last executing test programs:

39.274780272s ago: executing program 4 (id=140):
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

39.238320111s ago: executing program 4 (id=141):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
inotify_rm_watch(0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94)
r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f00000001c0))
r3 = dup(r0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES8=r2, @ANYRES8=r1, @ANYRES16=r2, @ANYBLOB="fa265f146e431b749f502c9d24241875c16a3fcd0fe553e2e597a4ac96c1ee56d124981c8b95a5c227519b6b5a2ca83dd25430484c436d25b802fd2ab993d04aecfe6666f96921d770ebd3b7a728481d67497eb5438c8b2c70d1f5b2805ff7e98402541b610bfed81dbeaa98b613f26e3cf98f31c2cc808d982e42771dc5388fc187593ed5b41678eef0b138b5bc89e0594f9cf69a8554ad6be2af4fce18f1dc597da3ee6fb1719925b7b46f69e32b2e258e6e4d1c23f5b27ab82a9f5ca99e4fdcb0df5299d0290aa6bf158f3922055bda407a", @ANYRES16, @ANYRES8], &(0x7f0000000080)='syzkaller\x00', 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x440006, 0xffffffff, 0x87, 0xffffffff, 0x2})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000200)={'sit0\x00', 0x0})
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200440d0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000005a0f000000001000001502000000fed1c91d8a00000b000100bca39983544a0000"], 0x20}}, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000380)=0x100000000)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d)
write(r8, &(0x7f0000000000)="41000200010001", 0x7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x118, 0x118, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x7}}, @var={0x10, 0x0, 0x0, 0xe, 0x2, 0x2}, @union={0xa, 0x4, 0x0, 0x5, 0x1, 0x2, [{0xc, 0x1, 0x7e21}, {0x0, 0x3, 0x927}, {0x4, 0x5}, {0x1, 0x2, 0x200}]}, @func={0xb, 0x0, 0x0, 0xc, 0x4}, @enum64={0x6, 0x8, 0x0, 0x13, 0x1, 0x8, [{0xb, 0x100, 0x7f}, {0xb, 0x4, 0x4}, {0x3, 0x7}, {0x2, 0x9, 0x5}, {0x9, 0x2, 0x4}, {0x2, 0x0, 0x9b92}, {0x4, 0x2, 0x3}, {0xc, 0x2, 0xffffff9d}]}, @typedef={0x6, 0x0, 0x0, 0x8, 0x5}, @const={0x4, 0x0, 0x0, 0xa, 0x2}, @func={0x26, 0x0, 0x0, 0xc, 0x2}, @const={0x10, 0x0, 0x0, 0xa, 0x3}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x7f, 0x0, 0x5f, 0x30]}}, &(0x7f0000000900)=""/33, 0x136, 0x21, 0x1, 0x1, 0x10000, @value=r3}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="080005146c1a4200"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x4004000}, 0x801)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000003c0)={0x2b, 0x1, 0x0, "a6895090e222e21a532cfb56ff2e7f37c17a5ac1f393f6447ba1dec50518ee88", 0x30314742})
socket$nl_route(0x10, 0x3, 0x0)

39.1750783s ago: executing program 4 (id=142):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x8, 0x12}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xc6, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)={@map=r1, r0, 0x34}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001900010028bd7000fedbdf251d01010008000900", @ANYRES32=0x0, @ANYBLOB="08000a00b8"], 0x24}, 0x1, 0x0, 0x0, 0x44895}, 0x0)
getsockopt$inet_udp_int(r3, 0x11, 0x64, 0x0, &(0x7f00000025c0))

39.172733026s ago: executing program 4 (id=143):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
clock_getres(0x8, 0x0)
r4 = syz_open_dev$evdev(0x0, 0x1, 0x181842)
ioctl$int_in(r4, 0x5421, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x120) (async)
r5 = syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x90864, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
write(r5, &(0x7f0000000100)="2d45b3e1a9331d2caf7affc646a86a17dce6b9d006b3755b0731e9f5dcf2c1d33191cb936352c8e041dc0d6efaf9aed6c29155f5bde921b7b640b1f8ed1c4e56c13fd973fee0afa3a8f632af6587dfc647d406769913049d941517739b49db9ce76aabc36cbb298c56f45a69f936714e1de2dae6ef55702767209c81933218edc38ff99dd92fdecae17daf78e3d78f35ba2a98501069975eb818c281f2633c46be19", 0xa2)
mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000040), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './tracing'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

38.291387896s ago: executing program 4 (id=152):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f9000e", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x2, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0x14, 0x6, 0x1, 0xd1, 0x5, [0x8]}]}}}}}}}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x19, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x1}})
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYBLOB="214f3be80ec7b6263e3fc37d12439f1ff4b5db742490ec12d9999317a874d33227c29858638eb5cf513185b676fe494fd975f31cddfa19adc35b7b807d4dd68a1db3f789dab733ea79395805d6acf776b1cb3c89fbc94122cdff45311b188a5f59dd2c4dbe27b496e80582ec7e811c9de0495478cbb24f0583eef4c1c4206e153c3ac47e597f20dc", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16=r1], 0x1, 0x1224, &(0x7f0000001240)="$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")

37.663188859s ago: executing program 4 (id=154):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x7, 0x0, 0x53)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
sendmsg$inet6(r0, 0x0, 0x48043)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="011600000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000009000300060000000400040008000600", @ANYRES32=r4], 0x5c}, 0x1, 0xf000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi5\x00', 0x4c0040, 0x0)
ioctl$COMEDI_SETWSUBD(r9, 0x6411)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xfa}}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, 0x0, 0x40010)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r12=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)

37.637912108s ago: executing program 32 (id=154):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x7, 0x0, 0x53)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
sendmsg$inet6(r0, 0x0, 0x48043)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="011600000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000009000300060000000400040008000600", @ANYRES32=r4], 0x5c}, 0x1, 0xf000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi5\x00', 0x4c0040, 0x0)
ioctl$COMEDI_SETWSUBD(r9, 0x6411)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xfa}}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, 0x0, 0x40010)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r12=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)

15.074968433s ago: executing program 3 (id=297):
syz_open_dev$video(0x0, 0x7, 0x40580)
r0 = syz_mount_image$vfat(&(0x7f0000001080), &(0x7f0000000080)='./file4\x00', 0xa08c54, &(0x7f0000001400)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@utf8no}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@utf8no}, {@shortname_mixed}, {@fat=@flush}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@utf8no}, {@shortname_win95}]}, 0x1, 0x2c8, &(0x7f0000001100)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'macvtap0\x00', &(0x7f0000000180)=@ethtool_wolinfo={0x6, 0x81, 0x7, "9aff6ab93aa3"}})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x4, 0x0, 0x4, 0xfffffffc, 0x3}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0)
mkdirat(r0, &(0x7f0000000280)='./file4\x00', 0x34d)
pipe2$9p(0x0, 0x80000)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r7, 0x29, 0x38, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @adiantum, 0x3, '\x00', @c})
sendto$inet6(r7, 0x0, 0x0, 0x4001, &(0x7f0000000200)={0xa, 0x4e20, 0x8000000, @mcast1}, 0x1c)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}})

13.406765664s ago: executing program 3 (id=303):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xa800, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0xfffffffc}, 0x50)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000a008080ffffffffffff00000000000001000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

13.128132596s ago: executing program 3 (id=307):
r0 = userfaultfd(0x80001)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x4, 0x3, 0x3, 0x401, 0x3, [0x0, 0x7fff, 0xed32, 0x74f1]})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c})
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0xfffffffffffffffe)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xc2, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xd, "c8f46976e79ea788f03d9d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0)

13.118122656s ago: executing program 3 (id=310):
socket(0x8, 0x3, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}, {@uni_xlate}, {@shortname_mixed}, {@rodir}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@utf8}, {@shortname_lower}, {@utf8no}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000001140)="$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")
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x800, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$poke(0x1, r0, &(0x7f0000000100), 0x7ffffffffffffefd)

12.929361934s ago: executing program 3 (id=313):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r4, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x5, 0x4c0, &(0x7f00000006c0)="$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")
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)

12.208867415s ago: executing program 3 (id=322):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./proc/thread-self/fail-nth/file0\x00', &(0x7f0000000100)='proc\x00', 0x200002, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth/file0\x00', 0x494280, 0x0)
write(r0, &(0x7f0000000000)='6', 0x32) (async)
write(r0, &(0x7f0000000000)='6', 0x32)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={<r2=>0x0}, &(0x7f00000005c0)=0xc)
syz_open_procfs(r2, &(0x7f0000000240)='clear_refs\x00') (async)
r3 = syz_open_procfs(r2, &(0x7f0000000240)='clear_refs\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
writev(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)='4', 0x1}, {&(0x7f0000000280)="b5b0ef86df6c", 0x6}], 0x2)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x1c) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x6, [0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000380)={0x9, 0x8201, 0x2e0, 0x1, r4}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x800454cf, 0x2)
accept4$nfc_llcp(r0, &(0x7f0000000440), &(0x7f0000000540)=0x60, 0x80000)
r6 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$FICLONE(r7, 0x40049409, r6)
socket$packet(0x11, 0x2, 0x300) (async)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x5, 0x240250d4, &(0x7f0000000300)={0x11, 0x8100, r9, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) (async)
sendto$packet(r8, &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x5, 0x240250d4, &(0x7f0000000300)={0x11, 0x8100, r9, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) (async)
r10 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000400)=0x6)
ioctl$XFS_IOC_FSCOUNTS(r10, 0x80205871, &(0x7f00000003c0))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x4010, &(0x7f0000000000), 0x1, 0x44b, &(0x7f0000000640)="$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")

11.950238768s ago: executing program 33 (id=322):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./proc/thread-self/fail-nth/file0\x00', &(0x7f0000000100)='proc\x00', 0x200002, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth/file0\x00', 0x494280, 0x0)
write(r0, &(0x7f0000000000)='6', 0x32) (async)
write(r0, &(0x7f0000000000)='6', 0x32)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={<r2=>0x0}, &(0x7f00000005c0)=0xc)
syz_open_procfs(r2, &(0x7f0000000240)='clear_refs\x00') (async)
r3 = syz_open_procfs(r2, &(0x7f0000000240)='clear_refs\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
writev(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)='4', 0x1}, {&(0x7f0000000280)="b5b0ef86df6c", 0x6}], 0x2)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x1c) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x6, [0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000380)={0x9, 0x8201, 0x2e0, 0x1, r4}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x800454cf, 0x2)
accept4$nfc_llcp(r0, &(0x7f0000000440), &(0x7f0000000540)=0x60, 0x80000)
r6 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$FICLONE(r7, 0x40049409, r6)
socket$packet(0x11, 0x2, 0x300) (async)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x5, 0x240250d4, &(0x7f0000000300)={0x11, 0x8100, r9, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) (async)
sendto$packet(r8, &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x5, 0x240250d4, &(0x7f0000000300)={0x11, 0x8100, r9, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) (async)
r10 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000400)=0x6)
ioctl$XFS_IOC_FSCOUNTS(r10, 0x80205871, &(0x7f00000003c0))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x4010, &(0x7f0000000000), 0x1, 0x44b, &(0x7f0000000640)="$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")

3.002596228s ago: executing program 0 (id=436):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="260a00000000d63f611141203d43abcbb2e624000000000000000000400095000000000000003bb46c41"], &(0x7f0000000000)='GPL\x00'}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x67b8, 0x4)
sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4044800)
recvfrom$inet(r0, 0x0, 0x0, 0x2142, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x7, 0x7fffffff}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0x3}, {}, {0x4, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xb, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002400)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@local, 0x4e23, 0x4000, 0x4e21, 0xd, 0x1e, 0x0, 0x20, 0x0, r3, r4}, {0xdf, 0xb, 0x3, 0x9, 0x2, 0x7, 0x7, 0x4}, {0xf, 0x100000001, 0x1, 0x8}, 0x2, 0x6e6bb2, 0x0, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4d3, 0x6c}, 0x2, @in6=@local, 0x3507, 0x5, 0x3, 0x6, 0xe78, 0x200, 0x2}}, 0xe8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="050026bd1de1d0a790f36b45000008000300", @ANYRES32=r7], 0x98}}, 0x4000080)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)

2.36443408s ago: executing program 2 (id=445):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async, rerun: 32)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0) (async, rerun: 64)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (rerun: 64)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x20000000000005, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x7, 0x5, 0x26, 0x38, 0xfffffff8, 0x6, 0xc3b, 0xc8, 0x6de9, 0x7, 0xfffffff7, 0x5, 0x6, 0x0, 0xff4, 0x401]}) (async)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x20c2, 0x2)
fcntl$setstatus(r2, 0x4, 0x4000) (async, rerun: 32)
fadvise64(r2, 0x9, 0x2, 0x2) (rerun: 32)

2.219081921s ago: executing program 2 (id=448):
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0xbc1, <r3=>r1, 0x80000})
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r4 = syz_open_procfs(0x0, &(0x7f0000004240)='net/igmp\x00')
pread64(r4, &(0x7f00000000c0)=""/144, 0xff6c, 0x5e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$set_reqkey_keyring(0xe, 0x7)
unshare(0x60600)
syz_open_dev$usbmon(0x0, 0x2, 0x0)
r5 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x199, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x2, 0x9})
mq_timedreceive(r5, &(0x7f0000001140)=""/170, 0xaa, 0x5, 0x0)

2.217698635s ago: executing program 1 (id=449):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2.077114325s ago: executing program 0 (id=450):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e00000013000500000000000000000003010000100002008100706173696d5f6e6574000a0004007664706130000808dc61d75b029187fd012b716082898bd76a55a5e8e152d14dc3b9c358f02f0916cacbbc28199e018f33734619c07ee9", 0x5f}], 0x1}, 0x40080)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000fca00b0a0008000d0000000000"], 0x24}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0xa}, &(0x7f00000000c0)=0x8)
memfd_create(&(0x7f0000000040)='\x00', 0x3)

2.075535185s ago: executing program 2 (id=451):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000780)={[{@noblock_validity}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$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")
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0xfffffffffffffffe)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=<r2=>0x0)
bind$nfc_llcp(r1, &(0x7f0000000180)={0x27, r2, 0x0, 0x1, 0x6, 0x5, "679fef94accf47174c8d7d2176db4414707aecec2ccccfe5f6a16a4166ee3ad9772d716ae82bff4a8ca3db940d2431a52c447d425b118a2810285d912111ec", 0x34}, 0x60)
sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="1d4ba7c3474f0b26e3b610b5308bf51daa24647e6e4bdda32adce5014d5dafc211015802f458c8a1a7d33863191c8fce255452c56994cb6390707e90a8757c0ffed872107ed2702b028457aa40357d1ab9f477ec729c3ded1eac594029ae5a7822bfb42b0be3010092a897e780409252e788d4ca44968fd7f4c5b6123786a5aa29724a65944ff7dbc08c68e79d23d28b189ae1a4e4d8a0e88e7220f70c6cad71affe029beb7559f49df0322ca03a2e3a31821aa22a92da5abdfea5ab8aee1063b4", 0xc1}, {&(0x7f0000000380)="b01f50712c037da231e5529854ade2631112364bfd5050f0c75d1ea8e3bb524c130bafa4448b9ee0cdc855b3abc18bf799080da8660b39bfcb07990ab08915683accb3c43499919d084e68f1d3988843848bc951f729c04933e819c8dc928c5e45ab6039c025c2a5af4210b1f02d98eb9f15269e003a86fe086d2a2e9a3ca385c5659a8789b2606497ccbb395b48eff8da4035fe862aff6c591905111feb9fff8252a48c967d564ef54848c0ef9fa32e4c1e09a4f8d22e73fd21eb8fbaf25fe61960522ccb1b", 0xc6}, {&(0x7f0000000480)="3c39f486e46ed2383a7691b177e2ae7d9f8ba938adc59a43680e5c9552705ef4f842fb52b39af8442c61d6504ed26b6d872ff556911a64b5feaaa486d5fe8ec61df1884eb2660d04d59ef7b996c2b49680f9ab03b905133c181c7f31df4f6c5b40", 0x61}, {0x0}], 0x4, &(0x7f0000000540)=[{0xe0, 0x113, 0x8000, "268d1c282be62db4ddf07e58c63dec7d754fc4fa905526f98094198f330849b4562cad0fb5b5ee74f45141b56324c7f53df982bed1dc870772c3e836eb034163219eaf943ffe13cc54dd7d3652050f742ea656982b561fb300a5edb4eb048e8dd884020c3648e66619b596df2ff74e36b03583690d4a5ff5cf697c7fa3aba40a59c147a2978715bfb178313648908cf011e40db7c97ae5c4e39d4aab0890dd4b37ccf8f5eda5a9657915092122e4fbb9449eaf9a383781562c08ee939a0d4e7065bb06dfa6db452cf47fe73652ab"}, {0x80, 0x29, 0x80000001, "3ce836156bc71afb9917fb5dfcb05e83227d5fd8680c1146e45deaecdc01abf152d65cd808b1f01c79c0c779dce79f176b62e61fd31800a9a8bf53bdc08872db9529e2b54d503138ef8aaab0a698258312bcc1195be209030e1021c8eb397144a1317dc14370d9f94b"}, {0x68, 0x111, 0xd, "f40fe229a62e470cbb3260173d025a9e1a24b8bbbfd2f80ae4e79a378abc396c8061710c4690c211385d4375e0121810161342c1e2aeb9ab98b6f52c212ee6bb56fa865a3342acadb4c0ecfe303eb5bbba8a4e88937c2e14"}], 0x1c8}, 0x814)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000))

1.989776943s ago: executing program 5 (id=453):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18)
socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143442, 0x0)
read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020)
connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x42}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}}, 0x42)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0)
r6 = fcntl$dupfd(r3, 0x406, r3)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf)

1.926131944s ago: executing program 0 (id=454):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0)=0xffffffffffffffff, 0x3)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x4040c1, 0x20)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={0x0, 0x0, 0x14}, 0x18)
ioctl$PIO_SCRNMAP(r1, 0x4b41, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @mss={0x2, 0x7fff}, @sack_perm, @mss={0x2, 0x9}, @window={0x3, 0x1, 0x2}, @window={0x3, 0x2, 0x8b89}, @sack_perm, @window={0x3, 0x800, 0x7ff}, @timestamp], 0xa)

1.863027421s ago: executing program 2 (id=455):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e24, 0x0, @remote, 0x1}, @in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffe}], 0x48)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={<r1=>0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={r1, @in={{0x2, 0x4e20, @empty}}, 0xfe, 0xffff}, 0x90)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="d1", 0x1, 0x40010, 0x0, 0x0) (async)
sendto$inet6(r0, &(0x7f0000000140)="d1", 0x1, 0x40010, 0x0, 0x0)

1.518917256s ago: executing program 0 (id=456):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x1000)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x664001)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x16, &(0x7f00000001c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x1f4}]}, 0x140}, 0x1, 0x0, 0x0, 0x20040}, 0x80)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x200000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1235, 0x3c}, 0x2, @in=@private=0xa010101, 0x0, 0x1}}, 0xe8)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x1234, @loopback}, 0x10)
write(r4, &(0x7f0000000500)='hello', 0x5)
close(r4)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0x32}}, 0x14}, 0x1, 0x0, 0x0, 0x20040}, 0x80)
close(r3)
nanosleep(&(0x7f0000000600)={0x0, 0x1dcd6500}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f0000002fc0)=@ethtool_stats})
r6 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r6, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0xa, 0x1004, @mcast2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001080)="671723d7c6012c", 0x7}, {&(0x7f0000000200)="9eff02000000000000dfe52c1f51218206f5abfd2a00"/33, 0x21}], 0x2}, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r8, 0x6, 0x3, &(0x7f00000000c0), 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r9, @ANYBLOB="102a05f4ffffff000c001a800800028004000180300012800b0001006272696467650000200002800800050001da000005002c0002"], 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000000)='bridge0\x00', 0x422000, &(0x7f00000000c0)={@_ha_fsid={[0x1ff, 0xfa4e]}, {0x9, 0x2, 0x10, 0x100000000}}, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x2})

1.421181425s ago: executing program 1 (id=457):
r0 = io_uring_setup(0x62d2, &(0x7f00000004c0)={0x0, 0x3503, 0x40, 0x0, 0x2e1})
prlimit64(0x0, 0x8, &(0x7f0000000140), 0x0)
mlock2(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x4010)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xa, 0x148, 0x290, 0x10, 0x4b0, 0x2a8, 0x2a8, 0x4b0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x81, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x4, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240, 0x0, 0x8}, {0xfffffffffffffffc}}}, @common=@addrtype={{0x30}, {0xe84, 0x48}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5a8)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x3, 0x2b})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0xf0f, 0x2, 0x5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x3, 0xcb})
close_range(r1, r3, 0x0)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, 0x0, 0x0)

1.053314849s ago: executing program 5 (id=458):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x2)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) (async)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
fchown(r1, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000068004938080005000000000000000000000000080000000026647cd3fbc1e8fd4b2b159692fdea1750bbcff1136a52f20872b0fa9891bddacef0dbbb260660390e416e46bdcbda0381a8fe295b6c79ab1d0c33e1669ed7193403eb80c1a3f696eaa52ec4804338ebcc2564fa31bfdeedd3573fe873c7cc1340eb36a6bee78e0bd71adfe8a60b87faa78f7ff3b4caaf52240c", @ANYRES32=0x1, @ANYBLOB], 0x20}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000068004938080005000000000000000000000000080000000026647cd3fbc1e8fd4b2b159692fdea1750bbcff1136a52f20872b0fa9891bddacef0dbbb260660390e416e46bdcbda0381a8fe295b6c79ab1d0c33e1669ed7193403eb80c1a3f696eaa52ec4804338ebcc2564fa31bfdeedd3573fe873c7cc1340eb36a6bee78e0bd71adfe8a60b87faa78f7ff3b4caaf52240c", @ANYRES32=0x1, @ANYBLOB], 0x20}}, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
getresgid(0x0, 0x0, 0x0) (async)
getresgid(0x0, 0x0, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000080, &(0x7f0000000100)={[{@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf2a5}}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000009"]) (async)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000009"])
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
listen(r5, 0x2) (async)
listen(r5, 0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20)
sendmmsg$inet6(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0)
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000500)=[@dead_binder_done], 0x1, 0x0, &(0x7f0000000400)="d2"}) (async)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000500)=[@dead_binder_done], 0x1, 0x0, &(0x7f0000000400)="d2"})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800000, &(0x7f00000003c0)={[{@journal_dev={'journal_dev', 0x3d, 0x8002}}, {@delalloc}, {@bsdgroups}, {@discard}, {@test_dummy_encryption_v1}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@jqfmt_vfsold}]}, 0x1, 0xbda, &(0x7f00000016c0)="$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")
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400000000feeee82bca991b8e", @ANYRES32=r3, @ANYBLOB="5d5800000000000014001680100001800c0007000200000000000100140003006970766c616e30000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0)

951.176494ms ago: executing program 0 (id=459):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f00000003c0)="f6f4e9a1d78ad62ceef1884386a2e499b3dcf5810000000000000080000000000000", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a01040000000000000000f8a5a875c8770a0000040900010073797a310000000008000540000000020900020073797a31000000000800689efffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c00128014000180090001006c6173740000000004000280140001800c000100636f7506000000000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0)
r2 = syz_open_dev$mtd(&(0x7f00000000c0), 0x1000, 0x4080)
ioctl$MEMUNLOCK(r2, 0x40084d06, &(0x7f00000001c0)={0x0, 0x9})

950.371978ms ago: executing program 2 (id=460):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2, 0x9c6f, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x30, 0xffffffffffffffff, 0x6a855000) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) (async)
userfaultfd(0x80001) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0xa) (async, rerun: 64)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$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") (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000088}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvfrom$llc(r3, 0x0, 0x0, 0x2142, 0x0, 0x5) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x89a2d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) (async, rerun: 64)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x4044) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x181041, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000000)={0x28, 0x5, 0x0, 0x0, &(0x7f0000ae1000/0x3000)=nil, 0x3000, 0xb})
ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, 0x0)

949.923135ms ago: executing program 5 (id=461):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000700)={r1, r1, 0xa, 0x0, 0x0, 0x7, 0x3, 0x458, 0x58, 0x8, 0x7ffffffe, 0x1, 'syz0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000285000000410000009500"/32], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

889.301876ms ago: executing program 5 (id=462):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010500000000000000000a00000000000000080001000100000008000500", @ANYRES32=0x1], 0x38}, 0x1, 0x9fffffff}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
acct(&(0x7f00000001c0)='./dev/mtdblock0\x00')
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x70, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r9, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345\r\n\r\n', 0x39, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r5, 0x1, 0x30bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
syz_usb_connect(0x0, 0x32, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x6c, 0x10, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x48978, 0x20000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffff9}}]}]}, @IFLA_MASTER={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40801}, 0x4048040)
socket$inet_sctp(0x2, 0x1, 0x84)

758.699148ms ago: executing program 0 (id=463):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0}}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800", 0x2}], 0x1)
readv(r4, &(0x7f00000006c0), 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38)
r5 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4)
sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="080044cb9f6b83f9", 0x8}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010101}}}], 0x20}, 0x24048894)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x200009, r0}, 0x38)
socket(0x18, 0x6, 0x4951)
ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/119})

391.901518ms ago: executing program 6 (id=466):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000002c0)={0x98c, 0x1000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0xac, 0x10, 0xffffffffffffffff, 0x70ad2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x28354, 0x823}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x33c19c9e}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1, 0x14}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x8354461f499ad5c5}}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0xac}, 0x1, 0x0, 0x0, 0x45}, 0x40040)
socket$inet_tcp(0x2, 0x1, 0x0)

370.497374ms ago: executing program 6 (id=467):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x1000002d, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xe11, 0xffffffff}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x8410)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000030a010800000000000000000a0000070900010073797a31000000000c00024000000000000000020400048018000480140003006772653a0000000000000000000000000a000700726f757465"], 0x84}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x7ffffffe, @empty, 0x5}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x41c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x2d1, 0x40, 0x7fffffff, 0x9, 0x14a, 0x20f, 0x82be, 0x8000, 0x3, 0x3, 0x1, 0x2, 0x1, 0x8, 0x9, 0x3ecf370d, 0x8b0, 0xffffffff, 0x1, 0x3, 0x7f, 0x2, 0x8000, 0x5, 0x7a03, 0x401, 0x9, 0x2, 0x8000, 0x0, 0x7f, 0x401, 0x2, 0x7fffffff, 0xff, 0x2, 0x1, 0x0, 0x5, 0x4, 0x7, 0x804, 0x5, 0x60000, 0x7, 0x5, 0x0, 0x9, 0xffffffff, 0x6, 0x3, 0x9, 0x800, 0x7ff, 0x5, 0x263, 0x7, 0x6, 0x9, 0x6, 0x5, 0x101, 0x4, 0xfffffffd, 0x8, 0x5, 0x6a, 0x2, 0x9, 0x0, 0x3, 0x5, 0x2, 0x401, 0x1, 0x15c81dce, 0x8, 0x69c, 0x0, 0x0, 0x7, 0x2, 0x0, 0x61, 0xfff, 0x7, 0x7, 0x800, 0x5, 0x6, 0x9, 0x3, 0x3ff, 0x800, 0x3, 0x7f, 0x200, 0x7, 0x7, 0x0, 0xed85, 0x9, 0x49d, 0xab6, 0x8, 0x3, 0xe6, 0x9, 0xfffffff6, 0x3, 0x1701, 0x81, 0xe3d, 0x9, 0x8, 0x114, 0x4, 0x5, 0x5, 0x7, 0x4, 0x7, 0xfffffff5, 0x8, 0x0, 0x5, 0x7, 0x2, 0x7c3e, 0x80000000, 0x2, 0x7, 0x5, 0x6, 0xffffffff, 0xffffffff, 0x1, 0x8, 0xfffffffe, 0x4, 0x9f, 0x4, 0x4, 0x2, 0x1, 0x8001, 0x3, 0x5, 0xb30, 0x8, 0x2, 0xa, 0xffff, 0xf, 0xfff, 0x9, 0x7, 0x7, 0xff, 0xffffff81, 0x0, 0x10001, 0x0, 0x40, 0x8, 0xfffffff9, 0x4, 0xcab, 0xffffded9, 0x5, 0x60000000, 0x2, 0x800, 0x11, 0x80000001, 0x6, 0x2, 0x2, 0x5, 0x6, 0x6078d03, 0x5, 0x6eee, 0x9, 0x0, 0x7, 0xde, 0x2, 0x1, 0xffffffff, 0x6, 0x0, 0xfffffffa, 0x80000001, 0x92, 0x0, 0x3, 0x5, 0x4, 0xe9, 0x1, 0x7fffffff, 0x7, 0x8, 0xc8304d31, 0x7, 0x0, 0x8, 0x8, 0x1cc, 0xc0, 0x1, 0x80000001, 0x5, 0x7, 0x9, 0x2, 0x200, 0x3, 0xfffffff8, 0x23e, 0xfffffffc, 0x5, 0xffffff7f, 0xffff3f16, 0x1, 0x2, 0xc91f, 0x8001, 0x3, 0x7f, 0x9, 0x90, 0x4, 0xffffffff, 0x8, 0x4, 0x6, 0x4, 0x7ff, 0x8, 0xb7, 0x6, 0xad, 0xf028, 0x5f4, 0xa94f, 0x5, 0x127, 0x6, 0x8, 0x4, 0x5, 0x8]}]}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)
sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080025bd7000fedbdf250f00000018000180140002006272696467655f736c6176655f300000200001801400020074756e6c30000000000000000000000008000300070000000c00018008000100", @ANYRES32=r6, @ANYBLOB="0ab61736d0560c63bd18b097ef0922f640276e94a955c15fd25ccd6c4ef3763bb269f3efa395ff4bf777f08f3b2e8ddbd56eba0265af56093b23a96639e6f2508b6d653367b4c4b94da8fd73c282a243ad3007180a6ba56db2bfacf403a43847627560433cd84357c25760f5ceeac037591905f7411f06f045c19a07f7af66a95a9e935a18bef0a86f936b950e8d1fe84fa79d764c627be2459f73f9b91557aeaf1563242d74f1a400860b2d847df336b2ab4886abf4092f3a02641629a59d9741d7f0f541193ae7523cc03c9fbf64baa75725131d7b9c331baebe737a35a6c2"], 0x58}, 0x1, 0x0, 0x0, 0x24000889}, 0x41)

365.733572ms ago: executing program 1 (id=468):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0x402, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x100) (async)
mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/nvme0n1\x00', 0x2, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x10, 0x2, 0x6, 0x10001}]}) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={<r3=>0x0}, &(0x7f0000000140)=0xc)
sched_setscheduler(r3, 0x5, &(0x7f0000000180)=0xff) (async)
close_range(r2, 0xffffffffffffffff, 0x2000000000000)

307.153951ms ago: executing program 1 (id=469):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r1=>0x0, 0x2f, 0x5, 0x1, 0x4, 0x42, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x8000, 0x2b, 0x7f9}})
personality(0x619641b6fb4b8591)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$eJzs20tvG0UcAPD/rp30TUIpjz6AQEFEPJImLdADQgKBxAUJCQ7lGJK0KnUb1ASJVhEEhLiiStwRRyQ+ASe4IOCExJUPgCpVKJcWTkZr7yaO4zycOnHAv5+09czuuDN/74w9u5MNoGcNZf8kEQcj4o+IGKhnVxYYqr/cWZyf/HtxfjKJavXtv5JauduL85NF0eJ9B/LMcBqRfp7E8Rb1zl67fmmiUpm+mufL+etzFy9PXJi+MH1l/OzZM6fHXnxh/PmOxJm16faxj2dOHH3j3RtvTp678d4v3yVF/E1xdMjQy+scfLJa7XB13XWoIZ2Uu9gQ2lLKx15fbfwPRCmWT95AvP5ZVxsHbKtqtVo9sPbhhSrwP5ZEt1sAdEfxQ59d/xbbDk09doVbr9QvgLK47+Rb/Ug50rxMX9P1bScNRcS5hX++zrbYnvsQAAAr/JDNf55tNf9L44GGcvfka0ODEXFvRByOiPsi4khE3B9RK/tgRDzUZv1DTfnV85/05pYC26Rs/vdSvra1cv5XzP5isJTnDtXi70vOX6xMn8o/k+Ho25Plx9ap48fXfv9yrWON879sy+ov5oJ5O26W96x8z9TE3MTdxNzo1qcRx8qt4k+WVgKSiDgaEce2WMfFp789sdaxjeNfRwfWmarfRDxVP/8L0RR/IUuNzl3+YHT22vUW65Oje6MyfWq06BWr/frbF2+tVf9dxd8B2fnf37L/L8U/mDSu18629//v2eD4Vvt/f/JOLd2f7/toYm7u6lhE/6WVnaK2f3x1viifxT98svX4PxzLn8TxiMg68cMR8UhEPJq3/bGIeDwiTq4T48+vPvH+1uPfXln8U22d/+VEfzTvaZ0oXfrp+9jbUOlgO/Fn5/9MLTWc79nM999m2tV+bwYAAID/pjQiDkaSjiyl03RkpP738kdif1qZmZ175vzMh1em6s8IDEZfWtzpGmi4HzqWX9YX+fGm/On8vvFXpX21/MjkTGWq28FDjzuwxvjP/FnqduuAbed5Lehdxj/0LuMfepfxD72rxfjf1412ADuv1e//J11oB7Dzmsa/ZT/oIa7/oXcZ/9C7jH/oSbP7YuOH5CUkViUi3RXN2MZEUt4VzehSotvfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//Eg/hCA==")
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000980), 0xfe, 0x27d, &(0x7f0000001100)="$eJzs3T1oa2UcB+D/OUn6YYtUXQTxA0REC6UOguCii0KhlCIiqFARcZJWqC1ujZOLg84qnVyKuFkdxaW4CK5VO/Qud7jlDrfc4d4hl5OT9KZtStPmq/Q8D6TnvMn7FejvPUlp3gRQWFMR8UZElCJiOiIqEZG0Vnguv001ipvjO0sRtdo7t5N6vbyca7abiIhqRLwWUW4+tr79wf7d3bdf/Gat8sJP2++PD+r5tTrY35s//HHh61/nXllPG/dNNo6tz6OXkjb3lZOIx/sx2BWRlIc9Azqx+OUv/2a5fyIinq/nvxJpI7Lfro78WYmXfzir7Xe3/nlqkHMFeq9Wq2TXwGoNKJy0/ho4SWciIj9P05mZ/DX8f6UkPltZ/WL605W15U+GvVIBXWm+667V35XuvfX76G8TJ/J/s5TnvyOv9m+qwCWMdlZtMmLv3cWt/7Pzw1Kf5wRcDU/nhyz/0x9tvBTyD4Uj/1BcR/mfl38oGtd/uAYumV35h+vq/H+vlX8oLvmHa6zSPKm2fVj+objkH4rrYf7Hsvw3/2AwcpE+0v5MDeiz1us/AFAstdFhfwIZGJZhrz8AAAAAAAAAAAAAAAAAAMBpm+M7S83boMb86/uIgzcjonx8/PwrTEuN/cXG6j8fuZNk1Y4kebOufPhslx106ecef/p6ocPvfm169EZvx7+ov5/pT79fHS+euRn+xnJENas8Wy6f/v1POt3f7sz+HzunYeXjzgboleRE+fX3Bjv+Sfe3hjv+3G7EH9n6M9tu/Uvjyfqx/foz2brF8iV9fq/LDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiYBwEAAP//7zlsEA==")
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@mpls_newroute={0x40, 0x18, 0x4, 0x70bd28, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x5, 0xe00}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0xb, 0x0, r2}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

296.610262ms ago: executing program 1 (id=470):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9300, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000)
close_range(r0, r0, 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r2, &(0x7f0000000340), 0x8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r3=>0x0)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f0000000100)={0x5937, 0x2, 0x10001, 0x0, 0x8, 0xd})
r4 = socket(0x1e, 0x1, 0x0)
shutdown(r4, 0x2)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x7)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000140)={r6, 0x4, 0x800, "ade675b83f33f01fe0fcd4de9242488d21b77ee9860664f04d7da193b21adb22a51cd14db2ca76867f92453a16f0d691f79841f44a0e439d83a78aa59646b3257cc9544a5f2454b1956667410f16a08603bf913a1e37b2f943f61ce2f909e2af7d5c43eaa9679f70aa84eab144df5d0becc9a5538a7dfddb90472d1a7eb13438f8a143d487c826114b71510e54f502b8efdca57e228d051b480b5d103ba96a"})
bind$vsock_stream(r5, &(0x7f0000000440), 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9300, 0x0) (async)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) (async)
close_range(r0, r0, 0x0) (async)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async)
read$eventfd(r2, &(0x7f0000000340), 0x8) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) (async)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f0000000100)={0x5937, 0x2, 0x10001, 0x0, 0x8, 0xd}) (async)
socket(0x1e, 0x1, 0x0) (async)
shutdown(r4, 0x2) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
socket$netlink(0x10, 0x3, 0x7) (async)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000140)={r6, 0x4, 0x800, "ade675b83f33f01fe0fcd4de9242488d21b77ee9860664f04d7da193b21adb22a51cd14db2ca76867f92453a16f0d691f79841f44a0e439d83a78aa59646b3257cc9544a5f2454b1956667410f16a08603bf913a1e37b2f943f61ce2f909e2af7d5c43eaa9679f70aa84eab144df5d0becc9a5538a7dfddb90472d1a7eb13438f8a143d487c826114b71510e54f502b8efdca57e228d051b480b5d103ba96a"}) (async)
bind$vsock_stream(r5, &(0x7f0000000440), 0x10) (async)

244.960076ms ago: executing program 1 (id=471):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r1 = getpid()
inotify_init1(0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x3, @multicast1}, {0x2, 0x0, @local}, {0x2, 0x0, @multicast2}, 0xa4, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe41})
r3 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a300000000028000480240001800a0001407175657565000000140002800600024000010000060001400002000014000000110001"], 0xdc}}, 0x0)
r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x13b600, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000004000000b708000000000000dbaaf8fff1000000b50800006d0800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006a000000950000000000000028341e524757ca641d8440318220dd0589a7ac8a1e7ef784be40da481a0306e27cc4058284d3636fada38b929f271b2e45f4452faac1dab533a693770dd29bae304bb1f933ef29685f66c58afb908cc0bfa0d8324b53d1caf6a2c77216eaa2bf767bdfa850f9e630b35eab5f6e975b29ac51bf4c55a478920846bb5d134ae60293732ad7eeef0613f96c3cc0c012fbe5855d287a190b18481442f114b74c9598ebff7006873d45d6373700eb9b2b5c39f0d80e10614e67b0230971a33357992eb35d7210610f0c8a10644aec14772b0ee54f0aac5d45a1f692dd90d67deaf45bbcf53684e808eaf32d64d3ff23d4ee6ba47ac0c3"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8, r5}, 0xc)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$eJzs3M1qE1EUwPFj0o80tU0WIiiIB92oi6GNL2CQFsSAUhtRF8LUTjRkTMrMWImI7c6tz1FcuhPUF+jGnQt30k0XCm66UCOdjzatQ6u2yYTm/4Myp3Pvydz5CmcGctfvvHpcq7hGxfQklVFJiSzLhkh+MwodC5cpPx6SdstycfT7pzO37t67XiyVpmZUp4uzlwuqOn723dPnr8998EZvvxl/Oyyr+fvr3wpfVk+unlr/NRt9esNTU+caDc+csy2dr7o1Q/WmbZmupdW6azk72it2Y2GhqWZ9fiy74Fiuq2a9qTWrqV5DPaep5kOzWlfDMHQsK/0m/c8Z5ZWZGbPYkcEgCSNxKx2naKZjG8sr3RgUAADoLUnV/4+qrlZdre9X/6eE+r9zqP+PkuNrEvsUuFn/Z8P7d8uln10cGQAAAAAAAAAAAAAAAAAAAAAAOIiNVivXarVy0TL6GxaRjIhE/yc9TnTGQc7/cPeHi0PW9sO9jIj9crG8WA6WQXuxIlWxxZKJQZEf/vUQCuLpa6WpCfXl5b29FOYvLZbT/vXh50fy8fmTQb7uzB+UbPv2C5KTE/I5Lr8Qmz8kF8635RuSk48PpCG2zPvX9Xb+i0nVqzdKu/JH/H4AAAAAABwFhm754/ndbzc0mjZkV3uwcvv9gOT2eT+w6/l6QE4PJLffAAAAAAD0E7f5rGbatuUQ7AiuiMiefZI+dCM9cqA6GKQ2z0HXt/41ujV64yAcarD2JNi1v+mc4JcSAAAAgI7YLvqTHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1rj2nAMmEXf03U/3/mHmvbXLr7ewgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0jt8BAAD//ysQG/U=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
fgetxattr(r4, &(0x7f00000001c0)=@known='user.incfs.size\x00', &(0x7f00000004c0)=""/201, 0xc9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000036010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x9}, 0x94)

243.673715ms ago: executing program 6 (id=472):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mremap(&(0x7f00001b5000/0x2000)=nil, 0x2000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mlock(&(0x7f0000844000/0x4000)=nil, 0x4000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)

123.206439ms ago: executing program 5 (id=473):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xa, 0x3a, ',:', 0x3a, '', 0x3a, './file0'}, 0x29)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000007000000911103000000000095"], &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefe}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000380)=r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/3, 0x2}, 0x20)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r3, 0x11, 0x66, 0x0, &(0x7f0000000400))
syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x40)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth0_to_bond\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0xfff3}}}, 0x24}}, 0x800)

120.240119ms ago: executing program 6 (id=474):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x410, &(0x7f0000000280)={[{@shortname_winnt}, {@numtail}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@shortname_winnt}, {@shortname_winnt}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@numtail}, {@utf8no}, {@numtail}]}, 0x3, 0x27b, &(0x7f00000009c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
getpid()
socket(0x400000000010, 0x3, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x2a5c3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200000009"], 0x7c}}, 0x8095)
syz_clone(0x18021800, &(0x7f0000000040)="28ad6ae257ccd3c89bff9ed5a7", 0xd, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="4e3e2b14aa7cbe20fa8eac4c0627982c8173101a5469af68874130f73f8f651ceb0ddb0ae5293167aa9e4600145c34d251a57423980f960a68286739af4f6029f1f43f44224fa8a6b03fa49a83f6b7a62ae833d38ec3b6ea6df9648aa77d4c5d1ed9cb03b0c01cbd93ba6bfd9fed5f1ab911857d37dc5e1e1c7ae2c35d9c5a0ab99d7cae256923563829478ff4ce6a1d68c156cd8e2df23590cbe257b5a3")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000500)=0x17, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080100003e0007010000000005000000047c000004004980ec000180060006003b000000e0001c"], 0x108}, 0x1, 0x0, 0x0, 0x8044}, 0x4010)

96.870074ms ago: executing program 6 (id=475):
r0 = fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0)
pwritev(r2, 0x0, 0x0, 0x10000, 0x25)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
sendfile(r3, r3, 0x0, 0x1)
fchdir(r1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x5, 0x4)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000011c0)=@multiplanar_userptr={0xdd26, 0x2, 0x4, 0x0, 0x5, {}, {0x4, 0x0, 0x5, 0x9, 0x1, 0x9, "7641ca4f"}, 0x200, 0x2, {0x0}, 0x308})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000001040)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)

62.105613ms ago: executing program 5 (id=476):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x1f, 0x7fff, 0xa68d7c51bdc00fb9, 0xffbc, 0x6, 0x1d45, 0x20008, 0x0, 0x0, 0x80, 0x4000001}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x129043, 0x131)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, <r5=>0x0}, &(0x7f0000000280)=0xc)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0)
pwritev(r6, 0x0, 0x0, 0x10000, 0x25)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
sendfile(r7, r7, 0x0, 0x1)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x82000, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8000000000000000}}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x7}}, {@default_permissions}, {@blksize}, {@allow_other}], [{@audit}, {@context={'context', 0x3d, 'root'}}, {@seclabel}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@appraise}]}}, 0x0, 0x0, &(0x7f0000000580)="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")

1.610488ms ago: executing program 2 (id=477):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044814}, 0x4000)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r9 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r9, 0xc01064ac, &(0x7f0000000440)={0x0, 0x0, 0x0})
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884)

0s ago: executing program 6 (id=478):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x401, 0x80101)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x7, @pix={0x8, 0x9, 0x34325258, 0x2, 0x5, 0xd, 0x1, 0x3, 0x0, 0x3, 0x1}}) (async)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xd, 0x2, 0x3, 0x0, 0x9})
r1 = syz_open_dev$mtd(&(0x7f0000000180), 0x5, 0x4000)
ioctl$MEMWRITEOOB64(r1, 0xc0184d15, &(0x7f0000000240)={0xd7, 0x0, 0x59, &(0x7f00000001c0)="4e6c95b7e00533059210457aa660b808ba5cc742ddf4ca5664f59bb29238d3b04e8d268daa79837e16b8eb7fc4bf1cf3c6d56256ea7853ff469e0c648d847b9405b522c210f221b7a6317e8ff7f6ec8cb999d23f89c56ab6f9"}) (async)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) (async)
ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x7ff, "429f94b317cd65f3b7d085eb1aa5031e7d78b143b9db82367994e7c7ce81080d", 0x0, 0x0, 0x1, 0x80, 0x0, 0x4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000, <r2=>0xffffffffffffffff})
mmap$panthor(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x4, 0x2010, r2, 0x3)
preadv2(r1, &(0x7f0000000a40)=[{&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/38, 0x26}, {&(0x7f0000000480)=""/147, 0x93}, {&(0x7f0000000540)=""/79, 0x4f}, {&(0x7f00000005c0)=""/110, 0x6e}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f0000000740)=""/228, 0xe4}, {&(0x7f0000000840)=""/141, 0x8d}, {&(0x7f0000000900)=""/80, 0x50}, {&(0x7f0000000980)=""/190, 0xbe}], 0xa, 0x1, 0x0, 0x1) (async)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r3, &(0x7f0000000b40)={0xb7, 0x20, 0x7, 0x20, 0x2}, 0x48)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000c00)={@broadcast, @dev, <r5=>0x0}, &(0x7f0000000c40)=0xc)
sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000e80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000e40)={&(0x7f0000000c80)={0x1a4, 0x13, 0x302, 0x70bd28, 0x25dfdbfd, {0x21, 0x7, 0x2, 0x0, {0x4e24, 0x4e22, [0xd8ed, 0x3c1a, 0x8, 0x4], [0xcef, 0x7, 0x5, 0x6], r5, [0x96000000, 0x6]}, 0xb, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "674eed8c66c9e4a060cd4aad5daf9f9ef0bb2290c20e0077f588c3ec557a6631548c52633cf4bcdc3aa7f3f9726e11a0a8e6d867dff429fe8bf23aa486c84abf757e8d228b52ac51f3a02878883040a7a82490ab6ed7cfca03b5e84700a8a53f68ed131689813b305401a72b8194515da4fd8266b1015aa03ff39138f16d44dc2e628620f0efb6265aac7f40dbf6738073867b1c5a235a8a790a831e2bb75d35207d53d78ac3ac09aab55756b219eb31ad180330687e8d667181c9b4a931151fb91a97e31d3ee47afcc5047f764110ea8df649b205a490100ef554b6817c717b478bd738"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "27e670dba5fc91efbccf851c00b9a7668be2858db0ec80631c52336fa1271ae1a663e7cdcce2794e16bb0e6ed6afa8a99d3e9e55d806a30523a3afd567f31d0f8a31c1f95a182affb13da3b0af329953340301c01e6a0e6d3e5baa6d3e56dea7c2baf594489ad00efa9f80"}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x400c010}, 0x8000) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x30) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r6}, &(0x7f0000000f80), &(0x7f0000000fc0)}, 0x20) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000001040))
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000013c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001380)={&(0x7f00000010c0)={0x290, 0x12, 0x800, 0x70bd28, 0x25dfdbfd, {0x2c, 0x4, 0x2, 0x4, {0x4e23, 0x4e21, [0x3, 0x4, 0x10000, 0x51c], [0x2, 0x9, 0x6, 0x8b1], r5, [0x7fffffff, 0x3ff]}, 0x401, 0x2e43}, [@INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "9a606865256bbcd05416564b87c62b381009e3d36496eb8f4c5a60b5a09f328acb1aedb9c248d53c9e051efa53e539a3c7ef57bb791dfbcf5f64edb7c974dd392b855d1055229031dce6b1d266b1fa00bda7305227f7884f268d50d60ad19eaed1c41a68a0bb5f3403f9ea39fafc0b03725b968bf7c4d6b7f8259017093f6e96431a711c65602c3304d691ad6d6ec11883ce9b9cc332b07a97b98a9e3b70defc68f5e50e5291e977c30b9aa0e07001a09bd5409653b96640ac2c69922f"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "fa70c2fab289d63397302e20a29ecf99717791702e31ef7bc444d74fa1ee144f008c5d0ae69d342da948bc15746e8401d7d260e9964792ea7023f25fb9992d197f7c29505fec9adb1d3ff2fefe79a8cf3f15ce145a0ef36c2f522bcc4edcc0de4bc681a676c10e54bbcdca9ee4c76ecb9dec5b9c0940a0c53c65615277fe715c951258c4bd8a54f935519983d7d8ab0a68ffdbc949d889d087417d3140d59094d1b5f3588e3576"}, @INET_DIAG_REQ_BYTECODE={0x80, 0x1, "a7cfab2995e960f1e5edac268cc45c1b6604d628938d7eb5db642f8f76b54767a2a81ea00b6ec48ab495959983dd7ff972062b8f6f2a123d23c884f34fd62b199594654d6bdf6961cdaba8f2ae617bab35cb2cc579797999637f5a799d3f1e5a7bebcdae7b2485f44cc3c42ed2cd96931ae10853166f0bfe0172f5ca"}, @INET_DIAG_REQ_BYTECODE={0x54, 0x1, "5e3534adcb636753e3f092e5278236777149bc49586ccec4a22c868494d022af23deb42a33b05173df7c4798dfc8f45a1052baee48815862bcfbf31be1224aa597a4ea853869c8c55a7fe0856a9dc99f"}]}, 0x290}, 0x1, 0x0, 0x0, 0x44}, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, r7, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x806}, 0x40) (async)
r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
getsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000001540)=0x40, &(0x7f0000001580)=0x1) (async)
connect$unix(0xffffffffffffffff, &(0x7f00000015c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001640)={0xa, 0x0, 0x0, @private2}, &(0x7f0000001680)=0x1c, 0x80000)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000016c0)={0xe9, {{0xa, 0x4e24, 0xd2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}}, {{0xa, 0x4e21, 0xfff, @empty, 0x2}}}, 0x108) (async)
recvmsg(r4, &(0x7f0000002cc0)={&(0x7f0000001800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000001980)=""/38, 0x26}, {&(0x7f00000019c0)=""/22, 0x16}, {&(0x7f0000001a00)=""/204, 0xcc}, {&(0x7f0000001b00)=""/131, 0x83}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/5, 0x5}, {&(0x7f0000002c00)=""/14, 0xe}], 0x8}, 0x4002)
r10 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r10, 0xf502, 0x0)

kernel console output (not intermixed with test programs):

[    7.503292][ T4396] 8021q: adding VLAN 0 to HW filter on device bond0
[    7.504954][ T4396] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
[    7.552025][   T13] gve 0000:00:00.0 enp0s0: Device link is up.
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts.
syzkaller login: [   21.243573][ T4690] cgroup: Unknown subsys name 'net'
[   21.383487][ T4690] cgroup: Unknown subsys name 'cpuset'
[   21.384868][ T4690] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   21.562604][ T4690] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   22.600918][ T4708] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   22.601361][ T4708] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   22.607520][ T4710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   22.618806][ T4713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   22.620020][ T4713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   22.620179][ T4713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   22.620501][ T4713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   22.621293][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   22.621745][ T4721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   22.621783][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   22.622038][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   22.622656][ T4721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   22.627447][ T4721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   22.627891][ T4721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   22.628282][ T4721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   22.629043][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   22.629414][ T4721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   22.629642][ T4721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   22.630071][ T4721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   22.630599][ T4721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   22.637623][ T4708] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   22.648521][ T4708] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   22.648920][ T4708] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   22.649045][ T4708] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   22.664375][ T4708] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   23.018414][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.018668][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.018736][ T4715] bridge_slave_0: entered allmulticast mode
[   23.019206][ T4715] bridge_slave_0: entered promiscuous mode
[   23.022768][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.022792][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.022887][ T4715] bridge_slave_1: entered allmulticast mode
[   23.023322][ T4715] bridge_slave_1: entered promiscuous mode
[   23.029144][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.029173][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.029228][ T4706] bridge_slave_0: entered allmulticast mode
[   23.029661][ T4706] bridge_slave_0: entered promiscuous mode
[   23.033438][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.033458][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.033505][ T4706] bridge_slave_1: entered allmulticast mode
[   23.033924][ T4706] bridge_slave_1: entered promiscuous mode
[   23.037072][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.037118][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.037203][ T4711] bridge_slave_0: entered allmulticast mode
[   23.037579][ T4711] bridge_slave_0: entered promiscuous mode
[   23.052415][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.052464][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.052520][ T4711] bridge_slave_1: entered allmulticast mode
[   23.052968][ T4711] bridge_slave_1: entered promiscuous mode
[   23.066252][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.067030][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.067763][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.068477][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.087894][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.099953][ T4706] team0: Port device team_slave_0 added
[   23.100633][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.101507][ T4706] team0: Port device team_slave_1 added
[   23.110105][ T4715] team0: Port device team_slave_0 added
[   23.110197][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.110257][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.110313][ T4714] bridge_slave_0: entered allmulticast mode
[   23.110728][ T4714] bridge_slave_0: entered promiscuous mode
[   23.111449][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.111469][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.111548][ T4714] bridge_slave_1: entered allmulticast mode
[   23.111923][ T4714] bridge_slave_1: entered promiscuous mode
[   23.120817][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.120826][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.120843][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.121548][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.121555][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.121566][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.132653][ T4706] hsr_slave_0: entered promiscuous mode
[   23.133222][ T4706] hsr_slave_1: entered promiscuous mode
[   23.149256][ T4715] team0: Port device team_slave_1 added
[   23.153160][ T4711] team0: Port device team_slave_0 added
[   23.154507][ T4711] team0: Port device team_slave_1 added
[   23.176030][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.176042][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.176055][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.179939][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.180203][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.180215][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.180231][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.180982][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.181150][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.181157][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.181170][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.204393][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.204407][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.204418][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.207581][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.207671][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.207756][ T4709] bridge_slave_0: entered allmulticast mode
[   23.208201][ T4709] bridge_slave_0: entered promiscuous mode
[   23.224631][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.224659][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.224710][ T4709] bridge_slave_1: entered allmulticast mode
[   23.225118][ T4709] bridge_slave_1: entered promiscuous mode
[   23.231954][ T4714] team0: Port device team_slave_0 added
[   23.233155][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.234076][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.243890][ T4715] hsr_slave_0: entered promiscuous mode
[   23.244167][ T4715] hsr_slave_1: entered promiscuous mode
[   23.244373][ T4715] debugfs: 'hsr0' already exists in 'hsr'
[   23.244403][ T4715] Cannot create hsr debugfs directory
[   23.246867][ T4714] team0: Port device team_slave_1 added
[   23.248013][ T4709] team0: Port device team_slave_0 added
[   23.248852][ T4709] team0: Port device team_slave_1 added
[   23.271471][ T4711] hsr_slave_0: entered promiscuous mode
[   23.272016][ T4711] hsr_slave_1: entered promiscuous mode
[   23.274654][ T4711] debugfs: 'hsr0' already exists in 'hsr'
[   23.274664][ T4711] Cannot create hsr debugfs directory
[   23.286650][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.286659][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.286672][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.289704][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.289712][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.289726][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.296608][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.296617][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.296632][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.303190][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.303199][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.303211][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.337348][ T4706] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   23.341052][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   23.350734][ T4714] hsr_slave_0: entered promiscuous mode
[   23.351023][ T4714] hsr_slave_1: entered promiscuous mode
[   23.351196][ T4714] debugfs: 'hsr0' already exists in 'hsr'
[   23.351209][ T4714] Cannot create hsr debugfs directory
[   23.355524][ T4706] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   23.357136][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   23.357414][ T4706] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   23.359849][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   23.361321][ T4709] hsr_slave_0: entered promiscuous mode
[   23.361605][ T4709] hsr_slave_1: entered promiscuous mode
[   23.361785][ T4709] debugfs: 'hsr0' already exists in 'hsr'
[   23.361794][ T4709] Cannot create hsr debugfs directory
[   23.368506][ T4706] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   23.369420][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   23.445005][ T4715] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   23.446773][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   23.447818][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.447848][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.448003][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.448071][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.448610][ T4715] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   23.449968][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   23.466563][ T4715] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   23.467688][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   23.473582][ T4715] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   23.474767][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   23.485649][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.485680][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.485743][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.485770][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.488377][ T4711] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   23.489308][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   23.489588][ T4711] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   23.490718][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   23.496080][ T4711] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   23.497989][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   23.506759][ T4711] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   23.507766][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   23.536998][ T4714] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   23.538164][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   23.540804][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0
[   23.548096][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.548122][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.548196][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.548224][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.549824][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0
[   23.559484][ T4714] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   23.560769][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   23.561060][ T4714] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   23.561918][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   23.567244][ T4706] 8021q: adding VLAN 0 to HW filter on device team0
[   23.568943][ T4714] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   23.570047][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   23.576001][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.576830][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.577103][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.577359][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.577602][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.597513][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0
[   23.602794][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.602824][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.606126][ T4715] 8021q: adding VLAN 0 to HW filter on device team0
[   23.608610][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.608631][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.615700][ T4709] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   23.616703][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   23.620109][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.620133][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.624958][ T4709] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   23.627200][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   23.627481][ T4709] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   23.628454][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   23.636313][ T4711] 8021q: adding VLAN 0 to HW filter on device team0
[   23.647679][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.647705][ T3688] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.648056][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.648074][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.649393][ T4709] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   23.650266][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   23.655210][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   23.655222][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   23.698428][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   23.698444][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   23.710953][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0
[   23.736199][ T4714] 8021q: adding VLAN 0 to HW filter on device team0
[   23.744437][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0
[   23.754779][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.754806][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.768269][ T4709] 8021q: adding VLAN 0 to HW filter on device team0
[   23.783558][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   23.783573][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   23.787225][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.787247][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.787723][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.787741][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.788091][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.788158][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.865736][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0
[   23.901289][ T4715] veth0_vlan: entered promiscuous mode
[   23.908289][ T4715] veth1_vlan: entered promiscuous mode
[   23.926177][ T4715] veth0_macvtap: entered promiscuous mode
[   23.931268][ T4715] veth1_macvtap: entered promiscuous mode
[   23.947135][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0
[   23.949230][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0
[   23.956165][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1
[   23.971776][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0
[   23.972594][  T266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   23.974033][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   23.974063][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   23.974089][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   24.021443][ T4706] veth0_vlan: entered promiscuous mode
[   24.041119][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0
[   24.044269][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   24.044284][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   24.054455][ T4706] veth1_vlan: entered promiscuous mode
[   24.059179][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0
[   24.075546][ T4709] veth0_vlan: entered promiscuous mode
[   24.077550][ T4709] veth1_vlan: entered promiscuous mode
[   24.080954][ T4706] veth0_macvtap: entered promiscuous mode
[   24.092255][ T4706] veth1_macvtap: entered promiscuous mode
[   24.101020][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   24.101030][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   24.106443][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0
[   24.108079][ T4709] veth0_macvtap: entered promiscuous mode
[   24.109654][ T4709] veth1_macvtap: entered promiscuous mode
[   24.113358][ T4714] veth0_vlan: entered promiscuous mode
[   24.115032][ T4714] veth1_vlan: entered promiscuous mode
[   24.127176][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1
[   24.130128][ T4711] veth0_vlan: entered promiscuous mode
[   24.131998][ T4711] veth1_vlan: entered promiscuous mode
[   24.137860][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0
[   24.138822][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1
[   24.148295][ T4714] veth0_macvtap: entered promiscuous mode
[   24.154919][ T4711] veth0_macvtap: entered promiscuous mode
[   24.156180][ T4711] veth1_macvtap: entered promiscuous mode
[   24.169310][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0
[   24.171065][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1
[   24.172741][ T4715] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   24.174404][ T4714] veth1_macvtap: entered promiscuous mode
[   24.177664][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0
[   24.178621][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1
[   24.190150][ T1186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   24.190259][ T1186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   24.190389][ T1186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   24.264896][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   24.264909][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   24.281714][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   24.281726][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   24.282473][ T1186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   24.282649][ T1186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   24.282829][ T1186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   24.282923][ T1186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   24.283068][ T1186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   24.283171][ T1186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   24.283279][ T1186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   24.283298][ T1186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   24.283316][ T1186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   24.283331][ T1186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   24.283344][ T1186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   24.283356][ T1186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   24.283369][ T1186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   24.291664][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   24.291676][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   24.305862][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   24.305873][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   24.314715][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   24.314728][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   24.336548][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   24.336563][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   24.353730][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   24.353741][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   24.368681][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   24.368693][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   24.426212][ T4898] loop1: detected capacity change from 0 to 512
[   24.446723][ T4898] EXT4-fs: Mount option(s) incompatible with ext2
[   24.531203][ T4904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6'.
[   24.550418][ T4906] loop4: detected capacity change from 0 to 256
[   24.580816][ T4906] netdevsim netdevsim4: Firmware load for '../file0/../file0/../file0' refused, path contains '..' component
[   24.607409][ T4908] Zero length message leads to an empty skb
[   24.646124][ T4915] overlayfs: failed to resolve './bus': -2
[   24.646637][ T4708] Bluetooth: hci2: command tx timeout
[   24.646644][ T4720] Bluetooth: hci0: command tx timeout
[   24.650838][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.651185][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.654589][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.655926][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.663671][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.664149][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.666331][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.669804][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.670847][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.671632][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.671937][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.678067][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.678468][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.678796][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.679081][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.679396][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.679730][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.679936][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.680408][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.681588][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.685433][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.686047][ T4920] loop0: detected capacity change from 0 to 128
[   24.686669][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.687949][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.688025][ T4920] FAT-fs (loop0): bogus number of reserved sectors
[   24.688044][ T4920] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   24.688052][ T4920] FAT-fs (loop0): Can't find a valid FAT filesystem
[   24.689244][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.690605][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.690876][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.691089][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.691600][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.691889][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.693460][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.694757][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.696184][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.698361][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.699573][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.701105][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.701286][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.701444][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.714114][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.714412][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.714600][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.714787][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.714978][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.715145][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.715306][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.715458][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.715617][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.715762][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.717202][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.717422][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.717599][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.717754][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.719348][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.719565][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.719740][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.719909][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.720458][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.721177][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.729001][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.729525][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.729704][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.730025][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.730566][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.731670][ T4915] overlay: filesystem on ./file0 not supported as upperdir
[   24.732268][ T4708] Bluetooth: hci3: command tx timeout
[   24.732419][ T4708] Bluetooth: hci1: command tx timeout
[   24.732547][ T4720] Bluetooth: hci4: command tx timeout
[   24.740182][ T4922] loop0: detected capacity change from 0 to 256
[   24.740468][ T4922] =======================================================
[   24.740468][ T4922] WARNING: The mand mount option has been deprecated and
[   24.740468][ T4922]          and is ignored by this kernel. Remove the mand
[   24.740468][ T4922]          option from the mount to silence this warning.
[   24.740468][ T4922] =======================================================
[   24.871441][ T4925] netlink: 'syz.2.12': attribute type 2 has an invalid length.
[   24.938555][ T4927] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   24.938595][ T4927] FAT-fs (loop0): Filesystem has been set read-only
[   25.183734][ T4932] overlayfs: failed to resolve './bus': -2
[   25.185489][ T4933] overlayfs: overlapping lowerdir path
[   25.200176][ T4931] loop2: detected capacity change from 0 to 512
[   25.216011][ T4931] EXT4-fs (loop2): 1 truncate cleaned up
[   25.216431][ T4931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   25.228961][ T4935] overlayfs: failed to resolve './bus': -2
[   25.229662][ T4934] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 13: comm syz.2.14: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[   25.250623][ T4943] loop3: detected capacity change from 0 to 512
[   25.275405][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   25.312204][ T4943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   25.354569][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   25.420088][ T4952] fuse: Bad value for 'fd'
[   25.899569][ T4962] Injecting memory failure for pfn 0x135801 at process virtual address 0x20001000
[   25.914468][ T4954] loop3: detected capacity change from 0 to 1024
[   25.916180][ T4960] loop4: detected capacity change from 0 to 1024
[   25.920672][ T4962] Memory failure: 0x135801: recovery action for dirty LRU page: Recovered
[   25.938387][ T4954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   25.943754][ T4960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   25.969050][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   26.041542][ T4969] devpts: Unknown parameter '����������������������������������������������������������������'
[   26.075328][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   26.148895][ T4979] loop4: detected capacity change from 0 to 2048
[   26.191573][ T4982] loop3: detected capacity change from 0 to 2048
[   26.208315][ T4982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   26.278137][ T4982] nvme_fabrics: missing parameter 'transport=%s'
[   26.278150][ T4982] nvme_fabrics: missing parameter 'nqn=%s'
[   26.298898][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   26.366720][ T5003] Bluetooth: MGMT ver 1.23
[   26.705930][ T5019] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   26.710859][ T5019] EXT4-fs: Ignoring removed orlov option
[   26.716735][ T5019] EXT4-fs (loop2): orphan cleanup on readonly fs
[   26.717304][ T5019] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.40: ea_inode with extended attributes
[   26.717387][ T5019] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   26.719389][ T5019] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.40: error while reading EA inode 11 err=-117
[   26.719444][ T5019] loop2: lost filesystem error report for type 5 error -117
[   26.719770][ T5019] EXT4-fs (loop2): 1 orphan inode deleted
[   26.720664][ T5019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   26.723318][ T4720] Bluetooth: hci0: command tx timeout
[   26.733606][ T4720] Bluetooth: hci2: command tx timeout
[   26.760680][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   26.802304][ T4720] Bluetooth: hci4: command tx timeout
[   26.802330][ T4720] Bluetooth: hci1: command tx timeout
[   26.802347][ T4720] Bluetooth: hci3: command tx timeout
[   26.977819][ T5043] netlink: 'syz.2.47': attribute type 1 has an invalid length.
[   27.313904][ T5049] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   27.313924][ T5049] FAT-fs (loop1): Filesystem has been set read-only
[   27.345128][ T5054] overlayfs: failed to clone upperpath
[   27.483837][ T5097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.60'.
[   27.483864][ T5097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'.
[   27.504390][ T5100] : renamed from virt_wifi0
[   27.509911][ T5100] tipc: Started in network mode
[   27.509932][ T5100] tipc: Node identity aaeeb1989e4d, cluster identity 4711
[   27.510019][ T5100] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   27.517070][ T5099] tipc: Disabling bearer <eth:syzkaller0>
[   27.620218][ T5108] overlayfs: conflicting options: nfs_export=on,metacopy=on
[   27.798440][ T5137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.70'.
[   27.844172][ T5140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   27.886165][ T5147] lo: entered promiscuous mode
[   27.886183][ T5147] lo: entered allmulticast mode
[   27.897510][ T5149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.74'.
[   28.349683][ T5173] journal_path: Lookup failure for './file1'
[   28.349705][ T5173] EXT4-fs: error: could not find journal device path
[   28.721723][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   28.808140][ T5181] capability: warning: `syz.0.82' uses 32-bit capabilities (legacy support in use)
[   28.814050][ T4720] Bluetooth: hci2: command tx timeout
[   28.814076][ T4720] Bluetooth: hci0: command tx timeout
[   28.837179][ T5184] fuse: Bad value for 'fd'
[   28.838606][ T5184] fuse: Bad value for 'fd'
[   28.911320][ T4708] Bluetooth: hci3: command tx timeout
[   28.911348][ T4708] Bluetooth: hci1: command tx timeout
[   28.911365][ T4708] Bluetooth: hci4: command tx timeout
[   28.953047][ T5184] 8021q: adding VLAN 0 to HW filter on device bond1
[   28.953945][ T5184] team0: Port device bond1 added
[   29.025401][ T5192] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   29.025441][ T5192] FAT-fs (loop1): Filesystem has been set read-only
[   29.216776][ T5194] process 'syz.3.85' launched './file0' with NULL argv: empty string added
[   29.231793][ T5195] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.85: Unimplemented hash flags: 0x0001
[   29.231821][ T5195] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.85: Corrupt directory, running e2fsck is recommended
[   29.233068][ T5195] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   29.234027][ T5195] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.85: corrupted in-inode xattr: invalid ea_ino
[   29.234047][ T5195] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   29.235505][ T5195] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.85: couldn't read orphan inode 15 (err -117)
[   29.235526][ T5195] loop3: lost filesystem error report for type 5 error -117
[   29.236370][ T5195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.242305][ T5195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.280713][ T5202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'.
[   29.429816][ T5226] EXT4-fs: Ignoring removed nobh option
[   29.441376][ T5226] fscrypt (loop4, inode 2): Error -61 getting encryption context
[   29.441401][ T5226] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[   29.441501][ T5226] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #13: comm syz.4.93: inode has both inline data and extents flags
[   29.441515][ T5226] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   29.443008][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   29.443021][    C0] EXT4-fs (loop4): initial error at time 29: ext4_orphan_get:1403: inode 13
[   29.443037][    C0] EXT4-fs (loop4): last error at time 29: ext4_orphan_get:1403: inode 13
[   29.445030][ T5226] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.93: couldn't read orphan inode 13 (err -117)
[   29.445079][ T5226] loop4: lost filesystem error report for type 5 error -117
[   29.465367][ T5226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.466971][ T5226] EXT4-fs (loop4): shut down requested (2)
[   29.467981][ T5226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.93'.
[   29.468642][ T5226] fscrypt (loop4, inode 2): Error -5 getting encryption context
[   29.506720][ T5229] set_capacity_and_notify: 10 callbacks suppressed
[   29.506734][ T5229] loop2: detected capacity change from 0 to 2048
[   29.507510][ T5232] 9p: Bad value for 'wfdno'
[   29.525041][ T5229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.551762][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.556048][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.617392][ T5238] loop2: detected capacity change from 0 to 512
[   29.669435][ T5238] EXT4-fs (loop2): orphan cleanup on readonly fs
[   29.669502][ T5238] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   29.669517][ T5238] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   29.669524][ T5238] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.98: bad orphan inode 768
[   29.669534][ T5238] loop2: lost filesystem error report for type 5 error -117
[   29.672083][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   29.672098][    C0] EXT4-fs (loop2): initial error at time 29: ext4_orphan_get:1429
[   29.672111][    C0] EXT4-fs (loop2): last error at time 29: ext4_orphan_get:1429
[   29.675819][ T5238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   29.719472][ T5249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.97'.
[   29.728618][ T5248] loop1: detected capacity change from 0 to 512
[   29.741219][ T5248] EXT4-fs (loop1): 1 truncate cleaned up
[   29.741688][ T5248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   29.932477][ T4718] Bluetooth: hci0: Opcode 0x206a failed: -110
[   29.938056][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.033407][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.046628][ T5257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.046991][ T5257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   30.229607][ T5264] tmpfs: Bad value for 'mpol'
[   30.229713][ T5264] tmpfs: Bad value for 'mpol'
[   30.347390][ T5284] Injecting memory failure for pfn 0x135de7 at process virtual address 0x20000000
[   30.351445][ T5284] Memory failure: 0x135de7: Sending SIGBUS to syz.1.109:5284 due to hardware memory corruption
[   30.351546][ T5284] Memory failure: 0x135de7: recovery action for dirty LRU page: Recovered
[   30.351557][ T5284] Injecting memory failure for pfn 0x120758 at process virtual address 0x20001000
[   30.351610][ T5284] Memory failure: 0x120758: Sending SIGBUS to syz.1.109:5284 due to hardware memory corruption
[   30.351628][ T5284] Memory failure: 0x120758: recovery action for dirty LRU page: Recovered
[   30.351644][ T5284] Injecting memory failure for pfn 0x2193df at process virtual address 0x20002000
[   30.351653][ T5284] Memory failure: 0x2193df: unhandlable page.
[   30.351659][ T5284] Memory failure: 0x2193df: recovery action for reserved kernel page: Ignored
[   30.468319][ T5289] loop4: detected capacity change from 0 to 256
[   30.472843][ T5291] ip_tables: iptables: counters copy to user failed while replacing table
[   30.579873][ T5310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'.
[   30.586496][ T5310] bond1: option ad_actor_sys_prio: invalid value (0)
[   30.586507][ T5310] bond1: option ad_actor_sys_prio: allowed values 1 - 65535
[   30.588231][ T5310] bond1 (unregistering): Released all slaves
[   30.670825][ T5313] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   30.671034][ T5313] FAT-fs (loop4): Filesystem has been set read-only
[   30.882192][ T4720] Bluetooth: hci0: command 0x0419 tx timeout
[   30.882761][ T4718] Bluetooth: hci0: Opcode 0x206a failed: -110
[   30.882785][ T4718] Bluetooth: hci2: command tx timeout
[   30.932783][ T5325] netlink: 'syz.3.121': attribute type 1 has an invalid length.
[   30.947387][ T5325] 8021q: adding VLAN 0 to HW filter on device bond1
[   30.953979][ T5322] loop1: detected capacity change from 0 to 4096
[   30.954328][ T5322] EXT4-fs: Ignoring removed mblk_io_submit option
[   30.955028][ T5322] EXT4-fs (loop1): Test dummy encryption mode enabled
[   30.958624][ T5331] bond1: (slave geneve2): making interface the new active one
[   30.966889][ T5331] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   30.968854][ T5322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   30.972562][ T4720] Bluetooth: hci1: command tx timeout
[   30.972585][ T4720] Bluetooth: hci3: command tx timeout
[   31.010413][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.037113][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'.
[   31.037130][ T5335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'.
[   31.089117][ T5350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.126'.
[   31.089199][ T5350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.126'.
[   31.089832][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.126'.
[   31.104765][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.126'.
[   31.129996][ T5356] pim6reg: entered allmulticast mode
[   31.160341][   T30] audit: type=1326 audit(31.150:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5367 comm="syz.2.132" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b79368 code=0x0
[   31.189203][ T5373] ip_tables: iptables: counters copy to user failed while replacing table
[   31.240834][ T5364] syz_tun: entered allmulticast mode
[   31.357885][ T5390] capability: warning: `syz.1.139' uses deprecated v2 capabilities in a way that may be insecure
[   31.482354][ T5401] loop4: detected capacity change from 0 to 512
[   31.495988][ T5402] overlay: filesystem on ./bus not supported
[   32.176703][ T5433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.176899][ T5433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.207030][ T5436] loop2: detected capacity change from 0 to 256
[   32.314956][ T4711] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   32.314979][ T4711] FAT-fs (loop4): Filesystem has been set read-only
[   32.315912][ T4711] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   32.384358][ T5439] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   32.384396][ T5439] FAT-fs (loop2): Filesystem has been set read-only
[   32.876014][ T5443] netlink: 'syz.1.153': attribute type 1 has an invalid length.
[   32.953114][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   32.972284][ T4708] Bluetooth: hci0: command 0x0419 tx timeout
[   33.027339][ T4720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   33.028908][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   33.030676][ T5453] loop3: detected capacity change from 0 to 128
[   33.031142][ T5453] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   33.052671][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   33.059036][ T5453] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   33.067348][ T4720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   33.068574][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   33.076320][ T4720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   33.113406][ T5469] loop2: detected capacity change from 0 to 512
[   33.113734][ T5469] EXT4-fs: Ignoring removed orlov option
[   33.119621][ T5465] loop1: detected capacity change from 0 to 2048
[   33.119818][ T5473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.161'.
[   33.119834][ T5473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.161'.
[   33.120231][ T5469] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   33.162976][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   33.165992][ T5469] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2933: inode #15: comm syz.2.160: corrupted xattr block 252: invalid header
[   33.166017][ T5469] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   33.166820][ T5469] EXT4-fs (loop2): Remounting filesystem read-only
[   33.166831][ T5469] EXT4-fs warning (device loop2): ext4_evict_inode:288: xattr delete (err -117)
[   33.167176][ T5469] EXT4-fs (loop2): 1 orphan inode deleted
[   33.167869][ T5469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.191112][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.203956][ T5465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.254817][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.258416][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   33.308309][ T5494] EXT4-fs: Ignoring removed mblk_io_submit option
[   33.319270][ T5494] EXT4-fs (loop3): Test dummy encryption mode enabled
[   33.324336][ T5494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.368074][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.413991][ T5500] ip_tables: iptables: counters copy to user failed while replacing table
[   33.460509][   T12] bridge_slave_1: left allmulticast mode
[   33.460536][   T12] bridge_slave_1: left promiscuous mode
[   33.460870][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.464802][   T12] bridge_slave_0: left allmulticast mode
[   33.464814][   T12] bridge_slave_0: left promiscuous mode
[   33.464884][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.829241][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   33.853833][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   33.882993][   T12] bond0 (unregistering): Released all slaves
[   33.885260][   T12] team0: Port device bond1 removed
[   33.886016][   T12] bond1 (unregistering): Released all slaves
[   33.958064][ T5455] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.958140][ T5455] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.958204][ T5455] bridge_slave_0: entered allmulticast mode
[   33.958626][ T5455] bridge_slave_0: entered promiscuous mode
[   33.961225][ T5533] netlink: 'syz.1.175': attribute type 2 has an invalid length.
[   33.967522][ T5455] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.967585][ T5455] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.967644][ T5455] bridge_slave_1: entered allmulticast mode
[   33.968054][ T5455] bridge_slave_1: entered promiscuous mode
[   33.981201][ T5455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.984074][ T5455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.990822][ T5455] team0: Port device team_slave_0 added
[   33.991596][ T5455] team0: Port device team_slave_1 added
[   34.002699][ T5455] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.002709][ T5455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   34.002726][ T5455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.003268][ T5455] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.003275][ T5455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   34.003288][ T5455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.060549][ T5455] hsr_slave_0: entered promiscuous mode
[   34.061977][ T5455] hsr_slave_1: entered promiscuous mode
[   34.068097][ T5455] debugfs: 'hsr0' already exists in 'hsr'
[   34.068112][ T5455] Cannot create hsr debugfs directory
[   34.161166][ T4396] 8021q: adding VLAN 0 to HW filter on device eth0
[   34.238701][   T12] hsr_slave_0: left promiscuous mode
[   34.239036][   T12] hsr_slave_1: left promiscuous mode
[   34.240107][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   34.240126][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   34.240697][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   34.240711][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   34.252036][   T12] veth1_macvtap: left promiscuous mode
[   34.253560][   T12] veth0_macvtap: left promiscuous mode
[   34.253673][   T12] veth1_vlan: left promiscuous mode
[   34.253729][   T12] veth0_vlan: left promiscuous mode
[   34.279439][ T5559] EXT4-fs: Ignoring removed mblk_io_submit option
[   34.280172][ T5559] EXT4-fs (loop1): Test dummy encryption mode enabled
[   34.284375][ T5559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.337033][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.440069][   T12] team0 (unregistering): Port device team_slave_1 removed
[   34.455263][   T12] team0 (unregistering): Port device team_slave_0 removed
[   34.520365][ T5573] vlan2: entered allmulticast mode
[   34.520465][ T5573] bridge0: port 3(vlan2) entered blocking state
[   34.520536][ T5573] bridge0: port 3(vlan2) entered disabled state
[   34.521123][ T5573] vlan2: entered promiscuous mode
[   34.526029][ T4396] 8021q: adding VLAN 0 to HW filter on device eth1
[   34.543470][ T5455] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   34.555217][ T5455] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   34.557307][ T5455] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   34.561470][ T5455] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   34.563276][ T5455] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   34.567096][ T5455] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   34.567429][ T5455] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   34.570059][ T5455] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   34.571811][ T5588] bridge0: port 3(netdevsim0) entered blocking state
[   34.571957][ T5588] bridge0: port 3(netdevsim0) entered disabled state
[   34.575910][ T5588] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   34.577329][ T5588] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   34.577596][ T5588] bridge0: port 3(netdevsim0) entered blocking state
[   34.577627][ T5588] bridge0: port 3(netdevsim0) entered forwarding state
[   34.609381][   T57] IPVS: starting estimator thread 0...
[   34.616353][ T5598] tipc: Started in network mode
[   34.616375][ T5598] tipc: Node identity 1000001, cluster identity 1041
[   34.616382][ T5598] tipc: Node number set to 16777217
[   34.616575][ T5598] tipc: Cannot configure node identity twice
[   34.633080][ T5598] tipc: Enabling of bearer <udp:sjz0> rejected, failed to enable media
[   34.657922][ T5598] set_capacity_and_notify: 2 callbacks suppressed
[   34.657936][ T5598] loop1: detected capacity change from 0 to 1024
[   34.658368][ T5598] ext4: Unknown parameter 'subj_type'
[   34.658923][ T5455] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.678615][ T5455] 8021q: adding VLAN 0 to HW filter on device team0
[   34.686901][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.686941][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.688448][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.688469][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.692216][ T5599] IPVS: using max 61 ests per chain, 146400 per kthread
[   34.810223][ T4396] 8021q: adding VLAN 0 to HW filter on device eth2
[   34.845614][ T5626] loop1: detected capacity change from 0 to 1024
[   34.850570][ T5626] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[   34.954939][ T5455] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.981079][ T5638] loop1: detected capacity change from 0 to 4096
[   34.986139][ T5638] EXT4-fs: Ignoring removed mblk_io_submit option
[   35.006137][ T5638] EXT4-fs (loop1): Test dummy encryption mode enabled
[   35.017439][ T5638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.043816][ T4720] Bluetooth: hci0: command 0x0419 tx timeout
[   35.063908][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.111731][ T5455] veth0_vlan: entered promiscuous mode
[   35.116128][ T5455] veth1_vlan: entered promiscuous mode
[   35.121594][ T5455] veth0_macvtap: entered promiscuous mode
[   35.122200][ T4720] Bluetooth: hci3: command tx timeout
[   35.128792][ T5455] veth1_macvtap: entered promiscuous mode
[   35.137856][ T5455] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.140031][ T5455] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.145904][   T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.195219][ T3615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.195233][ T3615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.203930][ T5669] __nla_validate_parse: 3 callbacks suppressed
[   35.203941][ T5669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.194'.
[   35.213385][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.213875][ T4396] 8021q: adding VLAN 0 to HW filter on device eth3
[   35.214270][   T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.214305][   T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.217513][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.217522][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.266561][ T5684] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   35.266588][ T5684] vhci_hcd vhci_hcd.0: default hub control req: 2314 v0008 i0002 l0
[   35.338421][ T5703] loop3: detected capacity change from 0 to 1024
[   35.344051][ T5703] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   35.356238][ T5703] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   35.364344][ T5703] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   35.364455][ T5703] EXT4-fs (loop3): orphan cleanup on readonly fs
[   35.374753][ T5703] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #3: block 3: comm syz.3.202: lblock 3 mapped to illegal pblock 3 (length 1)
[   35.374773][ T5703] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   35.375180][ T5703] Quota error (device loop3): write_blk: dquota write failed
[   35.375190][ T5703] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3
[   35.375232][ T5703] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   35.375253][ T5703] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.202: Failed to acquire dquot type 0
[   35.375263][ T5703] loop3: lost filesystem error report for type 5 error -117
[   35.375421][ T5703] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 3: comm syz.3.202: lblock 3 mapped to illegal pblock 3 (length 1)
[   35.375434][ T5703] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   35.377158][ T5703] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   35.377184][ T5703] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.202: Failed to acquire dquot type 0
[   35.377195][ T5703] loop3: lost filesystem error report for type 5 error -117
[   35.377378][ T5703] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.202: Freeing blocks not in datazone - block = 0, count = 4096
[   35.377390][ T5703] loop3: lost filesystem error report for type 5 error -117
[   35.378102][ T5703] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 3: comm syz.3.202: lblock 3 mapped to illegal pblock 3 (length 1)
[   35.378119][ T5703] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   35.378590][ T5703] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   35.378609][ T5703] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.202: Failed to acquire dquot type 0
[   35.378618][ T5703] loop3: lost filesystem error report for type 5 error -117
[   35.378781][ T5703] EXT4-fs (loop3): 1 orphan inode deleted
[   35.382086][    C1] EXT4-fs (loop3): error count since last fsck: 7
[   35.382102][    C1] EXT4-fs (loop3): initial error at time 35: ext4_map_blocks:832: inode 3: block 3
[   35.382125][    C1] EXT4-fs (loop3): last error at time 35: ext4_acquire_dquot:7069
[   35.382780][ T5710] loop2: detected capacity change from 0 to 256
[   35.468375][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'.
[   35.512830][ T5703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   35.537496][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.920080][ T5734] tmpfs: Bad value for 'mpol'
[   35.945743][ T5736] overlayfs: failed to resolve './file0/file1': -2
[   36.411409][ T5756] syz.0.214 uses obsolete (PF_INET,SOCK_PACKET)
[   36.413724][ T5758] x_tables: duplicate underflow at hook 1
[   36.471322][ T5761] Driver unsupported XDP return value 0 on prog  (id 29) dev N/A, expect packet loss!
[   36.720117][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'.
[   36.720186][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'.
[   36.739725][ T5782] netlink: 108 bytes leftover after parsing attributes in process `syz.3.219'.
[   36.858658][ T5795] netlink: 'syz.5.223': attribute type 4 has an invalid length.
[   36.947449][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.224'.
[   36.951100][ T5801] loop5: detected capacity change from 0 to 512
[   36.974502][ T5802] ip6gretap1: entered allmulticast mode
[   36.987247][ T5801] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   37.053409][ T5801] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #16: comm syz.5.224: corrupted inode contents
[   37.053430][ T5801] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   37.054029][ T5801] EXT4-fs error (device loop5): ext4_dirty_inode:6736: inode #16: comm syz.5.224: mark_inode_dirty error
[   37.054045][ T5801] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   37.055376][ T5801] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #16: comm syz.5.224: corrupted inode contents
[   37.055395][ T5801] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   37.055637][ T5801] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.224: mark_inode_dirty error
[   37.055657][ T5801] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   37.055799][ T5801] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #16: comm syz.5.224: corrupted inode contents
[   37.055809][ T5801] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   37.056231][ T5801] EXT4-fs error (device loop5) in ext4_orphan_del:304: Corrupt filesystem
[   37.056243][ T5801] loop5: lost filesystem error report for type 5 error -117
[   37.056358][ T5801] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #16: comm syz.5.224: corrupted inode contents
[   37.056368][ T5801] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   37.056473][ T5801] EXT4-fs error (device loop5): ext4_truncate:4721: inode #16: comm syz.5.224: mark_inode_dirty error
[   37.056586][ T5801] EXT4-fs error (device loop5) in ext4_process_orphan:346: Corrupt filesystem
[   37.056594][ T5801] loop5: lost filesystem error report for type 5 error -117
[   37.057545][ T5801] EXT4-fs (loop5): 1 truncate cleaned up
[   37.057984][ T5801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.099797][   T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   37.099831][   T12] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1
[   37.127345][ T5455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.176951][ T5828] loop5: detected capacity change from 0 to 256
[   37.202728][ T4720] Bluetooth: hci3: command tx timeout
[   37.250252][ T5844] FAULT_INJECTION: forcing a failure.
[   37.250252][ T5844] name failslab, interval 1, probability 0, space 0, times 1
[   37.250280][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz.1.229 Tainted: G             L      syzkaller #0 PREEMPT 
[   37.250300][ T5844] Tainted: [L]=SOFTLOCKUP
[   37.250306][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   37.250312][ T5844] Call trace:
[   37.250315][ T5844]  show_stack+0x2c/0x3c (C)
[   37.250337][ T5844]  __dump_stack+0x30/0x40
[   37.250349][ T5844]  dump_stack_lvl+0xd8/0x12c
[   37.250361][ T5844]  dump_stack+0x1c/0x28
[   37.250372][ T5844]  should_fail_ex+0x418/0x58c
[   37.250385][ T5844]  should_failslab+0xc4/0x120
[   37.250398][ T5844]  __kmalloc_cache_noprof+0x94/0x5fc
[   37.250407][ T5844]  tipc_service_create+0x88/0x228
[   37.250419][ T5844]  tipc_nametbl_insert_publ+0x28c/0xe44
[   37.250430][ T5844]  tipc_nametbl_publish+0x10c/0x250
[   37.250440][ T5844]  tipc_sk_publish+0x17c/0x380
[   37.250449][ T5844]  tipc_sk_bind+0x198/0x294
[   37.250457][ T5844]  tipc_bind+0x90/0x24c
[   37.250466][ T5844]  __sys_bind+0x1c4/0x268
[   37.250476][ T5844]  __arm64_sys_bind+0x84/0x9c
[   37.250486][ T5844]  invoke_syscall+0x98/0x244
[   37.250498][ T5844]  el0_svc_common+0xec/0x23c
[   37.250509][ T5844]  do_el0_svc+0x4c/0x5c
[   37.250520][ T5844]  el0_svc+0x60/0x1d8
[   37.250531][ T5844]  el0t_64_sync_handler+0x44/0x104
[   37.250542][ T5844]  el0t_64_sync+0x198/0x19c
[   37.250552][ T5844] tipc: Service creation failed, no memory
[   37.328120][ T5848] loop5: detected capacity change from 0 to 8192
[   38.260554][ T5884] loop2: detected capacity change from 0 to 512
[   38.282569][ T5884] EXT4-fs (loop2): external journal device major/minor numbers have changed
[   38.317750][ T5884] EXT4-fs (loop2): failed to open journal device unknown-block(256,1) -ENXIO
[   38.435510][ T5891] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   38.472775][ T5899] bond0: Unable to set down delay as MII monitoring is disabled
[   38.518737][ T5911] loop3: detected capacity change from 0 to 512
[   38.521024][ T5911] EXT4-fs: Ignoring removed orlov option
[   38.547253][ T5905] fuse: Unknown parameter '�Ⱥ��r�k�&
�:-����;'
[   38.549286][ T5911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.569823][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.603357][ T5939] EXT4-fs: Ignoring removed orlov option
[   38.604266][ T5939] EXT4-fs (loop3): Test dummy encryption mode enabled
[   38.611471][ T5939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.662168][ T5951] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size.
[   38.740603][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.878543][ T5977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[   38.878591][ T5977] System zones: 1-3, 19-19, 35-36
[   38.879140][ T5977] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   38.961876][ T4709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   39.283633][ T4720] Bluetooth: hci3: command tx timeout
[   39.936949][ T5997] netlink: 64 bytes leftover after parsing attributes in process `syz.2.254'.
[   40.015392][ T6007] set_capacity_and_notify: 3 callbacks suppressed
[   40.015428][ T6007] loop2: detected capacity change from 0 to 128
[   40.019324][ T6007] FAT-fs (loop2): bogus number of FAT structure
[   40.019344][ T6007] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   40.019351][ T6007] FAT-fs (loop2): Can't find a valid FAT filesystem
[   40.047070][ T6011] loop1: detected capacity change from 0 to 512
[   40.078292][ T6011] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   40.078335][ T6011] System zones: 1-12
[   40.085410][ T6011] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.257: missing EA_INODE flag
[   40.085427][ T6011] fserror_report: 1 callbacks suppressed
[   40.085434][ T6011] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   40.085987][ T6011] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.257: error while reading EA inode 12 err=-117
[   40.086012][ T6011] loop1: lost filesystem error report for type 5 error -117
[   40.086155][ T6011] EXT4-fs (loop1): 1 orphan inode deleted
[   40.100389][ T6011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.141069][ T6018] loop2: detected capacity change from 0 to 1024
[   40.167986][ T6018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.218552][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.245160][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.276042][ T6036] loop5: detected capacity change from 0 to 512
[   40.276342][ T6036] ext4: Unknown parameter 'posixacl'
[   40.298268][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'.
[   40.305006][ T6038] loop1: detected capacity change from 0 to 256
[   40.379918][ T6052] overlayfs: failed to clone upperpath
[   40.475427][ T6059] veth1_macvtap: left promiscuous mode
[   40.774773][ T6054] nfs: Unknown parameter 'mask'
[   40.775221][ T6054] netlink: 64 bytes leftover after parsing attributes in process `syz.2.263'.
[   40.817460][ T6074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.275'.
[   40.831796][ T6076] netlink: 148 bytes leftover after parsing attributes in process `syz.1.276'.
[   40.897778][ T6080] loop3: detected capacity change from 0 to 4096
[   40.898614][ T6080] EXT4-fs (loop3): Test dummy encryption mode enabled
[   40.899469][ T6080] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003]
[   40.899502][ T6080] System zones: 0-5
[   40.914304][ T6080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.020477][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.176800][ T6091] loop5: detected capacity change from 0 to 512
[   41.191254][ T6091] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.280: inode has both inline data and extents flags
[   41.191299][ T6091] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   41.191432][ T6091] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.280: couldn't read orphan inode 15 (err -117)
[   41.191446][ T6091] loop5: lost filesystem error report for type 5 error -117
[   41.191957][ T6091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.245029][ T6097] loop2: detected capacity change from 0 to 2048
[   41.362188][ T4720] Bluetooth: hci3: command tx timeout
[   41.476248][ T6104] loop2: detected capacity change from 0 to 8192
[   41.478604][ T6104] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   41.548333][ T6108] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   41.548351][ T6108] FAT-fs (loop2): Filesystem has been set read-only
[   41.729369][   T30] audit: type=1400 audit(41.720:3): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="l" requested=r pid=6115 comm="syz.1.284" name="file1" dev="tmpfs" ino=347
[   41.767195][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'.
[   41.825457][ T6126] loop1: detected capacity change from 0 to 8
[   41.826522][ T6129] overlayfs: failed to clone upperpath
[   41.828744][ T6126] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   41.828752][ T6126] unable to read xattr id index table
[   41.829723][ T6126] SQUASHFS error: zlib decompression failed, data probably corrupt
[   41.829739][ T6126] SQUASHFS error: Failed to read block 0x9b: -5
[   41.829746][ T6126] SQUASHFS error: Unable to read metadata cache entry [99]
[   41.829752][ T6126] SQUASHFS error: Unable to read inode 0x127
[   41.900368][ T6107] pci 0000:00:00.0: [1ae0:0042] type 00 class 0x020000 conventional PCI endpoint
[   41.917538][ T6107] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff]
[   41.917583][ T6107] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f]
[   41.917612][ T6107] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff]
[   41.921323][ T6107] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff]: assigned
[   41.921370][ T6107] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff]: assigned
[   41.921412][ T6107] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f]: assigned
[   41.931413][ T6146] ip6t_rpfilter: unknown options
[   41.936878][ T4812] gve 0000:00:00.0: Driver is running with DQO RDA queue format.
[   41.936899][ T4812] gve 0000:00:00.0: MAC addr: 42:01:0a:80:01:6c
[   41.936910][ T4812] gve 0000:00:00.0: BUFFER SIZES device option enabled with max_rx_buffer_size of 4096, header_buf_size of 128.
[   41.936921][ T4812] gve 0000:00:00.0: FLOW STEERING device option enabled with max rule limit of 20000.
[   41.936943][ T4812] gve 0000:00:00.0: TX queues 2, RX queues 2
[   41.936952][ T4812] gve 0000:00:00.0: Max TX queues 2, Max RX queues 2
[   42.115987][ T4812] gve 0000:00:00.0: GVE version 1.0.0
[   42.115999][ T4812] gve 0000:00:00.0: GVE queue format 3
[   42.119803][ T4729] gve 0000:00:00.0 enp0s0: renamed from eth4
[   42.176544][ T5455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.297468][ T3615] gve 0000:00:00.0 enp0s0: Device link is up.
[   55.545375][ T6224] loop2: detected capacity change from 0 to 256
[   55.552907][ T6225] loop1: detected capacity change from 0 to 256
[   55.569098][ T6231] loop3: detected capacity change from 0 to 256
[   56.605552][ T6237] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   56.605570][ T6237] FAT-fs (loop2): Filesystem has been set read-only
[   56.624296][ T6241] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   56.624312][ T6241] FAT-fs (loop1): Filesystem has been set read-only
[   56.880809][ T6245] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   56.880829][ T6245] FAT-fs (loop3): Filesystem has been set read-only
[   57.128352][ T6249] loop1: detected capacity change from 0 to 256
[   57.410922][ T6262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.303'.
[   57.415771][   T26] binder: undelivered death notification, 0000000000000000
[   57.517989][ T6281] loop3: detected capacity change from 0 to 256
[   57.558617][ T6289] loop1: detected capacity change from 0 to 256
[   57.673673][ T4709] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   57.673689][ T4709] FAT-fs (loop3): Filesystem has been set read-only
[   57.673750][ T4709] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   57.757914][ T6292] syz.1.312: attempt to access beyond end of device
[   57.757914][ T6292] loop1: rw=2049, sector=1800, nr_sectors = 4 limit=256
[   57.989445][ T6294] loop5: detected capacity change from 0 to 256
[   58.086352][ T6299] loop5: detected capacity change from 0 to 512
[   58.089272][ T6299] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   58.100672][ T6299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.201896][ T5455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.709120][ T6326] loop2: detected capacity change from 0 to 4096
[   58.720209][ T6326] EXT4-fs (loop2): Test dummy encryption mode enabled
[   58.736630][ T6326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.739299][ T4708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.741960][ T4708] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.747986][ T4708] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.755479][ T4708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.755958][ T4708] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.896707][ T6338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.325'.
[   58.896730][ T6338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.325'.
[   58.947626][ T6338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.325'.
[   58.947646][ T6338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.325'.
[   58.955397][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.955453][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.955508][ T6332] bridge_slave_0: entered allmulticast mode
[   58.955937][ T6332] bridge_slave_0: entered promiscuous mode
[   58.956934][ T6332] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.956986][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.957071][ T6332] bridge_slave_1: entered allmulticast mode
[   58.957695][ T6332] bridge_slave_1: entered promiscuous mode
[   58.965816][ T6332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.967965][ T6332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.169791][ T6332] team0: Port device team_slave_0 added
[   59.170689][ T6332] team0: Port device team_slave_1 added
[   59.177303][ T6332] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.177312][ T6332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.177324][ T6332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.177874][ T6332] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.177880][ T6332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.177895][ T6332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.192256][ T6332] hsr_slave_0: entered promiscuous mode
[   59.192689][ T6332] hsr_slave_1: entered promiscuous mode
[   59.192884][ T6332] debugfs: 'hsr0' already exists in 'hsr'
[   59.192894][ T6332] Cannot create hsr debugfs directory
[   59.253380][ T6332] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   59.254509][ T6332] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   59.256523][ T6332] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   59.257488][ T6338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.325'.
[   59.257505][ T6338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.325'.
[   59.259395][ T6332] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   59.259692][ T6332] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   59.261598][ T6332] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   59.262948][ T6332] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   59.264980][ T6332] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   59.346339][ T6332] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.349422][ T6332] 8021q: adding VLAN 0 to HW filter on device team0
[   59.358035][ T4958] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.358060][ T4958] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.364323][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.364346][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.739304][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.840740][ T6332] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.853838][   T30] audit: type=1326 audit(59.840:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6397 comm="syz.0.331" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb79368 code=0x0
[   59.874318][ T6396] loop2: detected capacity change from 0 to 4096
[   59.897218][ T6396] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   59.897331][ T6396] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[   59.897343][ T6396] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (64851!=55237)
[   59.897383][ T6396] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled
[   59.897911][ T6396] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.330: Invalid inode table block 0 in block_group 0
[   59.897931][ T6396] loop2: lost filesystem error report for type 5 error -117
[   59.900091][ T6396] EXT4-fs (loop2): Remounting filesystem read-only
[   59.900150][ T6396] EXT4-fs (loop2): get root inode failed
[   59.900160][ T6396] EXT4-fs (loop2): mount failed
[   59.902089][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   59.902104][    C0] EXT4-fs (loop2): initial error at time 59: __ext4_get_inode_loc:4916
[   59.902116][    C0] EXT4-fs (loop2): last error at time 59: __ext4_get_inode_loc:4916
[   60.046581][ T6332] veth0_vlan: entered promiscuous mode
[   60.055508][ T6332] veth1_vlan: entered promiscuous mode
[   60.075169][ T6332] veth0_macvtap: entered promiscuous mode
[   60.077656][ T6332] veth1_macvtap: entered promiscuous mode
[   60.095280][ T6332] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.103674][ T6332] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.114706][ T4958] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.114789][ T4958] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.114812][ T4958] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.142933][ T6414] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.334'.
[   60.144128][ T4958] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.170424][ T4958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.170437][ T4958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.184427][ T3615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.184439][ T3615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.196981][ T6417] overlayfs: missing 'lowerdir'
[   60.227890][ T6422] mmap: syz.1.337 (6422) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   60.229702][ T6424] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8)
[   60.229713][ T6424] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   60.234257][ T6424] vhci_hcd vhci_hcd.0: Device attached
[   60.234347][ T6422] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[   60.234361][ T6422] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   60.234398][ T6422] vhci_hcd vhci_hcd.0: Device attached
[   60.234721][ T6426] vhci_hcd: connection closed
[   60.235462][ T6425] vhci_hcd: connection closed
[   60.236241][ T3615] vhci_hcd vhci_hcd.1: stop threads
[   60.236488][ T3615] vhci_hcd vhci_hcd.1: release socket
[   60.236518][ T3615] vhci_hcd vhci_hcd.1: disconnect device
[   60.236679][ T3615] vhci_hcd vhci_hcd.1: stop threads
[   60.236686][ T3615] vhci_hcd vhci_hcd.1: release socket
[   60.236698][ T3615] vhci_hcd vhci_hcd.1: disconnect device
[   60.306055][ T6440] pim6reg: entered allmulticast mode
[   60.307032][ T6438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.365717][ T6438] sctp: [Deprecated]: syz.2.340 (pid 6438) Use of struct sctp_assoc_value in delayed_ack socket option.
[   60.365717][ T6438] Use struct sctp_sack_info instead
[   60.404802][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.412881][ T6446] overlayfs: failed to decode file handle (len=1, type=0, flags=0, err=-22)
[   60.424846][ T6446] netlink: 'syz.6.343': attribute type 5 has an invalid length.
[   60.424907][ T6446] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.505001][ T6454] EXT4-fs: Ignoring removed nomblk_io_submit option
[   60.505026][ T6454] EXT4-fs: Ignoring removed nomblk_io_submit option
[   60.534243][ T6454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   60.540140][ T6454] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.345: bg 0: block 112: padding at end of block bitmap is not set
[   60.540984][ T6454] EXT4-fs (loop6): Remounting filesystem read-only
[   60.621993][ T6332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   60.812275][ T4708] Bluetooth: hci1: command tx timeout
[   60.851772][ T6472] pim6reg: entered allmulticast mode
[   60.906719][ T6477] set_capacity_and_notify: 4 callbacks suppressed
[   60.906733][ T6477] loop1: detected capacity change from 0 to 256
[   60.975409][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'.
[   60.987556][ T6460] loop6: detected capacity change from 0 to 128
[   60.992572][ T6460] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   61.782816][ T4708] Bluetooth: unknown link type 128
[   61.815409][ T6503] IPVS: persistence engine module ip_vs_pe_ not found
[   61.816886][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'.
[   61.835220][ T6511] FAULT_INJECTION: forcing a failure.
[   61.835220][ T6511] name failslab, interval 1, probability 0, space 0, times 0
[   61.835243][ T6511] CPU: 0 UID: 0 PID: 6511 Comm: syz.1.359 Tainted: G             L      syzkaller #0 PREEMPT 
[   61.835256][ T6511] Tainted: [L]=SOFTLOCKUP
[   61.835260][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   61.835265][ T6511] Call trace:
[   61.835268][ T6511]  show_stack+0x2c/0x3c (C)
[   61.835288][ T6511]  __dump_stack+0x30/0x40
[   61.835300][ T6511]  dump_stack_lvl+0xd8/0x12c
[   61.835312][ T6511]  dump_stack+0x1c/0x28
[   61.835323][ T6511]  should_fail_ex+0x418/0x58c
[   61.835336][ T6511]  should_failslab+0xc4/0x120
[   61.835349][ T6511]  __kmalloc_node_track_caller_noprof+0x108/0x6e0
[   61.835359][ T6511]  kstrdup+0x50/0x104
[   61.835367][ T6511]  simple_xattr_set+0xc4/0x2264
[   61.835376][ T6511]  shmem_xattr_handler_set+0x18c/0x2cc
[   61.835389][ T6511]  __vfs_setxattr+0x130/0x17c
[   61.835398][ T6511]  __vfs_setxattr_noperm+0x120/0x5cc
[   61.835406][ T6511]  __vfs_setxattr_locked+0x114/0x240
[   61.835415][ T6511]  vfs_setxattr+0x150/0x2e0
[   61.835423][ T6511]  do_setxattr+0x100/0x19c
[   61.835431][ T6511]  filename_setxattr+0x134/0x1f8
[   61.835439][ T6511]  path_setxattrat+0x200/0x2a8
[   61.835449][ T6511]  __arm64_sys_setxattr+0xd0/0xec
[   61.835457][ T6511]  invoke_syscall+0x98/0x244
[   61.835469][ T6511]  el0_svc_common+0xec/0x23c
[   61.835481][ T6511]  do_el0_svc+0x4c/0x5c
[   61.835492][ T6511]  el0_svc+0x60/0x1d8
[   61.835504][ T6511]  el0t_64_sync_handler+0x44/0x104
[   61.835515][ T6511]  el0t_64_sync+0x198/0x19c
[   61.848024][ T6516] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   61.893427][ T6514] Injecting memory failure for pfn 0x121d1d at process virtual address 0x20001000
[   61.900768][ T6514] Memory failure: 0x121d1d: Sending SIGBUS to syz.6.360:6514 due to hardware memory corruption
[   61.900810][ T6514] Memory failure: 0x121d1d: recovery action for dirty LRU page: Recovered
[   61.905297][ T6523] FAULT_INJECTION: forcing a failure.
[   61.905297][ T6523] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   61.905318][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.1.362 Tainted: G             L      syzkaller #0 PREEMPT 
[   61.905331][ T6523] Tainted: [L]=SOFTLOCKUP
[   61.905334][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   61.905339][ T6523] Call trace:
[   61.905342][ T6523]  show_stack+0x2c/0x3c (C)
[   61.905360][ T6523]  __dump_stack+0x30/0x40
[   61.905372][ T6523]  dump_stack_lvl+0xd8/0x12c
[   61.905384][ T6523]  dump_stack+0x1c/0x28
[   61.905394][ T6523]  should_fail_ex+0x418/0x58c
[   61.905407][ T6523]  should_fail+0x14/0x24
[   61.905419][ T6523]  should_fail_usercopy+0x20/0x30
[   61.905431][ T6523]  bpf_verifier_vlog+0x2f0/0xbc0
[   61.905444][ T6523]  __btf_verifier_log+0xe8/0x13c
[   61.905452][ T6523]  btf_parse_hdr+0x280/0x71c
[   61.905461][ T6523]  btf_new_fd+0x288/0xa50
[   61.905473][ T6523]  bpf_btf_load+0x144/0x190
[   61.905483][ T6523]  __sys_bpf+0x7f0/0x82c
[   61.905492][ T6523]  __arm64_sys_bpf+0xd0/0xec
[   61.905500][ T6523]  invoke_syscall+0x98/0x244
[   61.905512][ T6523]  el0_svc_common+0xec/0x23c
[   61.905524][ T6523]  do_el0_svc+0x4c/0x5c
[   61.905535][ T6523]  el0_svc+0x60/0x1d8
[   61.905546][ T6523]  el0t_64_sync_handler+0x44/0x104
[   61.905557][ T6523]  el0t_64_sync+0x198/0x19c
[   61.928827][ T6525] loop1: detected capacity change from 0 to 256
[   61.962341][ T6514] bond0: (slave bond_slave_0): Releasing backup interface
[   62.001970][ T6532] loop1: detected capacity change from 0 to 256
[   62.042668][ T6537] loop2: detected capacity change from 0 to 512
[   62.095027][ T6537] EXT4-fs (loop2): Test dummy encryption mode enabled
[   62.095054][ T6537] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   62.096771][ T6537] EXT4-fs (loop2): 1 truncate cleaned up
[   62.097537][ T6537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.134902][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.207514][ T6546] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   62.207555][ T6546] FAT-fs (loop1): Filesystem has been set read-only
[   62.511249][ T6559] loop2: detected capacity change from 0 to 1027
[   62.531858][ T6573] __nla_validate_parse: 2 callbacks suppressed
[   62.531872][ T6573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.369'.
[   62.704782][ T6605] netlink: 'syz.0.373': attribute type 10 has an invalid length.
[   62.882917][ T4708] Bluetooth: hci1: command 0x041b tx timeout
[   62.902353][ T6630] loop5: detected capacity change from 0 to 256
[   62.968868][ T6649] netlink: 256 bytes leftover after parsing attributes in process `syz.5.376'.
[   62.968885][ T6649] netlink: 80 bytes leftover after parsing attributes in process `syz.5.376'.
[   63.032178][ T6660] netlink: 256 bytes leftover after parsing attributes in process `syz.5.376'.
[   63.032195][ T6660] netlink: 80 bytes leftover after parsing attributes in process `syz.5.376'.
[   63.068425][ T6673] loop1: detected capacity change from 0 to 512
[   63.088034][ T6673] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   63.089513][ T6673] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[   63.089547][ T6673] System zones: 1-12
[   63.089627][ T6673] EXT4-fs (loop1): orphan cleanup on readonly fs
[   63.090672][ T6673] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.377: attempt to clear invalid blocks 1024 len 1
[   63.090693][ T6673] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   63.092114][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   63.092135][    C0] EXT4-fs (loop1): initial error at time 63: ext4_clear_blocks:876: inode 11
[   63.092156][    C0] EXT4-fs (loop1): last error at time 63: ext4_clear_blocks:876: inode 11
[   63.096044][ T6673] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.377: bg 0: block 361: padding at end of block bitmap is not set
[   63.096062][ T6673] loop1: lost filesystem error report for type 5 error -117
[   63.096245][ T6673] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   63.096255][ T6673] loop1: lost filesystem error report for type 5 error -117
[   63.096507][ T6673] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.377: invalid indirect mapped block 1811939328 (level 0)
[   63.096521][ T6673] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   63.096636][ T6673] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.377: invalid indirect mapped block 2 (level 2)
[   63.096648][ T6673] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   63.096994][ T6673] EXT4-fs (loop1): 1 truncate cleaned up
[   63.097503][ T6673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   63.140239][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   63.852363][ T4720] Bluetooth: hci3: command tx timeout
[   64.125613][ T6729] loop2: detected capacity change from 0 to 512
[   64.189530][ T6736] bond1: entered allmulticast mode
[   64.189724][ T6736] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.190188][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190243][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190289][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190333][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190394][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190445][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190539][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190587][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190633][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190679][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190721][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190769][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190812][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190861][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190914][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.190959][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.191000][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.191053][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.191111][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.191154][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.191197][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.191240][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.191281][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.191322][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.191364][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.191415][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.191457][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.191499][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.191540][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.201959][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.202039][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.202153][ T6736] bond1: option mode: unable to set because the bond device is up
[   64.206733][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.388'.
[   64.208675][ T6741] netlink: 51 bytes leftover after parsing attributes in process `syz.5.388'.
[   64.273901][ T6745] loop1: detected capacity change from 0 to 256
[   64.283618][ T6745] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   64.302025][ T6745] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   64.303143][ T6745] FAT-fs (loop1): Filesystem has been set read-only
[   64.377883][ T6753] sctp: [Deprecated]: syz.5.393 (pid 6753) Use of struct sctp_assoc_value in delayed_ack socket option.
[   64.377883][ T6753] Use struct sctp_sack_info instead
[   64.469278][ T6766] warning: `syz.0.396' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.484707][ T1592] ieee802154 phy0 wpan0: encryption failed: -22
[   64.484743][ T1592] ieee802154 phy1 wpan1: encryption failed: -22
[   64.485714][  T866] cfg80211: failed to load regulatory.db
[   64.972962][ T4720] Bluetooth: hci1: command 0x041b tx timeout
[   65.039307][ T6781] squashfs: Unknown parameter '0x0000000000000000'
[   65.237023][ T6799] ip_tables: iptables: counters copy to user failed while replacing table
[   65.264858][ T6801] EXT4-fs: quotafile must be on filesystem root
[   65.273418][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'.
[   65.325824][ T6803] fuse: Bad value for 'group_id'
[   65.325837][ T6803] fuse: Bad value for 'group_id'
[   65.404753][ T6822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.472959][ T6830] Unknown status report in ack skb
[   65.476231][ T6830] dvmrp8: entered allmulticast mode
[   65.476941][ T6830] syz_tun: left allmulticast mode
[   65.476981][ T6830] dvmrp8: left allmulticast mode
[   65.481266][ T6836] Cannot find set identified by id 0 to match
[   65.603247][ T6851] netlink: 132 bytes leftover after parsing attributes in process `syz.1.414'.
[   65.608347][ T6851] input: syz0 as /devices/virtual/input/input2
[   65.752299][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.754456][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.907060][ T6862] binder: 6860:6862 ioctl 400c620e 20000100 returned -22
[   65.990011][   T26] hid-generic 0005:0C45:0002.0001: unknown main item tag 0x0
[   66.002691][   T26] hid-generic 0005:0C45:0002.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[   66.017835][ T6871] set_capacity_and_notify: 3 callbacks suppressed
[   66.017844][ T6871] loop1: detected capacity change from 0 to 512
[   66.021326][ T6871] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   66.029551][ T6871] EXT4-fs (loop1): orphan cleanup on readonly fs
[   66.030035][ T6871] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:521: comm syz.1.416: Block bitmap for bg 0 marked uninitialized
[   66.030052][ T6871] loop1: lost filesystem error report for type 5 error -117
[   66.032086][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   66.032101][    C1] EXT4-fs (loop1): initial error at time 66: ext4_read_block_bitmap_nowait:521
[   66.032116][    C1] EXT4-fs (loop1): last error at time 66: ext4_read_block_bitmap_nowait:521
[   66.044237][ T6871] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   66.044260][ T6871] loop1: lost filesystem error report for type 5 error -117
[   66.044480][ T6871] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:521: comm syz.1.416: Block bitmap for bg 0 marked uninitialized
[   66.044493][ T6871] loop1: lost filesystem error report for type 5 error -117
[   66.045590][ T6871] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   66.045620][ T6871] loop1: lost filesystem error report for type 5 error -117
[   66.047178][ T6871] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:521: comm syz.1.416: Block bitmap for bg 0 marked uninitialized
[   66.047199][ T6871] loop1: lost filesystem error report for type 5 error -117
[   66.048773][ T6871] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   66.048791][ T6871] loop1: lost filesystem error report for type 5 error -117
[   66.049032][ T6871] EXT4-fs (loop1): 1 orphan inode deleted
[   66.074124][ T6871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   66.088888][ T6880] syzkaller0: entered promiscuous mode
[   66.088906][ T6880] syzkaller0: entered allmulticast mode
[   66.106102][ T6871] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[   66.108101][ T6871] syz_tun: entered allmulticast mode
[   66.131209][ T6894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.419'.
[   66.235068][ T6916] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2967109632 out of range (51000000..2150000000)
[   66.283804][ T6923] overlayfs: failed to clone upperpath
[   66.285455][ T6923] overlayfs: failed to clone lowerpath
[   66.376143][ T6930] netlink: 'syz.0.423': attribute type 29 has an invalid length.
[   66.422173][ T6946] loop6: detected capacity change from 0 to 256
[   66.425896][ T6946] vfat: Unknown parameter 'nnonumtail'
[   66.797737][ T6869] syz_tun: left allmulticast mode
[   66.807155][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.958929][ T6972] loop1: detected capacity change from 0 to 4096
[   66.966273][ T6972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.970899][ T6972] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.429: corrupted inode contents
[   66.973411][ T6972] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #15: comm syz.1.429: mark_inode_dirty error
[   66.973726][ T6972] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.429: corrupted inode contents
[   66.973909][ T6972] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.429: mark_inode_dirty error
[   66.974053][ T6972] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.429: corrupted inode contents
[   66.974187][ T6972] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.429: mark_inode_dirty error
[   66.974351][ T6972] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.429: corrupted inode contents
[   66.975838][ T6972] EXT4-fs error (device loop1): ext4_truncate:4721: inode #15: comm syz.1.429: mark_inode_dirty error
[   66.976016][ T6972] EXT4-fs error (device loop1) in ext4_setattr:6247: Corrupt filesystem
[   66.991386][ T6972] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.429: corrupted inode contents
[   67.046167][ T4720] Bluetooth: hci1: command 0x041b tx timeout
[   67.674850][ T6991] __nla_validate_parse: 2 callbacks suppressed
[   67.674864][ T6991] netlink: 124 bytes leftover after parsing attributes in process `syz.0.436'.
[   67.752703][ T4714] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   67.755833][ T4714] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   67.756029][ T4714] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[   67.758106][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.792284][ T6994] loop1: detected capacity change from 0 to 256
[   67.846785][ T6994] could not allocate digest TFM handle sha256-asm
[   68.065850][ T7012] loop1: detected capacity change from 0 to 256
[   68.103118][ T7012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.441'.
[   68.248570][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.276268][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.276775][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.277481][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.278365][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.278722][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.279220][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.280629][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.281956][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.282474][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.283768][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.284937][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.287066][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.287982][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.289519][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.291015][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.292518][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.292739][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.292956][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.298522][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.300317][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.300765][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.302696][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.304197][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.308405][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.309044][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.311151][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.315231][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.317513][ T7022] overlay: filesystem on ./file0 not supported as upperdir
[   68.561391][ T7040] loop2: detected capacity change from 0 to 1024
[   68.590987][ T7040] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   68.591008][ T7040] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[   68.591058][ T7040] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   68.593040][ T4708] Bluetooth: hci1: unexpected event 0x08 length: 7 > 4
[   68.598822][ T7040] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.451: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   68.598874][ T7040] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   68.599886][ T7040] EXT4-fs (loop2): no journal found
[   68.599900][ T7040] EXT4-fs (loop2): can't get journal size
[   68.602080][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   68.602096][    C0] EXT4-fs (loop2): initial error at time 68: ext4_ext_check_inode:521: inode 3
[   68.602112][    C0] EXT4-fs (loop2): last error at time 68: ext4_ext_check_inode:521: inode 3
[   68.613086][ T7040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   68.729804][ T7048] loop6: detected capacity change from 0 to 128
[   68.735126][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.019367][ T7048] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   69.028869][ T7048] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   69.035042][ T7054] netlink: 60 bytes leftover after parsing attributes in process `syz.2.455'.
[   69.085263][ T7057] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   69.121389][ T7032] syz.1.449 (7032): drop_caches: 2
[   69.130253][ T7058] loop6: detected capacity change from 0 to 1024
[   69.130910][ T7058] EXT4-fs: Ignoring removed oldalloc option
[   69.130920][ T7058] EXT4-fs: Ignoring removed orlov option
[   69.132253][ T4708] Bluetooth: hci1: command 0x041b tx timeout
[   69.147559][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'.
[   69.149193][ T7059] bridge0: port 3(netdevsim0) entered disabled state
[   69.149298][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.149604][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.150144][ T7059] bridge0: entered allmulticast mode
[   69.178315][ T7058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.179329][ T7058] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   69.566036][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.458'.
[   69.571611][ T7068] loop5: detected capacity change from 0 to 2048
[   69.594367][ T7068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.622195][ T7073] netlink: 40 bytes leftover after parsing attributes in process `syz.0.459'.
[   69.636662][ T7078] loop2: detected capacity change from 0 to 128
[   69.639303][ T5455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.802586][ T7085] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[   70.291999][ T7109] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   70.296045][ T7109] EXT4-fs (loop1): 1 truncate cleaned up
[   70.296498][ T7109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.306058][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.467'.
[   70.311724][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.452672][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.473'.
[   70.464264][ T7129] bond0: (slave bond_slave_0): Releasing backup interface
[   70.504433][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.474'.
[   70.504454][ T7131] openvswitch: netlink: nsh attr 0 has unexpected len 5 expected 0
[   70.574312][ T7137] netlink: 'syz.2.477': attribute type 1 has an invalid length.
[   70.586249][ T7137] 8021q: adding VLAN 0 to HW filter on device bond2
[   70.594715][ T7137] bond2: (slave veth0_to_bond): making interface the new active one
[   70.595321][ T7137] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   70.598043][ T7137] bond2: entered promiscuous mode
[   70.598056][ T7137] veth0_to_bond: entered promiscuous mode
[   70.598123][ T7137] bond2: entered allmulticast mode
[   70.598130][ T7137] veth0_to_bond: entered allmulticast mode
[   70.603902][ T7137] macvlan2: entered promiscuous mode
[   70.603932][ T7137] macvlan2: entered allmulticast mode
[   70.605039][ T7137] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   70.642608][ T7137] bond2: (slave macvlan2): the slave hw address 
** replaying previous printk message **
[   70.642608][ T7137] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond
[   70.653439][ T4708] ------------[ cut here ]------------
[   70.653447][ T4708] WARNING: net/bluetooth/hci_conn.c:641 at hci_conn_timeout+0xfc/0x20c, CPU#1: kworker/u9:1/4708
[   70.659267][ T4708] Modules linked in:
[   70.659978][ T4708] CPU: 1 UID: 0 PID: 4708 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT 
[   70.661922][ T4708] Tainted: [L]=SOFTLOCKUP
[   70.662681][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   70.664368][ T4708] Workqueue: hci1 hci_conn_timeout
[   70.665274][ T4708] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[   70.666643][ T4708] pc : hci_conn_timeout+0xfc/0x20c
[   70.667555][ T4708] lr : hci_conn_timeout+0xfc/0x20c
[   70.668511][ T4708] sp : ffff8000936d7b20
[   70.669280][ T4708] x29: ffff8000936d7b20 x28: ffff0000d6d72800 x27: ffff0000d78dca50
[   70.670574][ T4708] x26: dfff800000000000 x25: ffff0000d0da1d80 x24: ffff0000d6d72808
[   70.671970][ T4708] x23: ffff0000d3584168 x22: dfff800000000000 x21: 00000000ffffffff
[   70.673370][ T4708] x20: ffff0000d78dca50 x19: ffff0000d78dc000 x18: 00000000ffffffff
[   70.674788][ T4708] x17: 0000000000000003 x16: ffff800088a77000 x15: ffff80008a728000
[   70.676178][ T4708] x14: ffff80008af602b0 x13: 0000000000000001 x12: 0000000000000000
[   70.677654][ T4708] x11: 0000000000000000 x10: ffff60001af1b803 x9 : 0000000000000000
[   70.679121][ T4708] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000
[   70.680555][ T4708] x5 : ffff80008a746ff0 x4 : 0000000000000008 x3 : ffff800085af2494
[   70.681948][ T4708] x2 : 00000000ffffffff x1 : ffff0000d0da1d80 x0 : 0000000000000000
[   70.683352][ T4708] Call trace:
[   70.683915][ T4708]  hci_conn_timeout+0xfc/0x20c (P)
[   70.684802][ T4708]  process_scheduled_works+0x91c/0x1250
[   70.685780][ T4708]  worker_thread+0x798/0xbd0
[   70.686608][ T4708]  kthread+0x304/0x3d4
[   70.687348][ T4708]  ret_from_fork+0x10/0x20
[   70.688175][ T4708] irq event stamp: 10274
[   70.688890][ T4708] hardirqs last  enabled at (10273): [<ffff80008688ceb4>] _raw_spin_unlock_irq+0x30/0x80
[   70.690660][ T4708] hardirqs last disabled at (10274): [<ffff8000868689ac>] el1_brk64+0x20/0x54
[   70.692224][ T4708] softirqs last  enabled at (10262): [<ffff800085d8955c>] rxrpc_peer_keepalive_worker+0xa10/0xc0c
[   70.694120][ T4708] softirqs last disabled at (10260): [<ffff800085d88eec>] rxrpc_peer_keepalive_worker+0x3a0/0xc0c
[   70.695980][ T4708] ---[ end trace 0000000000000000 ]---
[   71.202188][ T4708] Bluetooth: hci1: command 0x041b tx timeout
[   73.282232][ T4720] Bluetooth: hci1: command 0x041b tx timeout