last executing test programs:

31.589937744s ago: executing program 0 (id=1):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040))
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$UI_GET_VERSION(r1, 0x8004552d, 0xffffffffffffffff)

31.570008918s ago: executing program 0 (id=6):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x267, &(0x7f0000000b40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002100)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000400)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f00000007c0)=0x4, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x5c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4803, @void, @val={0x1, 0x1, [{0x6c}]}, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x1, 0x9, 0xf2}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x94, r3, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x50}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x382}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x86f5a88b8a6fbfd3}]]}, 0x94}}, 0x4002001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)

31.467481076s ago: executing program 0 (id=7):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@remote, @private0={0xfc, 0x0, '\x00', 0xfd}, @empty, 0x7, 0x8000, 0x39, 0x500, 0x6, 0x18c0012})
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10)
syz_emit_ethernet(0xaf, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)

31.384047593s ago: executing program 0 (id=8):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000080)='100', 0x3)
r1 = getpid()
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0)
r3 = syz_pidfd_open(r1, 0x0)
setns(r3, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

31.097746376s ago: executing program 0 (id=10):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000004}, 0x1c)
r1 = socket$inet6(0xa, 0x3, 0x6)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x200000, 0x0, 0x0, 0xbf, 0x0, 0x0}, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000440)=<r5=>0x0, &(0x7f0000000480)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000004c0)=@IORING_OP_LISTEN={0x39, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe7, 0x0, 0x1})
io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x4, 0x4)
sendmsg$inet6(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x1a, 0xffff, {<r7=>0xffffffffffffffff}, {0xffffffffffffffff}, 0xfffffffffffff2e3, 0x4})
prctl$PR_SCHED_CORE(0x3e, 0x0, r7, 0x1, &(0x7f0000000580))
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0xc}}], 0x1, 0x4000000)
getsockname$packet(r0, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="db2a7e190f7c3258c11b000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x47, &(0x7f00000000c0)=""/71, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

24.333163831s ago: executing program 4 (id=39):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xbfffffff}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
socket$pptp(0x18, 0x1, 0x2)
r3 = memfd_secret(0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000040)={0xb, 0x9, 0x4, 0x80, 0x1, 0x0, [{0x4, 0x9, 0x800, '\x00', 0x600}]})
fsmount(r2, 0x1, 0x9)

24.33284484s ago: executing program 4 (id=40):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x48050)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x3}, 0x4)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f00000003c0)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0)

24.332138603s ago: executing program 4 (id=41):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009f40)=[{{&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/62, 0x3e}], 0x1, &(0x7f0000000140)=""/12, 0xc}, 0x7}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/218, 0xda}, {&(0x7f0000002600)=""/49, 0x31}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x5, &(0x7f00000036c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000046c0)=@vsock, 0x80, &(0x7f0000005c40)=[{&(0x7f0000004740)=""/226, 0xe2}, {&(0x7f0000004840)=""/4096, 0x1000}, {&(0x7f0000005840)=""/212, 0xd4}, {&(0x7f0000005940)=""/70, 0x46}, {&(0x7f00000059c0)=""/235, 0xeb}, {&(0x7f0000005ac0)=""/57, 0x39}, {&(0x7f0000005b00)=""/126, 0x7e}, {&(0x7f0000005b80)=""/11, 0xb}, {&(0x7f0000005bc0)=""/102, 0x66}], 0x9, &(0x7f0000005d00)=""/214, 0xd6}, 0xb6f}, {{&(0x7f0000005e00)=@ax25={{0x3, @rose}, [@bcast, @netrom, @default, @null, @bcast, @bcast, @netrom, @null]}, 0x80, &(0x7f00000060c0)=[{&(0x7f0000005e80)=""/125, 0x7d}, {&(0x7f0000005f00)=""/166, 0xa6}, {&(0x7f0000005fc0)=""/26, 0x1a}, {&(0x7f0000006000)=""/185, 0xb9}], 0x4}, 0x8}, {{&(0x7f0000006100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000006580)=[{&(0x7f0000006180)=""/189, 0xbd}, {&(0x7f0000006240)=""/126, 0x7e}, {&(0x7f00000062c0)=""/124, 0x7c}, {&(0x7f0000006340)=""/2, 0x2}, {&(0x7f0000006380)=""/207, 0xcf}, {&(0x7f0000006480)=""/215, 0xd7}], 0x6, &(0x7f0000006600)=""/137, 0x89}, 0x7}, {{&(0x7f00000066c0), 0x80, &(0x7f0000007bc0)=[{&(0x7f0000006740)}, {&(0x7f0000006780)=""/178, 0xb2}, {&(0x7f0000006840)=""/25, 0x19}, {&(0x7f0000006880)=""/4096, 0x1000}, {&(0x7f0000007880)=""/170, 0xaa}, {&(0x7f0000007940)=""/126, 0x7e}, {&(0x7f00000079c0)=""/243, 0xf3}, {&(0x7f0000007ac0)=""/227, 0xe3}], 0x8, &(0x7f0000007c40)=""/77, 0x4d}, 0x800}, {{0x0, 0x0, &(0x7f0000007f00)=[{&(0x7f0000007cc0)=""/83, 0x53}, {&(0x7f0000007d40)=""/242, 0xf2}, {&(0x7f0000007e40)=""/82, 0x52}, {&(0x7f0000007ec0)=""/40, 0x28}], 0x4, &(0x7f0000007f40)=""/234, 0xea}}, {{&(0x7f0000008040)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000082c0)=[{&(0x7f00000080c0)=""/201, 0xc9}, {&(0x7f00000081c0)=""/208, 0xd0}], 0x2, &(0x7f0000008300)=""/22, 0x16}, 0xd}, {{&(0x7f0000008340)=@rc, 0x80, &(0x7f0000008a40)=[{&(0x7f00000083c0)=""/8, 0x8}, {&(0x7f0000008400)=""/212, 0xd4}, {&(0x7f0000008500)=""/228, 0xe4}, {&(0x7f0000008600)=""/187, 0xbb}, {&(0x7f00000086c0)=""/244, 0xf4}, {&(0x7f00000087c0)=""/195, 0xc3}, {&(0x7f00000088c0)=""/59, 0x3b}, {&(0x7f0000008900)=""/132, 0x84}, {&(0x7f00000089c0)=""/79, 0x4f}], 0x9, &(0x7f0000008b00)=""/249, 0xf9}, 0x10000000}, {{0x0, 0x0, &(0x7f0000009e00)=[{&(0x7f0000008c00)=""/196, 0xc4}, {&(0x7f0000008d00)=""/232, 0xe8}, {&(0x7f0000008e00)=""/4096, 0x1000}], 0x3, &(0x7f0000009e40)=""/250, 0xfa}, 0x8}], 0xa, 0x10000, 0x0)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000058)

24.330058652s ago: executing program 4 (id=45):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x8042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace\x00', 0x0, 0x42)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000580), 0x8, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000600)='./bus\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000680)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0/file1\x00', 0x200)
fallocate(r1, 0x0, 0x0, 0x8ffff)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', 0x143042, 0x0)
pwritev2(r2, &(0x7f0000000d00)=[{&(0x7f0000000d40)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)

24.178418484s ago: executing program 4 (id=46):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xffffffffffffff57, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

23.675881024s ago: executing program 4 (id=54):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000)

23.586331125s ago: executing program 32 (id=54):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a78000000060a010400000000000000000a0004050900010073797a310000000054106b64480001800a000100696e6e6572000000380002800800044000000012140005800c0020007061796c6f616400040002800800034000000002080002400000008408000140000000000900020073797a3200000000909d985a58773972140000001100010000000000000000000100000a42f4a70712f33a4c5b09af16535371fb7d239b44eaf97fcfdda3ff28c101ff07591d517ecf904a977652a716fe21cd484f6e0b228ae2ecc8ace0246ca1cb75a3c087ec4a2c561680ce48ba41e59b30eeba90ad80042ab2759ddaf76c2d6e3972c1b2b8575b3365a8202343f64043c3c7438e2b41691fbb534873d997e34035620364b93b15ec691c61d907b47e790d5cbcf4f5581c1ecfecee54e7023376d9572a3fc6c8531121340d7290840da78c6fba3ec11d881ad4c378ac39010a9e66ba18c8ba9de8b9c4c3427997d9b815be9703c0365e6257c082f66d9620157db798cb713ed968d387b314d1ee943b10f566a16767111e457048"], 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000)

17.840208396s ago: executing program 1 (id=133):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2016}}}, 0x7)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400))
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nouid32}, {@test_dummy_encryption}]}, 0xff, 0x47b, &(0x7f00000005c0)="$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")
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f0000000300))
mount$bind(0x0, &(0x7f0000002600)='.\x00', 0x0, 0x21, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd20e08}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x30}}, 0x4040)

17.179854927s ago: executing program 1 (id=143):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000780)={0x1d, r1}, 0x10)
sendmmsg$sock(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="0100000003000000640000f9ffffffffffffff000000000000000000000000000000000000000000020f5800000000000200000001000000", 0x48}, {0x0}, {&(0x7f0000000980)="3c288d8b3b7d97f8c475ed07c88ca0836243c44dddf9e0f57bfa33a44b9d48f76902f42fc722f03e6dd8ce26c87191adc51558ec6f6c4d9098317c377d4fa22032bc971b1f810292053dcf6ac06c8903c5", 0x50}], 0x3}}], 0x2, 0x20004090)

17.040256012s ago: executing program 1 (id=145):
r0 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r0, 0x110, 0x4, 0x0, 0x4)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x280d018, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}, {@rodir}, {@shortname_lower}, {@uni_xlate}, {@fat=@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_mixed}, {@rodir}, {@numtail}, {@fat=@nfs_stale_rw}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@numtail}]}, 0x81, 0x2b2, &(0x7f00000006c0)="$eJzs3c+KI0UYAPCvJ52ZjArJwZMINujB07CzT7BBRljMSemDXlTcLMgkLEwgsCLEPXnxJHjyHXwHH8CLb+DBo+DNPYgtSXf+TmfYSMwuO7/fZb6uqq+6qrrmDwNd+ezN4eWDR6OHT77+LVqtJI7uxb14mkQnjmLumwAAXiZPiyL+LEoRxze2TWf1Rbu6OjrMCAGAfVv//Q8A3AYfffzJB91e7+LDLGtFDL8d50lEDJNxXtZ3H8aXMYh+3Il2/B1RLJTxa/d7F5Fm2fyfAePTyCOGn/5SXXf/iJjln0c7Otfz37/fuzjPSvHOcDLOp3eefm3GK0lEt0jKju5GO16PKJpRdbLMv1uTH/lxvPv2j9X4/+nHWbTj1y/iUQziwayLiMUfPOdZ9l7xw1/flTPII5LJOD+ZtVsqGod4HgAAAAAAAAAAAAAAAAAAAAAA3A5n2UJn5fycZH4a4NlZbf1kdj5Qo+Z8oOqEn8nK+Tx3siybH+MzzptR5qfxRhrpc508AAAAAAAAAAAAAAAAAAAAvCBGj7+6/Hww6F+tBT8XmyU1QfVGf1Ql6UpVul51cz81weVPEbtnPUsQjWpog+TaLeYTeuYO0+2NT3YZ2GldP3G0bQ3TQZSD/373RXhrpwlOg+I/rPN8d003yQ2NGzF63KrfJCs787Tq7Go0e0Cn2zbtelDULF1ja9bxnvbY8av73bTTGTcXi7nepjV9kislzT1/p2xI/o8fPwAAAAAAAAAAAAAAAAAAwIrlS7/x+7XKJ89lSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwcMvP/18E0dks2QwmVXK/Ln0jOLka1dy2c+BpAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8JL7NwAA//976VIv")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='.\x00', 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
getdents64(r1, &(0x7f00000009c0)=""/59, 0x5e)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

16.999265118s ago: executing program 1 (id=146):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='1\n', 0x2)
close(0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write(r2, &(0x7f00000004c0)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f0000000880))
write(r3, &(0x7f0000000600)='loop\n', 0x5)
close(r3)
symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
write(r4, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e)
nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0)
read(0xffffffffffffffff, &(0x7f00000009c0), 0x100)

16.384964226s ago: executing program 1 (id=157):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x40)
write(r1, &(0x7f00000002c0)='27', 0x2)
setns(0xc9, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
capset(&(0x7f0000000300)={0x20080522}, 0x0)
socket$inet(0x2b, 0x1, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x20000402, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r0, &(0x7f0000000740), &(0x7f0000000780)=""/27}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x29, 0xa, 0xf, 0x6, 0x1, @private0, @mcast2, 0x40, 0x700, 0x6, 0x5f37}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000b00)={0x2020}, 0x2020)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x400})
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000000))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x591, 0xe0, 0xd6}]})

16.043943214s ago: executing program 33 (id=10):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000004}, 0x1c)
r1 = socket$inet6(0xa, 0x3, 0x6)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x200000, 0x0, 0x0, 0xbf, 0x0, 0x0}, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000440)=<r5=>0x0, &(0x7f0000000480)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000004c0)=@IORING_OP_LISTEN={0x39, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe7, 0x0, 0x1})
io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x4, 0x4)
sendmsg$inet6(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x1a, 0xffff, {<r7=>0xffffffffffffffff}, {0xffffffffffffffff}, 0xfffffffffffff2e3, 0x4})
prctl$PR_SCHED_CORE(0x3e, 0x0, r7, 0x1, &(0x7f0000000580))
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0xc}}], 0x1, 0x4000000)
getsockname$packet(r0, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="db2a7e190f7c3258c11b000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x47, &(0x7f00000000c0)=""/71, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

15.893483429s ago: executing program 1 (id=165):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x14e24, 0x1000}, 0x1c)
connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c)
sendmmsg(r1, &(0x7f00000005c0), 0x4ff, 0x0) (fail_nth: 10)

5.402532655s ago: executing program 6 (id=301):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x1000c40, &(0x7f0000000200), 0x5, 0x51c, &(0x7f0000000480)="$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")
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$inet(0x2, 0x2, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000ec0)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f00)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=@newtfilter={0x78, 0x2c, 0xf2f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r3, {0xc, 0xa}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x1}, {0x7}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x200, 0x4, 0x78f}}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a40)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000b00)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000bc0)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f0000000c40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00), &(0x7f0000000a40)=ANY=[], 0x835, 0x0)
syz_usbip_server_init(0x0)

4.183499756s ago: executing program 5 (id=309):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000000)=0x2, 0x4)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x10, 0x200)
ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000001c0))
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)

4.137198599s ago: executing program 3 (id=310):
r0 = socket$rds(0x15, 0x5, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffff6a00084fa53b7fdd6000006b00183afffc020000000000000000000000000000fe8000000000000000000000000000aa8700907800000000fe8000000000000000000000000000aa"], 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000001c0)=0x1, 0x4)
syz_emit_ethernet(0x13e, &(0x7f0000001bc0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x2}}, {@mpls_uc={0x8847, {[{0x8, 0x0, 0x1}, {0xc}, {0x2, 0x0, 0x1}], @ipv4=@tipc={{0x2f, 0x4, 0x0, 0x36, 0x11c, 0x64, 0x0, 0xe9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xf, 0x12, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2a, 0x3, [{0x3, 0x4, "7b90"}, {0x0, 0x12, "8854828d3e651a8974025546a25d91c2"}, {0x7, 0xe, "fc800884bf35024d0767f157"}]}, @timestamp_addr={0x44, 0xc, 0xd2, 0x1, 0xe, [{@rand_addr=0x64010100, 0x1}]}, @cipso={0x86, 0x14, 0x0, [{0x1, 0xe, "8add4d1fb13689a124266261"}]}, @timestamp_prespec={0x44, 0x2c, 0x3e, 0x3, 0x4, [{@rand_addr=0x64010101, 0xfffeffff}, {@multicast2}, {@local}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @cipso={0x86, 0x1c, 0x0, [{0x0, 0x10, "6ac0f84da10e29bfa26a303cda29"}, {0x2, 0x6, "27d6f89e"}]}]}}, @name_distributor={{0x60, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0xb, 0x0, 0x0, 0x7, 0xff01, 0x2, 0x4e24, 0x4e24, 0x1, 0x3, 0x0, 0x0, 0x1}, [{0x8, 0xed3, 0x80000001, 0x1, 0x1, 0x8, 0xd, 0x7}, {0x2, 0xff, 0x2, 0x80, 0xdf, 0x7fffffff, 0xe, 0x5}]}}}}}}, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10)

4.09554106s ago: executing program 3 (id=311):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x73000000, 0x0, 0x1}, 0x24040084)

4.018300297s ago: executing program 3 (id=312):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000780)={0x1d, r1}, 0x10)
sendmmsg$sock(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="0100000003000000640000f9ffffffffffffff00000000000000000000000000000000000000000000000000000000080200000001000000", 0x48}, {0x0}, {&(0x7f0000000980)="3c288d8b3b7d97f8c475ed07c88ca0836243c44dddf9e0f57bfa33a44b9d48f76902f42fc722f03e6dd8ce26c87191adc51558ec6f6c4d9098317c377d4fa22032bc971b1f810292053dcf6ac06c8903c5", 0x50}], 0x3}}], 0x2, 0x20004090)

3.894964189s ago: executing program 3 (id=313):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='3', 0x4e)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
unshare(0x42000000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5500000018007f5f00fe01b2a4a2809302060000fd00f005020500130a0007003500281014000000190005407f0a006d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))

3.841779912s ago: executing program 6 (id=314):
io_uring_setup(0x6d1a, &(0x7f00000002c0)={0x0, 0x31cd, 0x10000, 0x2, 0x12c}) (async)
io_uring_setup(0x6d1a, &(0x7f00000002c0)={0x0, 0x31cd, 0x10000, 0x2, 0x12c})
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004800)
r3 = fsopen(&(0x7f0000000480)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r1, r4, 0x16}, 0x14) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r1, r4, 0x16}, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800)
setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000500)=r1, 0x4)
syz_emit_ethernet(0x141, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x10b, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "00030000b81a68e356000000"}, {0x3, 0x1, '\x00\x00\x00\x00\x00\x00'}, {0x18, 0x12, "7c5eedeead5d05b87f9a168ce9fa5053c7dba3f0bfbdedf001ccf4f4c7e1c0ffffffdbd75df7cd7eeab451ca0a9ee0f0146904f6d1d7f3ba386b75cb6cb259f3cf09c554b9ca2ceafb4e1735936011a5fb6caedf2de4d3d66ef12adef12a2e51ee8dbcc44a35c94addd32e245f8bb0ef39b811d2b15fbbd165ede9c4b62806d93140e62eec2ca5a8c75f5cc4f8ed50c13b"}]}}}}}}, 0x0)
r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff)
write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
write$binfmt_elf64(r7, &(0x7f0000000200)=ANY=[], 0x1cb)
close(r7)
execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0)

3.787043753s ago: executing program 5 (id=315):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x200080d1)
socket$kcm(0x2, 0x3, 0x2)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x19ff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.712050045s ago: executing program 5 (id=317):
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x80080, &(0x7f00000000c0)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f0000000540)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x260000, 0x0)
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x48, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x994}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x8)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000ac0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socket$igmp(0x2, 0x3, 0x2)
connect$unix(r6, &(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000bc0), 0x318, 0x0)
recvmmsg(r6, &(0x7f0000000c00), 0x10106, 0x2, 0x0)
sched_setaffinity(r5, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)

3.538900882s ago: executing program 6 (id=318):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x40, r3, 0x1, 0x70bd2e, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x53d}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008084}, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x14e24, 0x1000}, 0x1c)
connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c)
sendmmsg(r1, &(0x7f00000005c0), 0x4ff, 0x0)

3.122121819s ago: executing program 6 (id=319):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x810, &(0x7f0000000a00)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./bus\x00', 0x1c5)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write(r2, &(0x7f00000002c0)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe0, 0x14, 0x4, 0x70bd2b, 0x25dfdbfe, {0x28, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "eebd447d3425a1628bac985824867b57aa68f80ede7249f3087a9e83641c463ec6cabe514425f9a1589993405edb1a47a9cb5b6c22090d459df5d571c3eabca907faabe5fd74efdf065b3cf73c80afbbc7e8b31a693c53acc84003520bfd7dbeadfe2fab690c45f0a48d24b2eae5301bdba530ac3c0771f22cb29038481962ac8fa58b34b89a25899ed874b98cc2f3bfbb695c9e0b7d1c70200161046d77e8180671f448dffe4a302d44e72f96a9a8f0d63acdbf38e5629a1556cb21219ee6f9ebe1517d3e"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x20040004)
mount$overlay(0x0, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, &(0x7f0000001000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$trusted_overlay_origin(&(0x7f0000001040)='./file0/file1\x00', &(0x7f0000001080), 0x0, 0x0, 0x3)

3.121580335s ago: executing program 3 (id=320):
socket$nl_route(0x10, 0x3, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) (async, rerun: 32)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x3, 0x2003, 0x8}, 0x50) (async)
r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000780)='_', 0x1, 0xfffffffffffffffe) (async)
pwrite64(0xffffffffffffffff, &(0x7f00000007c0)="af", 0x1, 0xe) (async)
r5 = add_key$user(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880), 0x390, 0xfffffffffffffffd) (async)
r6 = add_key$user(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, &(0x7f0000000940)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a3", 0xcc, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000a40)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={'sha256\x00'}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32)
r8 = socket$packet(0x11, 0x2, 0x300) (rerun: 32)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000680)=r7, 0x4) (async)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000800) (async)
ioctl$VIDIOC_QBUF(r1, 0xc058ff0b, &(0x7f0000000000)=@multiplanar_userptr={0xfffffffe, 0x4, 0x4, 0x100, 0x10001, {0x0, 0x2710}, {0x976ddd1c1037d5b9, 0xc, 0x4, 0xe, 0x5, 0x0, "899fe086"}, 0x9e, 0x2, {0x0}, 0x80})
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0xa0080a, 0x0) (async)
chdir(&(0x7f00000002c0)='./bus\x00') (async, rerun: 64)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) (rerun: 64)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r9, &(0x7f00000003c0)='27', 0x2) (async)
mkdirat(0xffffffffffffffff, 0x0, 0x0) (async)
mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000004c0)={0x100028, 0x100000, 0x100000, {r9}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff)

2.905546001s ago: executing program 2 (id=321):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15f19d0a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
read(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f00000003c0), &(0x7f0000000400)=@tcp6=r1}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="b0", 0x1}], 0x1}}], 0x1, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180))
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', r4, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.815051369s ago: executing program 2 (id=322):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x80350000, 0x0, 0x1}, 0x24040084)

1.972461533s ago: executing program 6 (id=323):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000780)={0x1d, r1}, 0x10)
sendmmsg$sock(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="0100000003000000640000f9ffffffffffffff00000000000000000000000000000000000000000000000000000000090200000001000000", 0x48}, {0x0}, {&(0x7f0000000980)="3c288d8b3b7d97f8c475ed07c88ca0836243c44dddf9e0f57bfa33a44b9d48f76902f42fc722f03e6dd8ce26c87191adc51558ec6f6c4d9098317c377d4fa22032bc971b1f810292053dcf6ac06c8903c5", 0x50}], 0x3}}], 0x2, 0x20004090)

1.934875109s ago: executing program 5 (id=324):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x3, 0x0, 0x0}, 0x94)
r0 = io_uring_setup(0x3eaa, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x0, 0x2c1})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4095, 0x440000}], 0x100000000000011a)
syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000001340)=[{&(0x7f0000001380)=""/54, 0x7ffff000}, {&(0x7f00000013c0)=""/152, 0x98}], 0x2, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001680), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000016c0)={{0x3, 0xffff, 0x1, 0x1}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$input_event(r2, &(0x7f0000001740)={{}, 0x1, 0x6, 0x1}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000001540)={0x2, <r3=>0xffffffffffffffff, 0x80000}, &(0x7f0000001580)=0xc)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000015c0)={<r4=>0x0, 0x4}, &(0x7f0000001600)=0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4007}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1, 0x10, &(0x7f00000018c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f0000001a00)="b800000500000000", &(0x7f0000001a40)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000001640)={0x600, 0x0, 0xfaa1, 0x1, r4}, 0x10)
r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x52424752, 0x9, 0xb, [{0xfffffffe}, {0x0, 0x1}, {}, {}, {0x9}, {0x0, 0x6}], 0x0, 0x0, 0x0, 0x1, 0x5}})

1.929888925s ago: executing program 2 (id=325):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000400))
capset(&(0x7f0000000140)={0x20080522}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x4})
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="82", 0x1}, {&(0x7f0000000340)='v', 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18, 0x29, 0x4, {0xff}}}], 0x18}}], 0x2, 0x4404c880)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000761c0ada03000000d45eba2bffc74bc8bfcc5d2a9232561919000340ff7f0000a00000fe72000b0900020000"], 0x38}, 0x1, 0x0, 0x0, 0x400c814}, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='.\x02\x00', 0x22000402, &(0x7f0000000580)={[{@noinit_itable}, {@init_itable}, {@noinit_itable}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@usrquota}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@resgid}, {@nolazytime}, {@data_ordered}], [], 0x2c}, 0x1, 0x4fb, &(0x7f0000000800)="$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")

1.681587s ago: executing program 6 (id=326):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0xfffffe14)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009900", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x581bc0488f52ec67}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f00000000c0)={0x7, 0x9, 0x81, 0x3})
write$P9_RLERRORu(r2, 0x0, 0x0)

1.546378242s ago: executing program 2 (id=327):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='27', 0x2)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
file_getattr(r0, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', &(0x7f00000001c0), 0x18, 0x800) (async)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f00000011c0)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

904.640149ms ago: executing program 5 (id=328):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x800714, &(0x7f0000000080)={[{@user_xattr}]}, 0x1, 0x4d9, &(0x7f0000000540)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl(r0, 0x1, &(0x7f0000000a80))
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)

672.224915ms ago: executing program 34 (id=165):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x14e24, 0x1000}, 0x1c)
connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c)
sendmmsg(r1, &(0x7f00000005c0), 0x4ff, 0x0) (fail_nth: 10)

625.173834ms ago: executing program 5 (id=330):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000680)=0x5)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000006c0)={0xffff, 0xd, 0x10000, 0x1, 0x1a, "c57c0f9d0431a32104a818bb9da3745e6e9896"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000700)={0xffff, 0x3, 0xfa3f, 0x10001, 0x18, "74251cc79842d456f7ddd1a80c98f297ab4e5e"})
socket$kcm(0x23, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000240)=0x79, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$bt_hci(r5, 0x0, 0x3, 0x0, &(0x7f0000000280))
bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000003c0)=0xdf8, 0x4)
writev(r4, &(0x7f0000000400)=[{&(0x7f0000000740)="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", 0x225}, {0x0}], 0x2)
write(r4, &(0x7f0000000980)="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", 0x5c5)
chdir(0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000f80)='./file5\x00', 0x61c0, 0x700)
r6 = syz_open_dev$usbfs(&(0x7f0000000fc0), 0x5, 0x20100)
ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000001000)={0x3, 0xfffffffe})

579.231387ms ago: executing program 2 (id=331):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x14e24, 0x1000}, 0x1c)
connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40805}, 0x10)
sendmmsg(r1, &(0x7f00000005c0), 0x4ff, 0x0)

377.366357ms ago: executing program 2 (id=332):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0x1, 0x80001) (async)
unshare(0x28000600) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x133)
write(r2, &(0x7f0000000180)='3', 0x4e) (async)
setns(0xc9, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) (async)
socket$inet6_udp(0xa, 0x2, 0x0)

0s ago: executing program 3 (id=333):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2) (async)
getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000400)={<r4=>0x0}, &(0x7f0000000440)=0x4e) (async)
r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000) (async, rerun: 32)
r7 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
r8 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) (async)
connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e20, @empty}, 0x10)
capset(&(0x7f0000000200)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x40})
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x17) (async)
socket$kcm(0x2, 0x1000000000000002, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r4], 0x20}, 0x20004000) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x1ff) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80), 0x200002, 0x0)
fchdir(r9) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x200) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r10 = openat$cgroup_ro(r9, &(0x7f0000000b40)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000b80)=0x1, 0x12) (async, rerun: 64)
r11 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
getsockopt$SO_TIMESTAMP(r11, 0x1, 0x45, 0x0, &(0x7f0000000a00)=0x3e) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts.
[   20.311285][ T4651] cgroup: Unknown subsys name 'net'
[   20.471274][ T4651] cgroup: Unknown subsys name 'cpuset'
[   20.472603][ T4651] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   20.603178][ T4651] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   21.379242][ T4743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   21.388255][ T4744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   21.389954][ T4746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   21.390409][ T4749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   21.390546][ T4749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   21.390788][ T4749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   21.391130][ T4749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   21.391244][ T4749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   21.391738][ T4749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   21.392240][ T4746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   21.392280][ T4749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   21.392465][ T4749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   21.392617][ T4749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   21.392791][ T4749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   21.393416][ T4749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   21.393805][ T4749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   21.394338][ T4749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   21.394442][ T4738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   21.394711][ T4738] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   21.400771][ T4751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   21.401288][ T4751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   21.401495][ T4744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   21.403069][ T4744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   21.403237][ T4744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   21.405025][ T4738] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   21.605586][ T4736] rxe_eth0 speed is unknown, defaulting to 1000
[   21.605960][ T4736] rxe_eth0 speed is unknown, defaulting to 1000
[   21.606203][ T4735] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   21.608240][ T4736] rxe_eth0 speed is unknown, defaulting to 1000
[   21.621566][ T4734] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   21.623685][ T4737] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   21.670882][ T4747] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   21.708432][   T26] rxe_eth0 speed is unknown, defaulting to 1000
[   21.718160][ T4736] infiniband rxe0: set active
[   21.718188][ T4736] infiniband rxe0: added rxe_eth0
[   21.741448][ T4736] RDS/IB: rxe0: added
[   21.741515][ T4736] smc: adding ib device rxe0 with port count 1
[   21.741537][ T4736] smc:    ib device rxe0 port 1 has no pnetid
[   21.753382][ T1160] rxe_eth0 speed is unknown, defaulting to 1000
[   21.756218][ T4736] rxe_eth0 speed is unknown, defaulting to 1000
[   21.829994][ T4736] rxe_eth0 speed is unknown, defaulting to 1000
[   21.865253][ T1160] rxe_eth0 speed is unknown, defaulting to 1000
[   21.865337][   T26] rxe_eth0 speed is unknown, defaulting to 1000
[   21.882633][ T4736] rxe_eth0 speed is unknown, defaulting to 1000
[   21.945012][ T4736] rxe_eth0 speed is unknown, defaulting to 1000
[   21.945405][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.945796][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.945870][ T4735] bridge_slave_0: entered allmulticast mode
[   21.946564][ T4735] bridge_slave_0: entered promiscuous mode
[   21.971324][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.971392][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.971485][ T4735] bridge_slave_1: entered allmulticast mode
[   21.972062][ T4735] bridge_slave_1: entered promiscuous mode
[   22.009450][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.009484][ T4734] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.009570][ T4734] bridge_slave_0: entered allmulticast mode
[   22.012875][ T4734] bridge_slave_0: entered promiscuous mode
[   22.013809][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.013831][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.013913][ T4734] bridge_slave_1: entered allmulticast mode
[   22.014570][ T4734] bridge_slave_1: entered promiscuous mode
[   22.022870][ T4734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   22.025822][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.025849][ T4737] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.025907][ T4737] bridge_slave_0: entered allmulticast mode
[   22.026318][ T4737] bridge_slave_0: entered promiscuous mode
[   22.027633][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.027654][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.027711][ T4737] bridge_slave_1: entered allmulticast mode
[   22.028107][ T4737] bridge_slave_1: entered promiscuous mode
[   22.031467][ T4735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   22.032390][ T4735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   22.038502][ T4735] team0: Port device team_slave_0 added
[   22.039193][ T4735] team0: Port device team_slave_1 added
[   22.048669][ T4734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   22.055416][ T4736] rxe_eth0 speed is unknown, defaulting to 1000
[   22.055915][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_0
[   22.055924][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   22.055937][ T4735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   22.056824][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_1
[   22.056832][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   22.056846][ T4735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   22.085381][ T4737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   22.103077][ T4734] team0: Port device team_slave_0 added
[   22.103966][ T4737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   22.115514][ T4735] hsr_slave_0: entered promiscuous mode
[   22.115877][ T4735] hsr_slave_1: entered promiscuous mode
[   22.116834][ T4734] team0: Port device team_slave_1 added
[   22.121510][ T4737] team0: Port device team_slave_0 added
[   22.121598][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.121666][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.121725][ T4747] bridge_slave_0: entered allmulticast mode
[   22.122502][ T4747] bridge_slave_0: entered promiscuous mode
[   22.123692][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.123715][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.123797][ T4747] bridge_slave_1: entered allmulticast mode
[   22.124231][ T4747] bridge_slave_1: entered promiscuous mode
[   22.139647][ T4737] team0: Port device team_slave_1 added
[   22.164479][ T4747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   22.164742][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_0
[   22.164752][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   22.164764][ T4734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   22.165692][ T4747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   22.167900][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_0
[   22.167908][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   22.167922][ T4737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   22.169567][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_1
[   22.169573][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   22.169585][ T4737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   22.182614][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_1
[   22.182626][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   22.182643][ T4734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   22.198557][ T4737] hsr_slave_0: entered promiscuous mode
[   22.198855][ T4737] hsr_slave_1: entered promiscuous mode
[   22.199037][ T4737] debugfs: 'hsr0' already exists in 'hsr'
[   22.199073][ T4737] Cannot create hsr debugfs directory
[   22.204576][ T4734] hsr_slave_0: entered promiscuous mode
[   22.204851][ T4734] hsr_slave_1: entered promiscuous mode
[   22.205011][ T4734] debugfs: 'hsr0' already exists in 'hsr'
[   22.205020][ T4734] Cannot create hsr debugfs directory
[   22.216521][ T4747] team0: Port device team_slave_0 added
[   22.217268][ T4747] team0: Port device team_slave_1 added
[   22.238442][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_0
[   22.238454][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   22.238466][ T4747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   22.256134][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_1
[   22.256147][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   22.256160][ T4747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   22.321955][ T4747] hsr_slave_0: entered promiscuous mode
[   22.322231][ T4747] hsr_slave_1: entered promiscuous mode
[   22.322403][ T4747] debugfs: 'hsr0' already exists in 'hsr'
[   22.322413][ T4747] Cannot create hsr debugfs directory
[   22.347437][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.347492][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.347549][ T4736] bridge_slave_0: entered allmulticast mode
[   22.347953][ T4736] bridge_slave_0: entered promiscuous mode
[   22.350478][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.350504][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.350589][ T4736] bridge_slave_1: entered allmulticast mode
[   22.350988][ T4736] bridge_slave_1: entered promiscuous mode
[   22.357507][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   22.358350][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   22.366769][ T4736] team0: Port device team_slave_0 added
[   22.377060][ T4736] team0: Port device team_slave_1 added
[   22.391772][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_0
[   22.391786][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   22.391800][ T4736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   22.392457][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_1
[   22.392463][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   22.392474][ T4736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   22.418713][ T4736] hsr_slave_0: entered promiscuous mode
[   22.418983][ T4736] hsr_slave_1: entered promiscuous mode
[   22.419161][ T4736] debugfs: 'hsr0' already exists in 'hsr'
[   22.419171][ T4736] Cannot create hsr debugfs directory
[   22.426471][ T4735] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   22.428671][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   22.436551][ T4735] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   22.438129][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   22.444591][ T4735] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   22.445541][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   22.456993][ T4735] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   22.458249][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   22.459169][ T4734] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   22.461868][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   22.462189][ T4734] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   22.463858][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   22.465839][ T4734] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   22.467944][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   22.479590][ T4734] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   22.482197][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   22.506496][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.506532][ T4735] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.506695][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.506726][ T4735] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.509090][ T4747] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   22.513511][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   22.516766][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.516792][ T4734] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.516875][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.516915][ T4734] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.532972][ T4747] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   22.534378][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   22.544315][ T4747] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   22.545634][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   22.545987][ T4747] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   22.547146][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   22.564501][ T4734] 8021q: adding VLAN 0 to HW filter on device bond0
[   22.564705][ T4737] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   22.565584][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   22.565928][ T4737] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   22.566777][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   22.578872][ T4737] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   22.580540][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   22.580862][ T4737] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   22.582789][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   22.586690][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.586716][ T4747] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.586785][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.586821][ T4747] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.601444][ T4736] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   22.602695][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   22.603168][ T4736] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   22.604501][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   22.605217][ T4735] 8021q: adding VLAN 0 to HW filter on device bond0
[   22.605343][ T4736] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   22.606373][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   22.608248][  T932] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.608903][  T932] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.609160][  T932] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.609400][  T932] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.626332][  T932] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.627040][  T932] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.644900][ T4735] 8021q: adding VLAN 0 to HW filter on device team0
[   22.652395][ T4736] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   22.653397][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   22.657090][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.657121][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.657501][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.657520][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.662943][ T4734] 8021q: adding VLAN 0 to HW filter on device team0
[   22.675156][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.675183][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.675528][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.675546][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.679426][ T4737] 8021q: adding VLAN 0 to HW filter on device bond0
[   22.688585][ T4747] 8021q: adding VLAN 0 to HW filter on device bond0
[   22.697268][ T4735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   22.697284][ T4735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   22.702953][ T4737] 8021q: adding VLAN 0 to HW filter on device team0
[   22.709255][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.709284][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.709635][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.709660][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.739262][ T4747] 8021q: adding VLAN 0 to HW filter on device team0
[   22.751434][ T4737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   22.751450][ T4737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   22.758918][ T4734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   22.766220][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.766246][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.766843][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.766861][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.816821][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0
[   22.823333][ T4736] 8021q: adding VLAN 0 to HW filter on device team0
[   22.823931][ T4747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   22.844102][  T932] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.844129][  T932] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.844776][  T932] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.844811][  T932] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.868543][ T4736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   23.002086][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv0
[   23.025948][ T4734] 8021q: adding VLAN 0 to HW filter on device batadv0
[   23.026788][ T4735] veth0_vlan: entered promiscuous mode
[   23.033195][ T4735] veth1_vlan: entered promiscuous mode
[   23.039222][ T4735] veth0_macvtap: entered promiscuous mode
[   23.043034][ T4735] veth1_macvtap: entered promiscuous mode
[   23.060475][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_0
[   23.062564][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_1
[   23.063885][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0
[   23.066414][ T4737] 8021q: adding VLAN 0 to HW filter on device batadv0
[   23.102052][   T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   23.114075][ T4747] 8021q: adding VLAN 0 to HW filter on device batadv0
[   23.114533][ T4734] veth0_vlan: entered promiscuous mode
[   23.119851][   T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   23.119884][   T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   23.125556][ T4736] veth0_vlan: entered promiscuous mode
[   23.127672][ T4736] veth1_vlan: entered promiscuous mode
[   23.137154][ T4734] veth1_vlan: entered promiscuous mode
[   23.151401][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   23.156507][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   23.156520][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   23.167282][ T4734] veth0_macvtap: entered promiscuous mode
[   23.176720][ T4736] veth0_macvtap: entered promiscuous mode
[   23.177801][ T4736] veth1_macvtap: entered promiscuous mode
[   23.185916][ T4734] veth1_macvtap: entered promiscuous mode
[   23.193012][ T4747] veth0_vlan: entered promiscuous mode
[   23.195413][  T932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   23.195425][  T932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   23.196062][ T4747] veth1_vlan: entered promiscuous mode
[   23.202984][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_0
[   23.203936][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_1
[   23.220727][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0
[   23.221940][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1
[   23.245623][ T4737] veth0_vlan: entered promiscuous mode
[   23.248816][ T4747] veth0_macvtap: entered promiscuous mode
[   23.249244][ T4737] veth1_vlan: entered promiscuous mode
[   23.257188][ T4735] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   23.259684][ T4747] veth1_macvtap: entered promiscuous mode
[   23.290995][  T932] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   23.291043][  T932] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   23.291062][  T932] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   23.291079][  T932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   23.291095][  T932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   23.291110][  T932] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   23.297691][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   23.297708][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   23.304582][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_0
[   23.306436][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_1
[   23.322365][ T4737] veth0_macvtap: entered promiscuous mode
[   23.325224][ T4737] veth1_macvtap: entered promiscuous mode
[   23.336188][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   23.336202][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   23.338122][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_0
[   23.344721][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_1
[   23.432351][ T4941] openvswitch: netlink: ct_state flags b3000008 unsupported
[   23.471107][ T4740] Bluetooth: hci3: command tx timeout
[   23.471325][ T4740] Bluetooth: hci0: command tx timeout
[   23.471489][ T4740] Bluetooth: hci4: command tx timeout
[   23.471711][ T4740] Bluetooth: hci2: command tx timeout
[   23.471871][ T4740] Bluetooth: hci1: command tx timeout
[   23.611245][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   23.611259][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   23.638884][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   23.638897][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   23.649694][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   23.649705][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   23.678510][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   23.678522][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   23.714773][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   23.714787][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   23.718470][ T4950] loop0: detected capacity change from 0 to 256
[   23.723116][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   23.723131][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   23.761554][ T1337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   23.761581][ T1337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   23.761596][ T1337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   23.761611][ T1337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   23.761625][ T1337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   23.762224][ T1337] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   23.762251][ T1337] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   23.762270][ T1337] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   23.762285][ T1337] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   23.810624][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   23.846705][   T12] nvmet: connect request for invalid subsystem testsubsys!
[   23.847065][ T4955] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   23.960857][ T4962] openvswitch: netlink: ct_state flags b3000008 unsupported
[   24.235176][ T4969] loop2: detected capacity change from 0 to 512
[   24.239199][ T4969] EXT4-fs: test_dummy_encryption requires encrypt feature
[   24.644897][ T4985] Bluetooth: MGMT ver 1.23
[   24.813507][ T4994] process 'syz.4.21' launched './file0' with NULL argv: empty string added
[   24.874687][ T4996] loop3: detected capacity change from 0 to 128
[   24.877892][ T4996] FAT-fs (loop3): invalid media value (0x00)
[   24.877911][ T4996] FAT-fs (loop3): Can't find a valid FAT filesystem
[   24.906618][ T5000] loop4: detected capacity change from 0 to 1024
[   24.926905][ T5000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   24.976958][ T4737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   25.036455][ T5006] loop4: detected capacity change from 0 to 2048
[   25.058404][ T5006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   25.147279][ T5011] openvswitch: netlink: ct_state flags b3000008 unsupported
[   25.448873][ T5013] fs-verity (loop4, inode 13): Error -22 reading file data
[   25.449050][ T5013] fs-verity (loop4, inode 13): Error -22 building Merkle tree
[   25.559939][ T4751] Bluetooth: hci1: command tx timeout
[   25.559965][ T4751] Bluetooth: hci2: command tx timeout
[   25.559980][ T4751] Bluetooth: hci4: command tx timeout
[   25.559994][ T4751] Bluetooth: hci0: command tx timeout
[   25.560007][ T4751] Bluetooth: hci3: command tx timeout
[   25.623027][ T5017] Injecting memory failure for pfn 0x1391ff at process virtual address 0x20000000
[   25.627548][ T5017] Memory failure: 0x1391ff: Sending SIGBUS to syz.1.27:5017 due to hardware memory corruption
[   25.627620][ T5017] Memory failure: 0x1391ff: recovery action for dirty LRU page: Recovered
[   25.627634][ T5017] Injecting memory failure for pfn 0x139201 at process virtual address 0x20001000
[   25.629340][ T5017] Memory failure: 0x139201: recovery action for clean LRU page: Recovered
[   25.629358][ T5017] Injecting memory failure for pfn 0x139202 at process virtual address 0x20002000
[   25.632665][ T5017] Memory failure: 0x139202: recovery action for clean LRU page: Recovered
[   25.639137][ T5022] loop2: detected capacity change from 0 to 512
[   25.752642][ T5029] netlink: 'syz.2.31': attribute type 1 has an invalid length.
[   25.752692][ T5029] netlink: 224 bytes leftover after parsing attributes in process `syz.2.31'.
[   25.754701][ T5029] Bluetooth: MGMT ver 1.23
[   25.785895][ T5032] Zero length message leads to an empty skb
[   25.813661][ T5036] loop1: detected capacity change from 0 to 1024
[   25.813994][ T5036] =======================================================
[   25.813994][ T5036] WARNING: The mand mount option has been deprecated and
[   25.813994][ T5036]          and is ignored by this kernel. Remove the mand
[   25.813994][ T5036]          option from the mount to silence this warning.
[   25.813994][ T5036] =======================================================
[   25.824534][ T5036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   25.843115][ T5036] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 1: comm syz.1.34: lblock 1 mapped to illegal pblock 1 (length 5)
[   25.845316][ T5036] EXT4-fs error (device loop1): ext4_ext_remove_space:2977: inode #15: comm syz.1.34: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   25.895074][ T5040] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   25.927357][ T5042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.37'.
[   25.962990][ T4737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   26.027153][ T5046] loop4: detected capacity change from 0 to 1024
[   26.042440][ T5046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   26.285422][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'.
[   26.296379][ T4747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   26.316889][ T5046] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.36: lblock 3 mapped to illegal pblock 3 (length 3)
[   26.321538][ T5046] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   26.321562][ T5046] EXT4-fs (loop4): This should not happen!! Data will be lost
[   26.321562][ T5046] 
[   26.340567][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.38'.
[   26.342185][   T54] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8)
[   26.342744][   T54] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   26.342757][   T54] EXT4-fs (loop4): This should not happen!! Data will be lost
[   26.342757][   T54] 
[   26.344332][ T4737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   26.383303][ T5054] netlink: 112 bytes leftover after parsing attributes in process `syz.4.39'.
[   27.630631][ T4751] Bluetooth: hci3: command tx timeout
[   27.630662][ T4751] Bluetooth: hci0: command tx timeout
[   27.630679][ T4751] Bluetooth: hci4: command tx timeout
[   27.630695][ T4751] Bluetooth: hci2: command tx timeout
[   27.630709][ T4751] Bluetooth: hci1: command tx timeout
[   27.790646][ T4740] Bluetooth: hci0: Opcode 0x0c13 failed: -110
[   29.709920][ T4740] Bluetooth: hci1: command tx timeout
[   29.709946][ T4740] Bluetooth: hci0: command 0x0419 tx timeout
[   29.709964][ T4740] Bluetooth: hci3: command tx timeout
[   29.719874][   T50] Bluetooth: hci2: command tx timeout
[   29.719898][   T50] Bluetooth: hci4: command tx timeout
[   30.950076][ T5063] loop4: detected capacity change from 0 to 128
[   30.968387][ T5063] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   30.994758][ T5071] xt_cgroup: invalid path, errno=-2
[   31.003598][ T5071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'.
[   31.023096][ T5063] overlayfs: failed to resolve './cgroup': -2
[   31.073505][   T30] audit: type=1400 audit(31.040:2): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowerdir" requested=r pid=5067 comm="syz.3.44" name="file0" dev="tmpfs" ino=55
[   31.109239][ T4737] EXT4-fs error (device loop4): ext4_readdir:226: inode #11: comm syz-executor: path /9/file1/lost+found: directory fails checksum at offset 1024
[   31.111429][ T4737] EXT4-fs error (device loop4): ext4_readdir:226: inode #11: comm syz-executor: path /9/file1/lost+found: directory fails checksum at offset 8192
[   31.111751][ T4737] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   31.112389][ T4737] EXT4-fs error (device loop4): ext4_readdir:226: inode #11: comm syz-executor: path /9/file1/lost+found: directory fails checksum at offset 1024
[   31.112660][ T4737] EXT4-fs error (device loop4): ext4_readdir:226: inode #11: comm syz-executor: path /9/file1/lost+found: directory fails checksum at offset 8192
[   31.112882][ T4737] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   31.113220][ T4737] EXT4-fs error (device loop4): ext4_readdir:226: inode #11: comm syz-executor: path /9/file1/lost+found: directory fails checksum at offset 1024
[   31.113373][ T4737] EXT4-fs error (device loop4): ext4_readdir:226: inode #11: comm syz-executor: path /9/file1/lost+found: directory fails checksum at offset 8192
[   31.119303][ T4737] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   31.119639][ T4737] EXT4-fs error (device loop4): ext4_readdir:226: inode #11: comm syz-executor: path /9/file1/lost+found: directory fails checksum at offset 1024
[   31.305866][ T5089] loop3: detected capacity change from 0 to 512
[   31.309862][ T5089] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   31.309882][ T5089] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   31.309888][ T5089] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   31.349916][ T5089] EXT4-fs (loop3): 1 truncate cleaned up
[   31.350377][ T5089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.367641][ T5089] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6542: inode #12: comm syz.3.49: bad extra_isize 62 (inode size 256)
[   31.368128][ T5089] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6542: inode #12: comm syz.3.49: bad extra_isize 62 (inode size 256)
[   31.397258][ T4734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.455016][ T5095] loop3: detected capacity change from 0 to 512
[   31.459992][ T5095] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   31.476669][ T5095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.547419][ T4737] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   31.566936][ T4734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.604950][ T5103] netlink: 56 bytes leftover after parsing attributes in process `syz.2.52'.
[   31.658851][   T54] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   31.733113][ T5110] loop3: detected capacity change from 0 to 512
[   31.790743][ T4751] Bluetooth: hci0: command 0x0419 tx timeout
[   31.827521][   T54] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   31.833729][   T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   31.834131][   T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   31.834322][   T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   31.834658][   T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   31.834863][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   31.853056][  T547] nvmet: connect request for invalid subsystem testsubsys!
[   31.856326][ T5112] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   31.919053][   T54] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   32.025626][   T54] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   32.050186][ T5115] rxe_eth0 speed is unknown, defaulting to 1000
[   32.156704][ T5148] loop2: detected capacity change from 0 to 512
[   32.157104][ T5148] EXT4-fs: Ignoring removed i_version option
[   32.188008][ T5148] EXT4-fs (loop2): 1 orphan inode deleted
[   32.188452][ T5148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.195478][ T5148] EXT4-fs error (device loop2): __ext4_add_entry:2414: inode #2: comm syz.2.61: Directory hole found for htree leaf block 0
[   32.242296][   T54] bridge_slave_1: left allmulticast mode
[   32.242320][   T54] bridge_slave_1: left promiscuous mode
[   32.242815][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.243804][ T4735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.246586][   T54] bridge_slave_0: left allmulticast mode
[   32.246601][   T54] bridge_slave_0: left promiscuous mode
[   32.246692][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.382149][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   32.401563][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   32.430843][   T54] bond0 (unregistering): Released all slaves
[   32.588990][ T5191] netlink: 'syz.2.71': attribute type 3 has an invalid length.
[   32.595252][ T5191] netlink: 'syz.2.71': attribute type 3 has an invalid length.
[   32.595574][ T5191] netlink: 'syz.2.71': attribute type 3 has an invalid length.
[   32.595584][ T5191] netlink: 'syz.2.71': attribute type 3 has an invalid length.
[   32.595654][ T5191] netlink: 'syz.2.71': attribute type 3 has an invalid length.
[   32.595672][ T5191] netlink: 'syz.2.71': attribute type 3 has an invalid length.
[   32.595749][ T5191] netlink: 'syz.2.71': attribute type 3 has an invalid length.
[   32.595758][ T5191] netlink: 'syz.2.71': attribute type 3 has an invalid length.
[   32.595824][ T5191] netlink: 'syz.2.71': attribute type 3 has an invalid length.
[   32.595832][ T5191] netlink: 'syz.2.71': attribute type 3 has an invalid length.
[   32.623466][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'.
[   32.692289][ T5193] team0: Port device team_slave_0 removed
[   32.878155][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.880447][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.882011][ T5115] bridge_slave_0: entered allmulticast mode
[   32.882508][ T5115] bridge_slave_0: entered promiscuous mode
[   32.929547][ T5230] Cannot find set identified by id 65535 to match
[   32.991369][ T5234] openvswitch: netlink: ct_state flags b3000008 unsupported
[   33.194253][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.194286][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.194383][ T5115] bridge_slave_1: entered allmulticast mode
[   33.195003][ T5115] bridge_slave_1: entered promiscuous mode
[   33.219143][ T4428] 8021q: adding VLAN 0 to HW filter on device eth0
[   33.231712][ T5242] FAULT_INJECTION: forcing a failure.
[   33.231712][ T5242] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   33.231731][ T5242] CPU: 0 UID: 0 PID: 5242 Comm: syz.2.75 Not tainted syzkaller #0 PREEMPT 
[   33.231742][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   33.231747][ T5242] Call trace:
[   33.231750][ T5242]  show_stack+0x2c/0x3c (C)
[   33.231766][ T5242]  __dump_stack+0x30/0x40
[   33.231775][ T5242]  dump_stack_lvl+0xd8/0x12c
[   33.231783][ T5242]  dump_stack+0x1c/0x28
[   33.231791][ T5242]  should_fail_ex+0x418/0x58c
[   33.231801][ T5242]  should_fail+0x14/0x24
[   33.231810][ T5242]  should_fail_usercopy+0x20/0x30
[   33.231820][ T5242]  _inline_copy_from_user+0x3c/0x174
[   33.231833][ T5242]  __arm64_sys_setitimer+0x138/0x330
[   33.231845][ T5242]  invoke_syscall+0x98/0x244
[   33.231854][ T5242]  el0_svc_common+0xec/0x23c
[   33.231862][ T5242]  do_el0_svc+0x4c/0x5c
[   33.231870][ T5242]  el0_svc+0x60/0x1d8
[   33.231879][ T5242]  el0t_64_sync_handler+0x44/0x104
[   33.231887][ T5242]  el0t_64_sync+0x198/0x19c
[   33.234217][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.234757][ T4944] rxe_eth0 speed is unknown, defaulting to 1000
[   33.270239][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.359033][ T5184] cgroup: fork rejected by pids controller in /syz3
[   33.385520][ T5115] team0: Port device team_slave_0 added
[   33.387926][ T5115] team0: Port device team_slave_1 added
[   33.411566][ T1197] nvmet: connect request for invalid subsystem testsubsys!
[   33.411701][ T5246] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   33.417554][   T54] hsr_slave_0: left promiscuous mode
[   33.417851][   T54] hsr_slave_1: left promiscuous mode
[   33.418178][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   33.418194][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[   33.418633][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   33.418643][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[   33.443258][   T54] veth1_macvtap: left promiscuous mode
[   33.443314][   T54] veth0_macvtap: left promiscuous mode
[   33.443366][   T54] veth1_vlan: left promiscuous mode
[   33.443412][   T54] veth0_vlan: left promiscuous mode
[   33.601520][   T54] team0 (unregistering): Port device team_slave_1 removed
[   33.609891][   T54] team0 (unregistering): Port device team_slave_0 removed
[   33.697506][ T5273] loop1: detected capacity change from 0 to 128
[   33.697935][ T5273] ext4: Unknown parameter 'subj_role'
[   33.706326][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.706337][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.706350][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.706886][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.706893][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.706904][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.736199][ T5273] syz_tun: entered allmulticast mode
[   33.738302][ T5271] syz_tun: left allmulticast mode
[   33.776782][ T5115] hsr_slave_0: entered promiscuous mode
[   33.777104][ T5115] hsr_slave_1: entered promiscuous mode
[   33.777362][ T5115] debugfs: 'hsr0' already exists in 'hsr'
[   33.777372][ T5115] Cannot create hsr debugfs directory
[   33.842144][ T5278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.80'.
[   33.870036][ T4751] Bluetooth: hci3: command tx timeout
[   33.926465][ T5115] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   33.931972][ T5115] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   33.933130][ T5115] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   33.936808][ T5115] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   33.937230][ T5115] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   33.943887][ T5115] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   33.944207][ T5115] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   33.950515][ T5115] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   34.074077][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.090880][ T5115] 8021q: adding VLAN 0 to HW filter on device team0
[   34.110027][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.110056][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.117563][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.117588][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.148823][ T5310] syzkaller0: entered promiscuous mode
[   34.148843][ T5310] syzkaller0: entered allmulticast mode
[   34.158216][ T5310] trusted_key: encrypted_key: insufficient parameters specified
[   34.160721][ T5310] trusted_key: encrypted_key: insufficient parameters specified
[   34.160822][ T5311] trusted_key: encrypted_key: insufficient parameters specified
[   34.210766][ T4428] 8021q: adding VLAN 0 to HW filter on device eth1
[   34.573334][ T5322] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   34.582485][ T5322] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   34.588849][ T5317] bond0: Unable to set down delay as MII monitoring is disabled
[   34.605669][ T5322] netlink: 104 bytes leftover after parsing attributes in process `syz.3.86'.
[   34.840304][ T5357] loop2: detected capacity change from 0 to 256
[   34.842646][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.983019][ T5373] capability: warning: `syz.2.94' uses deprecated v2 capabilities in a way that may be insecure
[   35.002000][ T5115] veth0_vlan: entered promiscuous mode
[   35.003843][ T5378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.95'.
[   35.027780][ T5115] veth1_vlan: entered promiscuous mode
[   35.034295][ T4428] 8021q: adding VLAN 0 to HW filter on device eth2
[   35.045606][ T5115] veth0_macvtap: entered promiscuous mode
[   35.051257][ T5115] veth1_macvtap: entered promiscuous mode
[   35.059446][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.078666][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.209985][   T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.210670][   T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.210719][   T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.210758][   T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.217817][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.217835][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.237016][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.237030][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.354519][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.55'.
[   35.355740][ T5411] netlink: 14 bytes leftover after parsing attributes in process `syz.5.55'.
[   35.542231][ T4428] 8021q: adding VLAN 0 to HW filter on device eth3
[   35.553013][ T5426] loop5: detected capacity change from 0 to 256
[   35.559117][ T5426] Can't find a SQUASHFS superblock on nullb0
[   35.951226][ T4751] Bluetooth: hci3: command tx timeout
[   35.974530][ T5457] loop3: detected capacity change from 0 to 512
[   35.988732][ T5457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.013835][ T5457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.107'.
[   36.084241][ T5467] openvswitch: netlink: ct_state flags b3000008 unsupported
[   36.289070][ T5457] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.107: iget: bad i_size value: 2533274857506816
[   36.338237][ T4734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.572044][ T5497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'.
[   36.673658][ T5504] 8021q: VLANs not supported on vcan0
[   36.734303][   T30] audit: type=1326 audit(36.700:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5511 comm="syz.3.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b792e8 code=0x7ffc0000
[   36.734637][   T30] audit: type=1326 audit(36.700:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5511 comm="syz.3.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b792e8 code=0x7ffc0000
[   36.734778][   T30] audit: type=1326 audit(36.700:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5511 comm="syz.3.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff85b792e8 code=0x7ffc0000
[   36.734965][   T30] audit: type=1326 audit(36.700:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5511 comm="syz.3.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b792e8 code=0x7ffc0000
[   36.739536][   T30] audit: type=1326 audit(36.700:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5511 comm="syz.3.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b792e8 code=0x7ffc0000
[   36.745278][   T30] audit: type=1326 audit(36.700:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5511 comm="syz.3.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff85b792e8 code=0x7ffc0000
[   36.763153][ T5515] The dccp option matching is deprecated and scheduled to be removed in 2027.
[   36.763153][ T5515] Please contact the netfilter-devel mailing list or update your nftables rules.
[   36.890376][ T5529] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   36.890433][ T5529] block device autoloading is deprecated and will be removed.
[   36.914160][   T13] IPVS: starting estimator thread 0...
[   37.020645][ T5530] IPVS: using max 59 ests per chain, 141600 per kthread
[   37.174048][ T5535] netlink: 56 bytes leftover after parsing attributes in process `syz.2.126'.
[   37.218588][ T5542] loop2: detected capacity change from 0 to 256
[   37.248324][ T5545] FAULT_INJECTION: forcing a failure.
[   37.248324][ T5545] name failslab, interval 1, probability 0, space 0, times 0
[   37.248346][ T5545] CPU: 1 UID: 0 PID: 5545 Comm: syz.1.129 Tainted: G             L      syzkaller #0 PREEMPT 
[   37.248360][ T5545] Tainted: [L]=SOFTLOCKUP
[   37.248364][ T5545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   37.248370][ T5545] Call trace:
[   37.248373][ T5545]  show_stack+0x2c/0x3c (C)
[   37.248388][ T5545]  __dump_stack+0x30/0x40
[   37.248396][ T5545]  dump_stack_lvl+0xd8/0x12c
[   37.248404][ T5545]  dump_stack+0x1c/0x28
[   37.248411][ T5545]  should_fail_ex+0x418/0x58c
[   37.248421][ T5545]  should_failslab+0xc4/0x120
[   37.248430][ T5545]  __kmalloc_noprof+0x108/0x6c8
[   37.248438][ T5545]  switchdev_deferred_enqueue+0x3c/0x230
[   37.248449][ T5545]  switchdev_port_attr_set+0xac/0x110
[   37.248457][ T5545]  br_set_state+0x2ec/0x580
[   37.248467][ T5545]  br_stp_disable_port+0x78/0x1a0
[   37.248477][ T5545]  br_stp_disable_bridge+0x90/0x150
[   37.248486][ T5545]  br_dev_stop+0x2c/0x17c
[   37.248492][ T5545]  __dev_close_many+0x2f4/0x648
[   37.248502][ T5545]  __dev_change_flags+0x34c/0x698
[   37.248512][ T5545]  netif_change_flags+0x80/0x15c
[   37.248522][ T5545]  dev_change_flags+0x10c/0x204
[   37.248530][ T5545]  dev_ifsioc+0x350/0xc34
[   37.248537][ T5545]  dev_ioctl+0x444/0xc88
[   37.248544][ T5545]  sock_do_ioctl+0x198/0x254
[   37.248555][ T5545]  sock_ioctl+0x55c/0x7ec
[   37.248564][ T5545]  __arm64_sys_ioctl+0x154/0x1cc
[   37.248573][ T5545]  invoke_syscall+0x98/0x244
[   37.248581][ T5545]  el0_svc_common+0xec/0x23c
[   37.248588][ T5545]  do_el0_svc+0x4c/0x5c
[   37.248595][ T5545]  el0_svc+0x60/0x1d8
[   37.248602][ T5545]  el0t_64_sync_handler+0x44/0x104
[   37.248609][ T5545]  el0t_64_sync+0x198/0x19c
[   37.248618][ T5545] bridge0: error setting offload STP state on port 2(bridge_slave_1)
[   37.249555][ T5545] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.258295][ T5545] bridge0: entered allmulticast mode
[   37.264310][ T5545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'.
[   37.305195][ T5548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'.
[   37.417317][ T5554] loop1: detected capacity change from 0 to 512
[   37.425651][ T5554] EXT4-fs (loop1): Test dummy encryption mode enabled
[   37.430470][ T5554] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   37.432416][ T5554] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[   37.438251][ T5554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.451916][ T5554] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   37.452192][ T5554] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters
[   37.482825][ T5554] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   37.615976][ T5561] openvswitch: netlink: ct_state flags b3000008 unsupported
[   37.890740][ T5568] loop3: detected capacity change from 0 to 2048
[   37.913150][ T5572] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   37.913341][ T5573] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   38.036926][ T5579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.142'.
[   38.039832][ T4751] Bluetooth: hci3: command tx timeout
[   38.098328][ T4747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.204043][ T5585] loop5: detected capacity change from 0 to 8192
[   38.221487][ T5587] loop1: detected capacity change from 0 to 256
[   38.364148][   T58] nvmet: connect request for invalid subsystem testsubsys!
[   38.364488][ T5589] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   38.388061][ T5596] loop2: detected capacity change from 0 to 512
[   38.435413][ T5596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.527266][ T5596] EXT4-fs error (device loop2): __ext4_add_entry:2414: inode #12: comm syz.2.148: Directory hole found for htree leaf block 0
[   38.528904][ T5596] EXT4-fs (loop2): Remounting filesystem read-only
[   38.604593][ T5612] loop5: detected capacity change from 0 to 256
[   38.626080][ T4735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.830699][ T4944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   38.937898][ T5628] FAULT_INJECTION: forcing a failure.
[   38.937898][ T5628] name failslab, interval 1, probability 0, space 0, times 0
[   38.937920][ T5628] CPU: 1 UID: 0 PID: 5628 Comm: syz.1.157 Tainted: G             L      syzkaller #0 PREEMPT 
[   38.937933][ T5628] Tainted: [L]=SOFTLOCKUP
[   38.937936][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   38.937941][ T5628] Call trace:
[   38.937944][ T5628]  show_stack+0x2c/0x3c (C)
[   38.937960][ T5628]  __dump_stack+0x30/0x40
[   38.937969][ T5628]  dump_stack_lvl+0xd8/0x12c
[   38.937978][ T5628]  dump_stack+0x1c/0x28
[   38.937985][ T5628]  should_fail_ex+0x418/0x58c
[   38.937997][ T5628]  should_failslab+0xc4/0x120
[   38.938007][ T5628]  __kmalloc_noprof+0x108/0x6c8
[   38.938017][ T5628]  security_sk_alloc+0x60/0x35c
[   38.938028][ T5628]  sk_prot_alloc+0xe0/0x1e8
[   38.938038][ T5628]  sk_alloc+0x44/0x320
[   38.938046][ T5628]  inet_create+0x594/0xd48
[   38.938058][ T5628]  __sock_create+0x31c/0x670
[   38.938069][ T5628]  sock_create_kern+0x4c/0x64
[   38.938079][ T5628]  smc_create_clcsk+0x40/0xb8
[   38.938090][ T5628]  smc_create+0xe8/0x490
[   38.938099][ T5628]  __sock_create+0x31c/0x670
[   38.938109][ T5628]  __sys_socket_create+0xc0/0x11c
[   38.938120][ T5628]  __sys_socket+0x44/0xec
[   38.938130][ T5628]  __arm64_sys_socket+0x84/0x9c
[   38.938141][ T5628]  invoke_syscall+0x98/0x244
[   38.938150][ T5628]  el0_svc_common+0xec/0x23c
[   38.938159][ T5628]  do_el0_svc+0x4c/0x5c
[   38.938167][ T5628]  el0_svc+0x60/0x1d8
[   38.938175][ T5628]  el0t_64_sync_handler+0x44/0x104
[   38.938183][ T5628]  el0t_64_sync+0x198/0x19c
[   39.025053][ T1160] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   39.031834][ T5635] openvswitch: netlink: ct_state flags b3000008 unsupported
[   39.286884][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   39.287613][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   39.287868][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   39.288176][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   39.288386][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   39.385186][ T5659] loop3: detected capacity change from 0 to 512
[   39.388742][ T5659] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   39.388758][ T5659] EXT4-fs (loop3): can't mount with both data=journal and dax
[   39.458536][ T5647] rxe_eth0 speed is unknown, defaulting to 1000
[   39.475549][ T5672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.166'.
[   39.686319][   T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.745559][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.745630][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.745700][ T5647] bridge_slave_0: entered allmulticast mode
[   39.746121][ T5647] bridge_slave_0: entered promiscuous mode
[   39.748695][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.749551][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.749606][ T5647] bridge_slave_1: entered allmulticast mode
[   39.750303][ T5647] bridge_slave_1: entered promiscuous mode
[   39.770494][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.773846][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.813159][   T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.824277][ T5647] team0: Port device team_slave_0 added
[   39.827850][ T5647] team0: Port device team_slave_1 added
[   39.858596][ T1337] nvmet: connect request for invalid subsystem testsubsys!
[   39.859335][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.859343][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.859354][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.861450][ T5683] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   39.864037][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.864050][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.864061][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.883230][ T5647] hsr_slave_0: entered promiscuous mode
[   39.887123][ T5647] hsr_slave_1: entered promiscuous mode
[   39.887402][ T5647] debugfs: 'hsr0' already exists in 'hsr'
[   39.887417][ T5647] Cannot create hsr debugfs directory
[   39.905862][   T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.984034][   T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.020824][ T5647] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   40.023258][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   40.023685][ T5647] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   40.025064][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   40.025445][ T5647] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   40.027428][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   40.027896][ T5647] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   40.028969][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   40.040749][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.040779][ T5647] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.040851][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.040879][ T5647] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.113884][   T50] Bluetooth: hci3: command tx timeout
[   40.127897][ T5699] openvswitch: netlink: ct_state flags b3000008 unsupported
[   40.351182][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.358030][ T5647] 8021q: adding VLAN 0 to HW filter on device team0
[   40.394329][ T5701] loop2: detected capacity change from 0 to 512
[   40.402101][ T5701] EXT4-fs: quotafile must be on filesystem root
[   40.453360][   T54] bridge_slave_1: left allmulticast mode
[   40.453382][   T54] bridge_slave_1: left promiscuous mode
[   40.453468][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.455234][   T54] bridge_slave_0: left allmulticast mode
[   40.455248][   T54] bridge_slave_0: left promiscuous mode
[   40.455313][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.612560][ T5720] cgroup: Invalid name
[   40.627693][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   40.641522][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   40.728804][   T54] bond0 (unregistering): Released all slaves
[   40.752267][ T4428] 8021q: adding VLAN 0 to HW filter on device eth4
[   40.822293][ T5729]  loop2: p1 < > p4
[   40.822293][ T5729]  p4: <netbsd: >
[   40.824639][ T5729] loop2: p4 size 722688 extends beyond EOD, truncated
[   40.851022][ T4371]  loop2: p1 < > p4
[   40.851022][ T4371]  p4: <netbsd: >
[   40.855647][ T4371] loop2: p4 size 722688 extends beyond EOD, truncated
[   40.927156][ T5743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.309920][   T50] Bluetooth: hci5: command tx timeout
[   41.315197][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.499725][ T5647] veth0_vlan: entered promiscuous mode
[   41.511324][ T5647] veth1_vlan: entered promiscuous mode
[   41.536615][ T4428] 8021q: adding VLAN 0 to HW filter on device eth5
[   41.537682][   T30] audit: type=1326 audit(41.500:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17792e8 code=0x7ffc0000
[   41.545878][   T30] audit: type=1326 audit(41.510:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17792e8 code=0x7ffc0000
[   41.553409][ T5647] veth0_macvtap: entered promiscuous mode
[   41.557458][   T30] audit: type=1326 audit(41.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffa17792e8 code=0x7ffc0000
[   41.557719][   T30] audit: type=1326 audit(41.520:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17792e8 code=0x7ffc0000
[   41.559082][ T5647] veth1_macvtap: entered promiscuous mode
[   41.585589][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.592830][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.600032][ T1197] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.600303][ T1197] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.600329][ T1197] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.618366][   T54] hsr_slave_0: left promiscuous mode
[   41.618649][   T54] hsr_slave_1: left promiscuous mode
[   41.618920][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   41.618932][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[   41.619351][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   41.619361][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[   41.624008][   T54] veth1_macvtap: left promiscuous mode
[   41.624032][   T54] veth0_macvtap: left promiscuous mode
[   41.624079][   T54] veth1_vlan: left promiscuous mode
[   41.624113][   T54] veth0_vlan: left promiscuous mode
[   41.741714][   T30] kauditd_printk_skb: 65 callbacks suppressed
[   41.741726][   T30] audit: type=1326 audit(41.710:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17792e8 code=0x7ffc0000
[   41.741744][   T30] audit: type=1326 audit(41.710:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa1778fe0 code=0x7ffc0000
[   41.741759][   T30] audit: type=1326 audit(41.710:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffa177904c code=0x7ffc0000
[   41.741773][   T30] audit: type=1326 audit(41.710:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffa1757ff8 code=0x7ffc0000
[   41.741787][   T30] audit: type=1326 audit(41.710:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffffa177a2e8 code=0x7ffc0000
[   41.741801][   T30] audit: type=1326 audit(41.710:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffa1758050 code=0x7ffc0000
[   41.741815][   T30] audit: type=1326 audit(41.710:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17792e8 code=0x7ffc0000
[   41.741829][   T30] audit: type=1326 audit(41.710:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17792e8 code=0x7ffc0000
[   41.742549][   T30] audit: type=1326 audit(41.710:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=99 compat=0 ip=0xffffa1757750 code=0x7ffc0000
[   41.742614][   T30] audit: type=1326 audit(41.710:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffa17577b0 code=0x7ffc0000
[   41.744220][ T4734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.772518][   T54] team0 (unregistering): Port device team_slave_1 removed
[   41.803862][   T54] team0 (unregistering): Port device team_slave_0 removed
[   41.864945][ T5792] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   41.970611][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.970622][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.002555][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   42.002569][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.010924][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.288851][ T4428] 8021q: adding VLAN 0 to HW filter on device eth6
[   42.294379][ T5827] set_capacity_and_notify: 3 callbacks suppressed
[   42.294389][ T5827] loop6: detected capacity change from 0 to 1024
[   42.294766][ T5827] EXT4-fs: Ignoring removed orlov option
[   42.311481][ T5827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.345336][ T5827] EXT4-fs error (device loop6): ext4_lookup:1787: inode #16: comm syz.6.191: unexpected EA_INODE flag
[   42.347589][ T5827] EXT4-fs (loop6): Remounting filesystem read-only
[   42.363506][ T5835] loop3: detected capacity change from 0 to 512
[   42.372216][ T5647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.388822][ T5835] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   42.403331][ T5835] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082]
[   42.403363][ T5835] System zones: 0-2, 18-18, 34-34
[   42.427479][ T5835] EXT4-fs (loop3): 1 orphan inode deleted
[   42.427939][ T5835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.444926][   T12] EXT4-fs error (device loop3): ext4_release_dquot:7106: comm kworker/u8:0: Failed to release dquot type 1
[   42.446559][ T5838] loop6: detected capacity change from 0 to 512
[   42.509550][ T4734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.545662][ T5846] loop5: detected capacity change from 0 to 512
[   42.548758][ T5846] EXT4-fs: Ignoring removed mblk_io_submit option
[   42.566110][ T5846] EXT4-fs (loop5): orphan cleanup on readonly fs
[   42.566126][ T5846] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[   42.574344][ T5846] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.194: attempt to clear invalid blocks 2 len 1
[   42.574426][ T5846] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   42.579421][ T5846] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   42.579851][    C1] EXT4-fs (loop5): error count since last fsck: 1
[   42.579863][    C1] EXT4-fs (loop5): initial error at time 42: ext4_clear_blocks:876: inode 13
[   42.579877][    C1] EXT4-fs (loop5): last error at time 42: ext4_clear_blocks:876: inode 13
[   42.581533][ T5846] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.194: invalid indirect mapped block 1819239214 (level 0)
[   42.581561][ T5846] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   42.581733][ T5846] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.194: invalid indirect mapped block 1819239214 (level 1)
[   42.581749][ T5846] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   42.585275][ T5846] EXT4-fs (loop5): 1 truncate cleaned up
[   42.585740][ T5846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   42.587526][ T5838] tipc: Started in network mode
[   42.587540][ T5838] tipc: Node identity 9aa660e6637f, cluster identity 4711
[   42.587621][ T5838] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   42.591899][ T5846] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work
[   42.593825][ T5838] syzkaller0: entered promiscuous mode
[   42.593841][ T5838] syzkaller0: entered allmulticast mode
[   42.623821][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.629343][ T5838] tipc: Resetting bearer <eth:syzkaller0>
[   42.673051][ T5837] tipc: Resetting bearer <eth:syzkaller0>
[   42.687675][ T5837] tipc: Disabling bearer <eth:syzkaller0>
[   42.718939][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'.
[   42.764281][ T5858] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   42.786910][ T5864] ima: policy update failed
[   42.837912][ T5868] tmpfs: Bad value for 'mpol'
[   42.842148][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.199'.
[   42.842161][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.199'.
[   42.842385][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.199'.
[   42.842396][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.199'.
[   42.876587][ T4428] 8021q: adding VLAN 0 to HW filter on device eth7
[   43.248707][ T5871] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   43.249062][ T5891] Injecting memory failure for pfn 0x138649 at process virtual address 0x20000000
[   43.258162][ T5891] Memory failure: 0x138649: keeping poisoned page in swap cache
[   43.258274][ T5891] Memory failure: 0x138649: Sending SIGBUS to syz.5.203:5891 due to hardware memory corruption
[   43.258320][ T5891] Memory failure: 0x138649: recovery action for dirty swapcache page: Delayed
[   43.258346][ T5891] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20001000
[   43.258359][ T5891] Memory failure: 0x216a31: unhandlable page.
[   43.258366][ T5891] Memory failure: 0x216a31: recovery action for reserved kernel page: Ignored
[   43.390302][   T50] Bluetooth: hci5: command tx timeout
[   43.401265][ T5896] validate_nla: 120 callbacks suppressed
[   43.401278][ T5896] netlink: 'syz.3.204': attribute type 1 has an invalid length.
[   43.421471][ T5896] 8021q: adding VLAN 0 to HW filter on device bond2
[   43.434100][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'.
[   43.467551][ T5896] bond2: (slave bridge1): making interface the new active one
[   43.468178][ T5896] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   43.802010][ T5905] netlink: 'syz.2.205': attribute type 10 has an invalid length.
[   43.847359][ T5905] team0 (unregistering): Port device team_slave_1 removed
[   43.850937][ T5903] loop6: detected capacity change from 0 to 8192
[   43.865168][ T5906] loop2: detected capacity change from 0 to 128
[   43.873892][ T5906] FAT-fs (loop2): Directory bread(block 1048) failed
[   43.873915][ T5906] FAT-fs (loop2): Directory bread(block 1049) failed
[   43.873927][ T5906] FAT-fs (loop2): Directory bread(block 1050) failed
[   43.873938][ T5906] FAT-fs (loop2): Directory bread(block 1051) failed
[   43.873948][ T5906] FAT-fs (loop2): Directory bread(block 1052) failed
[   43.873958][ T5906] FAT-fs (loop2): Directory bread(block 1053) failed
[   43.873968][ T5906] FAT-fs (loop2): Directory bread(block 1054) failed
[   43.873979][ T5906] FAT-fs (loop2): Directory bread(block 1055) failed
[   43.893144][ T5903]  loop6: p1 p2 p4
[   43.893157][ T5903] loop6: partition table partially beyond EOD, truncated
[   43.896713][ T5903] loop6: p4 start 131072 is beyond EOD, truncated
[   44.127919][ T5916] FAT-fs (loop2): FAT read failed (blocknr 128)
[   44.263465][ T5919] overlayfs: missing 'lowerdir'
[   44.307705][ T5919] loop3: detected capacity change from 0 to 512
[   44.329547][ T5919] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4702: metadata_csum and uninit_bg are redundant flags; please run fsck.
[   44.329576][ T5919] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   44.347175][ T5919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.347365][ T5919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.362338][ T5923] loop5: detected capacity change from 0 to 512
[   44.392897][ T5921] netlink: 'syz.6.208': attribute type 39 has an invalid length.
[   44.408642][ T5923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.666321][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.760218][ T5937] netlink: 'syz.2.212': attribute type 10 has an invalid length.
[   44.760238][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'.
[   44.789231][ T5933] ip_tables: iptables: counters copy to user failed while replacing table
[   44.803048][ T5941] netlink: 24 bytes leftover after parsing attributes in process `syz.6.213'.
[   44.912882][ T5949] warning: `syz.3.216' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   44.992526][ T5954] openvswitch: netlink: ct_state flags b3000008 unsupported
[   45.252814][ T5960] mmap: syz.3.219 (5960) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   45.347335][ T5964] openvswitch: netlink: ct_state flags b3000008 unsupported
[   45.480037][   T50] Bluetooth: hci5: command tx timeout
[   45.612668][ T5967] FAULT_INJECTION: forcing a failure.
[   45.612668][ T5967] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   45.612694][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: syz.3.221 Tainted: G             L      syzkaller #0 PREEMPT 
[   45.612708][ T5967] Tainted: [L]=SOFTLOCKUP
[   45.612712][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   45.612717][ T5967] Call trace:
[   45.612720][ T5967]  show_stack+0x2c/0x3c (C)
[   45.612735][ T5967]  __dump_stack+0x30/0x40
[   45.612743][ T5967]  dump_stack_lvl+0xd8/0x12c
[   45.612752][ T5967]  dump_stack+0x1c/0x28
[   45.612760][ T5967]  should_fail_ex+0x418/0x58c
[   45.612770][ T5967]  should_fail_alloc_page+0xec/0x10c
[   45.612781][ T5967]  prepare_alloc_pages+0x194/0x484
[   45.612791][ T5967]  __alloc_frozen_pages_noprof+0x180/0x578
[   45.612802][ T5967]  alloc_pages_mpol+0x1fc/0x3d0
[   45.612813][ T5967]  folio_alloc_mpol_noprof+0x4c/0x248
[   45.612824][ T5967]  shmem_alloc_folio+0xa0/0x150
[   45.612833][ T5967]  shmem_alloc_and_add_folio+0x28c/0xb30
[   45.612842][ T5967]  shmem_get_folio_gfp+0x4d8/0x1378
[   45.612850][ T5967]  shmem_write_begin+0x160/0x448
[   45.612859][ T5967]  generic_perform_write+0x23c/0x7a4
[   45.612868][ T5967]  shmem_file_write_iter+0x10c/0x134
[   45.612877][ T5967]  vfs_write+0x51c/0xa0c
[   45.612886][ T5967]  ksys_write+0x12c/0x228
[   45.612895][ T5967]  __arm64_sys_write+0x84/0x98
[   45.612904][ T5967]  invoke_syscall+0x98/0x244
[   45.612913][ T5967]  el0_svc_common+0xec/0x23c
[   45.612921][ T5967]  do_el0_svc+0x4c/0x5c
[   45.612929][ T5967]  el0_svc+0x60/0x1d8
[   45.612938][ T5967]  el0t_64_sync_handler+0x44/0x104
[   45.612946][ T5967]  el0t_64_sync+0x198/0x19c
[   45.695032][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'.
[   45.951908][ T5985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.228'.
[   46.022202][ T5991] netlink: 'syz.2.230': attribute type 1 has an invalid length.
[   46.063038][ T5994] loop5: detected capacity change from 0 to 512
[   46.066041][ T5994] ext4: Bad value for 'max_batch_time'
[   46.111049][ T5994] loop5: detected capacity change from 0 to 128
[   46.170263][ T5997] input: syz0 as /devices/virtual/input/input3
[   46.493395][ T6013] bond1: Unable to set peer notification delay as MII monitoring is disabled
[   46.498265][ T6013] bond1 (unregistering): Released all slaves
[   46.522825][ T6021] netlink: zone id is out of range
[   46.522838][ T6021] netlink: zone id is out of range
[   46.522888][ T6021] netlink: zone id is out of range
[   46.522894][ T6021] netlink: zone id is out of range
[   46.522898][ T6021] netlink: zone id is out of range
[   46.522902][ T6021] netlink: zone id is out of range
[   46.522906][ T6021] netlink: zone id is out of range
[   46.549442][ T6021] syz.5.242 uses obsolete (PF_INET,SOCK_PACKET)
[   46.591161][   T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   46.591329][   T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   46.679881][ T6030] netlink: 'syz.3.244': attribute type 1 has an invalid length.
[   46.689248][ T6035] EXT4-fs: Ignoring removed nomblk_io_submit option
[   46.695182][ T6030] netlink: 'syz.3.244': attribute type 1 has an invalid length.
[   46.695241][ T6030] netlink: 'syz.3.244': attribute type 1 has an invalid length.
[   46.695306][ T6030] netlink: 'syz.3.244': attribute type 1 has an invalid length.
[   46.695355][ T6030] netlink: 'syz.3.244': attribute type 1 has an invalid length.
[   46.716492][ T6035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.734890][ T6035] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.245: Failed to acquire dquot type 1
[   46.758920][ T4735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.805061][ T6042] EXT4-fs: Ignoring removed nobh option
[   46.805078][ T6042] ext4: Unknown parameter 'noacl'
[   47.018846][ T6055] FAULT_INJECTION: forcing a failure.
[   47.018846][ T6055] name failslab, interval 1, probability 0, space 0, times 0
[   47.018869][ T6055] CPU: 0 UID: 0 PID: 6055 Comm: syz.5.250 Tainted: G             L      syzkaller #0 PREEMPT 
[   47.018885][ T6055] Tainted: [L]=SOFTLOCKUP
[   47.018889][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   47.018894][ T6055] Call trace:
[   47.018897][ T6055]  show_stack+0x2c/0x3c (C)
[   47.018912][ T6055]  __dump_stack+0x30/0x40
[   47.018921][ T6055]  dump_stack_lvl+0xd8/0x12c
[   47.018929][ T6055]  dump_stack+0x1c/0x28
[   47.018937][ T6055]  should_fail_ex+0x418/0x58c
[   47.018948][ T6055]  should_failslab+0xc4/0x120
[   47.018959][ T6055]  __kmalloc_cache_node_noprof+0x98/0x618
[   47.018970][ T6055]  __alloc_workqueue+0x540/0x11a0
[   47.018981][ T6055]  alloc_workqueue_va+0x5c/0x138
[   47.018992][ T6055]  alloc_workqueue_noprof+0xe0/0x130
[   47.019002][ T6055]  ext4_fill_super+0x3914/0x4e34
[   47.019013][ T6055]  get_tree_bdev_flags+0x388/0x43c
[   47.019026][ T6055]  get_tree_bdev+0x2c/0x3c
[   47.019037][ T6055]  ext4_get_tree+0x28/0x38
[   47.019047][ T6055]  vfs_get_tree+0x90/0x28c
[   47.019058][ T6055]  fc_mount+0x24/0xac
[   47.019070][ T6055]  do_new_mount+0x2a4/0x538
[   47.019077][ T6055]  path_mount+0x5f0/0xa88
[   47.019085][ T6055]  do_mount+0xe8/0x148
[   47.019092][ T6055]  __arm64_sys_mount+0x33c/0x388
[   47.019100][ T6055]  invoke_syscall+0x98/0x244
[   47.019109][ T6055]  el0_svc_common+0xec/0x23c
[   47.019117][ T6055]  do_el0_svc+0x4c/0x5c
[   47.019125][ T6055]  el0_svc+0x60/0x1d8
[   47.019134][ T6055]  el0t_64_sync_handler+0x44/0x104
[   47.019142][ T6055]  el0t_64_sync+0x198/0x19c
[   47.019173][ T6055] EXT4-fs: failed to create workqueue
[   47.019176][ T6055] EXT4-fs (loop5): mount failed
[   47.082964][ T6055] FAULT_INJECTION: forcing a failure.
[   47.082964][ T6055] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   47.082991][ T6055] CPU: 0 UID: 0 PID: 6055 Comm: syz.5.250 Tainted: G             L      syzkaller #0 PREEMPT 
[   47.083004][ T6055] Tainted: [L]=SOFTLOCKUP
[   47.083007][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   47.083012][ T6055] Call trace:
[   47.083015][ T6055]  show_stack+0x2c/0x3c (C)
[   47.083030][ T6055]  __dump_stack+0x30/0x40
[   47.083038][ T6055]  dump_stack_lvl+0xd8/0x12c
[   47.083046][ T6055]  dump_stack+0x1c/0x28
[   47.083054][ T6055]  should_fail_ex+0x418/0x58c
[   47.083065][ T6055]  should_fail_alloc_page+0xec/0x10c
[   47.083075][ T6055]  prepare_alloc_pages+0x194/0x484
[   47.083086][ T6055]  __alloc_frozen_pages_noprof+0x180/0x578
[   47.083096][ T6055]  alloc_pages_mpol+0x1fc/0x3d0
[   47.083107][ T6055]  alloc_frozen_pages_noprof+0xc4/0x10c
[   47.083119][ T6055]  alloc_pages_noprof+0x30/0x148
[   47.083129][ T6055]  __pte_alloc_kernel+0x38/0x4e0
[   47.083142][ T6055]  __apply_to_page_range+0xda4/0x1650
[   47.083151][ T6055]  apply_to_page_range+0x4c/0x64
[   47.083165][ T6055]  __kasan_populate_vmalloc+0x104/0x1d0
[   47.083174][ T6055]  alloc_vmap_area+0xcd8/0x12ec
[   47.083185][ T6055]  __get_vm_area_node+0x210/0x32c
[   47.083197][ T6055]  __vmalloc_node_range_noprof+0x2a0/0xe9c
[   47.083209][ T6055]  __bpf_map_area_alloc+0x1a4/0x224
[   47.083219][ T6055]  bpf_map_area_alloc+0x2c/0x3c
[   47.083228][ T6055]  bloom_map_alloc+0x220/0x3dc
[   47.083236][ T6055]  map_create+0xa6c/0x153c
[   47.083247][ T6055]  __sys_bpf+0x308/0x82c
[   47.083257][ T6055]  __arm64_sys_bpf+0xd0/0xec
[   47.083267][ T6055]  invoke_syscall+0x98/0x244
[   47.083277][ T6055]  el0_svc_common+0xec/0x23c
[   47.083285][ T6055]  do_el0_svc+0x4c/0x5c
[   47.083293][ T6055]  el0_svc+0x60/0x1d8
[   47.083301][ T6055]  el0t_64_sync_handler+0x44/0x104
[   47.083309][ T6055]  el0t_64_sync+0x198/0x19c
[   47.237830][ T6067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.314766][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.479284][ T6091] nvmet: adding nsid 1 to subsystem testsubsys
[   47.511493][   T54] nvmet: connect request for invalid subsystem testsubsys!
[   47.511958][ T6091] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   47.549984][   T50] Bluetooth: hci5: command tx timeout
[   47.833961][ T6129] __nla_validate_parse: 3 callbacks suppressed
[   47.833976][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.266'.
[   48.057159][ T6145] set_capacity_and_notify: 6 callbacks suppressed
[   48.057172][ T6145] loop3: detected capacity change from 0 to 8192
[   48.093600][ T6145]  loop3: p1[EZD] p3 p4
[   48.093685][ T6145] loop3: partition table partially beyond EOD, truncated
[   48.094416][ T6145] loop3: p3 start 150994944 is beyond EOD, truncated
[   48.230864][ T6160] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   48.231322][ T6145] overlay: Unknown parameter 'fowner'
[   48.299622][ T6170] loop6: detected capacity change from 0 to 128
[   48.313773][ T6170] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   48.386270][ T6186] loop2: detected capacity change from 0 to 512
[   48.395404][ T6186] EXT4-fs (loop2): Test dummy encryption mode enabled
[   48.395525][ T6186] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal
[   48.472052][ T6192] binder: 6185:6192 BC_FREE_BUFFER no match for buffer at offset 0
[   48.685407][ T1160] Process accounting resumed
[   48.704336][ T5647] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   48.757177][ T6195] loop5: detected capacity change from 0 to 256
[   49.149532][ T6203] loop5: detected capacity change from 0 to 512
[   49.173036][ T6203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.336845][ T6211] loop2: detected capacity change from 0 to 512
[   49.362929][ T6211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.371193][ T6203] rxe_eth0 speed is unknown, defaulting to 1000
[   49.392473][ T4735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.611431][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.715619][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.6.296'.
[   49.856288][ T6273] loop3: detected capacity change from 0 to 1024
[   49.856663][ T6273] EXT4-fs: quotafile must be on filesystem root
[   49.901920][ T6274] lo: Caught tx_queue_len zero misconfig
[   49.922502][ T6280] loop6: detected capacity change from 0 to 512
[   49.973360][ T6280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.180019][ T6292] 9pnet_fd: Insufficient options for proto=fd
[   50.202950][ T6292] netlink: 36 bytes leftover after parsing attributes in process `syz.3.303'.
[   50.396448][ T6307] validate_nla: 29 callbacks suppressed
[   50.396462][ T6307] netlink: 'syz.2.305': attribute type 4 has an invalid length.
[   50.415745][ T6304] netlink: 'syz.2.305': attribute type 4 has an invalid length.
[   50.426169][ T6308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   50.433674][   T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   50.723205][ T6320] loop2: detected capacity change from 0 to 1024
[   50.741341][ T6320] EXT4-fs: Ignoring removed oldalloc option
[   50.741354][ T6320] EXT4-fs: Ignoring removed orlov option
[   50.771883][ T6320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.803607][ T6320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   50.848323][ T6333] loop5: detected capacity change from 0 to 1024
[   50.887657][ T6333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.055354][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.426256][ T5647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.512874][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.315'.
[   51.527358][ T6350] netlink: 44 bytes leftover after parsing attributes in process `syz.6.314'.
[   51.531754][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.315'.
[   51.539903][   T58] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   51.541477][   T58] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   51.541509][   T58] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   51.541528][   T58] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   51.638781][ T6352] netlink: 44 bytes leftover after parsing attributes in process `syz.6.314'.
[   51.653042][ T6357] FAULT_INJECTION: forcing a failure.
[   51.653042][ T6357] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   51.653067][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.3.313 Tainted: G             L      syzkaller #0 PREEMPT 
[   51.653080][ T6357] Tainted: [L]=SOFTLOCKUP
[   51.653083][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   51.653088][ T6357] Call trace:
[   51.653091][ T6357]  show_stack+0x2c/0x3c (C)
[   51.653107][ T6357]  __dump_stack+0x30/0x40
[   51.653116][ T6357]  dump_stack_lvl+0xd8/0x12c
[   51.653124][ T6357]  dump_stack+0x1c/0x28
[   51.653131][ T6357]  should_fail_ex+0x418/0x58c
[   51.653142][ T6357]  should_fail+0x14/0x24
[   51.653151][ T6357]  should_fail_usercopy+0x20/0x30
[   51.653162][ T6357]  _inline_copy_from_user+0x3c/0x174
[   51.653171][ T6357]  __arm64_sys_prlimit64+0x17c/0xc64
[   51.653179][ T6357]  invoke_syscall+0x98/0x244
[   51.653187][ T6357]  el0_svc_common+0xec/0x23c
[   51.653196][ T6357]  do_el0_svc+0x4c/0x5c
[   51.653204][ T6357]  el0_svc+0x60/0x1d8
[   51.653212][ T6357]  el0t_64_sync_handler+0x44/0x104
[   51.653220][ T6357]  el0t_64_sync+0x198/0x19c
[   51.714108][ T6357] rxe_eth0 speed is unknown, defaulting to 1000
[   51.742381][ T6358] netlink: 'syz.3.313': attribute type 7 has an invalid length.
[   51.742400][ T6358] netlink: 'syz.3.313': attribute type 5 has an invalid length.
[   51.742411][ T6358] netlink: 17 bytes leftover after parsing attributes in process `syz.3.313'.
[   52.566526][ T6365] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.669582][ T6380] EXT4-fs error (device loop6): __ext4_add_entry:2414: inode #12: comm syz.6.319: Directory hole found for htree leaf block 0
[   52.669719][ T6380] EXT4-fs (loop6): Remounting filesystem read-only
[   53.328961][ T5647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.539873][ T6386] set_capacity_and_notify: 2 callbacks suppressed
[   53.539889][ T6386] loop2: detected capacity change from 0 to 512
[   53.751923][ T6382] input: syz0 as /devices/virtual/input/input4
[   53.772063][ T6392] FAULT_INJECTION: forcing a failure.
[   53.772063][ T6392] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   53.772087][ T6392] CPU: 0 UID: 0 PID: 6392 Comm: syz.2.327 Tainted: G             L      syzkaller #0 PREEMPT 
[   53.772103][ T6392] Tainted: [L]=SOFTLOCKUP
[   53.772106][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   53.772111][ T6392] Call trace:
[   53.772114][ T6392]  show_stack+0x2c/0x3c (C)
[   53.772128][ T6392]  __dump_stack+0x30/0x40
[   53.772136][ T6392]  dump_stack_lvl+0xd8/0x12c
[   53.772143][ T6392]  dump_stack+0x1c/0x28
[   53.772150][ T6392]  should_fail_ex+0x418/0x58c
[   53.772160][ T6392]  should_fail+0x14/0x24
[   53.772168][ T6392]  should_fail_usercopy+0x20/0x30
[   53.772176][ T6392]  _inline_copy_from_user+0x3c/0x174
[   53.772185][ T6392]  do_ip6t_set_ctl+0x664/0xc38
[   53.772192][ T6392]  nf_setsockopt+0xa0/0xe4
[   53.772200][ T6392]  ipv6_setsockopt+0x130/0x16c
[   53.772209][ T6392]  rawv6_setsockopt+0x204/0x4c4
[   53.772216][ T6392]  sock_common_setsockopt+0xb0/0xcc
[   53.772225][ T6392]  do_sock_setsockopt+0x1f0/0x330
[   53.772235][ T6392]  __sys_setsockopt+0x104/0x170
[   53.772244][ T6392]  __arm64_sys_setsockopt+0xc8/0xe4
[   53.772254][ T6392]  invoke_syscall+0x98/0x244
[   53.772262][ T6392]  el0_svc_common+0xec/0x23c
[   53.772269][ T6392]  do_el0_svc+0x4c/0x5c
[   53.772276][ T6392]  el0_svc+0x60/0x1d8
[   53.772284][ T6392]  el0t_64_sync_handler+0x44/0x104
[   53.772291][ T6392]  el0t_64_sync+0x198/0x19c
[   53.816763][ T6392] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   53.816781][ T6392] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   53.816791][ T6392] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[   54.276689][   T40] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   54.423100][ T6396] loop5: detected capacity change from 0 to 512
[   54.474406][ T6396] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.328: inode has both inline data and extents flags
[   54.474432][ T6396] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   54.475414][ T6396] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.328: couldn't read orphan inode 15 (err -117)
[   54.480593][    C0] EXT4-fs (loop5): error count since last fsck: 1
[   54.480607][    C0] EXT4-fs (loop5): initial error at time 54: ext4_orphan_get:1403: inode 15
[   54.480624][    C0] EXT4-fs (loop5): last error at time 54: ext4_orphan_get:1403: inode 15
[   54.494156][ T6396] loop5: lost filesystem error report for type 5 error -117
[   54.500306][ T6396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.611138][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.676924][ T4751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.678096][ T4751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.678507][ T4751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.678835][ T4751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.679091][ T4751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.933660][ T6401] rxe_eth0 speed is unknown, defaulting to 1000
[   55.310426][ T6436] net_ratelimit: 432 callbacks suppressed
[   55.310439][ T6436] ip_tables: iptables: counters copy to user failed while replacing table
[   56.933409][   T50] Bluetooth: hci1: command tx timeout
[   58.091684][   T40] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   58.991402][   T50] Bluetooth: hci1: command tx timeout
[   59.249755][    C1] sched: DL replenish lagged too much
[   61.300568][   T50] Bluetooth: hci1: command tx timeout
[   63.313350][   T50] Bluetooth: hci1: command tx timeout
[   64.161429][   T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   65.270396][ T1615] ieee802154 phy0 wpan0: encryption failed: -22
[   65.280650][ T1615] ieee802154 phy1 wpan1: encryption failed: -22
[   65.981627][ T1160] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   66.011766][ T1160] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   66.085351][  T875] cfg80211: failed to load regulatory.db
[   72.781516][  T547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   74.420381][ T4944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   78.041591][ T1197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   81.210474][ T4846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   93.771378][ T4844] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   93.811530][ T4844] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   93.851544][ T4844] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   97.971598][ T1466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  102.561125][ T1466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  106.441102][ T1466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  120.750792][  T547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  120.841378][    C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 47s!
[  120.841418][    C0] Showing busy workqueues and worker pools:
[  120.841423][    C0] workqueue events: flags=0x100
[  120.841460][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=6 refcnt=7
[  120.841476][    C0]     pending: psi_avgs_work, 4*nsim_dev_hwstats_traffic_work, drm_fb_helper_damage_work
[  120.841513][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=12 refcnt=13
[  120.841528][    C0]     in-flight: 875:request_firmware_work_func for 117s
[  120.841547][    C0]     pending: 2*release_one_tty, 3*nsim_dev_hwstats_traffic_work, psi_avgs_work, delayed_vfree_work, 2*ovs_dp_masks_rebalance, free_obj_work, rht_deferred_worker
[  120.841607][    C0] workqueue events_unbound: flags=0x2
[  120.841612][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=26 refcnt=27
[  120.841625][    C0]     in-flight: 13:cfg80211_wiphy_work for 60s cfg80211_wiphy_work ,40:linkwatch_event for 62s linkwatch_event ,932:cfg80211_wiphy_work for 62s cfg80211_wiphy_work ,1337:cfg80211_wiphy_work for 63s cfg80211_wiphy_work ,54:cfg80211_wiphy_work for 56s cfg80211_wiphy_work ,547:nsim_dev_trap_report_work for 0s
[  120.841741][    C0]     pending: 2*nsim_dev_trap_report_work, 6*cfg80211_wiphy_work, nsim_dev_trap_report_work, crng_reseed, 2*nsim_dev_trap_report_work, toggle_allocation_gate, nsim_dev_trap_report_work, cfg80211_wiphy_work
[  120.841796][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=4 refcnt=5
[  120.841809][    C0]     in-flight: 58:cfg80211_wiphy_work for 64s cfg80211_wiphy_work ,1379:cfg80211_wiphy_work for 61s cfg80211_wiphy_work
[  120.841850][    C0] workqueue events_power_efficient: flags=0x82
[  120.841854][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=6 refcnt=7
[  120.841867][    C0]     in-flight: 6443:gc_worker for 21s
[  120.841884][    C0]     pending: 2*neigh_managed_work, 2*neigh_periodic_work, do_cache_clean
[  120.841915][    C0] workqueue events_dfl_long: flags=0x2
[  120.841919][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=7 refcnt=8
[  120.841932][    C0]     pending: 7*defense_work_handler
[  120.841946][    C0] workqueue netns: flags=0x6000a
[  120.841951][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4
[  120.841963][    C0]     in-flight: 12:cleanup_net for 65s
[  120.841981][    C0] workqueue mm_percpu_wq: flags=0x108
[  120.841986][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2
[  120.842001][    C0]     pending: vmstat_update
[  120.842060][    C0] workqueue bat_events: flags=0x6000a
[  120.842065][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=50 MAYDAY
[  120.842077][    C0]     in-flight: 2882(RESCUER):batadv_tt_purge for 16s
[  120.842092][    C0]     inactive: batadv_tt_purge, batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_tt_purge, 6*batadv_mcast_mla_update, 2*batadv_iv_send_outstanding_bat_ogm_packet, 3*batadv_purge_orig, 9*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 3*batadv_iv_send_outstanding_bat_ogm_packet, batadv_bla_periodic_work, batadv_dat_purge, 2*batadv_purge_orig, 2*batadv_bla_periodic_work, 3*batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, 2*batadv_tt_purge
[  120.842253][    C0] workqueue wg-kex-wg0: flags=0x6
[  120.842258][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.842270][    C0]     pending: wg_packet_handshake_send_worker
[  120.842283][    C0] workqueue wg-crypt-wg0: flags=0x128
[  120.842288][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3
[  120.842302][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker
[  120.842316][    C0] workqueue wg-kex-wg1: flags=0x6
[  120.842321][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.842333][    C0]     pending: wg_packet_handshake_send_worker
[  120.842344][    C0] workqueue wg-crypt-wg1: flags=0x128
[  120.842350][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3
[  120.842364][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker
[  120.842378][    C0] workqueue wg-kex-wg2: flags=0x6
[  120.842382][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.842394][    C0]     pending: wg_packet_handshake_send_worker
[  120.842405][    C0] workqueue wg-crypt-wg2: flags=0x128
[  120.842411][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3
[  120.842425][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker
[  120.842438][    C0] workqueue wg-kex-wg0: flags=0x6
[  120.842443][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.842455][    C0]     pending: wg_packet_handshake_send_worker
[  120.842466][    C0] workqueue wg-crypt-wg0: flags=0x128
[  120.842471][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3
[  120.842486][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker
[  120.842499][    C0] workqueue wg-kex-wg1: flags=0x6
[  120.842504][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.842516][    C0]     pending: wg_packet_handshake_send_worker
[  120.842527][    C0] workqueue wg-crypt-wg1: flags=0x128
[  120.842532][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.842546][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker
[  120.842565][    C0] workqueue wg-crypt-wg2: flags=0x128
[  120.842570][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.842584][    C0]     pending: wg_packet_decrypt_worker, wg_packet_tx_worker, wg_packet_encrypt_worker
[  120.842602][    C0] workqueue wg-kex-wg0: flags=0x6
[  120.842606][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.842618][    C0]     pending: wg_packet_handshake_send_worker
[  120.842630][    C0] workqueue wg-crypt-wg0: flags=0x128
[  120.842635][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3
[  120.842655][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker
[  120.842671][    C0] workqueue wg-kex-wg1: flags=0x6
[  120.842675][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.842688][    C0]     pending: wg_packet_handshake_send_worker
[  120.842699][    C0] workqueue wg-crypt-wg1: flags=0x128
[  120.842704][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3
[  120.842718][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker
[  120.842732][    C0] workqueue wg-kex-wg2: flags=0x124
[  120.842737][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2
[  120.842751][    C0]     pending: wg_packet_handshake_receive_worker
[  120.842761][    C0] workqueue wg-crypt-wg2: flags=0x128
[  120.842766][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.842780][    C0]     pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker
[  120.842805][    C0] workqueue wg-kex-wg0: flags=0x6
[  120.842809][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.842821][    C0]     in-flight: 1197:wg_packet_handshake_send_worker for 7s
[  120.842839][    C0] workqueue wg-crypt-wg0: flags=0x128
[  120.842844][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3
[  120.842858][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker
[  120.842872][    C0] workqueue wg-crypt-wg1: flags=0x128
[  120.842877][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3
[  120.842891][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker
[  120.842905][    C0] workqueue wg-kex-wg2: flags=0x6
[  120.842909][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.842922][    C0]     pending: wg_packet_handshake_send_worker
[  120.842933][    C0] workqueue wg-crypt-wg2: flags=0x128
[  120.842939][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.842953][    C0]     pending: wg_packet_decrypt_worker, wg_packet_tx_worker, wg_packet_encrypt_worker
[  120.842973][    C0] workqueue wg-kex-wg0: flags=0x6
[  120.842977][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3
[  120.842989][    C0]     in-flight: 1466:wg_packet_handshake_send_worker for 2s
[  120.843004][    C0]     pending: wg_packet_handshake_send_worker
[  120.843015][    C0] workqueue wg-crypt-wg0: flags=0x128
[  120.843020][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3
[  120.843034][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker
[  120.843048][    C0] workqueue wg-kex-wg2: flags=0x6
[  120.843052][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.843065][    C0]     pending: wg_packet_handshake_send_worker
[  120.843076][    C0] workqueue wg-crypt-wg2: flags=0x128
[  120.843082][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.843095][    C0]     pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker
[  120.843115][    C0] workqueue bond2: flags=0x2000a
[  120.843119][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=6 MAYDAY
[  120.843132][    C0]     pending: bond_alb_monitor
[  120.843143][    C0]     inactive: bond_mii_monitor
[  120.843163][    C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=47s workers=10 idle: 26 4859 4499 24 4868 4845 4860 4943 4865
[  120.843220][    C0] pool 8: cpus=0-1 flags=0x6 nice=0 hung=0s workers=13 manager: 6445
[  120.843239][    C0] Showing backtraces of busy workers in stalled worker pools:
[  120.843245][    C0] pool 6: no worker in running state, cpu=1 is busy (nr_workers=10 nr_idle=9)
[  120.843251][    C0] The pool might have trouble waking an idle worker.
[  120.843254][    C0] Backtrace of last woken worker:
[  120.843257][    C0] task:kworker/1:1     state:R  running task     stack:0     pid:26    tgid:26    ppid:2      task_flags:0x4208060 flags:0x00000010
[  120.843275][    C0] Workqueue:  0x0 (mm_percpu_wq)
[  120.843287][    C0] Call trace:
[  120.843290][    C0]  __switch_to+0x2b4/0x6e4 (T)
[  120.843306][    C0]  __schedule+0x135c/0x2b00
[  120.843315][    C0]  schedule+0x13c/0x20c
[  120.843325][    C0]  worker_thread+0x924/0xbd0
[  120.843336][    C0]  kthread+0x304/0x3d4
[  120.843346][    C0]  ret_from_fork+0x10/0x20
[  120.843358][    C0] Sending NMI from CPU 0 to CPUs 1:
[  120.843373][    C1] NMI backtrace for cpu 1
[  120.843387][    C1] CPU: 1 UID: 0 PID: 2882 Comm: kworker/R-bat_e Tainted: G             L      syzkaller #0 PREEMPT 
[  120.843400][    C1] Tainted: [L]=SOFTLOCKUP
[  120.843403][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  120.843407][    C1] Workqueue: bat_events batadv_tt_purge
[  120.843419][    C1] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[  120.843427][    C1] pc : write_comp_data+0x8/0x84
[  120.843437][    C1] lr : __sanitizer_cov_trace_cmp8+0x24/0x30
[  120.843446][    C1] sp : ffff80008f866b40
[  120.843448][    C1] x29: ffff80008f866b80 x28: ffff0000cefed880 x27: 00000000ffffffff
[  120.843460][    C1] x26: 0000000000000001 x25: ffff80008f866c28 x24: ffff80009a1f7a90
[  120.843470][    C1] x23: ffff80009a1f7a7f x22: ffff80008f866bd8 x21: 0000000000000010
[  120.843479][    C1] x20: ffff80008f866be8 x19: ffff80009a1f7a90 x18: ffff8001237d4000
[  120.843489][    C1] x17: ffff0001acf92e07 x16: 0000000000213252 x15: 0000000000000001
[  120.843499][    C1] x14: 0000000003c266a4 x13: 000000000000001b x12: 0000000000000003
[  120.843508][    C1] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000101
[  120.843517][    C1] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 000000000000003f
[  120.843526][    C1] x5 : 0000000000000040 x4 : 0000000000000008 x3 : ffff8000801525f4
[  120.843535][    C1] x2 : ffff80009a1f7a90 x1 : ffff80009a1f7aa0 x0 : 0000000000000006
[  120.843545][    C1] Call trace:
[  120.843547][    C1]  write_comp_data+0x8/0x84 (P)
[  120.843557][    C1]  unwind_find_stack+0x54/0x150
[  120.843566][    C1]  arch_stack_walk+0x238/0x328
[  120.843574][    C1]  stack_trace_save+0x9c/0xf0
[  120.843584][    C1]  kasan_save_track+0x40/0x78
[  120.843593][    C1]  kasan_save_alloc_info+0x40/0x50
[  120.843603][    C1]  __kasan_slab_alloc+0x70/0x88
[  120.843612][    C1]  kmem_cache_alloc_node_noprof+0x318/0x604
[  120.843622][    C1]  kmalloc_reserve+0xc4/0x214
[  120.843632][    C1]  __alloc_skb+0x230/0x610
[  120.843641][    C1]  synproxy_send_client_synack+0x12c/0x640
[  120.843651][    C1]  nft_synproxy_eval_v4+0x16c/0x278
[  120.843665][    C1]  nft_synproxy_do_eval+0x2e8/0x4dc
[  120.843672][    C1]  nft_synproxy_obj_eval+0x34/0x48
[  120.843680][    C1]  nft_objref_eval+0x90/0xa8
[  120.843690][    C1]  nft_do_chain+0x418/0x13c8
[  120.843697][    C1]  nft_do_chain_ipv4+0x144/0x240
[  120.843705][    C1]  nf_hook_slow+0xc8/0x224
[  120.843713][    C1]  NF_HOOK+0x1f0/0x398
[  120.843722][    C1]  ip_local_deliver+0x128/0x188
[  120.843731][    C1]  ip_rcv_finish+0x20c/0x230
[  120.843740][    C1]  NF_HOOK+0x308/0x398
[  120.843748][    C1]  ip_rcv+0x7c/0x9c
[  120.843757][    C1]  __netif_receive_skb_one_core+0xc8/0x110
[  120.843766][    C1]  __netif_receive_skb+0x34/0x128
[  120.843774][    C1]  process_backlog+0x588/0x14e0
[  120.843782][    C1]  __napi_poll+0xb4/0x328
[  120.843790][    C1]  net_rx_action+0x5b0/0xc14
[  120.843798][    C1]  handle_softirqs+0x324/0xcbc
[  120.843807][    C1]  __do_softirq+0x14/0x20
[  120.843815][    C1]  ____do_softirq+0x10/0x1c
[  120.843823][    C1]  call_on_irq_stack+0x30/0x48
[  120.843831][    C1]  do_softirq_own_stack+0x1c/0x28
[  120.843839][    C1]  do_softirq+0x90/0xf8
[  120.843847][    C1]  __local_bh_enable_ip+0x190/0x234
[  120.843856][    C1]  _raw_spin_unlock_bh+0x3c/0x4c
[  120.843864][    C1]  batadv_tt_purge+0x3e4/0x7b4
[  120.843871][    C1]  process_scheduled_works+0x91c/0x1250
[  120.843881][    C1]  rescuer_thread+0x68c/0xd90
[  120.843891][    C1]  kthread+0x304/0x3d4
[  120.843900][    C1]  ret_from_fork+0x10/0x20
[  126.180160][ T1615] ieee802154 phy0 wpan0: encryption failed: -22
[  126.190607][ T1615] ieee802154 phy1 wpan1: encryption failed: -22
[  128.190626][ T1466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration