C0] Call trace:
[  211.057303][    C0]  __switch_to+0x2b4/0x6e4 (T)
[  211.057313][    C0]  __schedule+0x135c/0x2b00
[  211.057323][    C0]  preempt_schedule_common+0xd4/0x190
[  211.057333][    C0]  preempt_schedule+0x60/0x78
[  211.057343][    C0]  __local_bh_enable_ip+0x16c/0x234
[  211.057351][    C0]  _raw_spin_unlock_bh+0x3c/0x4c
[  211.057359][    C0]  wg_index_hashtable_insert+0xe8/0x7fc
[  211.057368][    C0]  wg_noise_handshake_create_response+0x274/0x430
[  211.057377][    C0]  wg_packet_send_handshake_response+0xe8/0x264
[  211.057386][    C0]  wg_packet_handshake_receive_worker+0x570/0xcf8
[  211.057395][    C0]  process_scheduled_works+0x91c/0x1250
[  211.057404][    C0]  worker_thread+0x798/0xbd0
[  211.057414][    C0]  kthread+0x304/0x3d4
[  211.057422][    C0]  ret_from_fork+0x10/0x20
[  211.057430][    C0] pool 2:
[  211.057432][    C0] task:kworker/0:4     state:R  running task     stack:0     pid:4807  tgid:4807  ppid:2      task_flags:0x4208060 flags:0x00000010
[  211.057445][    C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker
[  211.057453][    C0] Call trace:
[  211.057455][    C0]  __switch_to+0x2b4/0x6e4 (T)
[  211.057465][    C0]  __schedule+0x135c/0x2b00
[  211.057475][    C0]  preempt_schedule_common+0xd4/0x190
[  211.057485][    C0]  preempt_schedule+0x60/0x78
[  211.057494][    C0]  __local_bh_enable_ip+0x16c/0x234
[  211.057502][    C0]  _raw_spin_unlock_bh+0x3c/0x4c
[  211.057511][    C0]  wg_packet_encrypt_worker+0x121c/0x12a0
[  211.057520][    C0]  process_scheduled_works+0x91c/0x1250
[  211.057529][    C0]  worker_thread+0x798/0xbd0
[  211.057538][    C0]  kthread+0x304/0x3d4
[  211.057546][    C0]  ret_from_fork+0x10/0x20
[  211.057554][    C0] pool 2:
[  211.057557][    C0] task:kworker/0:5     state:R  running task     stack:0     pid:4820  tgid:4820  ppid:2      task_flags:0x4208060 flags:0x00000010
[  211.057569][    C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker
[  211.057577][    C0] Call trace:
[  211.057580][    C0]  __switch_to+0x2b4/0x6e4 (T)
[  211.057589][    C0]  __schedule+0x135c/0x2b00
[  211.057599][    C0]  preempt_schedule_common+0xd4/0x190
[  211.057609][    C0]  preempt_schedule+0x60/0x78
[  211.057619][    C0]  __local_bh_enable_ip+0x16c/0x234
[  211.057627][    C0]  mod_peer_timer+0x21c/0x25c
[  211.057635][    C0]  wg_timers_session_derived+0x5c/0x6c
[  211.057643][    C0]  wg_packet_send_handshake_response+0x118/0x264
[  211.057652][    C0]  wg_packet_handshake_receive_worker+0x570/0xcf8
[  211.057664][    C0]  process_scheduled_works+0x91c/0x1250
[  211.057673][    C0]  worker_thread+0x798/0xbd0
[  211.057683][    C0]  kthread+0x304/0x3d4
[  211.057691][    C0]  ret_from_fork+0x10/0x20
[  211.057699][    C0] pool 2:
[  211.057701][    C0] task:kworker/0:2     state:R  running task     stack:0     pid:1077  tgid:1077  ppid:2      task_flags:0x4208060 flags:0x00000010
[  211.057713][    C0] Workqueue: wg-crypt-wg2 wg_packet_tx_worker
[  211.057721][    C0] Call trace:
[  211.057723][    C0]  __switch_to+0x2b4/0x6e4 (T)
[  211.057733][    C0]  __schedule+0x135c/0x2b00
[  211.057743][    C0]  preempt_schedule_common+0xd4/0x190
[  211.057753][    C0]  preempt_schedule+0x60/0x78
[  211.057762][    C0]  __local_bh_enable_ip+0x16c/0x234
[  211.057770][    C0]  wg_packet_send_queued_handshake_initiation+0x2d0/0x35c
[  211.057780][    C0]  wg_packet_tx_worker+0x674/0x75c
[  211.057788][    C0]  process_scheduled_works+0x91c/0x1250
[  211.057798][    C0]  worker_thread+0x798/0xbd0
[  211.057807][    C0]  kthread+0x304/0x3d4
[  211.057815][    C0]  ret_from_fork+0x10/0x20
[  211.057823][    C0] pool 2:
[  211.057825][    C0] task:kworker/0:6     state:R  running task     stack:0     pid:4832  tgid:4832  ppid:2      task_flags:0x4208060 flags:0x00000010
[  211.057837][    C0] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker
[  211.057846][    C0] Call trace:
[  211.057848][    C0]  __switch_to+0x2b4/0x6e4 (T)
[  211.057858][    C0]  __schedule+0x135c/0x2b00
[  211.057867][    C0]  preempt_schedule_common+0xd4/0x190
[  211.057877][    C0]  preempt_schedule+0x60/0x78
[  211.057887][    C0]  __local_bh_enable_ip+0x16c/0x234
[  211.057895][    C0]  wg_noise_handshake_begin_session+0x698/0x958
[  211.057903][    C0]  wg_packet_handshake_receive_worker+0x5a4/0xcf8
[  211.057912][    C0]  process_scheduled_works+0x91c/0x1250
[  211.057922][    C0]  worker_thread+0x798/0xbd0
[  211.057931][    C0]  kthread+0x304/0x3d4
[  211.057939][    C0]  ret_from_fork+0x10/0x20
[  215.391126][   T31] INFO: task syz.4.368:6904 blocked for more than 144 seconds.
[  215.391146][   T31]       Not tainted syzkaller #0
[  215.391151][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  215.391156][   T31] task:syz.4.368       state:D stack:0     pid:6904  tgid:6903  ppid:4707   task_flags:0x400140 flags:0x00000001
[  215.391172][   T31] Call trace:
[  215.391175][   T31]  __switch_to+0x2b4/0x6e4 (T)
[  215.391193][   T31]  __schedule+0x135c/0x2b00
[  215.391204][   T31]  schedule+0x13c/0x20c
[  215.391214][   T31]  schedule_preempt_disabled+0x18/0x2c
[  215.391224][   T31]  __mutex_lock+0x5d4/0x1078
[  215.391234][   T31]  mutex_lock_nested+0x24/0x30
[  215.391245][   T31]  genl_rcv_msg+0xec/0x620
[  215.391254][   T31]  netlink_rcv_skb+0x238/0x414
[  215.391267][   T31]  genl_rcv+0x38/0x50
[  215.391275][   T31]  netlink_unicast+0x600/0x7f8
[  215.391284][   T31]  netlink_sendmsg+0x648/0x948
[  215.391295][   T31]  __sock_sendmsg+0xc8/0x17c
[  215.391305][   T31]  ____sys_sendmsg+0x3d0/0x6c8
[  215.391316][   T31]  ___sys_sendmsg+0x198/0x224
[  215.391326][   T31]  __sys_sendmsg+0x158/0x204
[  215.391336][   T31]  __arm64_sys_sendmsg+0x88/0x9c
[  215.391347][   T31]  invoke_syscall+0x98/0x244
[  215.391359][   T31]  el0_svc_common+0xec/0x23c
[  215.391370][   T31]  do_el0_svc+0x4c/0x5c
[  215.391380][   T31]  el0_svc+0x60/0x1d8
[  215.391388][   T31]  el0t_64_sync_handler+0x44/0x104
[  215.391395][   T31]  el0t_64_sync+0x198/0x19c
[  215.391407][   T31] 
[  215.391407][   T31] Showing all locks held in the system:
[  215.391411][   T31] locks held by kworker/0:0/9: 4, last CPU#0:
[  215.391418][   T31]  #0: ffff0000f2309d40 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.391447][   T31]  #1: ffff80008f8e7c20 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.391476][   T31]  #2: ffff0000d2571440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xc8/0x430
[  215.391499][   T31]  #3: ffff0000d7cac888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xd0/0x430
[  215.391521][   T31] locks held by kworker/u8:0/12: 3, last CPU#1:
[  215.391527][   T31]  #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.391548][   T31]  #1: ffff80008f917c20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.391570][   T31]  #2: ffff0000f4520800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x464
[  215.391593][   T31] locks held by kworker/u8:1/13: 3, last CPU#1:
[  215.391599][   T31]  #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.391621][   T31]  #1: ffff80008f927c20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.391643][   T31]  #2: ffff0000f4d50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x464
[  215.391664][   T31] locks held by kworker/R-mm_pe/14: 1, on CPU#1:
[  215.391670][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.391701][   T31] locks held by kworker/1:0/24: 2, last CPU#1:
[  215.391708][   T31]  #0: ffff0000d6473140 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.391734][   T31]  #1: ffff80008f9e7c20 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.391757][   T31] locks held by khungtaskd/31: 1, last CPU#1:
[  215.391763][   T31]  #0: ffff800089981820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188
[  215.391787][   T31] locks held by kworker/u8:2/40: 4, on CPU#1:
[  215.391793][   T31]  #0: ffff0000d5a53940 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.391817][   T31]  #1: ffff80008fef7c20 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.391839][   T31]  #2: ffff0000c98d5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xe8/0x484
[  215.391860][   T31]  #3: ffff0000d7ca8d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xf0/0x484
[  215.391882][   T31] locks held by kworker/u8:3/49: 3, last CPU#1:
[  215.391888][   T31]  #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.391909][   T31]  #1: ffff80008ff87c20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.391931][   T31]  #2: ffff0000f4400800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x464
[  215.391952][   T31] locks held by kworker/u9:0/51: 5, on CPU#1:
[  215.391958][   T31]  #0: ffff0000d55f4140 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.391980][   T31]  #1: ffff80008ffa7c20 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.392002][   T31]  #2: ffff0000da6dcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1b0/0x380
[  215.392025][   T31]  #3: ffff0000da6dc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1d8/0x938
[  215.392045][   T31]  #4: ffff80008abef1a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x16c/0x37c
[  215.392067][   T31] locks held by kworker/u8:4/60: 3, last CPU#1:
[  215.392073][   T31]  #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.392094][   T31]  #1: ffff800090fd7c20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.392116][   T31]  #2: ffff0000d1f80800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x464
[  215.392138][   T31] locks held by kworker/1:2/865: 4, on CPU#1:
[  215.392144][   T31]  #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.392166][   T31]  #1: ffff800094397c20 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.392187][   T31]  #2: ffff80008aa8ec80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  215.392208][   T31]  #3: ffff0000d1f80800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x90/0x1ac
[  215.392228][   T31] locks held by kworker/u8:5/930: 3, last CPU#1:
[  215.392234][   T31]  #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.392256][   T31]  #1: ffff8000947b7c20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.392277][   T31]  #2: ffff0000f56c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x464
[  215.392300][   T31] locks held by kworker/0:2/1077: 2, last CPU#0:
[  215.392306][   T31]  #0: ffff0000d981b940 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.392330][   T31]  #1: ffff800094eb7c20 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.392353][   T31] locks held by kworker/u8:6/1191: 3, last CPU#1:
[  215.392359][   T31]  #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.392380][   T31]  #1: ffff800095257c20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.392402][   T31]  #2: ffff0000f5820800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x464
[  215.392423][   T31] locks held by kworker/u8:7/1457: 3, last CPU#1:
[  215.392429][   T31]  #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.392450][   T31]  #1: ffff800095337c20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.392472][   T31]  #2: ffff0000f5500800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x464
[  215.392495][   T31] locks held by kworker/R-ipv6_/2823: 1, on CPU#1:
[  215.392501][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xa58/0xd90
[  215.392524][   T31] locks held by kworker/R-bat_e/2855: 4, last CPU#0:
[  215.392530][   T31]  #0: ffff0000c58e7940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.392551][   T31]  #1: ffff80009a317c60 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.392574][   T31]  #2: ffff800089981820 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x4ec/0x14e0
[  215.392594][   T31]  #3: ffff800089981820 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0x13c/0x888
[  215.392617][   T31] locks held by kworker/u8:8/3682: 3, last CPU#1:
[  215.392623][   T31]  #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.392644][   T31]  #1: ffff80009af37c20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.392666][   T31]  #2: ffff0000f4c70800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x464
[  215.392693][   T31] locks held by klogd/4330: 1, last CPU#1:
[  215.392698][   T31]  #0: ffff800089981820 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xdc/0x5d0
[  215.392720][   T31] locks held by udevd/4341: 3, last CPU#1:
[  215.392725][   T31]  #0: ffff800089cd1438 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x208/0x460
[  215.392749][   T31]  #1: ffff800089aa2bb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64
[  215.392772][   T31]  #2: ffff800089981820 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x98/0x40c
[  215.392794][   T31] locks held by dhcpcd/4399: 1, last CPU#1:
[  215.392800][   T31]  #0: ffff800089aa2bb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64
[  215.392822][   T31] locks held by crond/4473: 1, last CPU#1:
[  215.392828][   T31]  #0: ffff800089aa2bb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64
[  215.392850][   T31] locks held by getty/4491: 2, on CPU#0:
[  215.392856][   T31]  #0: ffff0000c58640a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[  215.392876][   T31]  #1: ffff80009318e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78
[  215.392900][   T31] locks held by syz-executor/4696: 1, last CPU#1:
[  215.392906][   T31]  #0: ffff800089aa2bb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64
[  215.392928][   T31] locks held by udevd/4698: 2, last CPU#1:
[  215.392933][   T31]  #0: ffff0000daa369c0 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4
[  215.392958][   T31]  #1: ffff80008aaf4448 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x58/0xa0
[  215.392981][   T31] locks held by udevd/4700: 1, last CPU#1:
[  215.392987][   T31]  #0: ffff0000daa36400 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4
[  215.393011][   T31] locks held by udevd/4701: 1, last CPU#1:
[  215.393017][   T31]  #0: ffff0000daa35e40 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4
[  215.393041][   T31] locks held by syz-executor/4708: 2, last CPU#1:
[  215.393047][   T31]  #0: ffff800089cd1438 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x190/0x394
[  215.393069][   T31]  #1: ffff800089aa2bb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64
[  215.393091][   T31] locks held by kworker/u9:2/4711: 5, on CPU#1:
[  215.393097][   T31]  #0: ffff0000d3825940 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.393119][   T31]  #1: ffff800099457c20 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.393141][   T31]  #2: ffff0000d6c34ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1b0/0x380
[  215.393163][   T31]  #3: ffff0000d6c340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1d8/0x938
[  215.393182][   T31]  #4: ffff80008abef1a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x16c/0x37c
[  215.393203][   T31] locks held by kworker/u9:3/4718: 4, on CPU#1:
[  215.393209][   T31]  #0: ffff0000d4916940 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.393231][   T31]  #1: ffff800099417c20 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.393252][   T31]  #2: ffff0000c9ca8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1b0/0x380
[  215.393274][   T31]  #3: ffff0000c9ca80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1d8/0x938
[  215.393294][   T31] locks held by kworker/u9:4/4720: 6, on CPU#1:
[  215.393300][   T31]  #0: ffff0000d2d2d940 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.393322][   T31]  #1: ffff800094457c20 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.393343][   T31]  #2: ffff0000d2b84ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1b0/0x380
[  215.393365][   T31]  #3: ffff0000d2b840b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1d8/0x938
[  215.393385][   T31]  #4: ffff80008abef1a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x16c/0x37c
[  215.393405][   T31]  #5: ffff0000d4e6b2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x90/0x420
[  215.393427][   T31] locks held by kworker/u9:5/4721: 5, on CPU#1:
[  215.393433][   T31]  #0: ffff0000cf7dc140 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.393455][   T31]  #1: ffff8000993f7c20 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.393477][   T31]  #2: ffff0000f73b4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1b0/0x380
[  215.393498][   T31]  #3: ffff0000f73b40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1d8/0x938
[  215.393518][   T31]  #4: ffff80008abef1a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x16c/0x37c
[  215.393538][   T31] locks held by kworker/u9:7/4723: 5, on CPU#1:
[  215.393544][   T31]  #0: ffff0000c1ce1940 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.393566][   T31]  #1: ffff8000993d7c20 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.393588][   T31]  #2: ffff0000f4fecea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1b0/0x380
[  215.393609][   T31]  #3: ffff0000f4fec0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1d8/0x938
[  215.393629][   T31]  #4: ffff80008abef1a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x16c/0x37c
[  215.393649][   T31] locks held by udevd/4727: 1, last CPU#1:
[  215.393655][   T31]  #0: ffff0000daa38dc0 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4
[  215.393683][   T31] locks held by kworker/R-bond0/4773: 1, on CPU#1:
[  215.393688][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.393710][   T31] locks held by kworker/R-wg-cr/4780: 1, on CPU#1:
[  215.393716][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.393738][   T31] locks held by kworker/R-wg-cr/4782: 1, on CPU#1:
[  215.393743][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.393765][   T31] locks held by kworker/R-wg-cr/4783: 1, on CPU#0:
[  215.393771][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.393793][   T31] locks held by kworker/R-wg-cr/4788: 1, on CPU#1:
[  215.393798][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.393820][   T31] locks held by kworker/R-wg-cr/4789: 1, on CPU#1:
[  215.393826][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.393848][   T31] locks held by kworker/R-wg-cr/4790: 1, on CPU#1:
[  215.393854][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.393876][   T31] locks held by kworker/R-wg-cr/4795: 1, on CPU#1:
[  215.393881][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.393903][   T31] locks held by kworker/R-wg-cr/4796: 1, on CPU#1:
[  215.393909][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.393930][   T31] locks held by kworker/0:3/4797: 2, last CPU#0:
[  215.393936][   T31]  #0: ffff0000f2e2c140 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.393960][   T31]  #1: ffff800093fe7c20 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.393987][   T31] locks held by kworker/R-wg-cr/4798: 1, on CPU#1:
[  215.393993][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.394015][   T31] locks held by kworker/1:4/4799: 1, on CPU#1:
[  215.394020][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.394043][   T31] locks held by kworker/0:4/4807: 2, last CPU#0:
[  215.394049][   T31]  #0: ffff0000d6471140 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.394073][   T31]  #1: ffff800099317c20 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.394100][   T31] locks held by kworker/0:5/4820: 2, last CPU#0:
[  215.394106][   T31]  #0: ffff0000f6a4ed40 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.394130][   T31]  #1: ffff800099187c20 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.394157][   T31] locks held by kworker/0:6/4832: 3, last CPU#0:
[  215.394163][   T31]  #0: ffff0000d6471540 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.394187][   T31]  #1: ffff8000990e7c20 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.394214][   T31]  #2: ffff0000d7ca8d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x40/0x958
[  215.394235][   T31] locks held by kworker/R-wg-cr/4983: 1, on CPU#1:
[  215.394241][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.394263][   T31] locks held by kworker/R-wg-cr/4984: 1, last CPU#0:
[  215.394268][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.394291][   T31] locks held by kworker/R-wg-cr/4985: 1, on CPU#1:
[  215.394296][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.394319][   T31] locks held by kworker/R-wg-cr/5054: 1, on CPU#1:
[  215.394324][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.394346][   T31] locks held by kworker/R-wg-cr/5055: 1, on CPU#1:
[  215.394351][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.394373][   T31] locks held by kworker/R-wg-cr/5056: 1, on CPU#1:
[  215.394379][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.394402][   T31] locks held by kworker/u8:9/5072: 3, last CPU#1:
[  215.394407][   T31]  #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.394429][   T31]  #1: ffff80009c397c20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.394451][   T31]  #2: ffff0000f51b0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x464
[  215.394472][   T31] locks held by kworker/u8:10/5195: 3, last CPU#1:
[  215.394478][   T31]  #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.394499][   T31]  #1: ffff80009ba57c20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.394521][   T31]  #2: ffff0000d6270800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x464
[  215.394542][   T31] locks held by kworker/u8:11/5196: 3, last CPU#1:
[  215.394548][   T31]  #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.394570][   T31]  #1: ffff8000992e7c20 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.394592][   T31]  #2: ffff800089981820 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x210/0x144c
[  215.394618][   T31] locks held by udevd/6451: 2, last CPU#1:
[  215.394623][   T31]  #0: ffff0000f17324c0 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4
[  215.394647][   T31]  #1: ffff80008aaf4448 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x58/0xa0
[  215.394670][   T31] locks held by udevd/6459: 1, last CPU#1:
[  215.394678][   T31]  #0: ffff0000daa2d2c0 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4
[  215.394705][   T31] locks held by udevd/6460: 1, last CPU#1:
[  215.394712][   T31]  #0: ffff0000c381d700 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x228/0x9bc
[  215.394735][   T31] locks held by udevd/6461: 1, last CPU#1:
[  215.394741][   T31]  #0: ffff0000daa2e9c0 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4
[  215.394765][   T31] locks held by udevd/6462: 2, last CPU#1:
[  215.394770][   T31]  #0: ffff0000daa2ef80 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4
[  215.394794][   T31]  #1: ffff80008aaf4448 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x58/0xa0
[  215.394816][   T31] locks held by udevd/6463: 2, last CPU#1:
[  215.394822][   T31]  #0: ffff0000daa2fb00 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4
[  215.394846][   T31]  #1: ffff80008aaf4448 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x58/0xa0
[  215.394869][   T31] locks held by kworker/R-wg-cr/6630: 1, on CPU#1:
[  215.394875][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.394896][   T31] locks held by kworker/R-wg-cr/6633: 1, on CPU#1:
[  215.394902][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.394924][   T31] locks held by kworker/R-wg-cr/6635: 1, on CPU#0:
[  215.394930][   T31]  #0: ffff8000898271c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344
[  215.394953][   T31] locks held by syz.7.363/6881: 2, on CPU#1:
[  215.394958][   T31]  #0: ffff0000f742cd00 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4
[  215.394982][   T31]  #1: ffff80008aa8ec80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  215.395002][   T31] locks held by syz.5.367/6901: 3, last CPU#1:
[  215.395008][   T31]  #0: ffff80008aaf5fe8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x28/0x50
[  215.395028][   T31]  #1: ffff80008aaf5e20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0xec/0x620
[  215.395047][   T31]  #2: ffff800089981820 (rcu_read_lock){....}-{1:3}, at: netlink_deliver_tap+0x54/0x1dc
[  215.395070][   T31] locks held by syz.4.368/6904: 2, on CPU#1:
[  215.395075][   T31]  #0: ffff80008aaf5fe8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x28/0x50
[  215.395094][   T31]  #1: ffff80008aaf5e20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0xec/0x620
[  215.395114][   T31] locks held by syz.3.370/6909: 1, last CPU#1:
[  215.395119][   T31]  #0: ffff8000897b5c38 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x17c/0x26c
[  215.395144][   T31] locks held by kworker/u8:12/6914: 2, last CPU#1:
[  215.395149][   T31]  #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250
[  215.395171][   T31]  #1: ffff8000998c7c20 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250
[  215.395193][   T31] 
[  215.395196][   T31] =============================================
[  215.395196][   T31] 
[  215.395201][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  216.338070][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[  216.339917][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  216.341991][   T31] Call trace:
[  216.342660][   T31]  show_stack+0x2c/0x3c (C)
[  216.343609][   T31]  __dump_stack+0x30/0x40
[  216.344507][   T31]  dump_stack_lvl+0x30/0x12c
[  216.345462][   T31]  dump_stack+0x1c/0x28
[  216.346347][   T31]  vpanic+0x594/0xaf8
[  216.347149][   T31]  vpanic+0x0/0xaf8
[  216.347932][   T31]  hung_task_panic+0x0/0x2c
[  216.348853][   T31]  kthread+0x304/0x3d4
[  216.349697][   T31]  ret_from_fork+0x10/0x20
[  216.350605][   T31] SMP: stopping secondary CPUs
[  216.351559][   T31] Kernel Offset: disabled
[  216.352443][   T31] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7
[  216.353856][   T31] Memory Limit: none
[  216.741832][   T31] Rebooting in 86400 seconds..