last executing test programs:

47.782592292s ago: executing program 3 (id=81):
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x80800)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, <r1=>0x0})
fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x2, 0x2, 0x0, 0x5, r1})
socket(0x10, 0x3, 0x0)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x3, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
close(0x3)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b})
epoll_pwait(r3, &(0x7f00000003c0)=[{}], 0x1, 0xf68a, 0x0, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000200)={0xe0002004})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x200f})

46.915108625s ago: executing program 3 (id=90):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]})
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca5939bce6200"/23, @ANYRESOCT, @ANYRES16, @ANYBLOB="48bdb0a10f32dcd5fdbfa532c164f4179256752b2122532551cd97b3bae22e012c39572a16bd3fbeeead717134851c249aa3fa8c446270ef0d055d733070c8447b23e34fe2c7d08088411097f670540e51c5b089386bac3b708aef00ad4d9b654acd5e0b20a266dcac6bcb13a3d4922d1851f7d82d24acc2d8f4ab02ef553f0885dc464506212505cbf180b9"], 0x1, 0x1d1, &(0x7f0000000580)="$eJzslU9rE0EYxn+zO2kSzaFnrxbbi7bZgnj0Zj+AH8CQrrWY+Kcb0ISC0YsXD+KXKPgpPAh69yAieKkHBT1UPFUkMjvvjLM0EBVDKcwD4X3e5/03M2FnbhR3izrw82C3yyIlFC3eK4UGlpXVDhes/SZ2Ivikrd8W/bnYj2KL4ejNE0tHNzu9Xr5TDGcQpWBWToUclfQfD5tCXj+qKop/6zN/MkjtyR4NPa0o9Wk5Usux72Ie5HsLQuXz/x5RY967AK/8aM3+m949s3/n1JxUyptUj+XkkeSvqgrk+iquPEz4WjpvD3a7hlyTW8xom/bnPokyxzgvg5wzGsagUia+jy5vS1gGVgf9O6vFcHR+u9/ZyrfyW1m2fnHt1Wn5RCcPYLuXr6lgGYkhGo8a0Azixv/wOz4mgAqWZnAKlKt1Je5yXjkbFDYhCWrDHgYNXvj5ddFS+lzlHA3g3tiEM+xpLWG6aa6brW2gSMVp62CdcEhCowxc6N7ubV6WYFm2h/Y92vvUvJOJYwbl65f89h+LXRK7IXZP7L5Y93a5N0mXHb6ItzKGBe53BoOd8vGyzGuZ17JFPzmRqe41VG4ldSIiIiIiIiIiTgh+BQAA//9Zuk7C")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
lseek(r1, 0x5, 0x0)
getdents64(r1, 0x0, 0x22)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xf000})

46.826309609s ago: executing program 3 (id=93):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
recvmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/8, 0x8}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000700)=""/57, 0x39}], 0x5}, 0x92}, {{&(0x7f0000000840)=@nfc_llcp, 0x80, &(0x7f0000001140)=[{&(0x7f00000008c0)=""/91, 0x5b}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000001080)=""/129, 0x81}], 0x3, &(0x7f0000001180)=""/187, 0xbb}, 0x5}], 0x2, 0x2020, &(0x7f00000012c0)={0x77359400})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1004008, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"/319], 0x3, 0x27b, &(0x7f0000000640)="$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")
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) (async)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001040)={'vxcan1\x00', <r3=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r3, 0x0, 0x0}, 0x10) (async)
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r3, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x310, 0x11, 0x148, 0x310, 0x0, 0x410, 0x2a8, 0x2a8, 0x410, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20, 0x3, 0x5, 0x2}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) (async)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x310, 0x11, 0x148, 0x310, 0x0, 0x410, 0x2a8, 0x2a8, 0x410, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20, 0x3, 0x5, 0x2}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2})
unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0/file0\x00', 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) (async)
ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0)

46.618091355s ago: executing program 3 (id=99):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1401, 0x20, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x24000090)
r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x635, &(0x7f0000001140)="$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")
r2 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, r3) (async)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, r3, &(0x7f0000000040)={0xbba, 0x5, 0x326, 0x7fff, 0xfff, 0x9, 0xc, 0x1, 0x8}) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (async)
unshare(0x28020480) (async)
syz_clone(0x0, 0x0, 0xfffffffffffffe4b, 0x0, 0x0, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)=ANY=[@ANYBLOB="9c1200000d0a010800000000000000000a0000090900020073797a31000000000900010073797a3100000000701203806c1200805812018004100100"], 0x129c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) (async)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2009500}, {0xffffffff, 0x0, 0x9, 0xa}]})

46.206256756s ago: executing program 3 (id=103):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x30, 0x3)
landlock_restrict_self(r0, 0x16)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080))
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x100, r0}, 0x0)

46.027711573s ago: executing program 1 (id=107):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x804)
sendmsg$key(r0, 0x0, 0x58)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000001000)=ANY=[@ANYBLOB="0b00000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000018f3c81800000000000000000000000000000000000000000000000000350005007e0500003003000000000000000000000600ff0901a101150026ff007508951f852009018102852109018102852209018102851619019102851709019102851509019102c0"], 0x14d)
close(r3)
ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x2, "7f0e279d2e5cf55a61c5c40d6e76943e0347c7cbf6336e676a359b970be7f3f3"})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)

45.966189102s ago: executing program 3 (id=108):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000600)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x10)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
shutdown(r0, 0x0)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000600)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x10) (async)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async)
shutdown(r0, 0x0) (async)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async)

45.93166197s ago: executing program 32 (id=108):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000600)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x10)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
shutdown(r0, 0x0)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000600)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x10) (async)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async)
shutdown(r0, 0x0) (async)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async)

38.79070466s ago: executing program 1 (id=231):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x6, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (fail_nth: 4)

38.603180857s ago: executing program 1 (id=233):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)
ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x0, 0x0, 0x0})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = dup(r1)
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000080)={'nicvf0\x00', 0x600})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/cpu/drivers/processor\x00', 0x200201, 0x0)
r5 = openat(r4, &(0x7f0000000200)='unbind\x00', 0x1, 0x0)
write(r5, 0x0, 0x0)
write(r5, &(0x7f0000000400)='cpu0', 0x4)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @void, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x18, 0x28, 0x64, 0x0, 0xb, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x47}, @multicast1}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x105, 0x0, 0xffff}}}}, 0x2c)
ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0)

38.067432113s ago: executing program 1 (id=240):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000)='A', 0x1, 0x24042041, 0x0, 0xfffffffffffffd5c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000100)={[{@errors_continue}, {@noload}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='always', 0x6)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
capset(0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x7, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r2, &(0x7f00000014c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xaf, 0x16}, [@call={0x5c, 0x0, 0x3f}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1)

37.416094468s ago: executing program 1 (id=243):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x140, 0xa8, 0xfeffffff, 0xa8, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x1000000}}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'veth1_to_batadv\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x7], 0x6, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0)

35.886024515s ago: executing program 1 (id=261):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f00000000c0)={'veth1_to_bridge\x00', @ifru_names='dummy0\x00'})

35.138401175s ago: executing program 33 (id=261):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f00000000c0)={'veth1_to_bridge\x00', @ifru_names='dummy0\x00'})

32.071458436s ago: executing program 2 (id=287):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x33, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x800, @dev={0xac, 0x14, 0x14, 0x16}}}}, 0x108)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 9)

31.922184828s ago: executing program 2 (id=289):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'batadv0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x1}})
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4)

31.856111055s ago: executing program 2 (id=290):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x5, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000014c0)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0)
timer_create(0xfffffff9, 0x0, &(0x7f0000000040))
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000080ffff8910180000000000ce050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
quotactl_fd$Q_SYNC(r4, 0xffffffff80000100, 0x0, 0x0) (async)
quotactl_fd$Q_SYNC(r4, 0xffffffff80000100, 0x0, 0x0)

30.988203745s ago: executing program 2 (id=298):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000002000000000000000", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

30.834100826s ago: executing program 0 (id=300):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4c800)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}})
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f, 0x500}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x8004)

30.828882975s ago: executing program 6 (id=262):
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x1c, 0x80000)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, 0x0, 0x0)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000300), &(0x7f0000000340)=0x8)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f00000001c0))
sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000080000000007004a0000000000"], 0x18}], 0x1}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0xe2182)
ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r5, 0xda90)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000003c0)=@req3={0xffff, 0x7, 0x6f, 0xe, 0x79, 0xf, 0xe25}, 0x1c)
r7 = accept4(r5, 0x0, 0x0, 0x800)
setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x4ff3913d, 0xca0}, 0x10)
memfd_secret(0x0)
close(r1)
pipe2$watch_queue(&(0x7f0000000380), 0x80)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, 0x0)
r9 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000000200)={0x1e55, 0x20010059, 0xffff7002, 0xffffffff, 0x0, "e9d30d001f000000000100", 0xfffffffc, 0xfffffffc})
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0xa)

30.630365719s ago: executing program 6 (id=301):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000900000500000000060015000200000014001680100008800c"], 0x38}}, 0x0)

30.513526961s ago: executing program 6 (id=302):
syz_read_part_table(0x5c2, &(0x7f0000000000)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x189) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x189)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0)
r1 = inotify_init1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xd1000688) (async)
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xd1000688)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r2, 0x6000000)
close(0x3)
copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0x100, 0x9, 0x0) (async)
copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0x100, 0x9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0x8) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0x8)
fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, r3, &(0x7f0000000700)={0x7, 0x6, 0x6, 0x3, 0x8, 0x3, 0x8b4f, 0xca, 0x40})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r4, r4, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) (async)
kcmp(r4, r4, 0x7, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000600)=0x3)

30.461837423s ago: executing program 5 (id=304):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000180)=@secondary)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, &(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000b40), r6, 0x0, 0x1, 0x4}}, 0x20)
add_key$user(&(0x7f0000000440), &(0x7f00000008c0)={'syz', 0x0}, &(0x7f0000000900), 0x0, r3)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040041}, 0x24000054)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) (fail_nth: 9)

30.353041692s ago: executing program 5 (id=305):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18488}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080)
ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000000)={0x80000001, 0x1, @qam={0x800, 0x7}})
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18488}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) (async)
ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000000)={0x80000001, 0x1, @qam={0x800, 0x7}}) (async)

29.862004514s ago: executing program 6 (id=307):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000480)={[{@noblock_validity}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3c9241, 0x0)
socket(0x200000000000011, 0x2, 0xd)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = msgget$private(0x0, 0x1c0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
msgsnd(r2, &(0x7f0000001040)=ANY=[], 0x8, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat(0xffffff9c, 0x0, 0x2, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd02, 0x15)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xc00)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x12042, 0x0)
write$FUSE_INIT(r5, &(0x7f0000004400)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x6, 0x40000, 0xb3, 0xa4, 0x1, 0x2ad, 0x0, 0x0, 0x1, 0x81}}, 0xfdf9)

29.86173689s ago: executing program 0 (id=308):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/1, 0x1)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffa45}}, './file0\x00'})
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1000, 0x640, 0x80, 0xf0, 0x9, 0x9, 0x0, 0x0, {0x3, 0x1ff}, {0x200, 0x7}, {0x7, 0x800}, {0x58, 0x10001, 0x1}, 0x3, 0x1, 0x8001, 0x9, 0x1, 0x45e1, 0x9, 0x2, 0x9, 0xfffffffd, 0xfffffff2, 0x813, 0x28, 0x100, 0x2, 0x4})
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/72, 0x48)

29.850164588s ago: executing program 2 (id=309):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0xc138fd00, &(0x7f0000000140)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006343aa1df427b60db611e726d8e7813e27a7cef282778bafd1cc28339abeefe1deea2b324f7d2121bdaded3dd78b43a28139a1917cd6b44bdc0c0b7cd4cf0f32bb14b1a5bcf682c1b6106bc1bf881becb655dba0b07423ea40ad30dfb4f72ef66ef269142a8e9689cda235")

29.80520903s ago: executing program 5 (id=310):
unshare(0x20000400)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000000, 0x4031, 0xffffffffffffffff, 0x1000)
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040600})

29.65802886s ago: executing program 0 (id=311):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
fsopen(&(0x7f0000000000)='bpf\x00', 0x0) (async)
r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x83)
r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0xa2)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8)
r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r4, 0xc0189436, 0x0)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x142, 0x38) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x142, 0x38)
ioctl$XFS_IOC_SCRUBV_METADATA(r5, 0xc0285840, &(0x7f0000000200)={0x7, 0x1, 0x0, 0x0, 0x1ff8, 0x7, 0x0, &(0x7f0000000180)=[{0x369c09cb60a131a0, 0x1ff, 0xc}, {0xd, 0x101, 0x100}, {0x0, 0xfe}, {0x6, 0xfe, 0x5}, {0x1, 0xfe, 0x6}, {0x13, 0xfe, 0x4}, {0x12, 0xfe, 0xccf3}]}) (async)
ioctl$XFS_IOC_SCRUBV_METADATA(r5, 0xc0285840, &(0x7f0000000200)={0x7, 0x1, 0x0, 0x0, 0x1ff8, 0x7, 0x0, &(0x7f0000000180)=[{0x369c09cb60a131a0, 0x1ff, 0xc}, {0xd, 0x101, 0x100}, {0x0, 0xfe}, {0x6, 0xfe, 0x5}, {0x1, 0xfe, 0x6}, {0x13, 0xfe, 0x4}, {0x12, 0xfe, 0xccf3}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x786c1) (async)
r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x786c1)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000000)) (async)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000000)=<r7=>0x0)
r8 = syz_open_procfs(r7, &(0x7f0000000140)='net/l2cap\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d66642c7266696e6f3d5ec8fcec7873c02fd5cfea774aa68dbf26446d8ab890aaf736d35871baa830305a007fae", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00'])
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x27)
keyctl$clear(0x19, 0xfffffffffffffffd)

29.636742026s ago: executing program 5 (id=312):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {}, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="02"]}]}, 0x1c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200029bd7000ffdbdf2501000000080001006b00000008000300", @ANYRES32=r3, @ANYBLOB="92181b1dd991950958bb9759706fb123151d6d91db4e45238598fffd882567f9e9dbbb4a25be9cad6b690c082579f02cc0e8a98bb440f43a6c8c56c4945ba4f9388627c17c929027cfa0b1928d34daa5a8e6179a21a59a3541d291aca5d26931ae181703df1f9019a1401064eaa0bd4f870019f2ba92917c8fa667a7228ba88c615ab769dc74eb9d88403d54e39aa9c31a12b226872f29efe921301c833a3b18fd8acabf4e4c849bb2899393f7628652e8ddabb6680deffd9ac31856f6e52d7977b7bb52e5db5172cd97db7ecabc260649643035eec110a804476320fde060eb15240d65"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x2a}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010101}, {@private}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_sfeatures})
pwrite64(r4, &(0x7f0000000100)="0000010042", 0x5, 0x1be)
pwrite64(r4, &(0x7f0000000100)="55aa", 0x2, 0x1fe)
pwrite64(r4, &(0x7f0000000080)="81f902db0100008000000000", 0xc, 0xc00)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r6, &(0x7f0000000000)='7', 0x1)
socket$inet6_sctp(0xa, 0x801, 0x84)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@delnexthop={0x30, 0x69, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40041}, 0x4004050)
write$vga_arbiter(r7, &(0x7f0000000000)=@unlock_all, 0xb)
pwrite64(r4, &(0x7f0000000100)="0002000b", 0x4, 0xc0c)
pwrite64(r4, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23)
pwrite64(r4, &(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b)
pwrite64(r4, &(0x7f0000000100)='T', 0x1, 0x100200)
r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r8, 0x4c00, r4)
ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

29.37009698s ago: executing program 0 (id=314):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
listen(r0, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004001fffff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

29.289011206s ago: executing program 6 (id=316):
syz_emit_ethernet(0x36, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @remote, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@end]}}, {{0x4e22, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (fail_nth: 9)

29.284422826s ago: executing program 5 (id=317):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000180)=@secondary)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, &(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10)
r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90f, 0x976, '\x00', @p_u32=0x0}})
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000b40), r7, 0x0, 0x1, 0x4}}, 0x20)
add_key$user(&(0x7f0000000440), &(0x7f00000008c0)={'syz', 0x0}, &(0x7f0000000900), 0x0, r3)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040041}, 0x24000054)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0)

29.147303637s ago: executing program 0 (id=319):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4)
bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)='?', 0x1}], 0x1}}], 0x1, 0x24000000)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x110, 0x6c, 0x0, 0x0, 0x0, 0x1f0, 0x258, 0x258, 0x1f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [0x0, 0xffffff00], [0xffffff00], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x3a, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8, 0x2, 0x1, 'syz1\x00', 'syz0\x00', {0x80}}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xffffff00], 'netdevsim0\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x320)
recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/72, 0x48}, 0x6}], 0x41f, 0x40, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000780)={0x3, 0xfd0, 0x2, 0x9, 0x1a, "388d8b4acd49e7760bb1630f2da7673f178331"})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200401, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

29.050010018s ago: executing program 4 (id=320):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x1, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000780), 0xcff5, r0, 0x0, 0xffffffff00000000}, 0x38)

28.98203752s ago: executing program 5 (id=321):
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='1', 0x1)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = semget(0x2, 0x4, 0x200)
semop(r6, &(0x7f0000000380)=[{0x0, 0x7fff, 0x1800}, {}], 0x2)
semop(0x0, &(0x7f0000000000)=[{0x1, 0x0, 0x800}, {0x1, 0x1, 0x1000}], 0x2)
semtimedop(r6, &(0x7f0000000040)=[{0x0, 0xa5f, 0x1800}], 0x1, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000140))
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f00000000c0)={0x980914, 0x800})
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newsa={0x144, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@local, 0x4e22, 0x1, 0xfffd, 0x13, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x0, 0x0, 0x4, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x3501, 0x2, 0x1, 0x0, 0x28}, [@sa_dir={0x5, 0x21, 0x2}, @algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x40000, &(0x7f0000000080)={[], [], 0x2c})
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83)
fcntl$setstatus(r10, 0x4, 0x4000)
fadvise64(r10, 0x9, 0x2, 0x2)

28.951401498s ago: executing program 2 (id=322):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800)
sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1ce803004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

28.941530722s ago: executing program 0 (id=323):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
fchdir(r4)
close_range(r3, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xb5ea3bfe36e29c5d, 0x58)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r12=>0x0}, 0x2400)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000000)=0xa)
setregid(r14, r14)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, <r15=>0xee00}}, './file0\x00'})
setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000b80)=@filter={'filter\x00', 0xe, 0x3, 0x572, [0x0, 0x20000600, 0x20000630, 0x2000089c], 0x0, &(0x7f00000000c0), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x0, 0x809b, 'batadv0\x00', 'bridge0\x00', 'syz_tun\x00', 'tunl0\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff], 0xee, 0x166, 0x196, [@owner={{'owner\x00', 0x0, 0x18}, {{r11, r12, r14, r15, 0x4, 0x3}}}, @time={{'time\x00', 0x0, 0x18}, {{0x8, 0x9, 0x6aaf, 0x6081, 0x9, 0x6, 0x3}}}], [@common=@nflog={'nflog\x00', 0x50, {{0xfff, 0x2, 0xc, 0x0, 0x0, "cc35ec33f8e5c388604251309c51078167da902c186afd5a3b3976835559ff6b8ea3768af2fea910de8274f1eeb18f2a2c3d463e139721d1dbdfbfc6a0481a48"}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x9, 0x20, 0xa01, 'pimreg1\x00', 'syzkaller0\x00', 'veth1\x00', 'macvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x7f, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x9, 0x21, 0x8917, 'caif0\x00', 'wlan0\x00', 'bond_slave_0\x00', 'virt_wifi0\x00', @remote, [0x0, 0x0, 0xff, 0x7f], @remote, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xe6, 0x246, 0x276, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfff, 0xf, 0x9, 0x7, 0xffff, 0x34}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x2, 0x5, 0x884c, 0x2, 0x1}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6, 'system_u:object_r:init_exec_t:s0\x00'}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7f}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x5ea)

28.834097949s ago: executing program 4 (id=324):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0xd0, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0xfffffffffffffd4d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC, @NLBL_CIPSOV4_A_MLSLVLLOC={0xffffff61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0xff47}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x7, 0x5, 0xfffffffe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0xfc58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0xd0}, 0x1, 0x300000000000000}, 0x0)

28.797959681s ago: executing program 4 (id=325):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
linkat(r0, &(0x7f0000000140)='./bus\x00', r0, 0x0, 0x1000)
r1 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x400100, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x578d}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
mknodat$null(r1, &(0x7f0000000100)='./bus\x00', 0x1000, 0x103)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f00000001c0)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x40}, 0x32}]}, 0x9a, 0x4ed, &(0x7f0000000a40)="$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")

28.547366143s ago: executing program 4 (id=326):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') (async)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={0xffffffffffffffff, 0x60}) (async)
fchdir(r0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200040, 0xce)

28.389893557s ago: executing program 4 (id=327):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x60}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x20040050}, 0x0)

28.322346469s ago: executing program 6 (id=328):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x4a)
madvise(&(0x7f00005e8000/0x3000)=nil, 0x3000, 0x64)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4000003, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000200)={0xa, @raw_data="0286887f299f398f48535633ee5155e1ae7bcc3fbdb064e2b5a54287fecaedfe068fc6d447603a5ea4406685adc9194f0c84cb29ff5413db17f7c7573b717360d80ebda85493109e2c14a3cef705a942c3c1112f2cb290d7936da4c3fae61aaf1bfb5881642a0617da780e10466f5c265049c4e4beeac3eb401e7fdf81d9adba4841418843c31c09b0ca28e0567c2e613357e6ba03216c6a429aa7250ba48db5decc98f004aaaca161dcd524f13b4c8ee6818ede5423dabaf409fb2b8269b349f66e49da47a8aac3"})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x22c00)
ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0x980902, 0xfffffffb, @value=0x6})
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x2, 0x0, 0x2})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket(0x27, 0x1, 0x3f9)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd000020062"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f00000002c0)={0x9, 0x0, 0x1004, 0x6, 0x10000, 0x3ff, 0x8})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000280)={0x6, 0x87ef, 0x2})
r8 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_GETSTATE(r8, 0x5603, &(0x7f0000001280)={0xfb, 0x1ff, 0x1})
write$rfkill(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010001f0025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000400)={{{@in=@broadcast, @in=@initdev}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f0000000500)=0xe8)
preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/16, 0x6e}], 0x1, 0xe, 0x10040006)

28.16265822s ago: executing program 4 (id=329):
r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xc1, &(0x7f0000000100)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2", 0x4d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0", 0x42}, {&(0x7f00000000c0)="0b2771a1f04bf06ca08e49a2dd4591e7540687bf0b493e5d2443320c4a9b61b58c67c3447d"}], 0x100000000000014a}}], 0x3, 0x60c18d4)

0s ago: executing program 34 (id=323):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
fchdir(r4)
close_range(r3, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xb5ea3bfe36e29c5d, 0x58)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r12=>0x0}, 0x2400)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000000)=0xa)
setregid(r14, r14)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, <r15=>0xee00}}, './file0\x00'})
setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000b80)=@filter={'filter\x00', 0xe, 0x3, 0x572, [0x0, 0x20000600, 0x20000630, 0x2000089c], 0x0, &(0x7f00000000c0), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x0, 0x809b, 'batadv0\x00', 'bridge0\x00', 'syz_tun\x00', 'tunl0\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff], 0xee, 0x166, 0x196, [@owner={{'owner\x00', 0x0, 0x18}, {{r11, r12, r14, r15, 0x4, 0x3}}}, @time={{'time\x00', 0x0, 0x18}, {{0x8, 0x9, 0x6aaf, 0x6081, 0x9, 0x6, 0x3}}}], [@common=@nflog={'nflog\x00', 0x50, {{0xfff, 0x2, 0xc, 0x0, 0x0, "cc35ec33f8e5c388604251309c51078167da902c186afd5a3b3976835559ff6b8ea3768af2fea910de8274f1eeb18f2a2c3d463e139721d1dbdfbfc6a0481a48"}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x9, 0x20, 0xa01, 'pimreg1\x00', 'syzkaller0\x00', 'veth1\x00', 'macvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x7f, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x9, 0x21, 0x8917, 'caif0\x00', 'wlan0\x00', 'bond_slave_0\x00', 'virt_wifi0\x00', @remote, [0x0, 0x0, 0xff, 0x7f], @remote, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xe6, 0x246, 0x276, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfff, 0xf, 0x9, 0x7, 0xffff, 0x34}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x2, 0x5, 0x884c, 0x2, 0x1}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6, 'system_u:object_r:init_exec_t:s0\x00'}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7f}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x5ea)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts.
[   28.422152][ T4697] cgroup: Unknown subsys name 'net'
[   28.572326][ T4697] cgroup: Unknown subsys name 'cpuset'
[   28.573649][ T4697] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   28.734106][ T4697] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   29.517112][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   29.518270][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   29.518556][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   29.519117][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   29.533461][ T4713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   29.539289][ T4713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   29.542271][ T4719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   29.542460][ T4719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   29.542571][ T4719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   29.544305][ T4713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   29.544365][ T4713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   29.545951][ T4719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   29.546002][ T4719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   29.546258][ T4713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   29.547735][ T4713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   29.554059][ T4713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   29.554121][ T4719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   29.555696][ T4713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   29.556312][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   29.557351][ T4713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   29.571815][   T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   29.572260][   T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   29.572758][   T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   29.592796][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   29.597307][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   29.976195][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.976678][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.976797][ T4707] bridge_slave_0: entered allmulticast mode
[   29.977264][ T4707] bridge_slave_0: entered promiscuous mode
[   29.978524][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.978548][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.978600][ T4707] bridge_slave_1: entered allmulticast mode
[   29.979015][ T4707] bridge_slave_1: entered promiscuous mode
[   29.986324][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.987201][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.996413][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.996442][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.996497][ T4711] bridge_slave_0: entered allmulticast mode
[   29.996921][ T4711] bridge_slave_0: entered promiscuous mode
[   30.026766][ T4707] team0: Port device team_slave_0 added
[   30.030063][ T4707] team0: Port device team_slave_1 added
[   30.030118][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.030152][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.030206][ T4708] bridge_slave_0: entered allmulticast mode
[   30.037166][ T4708] bridge_slave_0: entered promiscuous mode
[   30.039079][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.039115][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.039182][ T4711] bridge_slave_1: entered allmulticast mode
[   30.039623][ T4711] bridge_slave_1: entered promiscuous mode
[   30.068974][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.069299][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.069308][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.069319][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.070442][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.070624][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.070631][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.070643][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.071631][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.071661][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.071733][ T4708] bridge_slave_1: entered allmulticast mode
[   30.072168][ T4708] bridge_slave_1: entered promiscuous mode
[   30.078966][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.079844][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.106897][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.106922][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.107020][ T4724] bridge_slave_0: entered allmulticast mode
[   30.107473][ T4724] bridge_slave_0: entered promiscuous mode
[   30.113044][ T4708] team0: Port device team_slave_0 added
[   30.124574][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.124637][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.124742][ T4724] bridge_slave_1: entered allmulticast mode
[   30.125189][ T4724] bridge_slave_1: entered promiscuous mode
[   30.131481][ T4708] team0: Port device team_slave_1 added
[   30.146123][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.146187][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.146278][ T4714] bridge_slave_0: entered allmulticast mode
[   30.146698][ T4714] bridge_slave_0: entered promiscuous mode
[   30.147906][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.147937][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.147987][ T4714] bridge_slave_1: entered allmulticast mode
[   30.148444][ T4714] bridge_slave_1: entered promiscuous mode
[   30.150046][ T4724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.151998][ T4724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.152609][ T4711] team0: Port device team_slave_0 added
[   30.153818][ T4711] team0: Port device team_slave_1 added
[   30.159626][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.159636][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.159651][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.160605][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.160612][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.160626][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.164996][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.165006][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.165020][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.165584][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.165591][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.165605][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.190630][ T4707] hsr_slave_0: entered promiscuous mode
[   30.193340][ T4707] hsr_slave_1: entered promiscuous mode
[   30.197702][ T4724] team0: Port device team_slave_0 added
[   30.209330][ T4724] team0: Port device team_slave_1 added
[   30.214190][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.216224][ T4711] hsr_slave_0: entered promiscuous mode
[   30.216544][ T4711] hsr_slave_1: entered promiscuous mode
[   30.216766][ T4711] debugfs: 'hsr0' already exists in 'hsr'
[   30.216808][ T4711] Cannot create hsr debugfs directory
[   30.219431][ T4708] hsr_slave_0: entered promiscuous mode
[   30.219732][ T4708] hsr_slave_1: entered promiscuous mode
[   30.219933][ T4708] debugfs: 'hsr0' already exists in 'hsr'
[   30.219943][ T4708] Cannot create hsr debugfs directory
[   30.224195][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.233946][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.233958][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.233973][ T4724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.242725][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.242736][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.242752][ T4724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.243580][ T4714] team0: Port device team_slave_0 added
[   30.244709][ T4714] team0: Port device team_slave_1 added
[   30.279434][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.279447][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.279463][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.289441][ T4724] hsr_slave_0: entered promiscuous mode
[   30.289774][ T4724] hsr_slave_1: entered promiscuous mode
[   30.290016][ T4724] debugfs: 'hsr0' already exists in 'hsr'
[   30.290028][ T4724] Cannot create hsr debugfs directory
[   30.301167][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.301180][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.301196][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.363277][ T4714] hsr_slave_0: entered promiscuous mode
[   30.363565][ T4714] hsr_slave_1: entered promiscuous mode
[   30.363770][ T4714] debugfs: 'hsr0' already exists in 'hsr'
[   30.363780][ T4714] Cannot create hsr debugfs directory
[   30.416314][ T4708] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.420298][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.429879][ T4708] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.431451][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.436795][ T4708] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.438649][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.445236][ T4708] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.446404][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.459529][ T4711] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.462210][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.462597][ T4711] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.463759][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.476425][ T4711] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.477675][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.478047][ T4711] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.478912][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.482802][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.482839][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.482984][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.483013][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.501552][ T4707] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.503199][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.507823][ T4707] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.508997][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.509464][ T4707] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.510512][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.519082][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.519230][ T4707] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.520295][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.542081][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.542541][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.554041][ T4708] 8021q: adding VLAN 0 to HW filter on device team0
[   30.555474][ T4724] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.557503][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.565296][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.565331][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.569016][ T4724] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.570061][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.582123][ T4724] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.583355][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.584193][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.584218][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.588142][ T4724] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.590093][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.616087][ T4714] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.617206][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.629522][ T4708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.629539][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.631620][ T4714] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.635643][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.637676][ T4714] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.639024][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.644765][ T4714] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.646134][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.649396][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.662157][ T4707] 8021q: adding VLAN 0 to HW filter on device team0
[   30.679932][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.692795][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.692825][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.693162][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.693180][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.696812][ T4711] 8021q: adding VLAN 0 to HW filter on device team0
[   30.713769][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.713802][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.720311][ T4707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.720327][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.733133][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.733173][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.757142][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.765611][ T4724] 8021q: adding VLAN 0 to HW filter on device team0
[   30.770071][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.770097][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.770413][ T1404] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.770430][ T1404] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.794681][ T4724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.794700][ T4724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.799743][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.799762][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.835647][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.859763][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.864955][ T4714] 8021q: adding VLAN 0 to HW filter on device team0
[   30.875022][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.875049][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.875689][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.875708][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.880268][ T4708] veth0_vlan: entered promiscuous mode
[   30.906130][ T4708] veth1_vlan: entered promiscuous mode
[   30.918948][ T4708] veth0_macvtap: entered promiscuous mode
[   30.927305][ T4708] veth1_macvtap: entered promiscuous mode
[   30.938854][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.947878][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.012961][   T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.013118][   T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.013213][   T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.016433][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.016449][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.056085][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.056102][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.057995][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.079056][ T1096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.086166][ T4707] veth0_vlan: entered promiscuous mode
[   31.093944][ T4707] veth1_vlan: entered promiscuous mode
[   31.099007][ T4707] veth0_macvtap: entered promiscuous mode
[   31.103998][ T4707] veth1_macvtap: entered promiscuous mode
[   31.105504][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.122981][ T4708] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.124565][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.126993][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.138498][ T4724] veth0_vlan: entered promiscuous mode
[   31.153749][ T4724] veth1_vlan: entered promiscuous mode
[   31.164722][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.180622][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.223643][ T1454] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.224949][ T1454] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.225110][ T1454] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.225262][ T1454] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.230236][ T1454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.230251][ T1454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.263697][ T4724] veth0_macvtap: entered promiscuous mode
[   31.264839][ T4724] veth1_macvtap: entered promiscuous mode
[   31.276042][ T4711] veth0_vlan: entered promiscuous mode
[   31.279639][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.285062][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.294609][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.294624][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.355593][ T4888] 0x000000000000-0x000000020000 : ""
[   31.408729][ T4888] ftl_cs: FTL header not found.
[   31.541530][   T50] Bluetooth: hci0: command tx timeout
[   31.562053][ T4711] veth1_vlan: entered promiscuous mode
[   31.595056][ T4711] veth0_macvtap: entered promiscuous mode
[   31.596364][ T4711] veth1_macvtap: entered promiscuous mode
[   31.613507][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.620846][   T50] Bluetooth: hci4: command tx timeout
[   31.621018][   T50] Bluetooth: hci3: command tx timeout
[   31.621230][ T4710] Bluetooth: hci2: command tx timeout
[   31.621304][ T4710] Bluetooth: hci1: command tx timeout
[   31.646641][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.649062][ T4714] veth0_vlan: entered promiscuous mode
[   31.662989][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.663007][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.678037][ T4714] veth1_vlan: entered promiscuous mode
[   31.689815][ T1404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.689832][ T1404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.691464][ T1404] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.715656][ T4714] veth0_macvtap: entered promiscuous mode
[   31.719791][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.719807][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.727445][ T4714] veth1_macvtap: entered promiscuous mode
[   31.727887][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   31.735188][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.735538][ T4894] Zero length message leads to an empty skb
[   31.746284][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.748223][ T1096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.748272][ T1096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.784355][ T1454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.786531][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.786544][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.802937][ T1476] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.803032][ T1476] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.803111][ T1476] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.803171][ T1476] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.803223][ T1476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.803277][ T1476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.804318][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   31.807716][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.807747][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.820990][ T1476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.829348][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   31.834588][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.834600][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.842476][ T1404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.965674][ T4905] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'.
[   32.079147][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'.
[   32.714756][ T4917] loop2: detected capacity change from 0 to 512
[   32.746540][ T4917] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.10: bg 0: block 5: invalid block bitmap
[   32.746595][ T4917] loop2: lost filesystem error report for type 5 error -117
[   32.748196][ T4917] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   32.748211][ T4917] loop2: lost filesystem error report for type 5 error -117
[   32.748450][ T4917] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.10: invalid indirect mapped block 3 (level 2)
[   32.748516][ T4917] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   32.748780][ T4917] EXT4-fs (loop2): 1 orphan inode deleted
[   32.748792][ T4917] EXT4-fs (loop2): 1 truncate cleaned up
[   32.750627][ T4917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.779328][ T4917] PKCS7: Unknown OID: [4] 4.2(bad)
[   32.779341][ T4917] PKCS7: Only support pkcs7_signedData type
[   32.795934][ T4921] dvmrp0: entered allmulticast mode
[   32.806583][ T4917] tipc: Started in network mode
[   32.806600][ T4917] tipc: Node identity 0ef9e2fd4b2d, cluster identity 4711
[   32.806682][ T4917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   32.807304][ T4917] syzkaller0: entered promiscuous mode
[   32.807316][ T4917] syzkaller0: entered allmulticast mode
[   32.813130][ T4917] tipc: Resetting bearer <eth:syzkaller0>
[   32.865429][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'.
[   32.892184][ T4916] tipc: Resetting bearer <eth:syzkaller0>
[   32.899524][ T4916] tipc: Disabling bearer <eth:syzkaller0>
[   32.963858][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.348185][ T4939] loop3: detected capacity change from 0 to 512
[   33.349207][ T4939] =======================================================
[   33.349207][ T4939] WARNING: The mand mount option has been deprecated and
[   33.349207][ T4939]          and is ignored by this kernel. Remove the mand
[   33.349207][ T4939]          option from the mount to silence this warning.
[   33.349207][ T4939] =======================================================
[   33.349255][ T4939] ext4: Unknown parameter 'noacl'
[   33.355972][ T4719] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[   33.355987][ T4719] CPU: 1 UID: 0 PID: 4719 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT 
[   33.355997][ T4719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   33.356003][ T4719] Workqueue: hci0 hci_rx_work
[   33.356024][ T4719] Call trace:
[   33.356027][ T4719]  show_stack+0x2c/0x3c (C)
[   33.356044][ T4719]  __dump_stack+0x30/0x40
[   33.356057][ T4719]  dump_stack_lvl+0xd8/0x12c
[   33.356069][ T4719]  dump_stack+0x1c/0x28
[   33.356080][ T4719]  sysfs_warn_dup+0x9c/0xb8
[   33.356095][ T4719]  sysfs_create_dir_ns+0x190/0x1f4
[   33.356107][ T4719]  kobject_add_internal+0x290/0x6f0
[   33.356121][ T4719]  kobject_add_varg+0x9c/0xe8
[   33.356133][ T4719]  kobject_add+0x110/0x1c8
[   33.356144][ T4719]  device_add+0x394/0x9e0
[   33.356154][ T4719]  hci_conn_add_sysfs+0xbc/0x1e8
[   33.356163][ T4719]  le_conn_complete_evt+0xc84/0x122c
[   33.356176][ T4719]  hci_le_conn_complete_evt+0x114/0x3d8
[   33.356188][ T4719]  hci_le_meta_evt+0x2b0/0x46c
[   33.356197][ T4719]  hci_event_packet+0x4c0/0x9c8
[   33.356205][ T4719]  hci_rx_work+0x2f4/0xd78
[   33.356216][ T4719]  process_scheduled_works+0x91c/0x1250
[   33.356227][ T4719]  worker_thread+0x798/0xbd0
[   33.356237][ T4719]  kthread+0x304/0x3d4
[   33.356246][ T4719]  ret_from_fork+0x10/0x20
[   33.356262][ T4719] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   33.356276][ T4719] Bluetooth: hci0: failed to register connection device
[   33.405775][ T4941] loop1: detected capacity change from 0 to 256
[   33.421565][ T4941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'.
[   33.438698][ T4941] fuse: Bad value for 'fd'
[   33.442400][ T4941] Injecting memory failure for pfn 0x106b2c at process virtual address 0x20289000
[   33.444826][ T4941] Memory failure: 0x106b2c: failed to unmap page (folio mapcount=1)
[   33.444845][ T4941] Memory failure: 0x106b2c: recovery action for unmapping failed page: Failed
[   33.487787][ T4944] loop1: detected capacity change from 0 to 8
[   33.701193][   T50] Bluetooth: hci1: command tx timeout
[   33.701224][   T50] Bluetooth: hci2: command tx timeout
[   33.701240][   T50] Bluetooth: hci4: command tx timeout
[   33.701329][ T4719] Bluetooth: hci3: command tx timeout
[   33.787614][ T4952] loop4: detected capacity change from 0 to 2048
[   33.834541][ T4956] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input3
[   33.945487][ T4968] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.686077][ T4939] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   34.686159][ T4939] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   34.687778][ T4939] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   34.689119][ T4939] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   34.690231][ T4939] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   34.690322][ T4939] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   34.696975][ T4939] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   34.699300][ T4939] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   34.699335][ T4939] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   34.701674][ T4939] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   34.704076][ T4939] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   34.704121][ T4939] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   34.704546][ T4939] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   34.705024][ T4939] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   34.705055][ T4939] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   34.711863][ T4939] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   34.713699][ T4949] FAULT_INJECTION: forcing a failure.
[   34.713699][ T4949] name fail_futex, interval 1, probability 0, space 0, times 1
[   34.713717][ T4949] CPU: 1 UID: 0 PID: 4949 Comm: syz.1.21 Tainted: G             L      syzkaller #0 PREEMPT 
[   34.713728][ T4949] Tainted: [L]=SOFTLOCKUP
[   34.713731][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   34.713737][ T4949] Call trace:
[   34.713739][ T4949]  show_stack+0x2c/0x3c (C)
[   34.713758][ T4949]  __dump_stack+0x30/0x40
[   34.713770][ T4949]  dump_stack_lvl+0xd8/0x12c
[   34.713780][ T4949]  dump_stack+0x1c/0x28
[   34.713789][ T4949]  should_fail_ex+0x41c/0x590
[   34.713801][ T4949]  should_fail+0x14/0x24
[   34.713810][ T4949]  get_futex_key+0x718/0x12b0
[   34.713820][ T4949]  futex_wake+0x10c/0x594
[   34.713829][ T4949]  do_futex+0x2c4/0x378
[   34.713837][ T4949]  mm_exit_exec_release+0x190/0x27c
[   34.713845][ T4949]  exit_mm+0x54/0x264
[   34.713855][ T4949]  do_exit+0x524/0x1a74
[   34.713864][ T4949]  do_group_exit+0x198/0x238
[   34.713874][ T4949]  get_signal+0xfb0/0x1094
[   34.713887][ T4949]  arch_do_signal_or_restart+0x288/0x444c
[   34.713897][ T4949]  exit_to_user_mode_loop+0x70/0x17c
[   34.713907][ T4949]  el0_svc+0x18c/0x260
[   34.713918][ T4949]  el0t_64_sync_handler+0x44/0x104
[   34.713928][ T4949]  el0t_64_sync+0x198/0x19c
[   34.766174][ T4982] loop3: detected capacity change from 0 to 8
[   34.793342][ T4985] netlink: 17 bytes leftover after parsing attributes in process `syz.4.32'.
[   34.872686][ T4989] loop0: detected capacity change from 0 to 256
[   34.877666][ T4989] FAT-fs (loop0): Directory bread(block 1285) failed
[   34.878068][ T4989] FAT-fs (loop0): Directory bread(block 1286) failed
[   34.878087][ T4989] FAT-fs (loop0): Directory bread(block 1287) failed
[   34.878156][ T4989] FAT-fs (loop0): Directory bread(block 1288) failed
[   34.906083][ T4985] netlink: 17 bytes leftover after parsing attributes in process `syz.4.32'.
[   34.957758][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.971470][   T30] audit: type=1326 audit(34.930:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4979 comm="syz.1.30" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df79368 code=0x7fc00000
[   35.009195][ T4991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   35.026854][ T4998] loop3: detected capacity change from 0 to 256
[   35.042669][ T5001] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[   35.045366][ T5001] loop4: detected capacity change from 0 to 256
[   35.480807][ T4710] Bluetooth: hci0: command 0x040f tx timeout
[   35.553811][ T5001] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[   35.553830][ T5001] FAT-fs (loop4): Filesystem has been set read-only
[   35.575410][ T4714] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[   35.671859][   T30] audit: type=1326 audit(35.640:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4979 comm="syz.1.30" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8df79368 code=0x7fc00000
[   36.057317][ T5026] loop2: detected capacity change from 0 to 1024
[   36.118753][ T5026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   36.149068][ T5042] syz_tun: entered allmulticast mode
[   36.159984][ T5042] pim6reg: entered allmulticast mode
[   36.422822][ T5059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'.
[   36.727856][ T5065] EXT4-fs: Ignoring removed bh option
[   36.741129][ T4710] Bluetooth: hci4: command 0x0419 tx timeout
[   36.741170][ T4710] Bluetooth: hci3: command 0x0419 tx timeout
[   36.741193][ T4710] Bluetooth: hci2: command 0x0419 tx timeout
[   36.741212][ T4710] Bluetooth: hci1: command 0x0419 tx timeout
[   36.746132][ T5065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[   36.838530][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   36.891129][ T5076] FAULT_INJECTION: forcing a failure.
[   36.891129][ T5076] name failslab, interval 1, probability 0, space 0, times 0
[   36.891154][ T5076] CPU: 0 UID: 0 PID: 5076 Comm: syz.4.56 Tainted: G             L      syzkaller #0 PREEMPT 
[   36.891168][ T5076] Tainted: [L]=SOFTLOCKUP
[   36.891171][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   36.891176][ T5076] Call trace:
[   36.891179][ T5076]  show_stack+0x2c/0x3c (C)
[   36.891199][ T5076]  __dump_stack+0x30/0x40
[   36.891211][ T5076]  dump_stack_lvl+0xd8/0x12c
[   36.891221][ T5076]  dump_stack+0x1c/0x28
[   36.891230][ T5076]  should_fail_ex+0x41c/0x590
[   36.891243][ T5076]  should_failslab+0xc4/0x120
[   36.891257][ T5076]  __kmalloc_cache_noprof+0x94/0x5fc
[   36.891266][ T5076]  tcf_chain_create+0xc0/0x294
[   36.891275][ T5076]  __tcf_chain_get+0x98/0x1b0
[   36.891285][ T5076]  tc_new_tfilter+0x5fc/0x1320
[   36.891292][ T5076]  rtnetlink_rcv_msg+0x66c/0x9bc
[   36.891301][ T5076]  netlink_rcv_skb+0x238/0x414
[   36.891310][ T5076]  rtnetlink_rcv+0x28/0x38
[   36.891317][ T5076]  netlink_unicast+0x600/0x7f8
[   36.891325][ T5076]  netlink_sendmsg+0x648/0x948
[   36.891333][ T5076]  __sock_sendmsg+0xc8/0x17c
[   36.891342][ T5076]  ____sys_sendmsg+0x3d0/0x6c8
[   36.891350][ T5076]  ___sys_sendmsg+0x198/0x224
[   36.891359][ T5076]  __sys_sendmsg+0x158/0x204
[   36.891367][ T5076]  __arm64_sys_sendmsg+0x88/0x9c
[   36.891376][ T5076]  invoke_syscall+0x98/0x244
[   36.891386][ T5076]  el0_svc_common+0xec/0x23c
[   36.891395][ T5076]  do_el0_svc+0x4c/0x5c
[   36.891404][ T5076]  el0_svc+0x64/0x260
[   36.891414][ T5076]  el0t_64_sync_handler+0x44/0x104
[   36.891423][ T5076]  el0t_64_sync+0x198/0x19c
[   36.957483][ T5081] Bluetooth: MGMT ver 1.23
[   36.976862][ T5083] binder: Binderfs stats mode cannot be changed during a remount
[   37.123894][ T5093] netlink: 116 bytes leftover after parsing attributes in process `syz.1.63'.
[   37.129587][ T5093] nvme_fabrics: unknown parameter or missing value '��������"��ma' in ctrl creation request
[   37.310659][ T5111] vfat: Unknown parameter 'shorl�r{_/�Ftname'
[   37.422879][ T5122] openvswitch: netlink: Actions may not be safe on all matching packets
[   37.560857][ T4719] Bluetooth: hci0: command 0x040f tx timeout
[   37.654275][ T5125] netlink: 'syz.1.69': attribute type 1 has an invalid length.
[   38.310368][ T5141] FAULT_INJECTION: forcing a failure.
[   38.310368][ T5141] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   38.310393][ T5141] CPU: 0 UID: 0 PID: 5141 Comm: syz.0.75 Tainted: G             L      syzkaller #0 PREEMPT 
[   38.310406][ T5141] Tainted: [L]=SOFTLOCKUP
[   38.310410][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   38.310415][ T5141] Call trace:
[   38.310418][ T5141]  show_stack+0x2c/0x3c (C)
[   38.310437][ T5141]  __dump_stack+0x30/0x40
[   38.310450][ T5141]  dump_stack_lvl+0xd8/0x12c
[   38.310460][ T5141]  dump_stack+0x1c/0x28
[   38.310469][ T5141]  should_fail_ex+0x41c/0x590
[   38.310482][ T5141]  should_fail+0x14/0x24
[   38.310492][ T5141]  should_fail_usercopy+0x20/0x30
[   38.310502][ T5141]  _inline_copy_from_user+0x3c/0x174
[   38.310510][ T5141]  kstrtouint_from_user+0xcc/0x174
[   38.310517][ T5141]  proc_fail_nth_write+0x9c/0x234
[   38.310526][ T5141]  vfs_write+0x2a4/0xa0c
[   38.310538][ T5141]  ksys_write+0x12c/0x228
[   38.310547][ T5141]  __arm64_sys_write+0x84/0x98
[   38.310557][ T5141]  invoke_syscall+0x98/0x244
[   38.310567][ T5141]  el0_svc_common+0xec/0x23c
[   38.310577][ T5141]  do_el0_svc+0x4c/0x5c
[   38.310586][ T5141]  el0_svc+0x64/0x260
[   38.310596][ T5141]  el0t_64_sync_handler+0x44/0x104
[   38.310605][ T5141]  el0t_64_sync+0x198/0x19c
[   38.830767][ T4719] Bluetooth: hci1: command 0x0419 tx timeout
[   38.830797][   T50] Bluetooth: hci3: command 0x0419 tx timeout
[   38.830800][ T4719] Bluetooth: hci4: command 0x0419 tx timeout
[   38.830909][ T4710] Bluetooth: hci2: command 0x0419 tx timeout
[   39.041109][ T5028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   39.128033][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   39.133838][ T5149] netlink: 'syz.0.77': attribute type 1 has an invalid length.
[   39.133862][ T5149] FAULT_INJECTION: forcing a failure.
[   39.133862][ T5149] name failslab, interval 1, probability 0, space 0, times 0
[   39.133880][ T5149] CPU: 1 UID: 0 PID: 5149 Comm: syz.0.77 Tainted: G             L      syzkaller #0 PREEMPT 
[   39.133902][ T5149] Tainted: [L]=SOFTLOCKUP
[   39.133906][ T5149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   39.133912][ T5149] Call trace:
[   39.133916][ T5149]  show_stack+0x2c/0x3c (C)
[   39.133935][ T5149]  __dump_stack+0x30/0x40
[   39.133947][ T5149]  dump_stack_lvl+0xd8/0x12c
[   39.133957][ T5149]  dump_stack+0x1c/0x28
[   39.133967][ T5149]  should_fail_ex+0x41c/0x590
[   39.133979][ T5149]  should_failslab+0xc4/0x120
[   39.133990][ T5149]  kmem_cache_alloc_noprof+0x94/0x5d4
[   39.133998][ T5149]  skb_clone+0x1ac/0x320
[   39.134008][ T5149]  __netlink_deliver_tap+0x364/0x6f4
[   39.134021][ T5149]  netlink_deliver_tap+0x1d8/0x1dc
[   39.134029][ T5149]  __netlink_sendskb+0x78/0xd0
[   39.134037][ T5149]  netlink_sendskb+0x2c/0xdc
[   39.134045][ T5149]  netlink_unicast+0x2c0/0x7f8
[   39.134053][ T5149]  netlink_ack+0x570/0x890
[   39.134061][ T5149]  netlink_rcv_skb+0x21c/0x414
[   39.134069][ T5149]  rtnetlink_rcv+0x28/0x38
[   39.134077][ T5149]  netlink_unicast+0x600/0x7f8
[   39.134085][ T5149]  netlink_sendmsg+0x648/0x948
[   39.134093][ T5149]  __sock_sendmsg+0xc8/0x17c
[   39.134101][ T5149]  ____sys_sendmsg+0x3d0/0x6c8
[   39.134110][ T5149]  ___sys_sendmsg+0x198/0x224
[   39.134118][ T5149]  __sys_sendmsg+0x158/0x204
[   39.134126][ T5149]  __arm64_sys_sendmsg+0x88/0x9c
[   39.134135][ T5149]  invoke_syscall+0x98/0x244
[   39.134145][ T5149]  el0_svc_common+0xec/0x23c
[   39.134154][ T5149]  do_el0_svc+0x4c/0x5c
[   39.134163][ T5149]  el0_svc+0x64/0x260
[   39.134173][ T5149]  el0t_64_sync_handler+0x44/0x104
[   39.134183][ T5149]  el0t_64_sync+0x198/0x19c
[   39.202232][ T5154] netlink: 'syz.0.82': attribute type 12 has an invalid length.
[   39.202251][ T5154] netlink: 'syz.0.82': attribute type 29 has an invalid length.
[   39.202262][ T5154] netlink: 148 bytes leftover after parsing attributes in process `syz.0.82'.
[   39.202273][ T5154] netlink: 'syz.0.82': attribute type 1 has an invalid length.
[   39.202280][ T5154] netlink: 'syz.0.82': attribute type 2 has an invalid length.
[   39.203681][ T5154] netlink: 67 bytes leftover after parsing attributes in process `syz.0.82'.
[   39.264465][ T5159] warning: `syz.2.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   39.308858][ T5162] FAULT_INJECTION: forcing a failure.
[   39.308858][ T5162] name failslab, interval 1, probability 0, space 0, times 0
[   39.308885][ T5162] CPU: 0 UID: 0 PID: 5162 Comm: syz.2.83 Tainted: G             L      syzkaller #0 PREEMPT 
[   39.308899][ T5162] Tainted: [L]=SOFTLOCKUP
[   39.308903][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   39.308909][ T5162] Call trace:
[   39.308913][ T5162]  show_stack+0x2c/0x3c (C)
[   39.308932][ T5162]  __dump_stack+0x30/0x40
[   39.308943][ T5162]  dump_stack_lvl+0xd8/0x12c
[   39.308952][ T5162]  dump_stack+0x1c/0x28
[   39.308962][ T5162]  should_fail_ex+0x41c/0x590
[   39.308973][ T5162]  should_failslab+0xc4/0x120
[   39.308984][ T5162]  kmem_cache_alloc_lru_noprof+0x98/0x5d8
[   39.308991][ T5162]  __d_alloc+0x50/0x690
[   39.308999][ T5162]  d_alloc+0x54/0x17c
[   39.309007][ T5162]  lookup_one_qstr_excl+0x9c/0x200
[   39.309016][ T5162]  __start_dirop+0xb8/0xf4
[   39.309024][ T5162]  start_dirop+0x38/0x4c
[   39.309031][ T5162]  simple_start_creating+0xcc/0x114
[   39.309042][ T5162]  debugfs_start_creating+0xd8/0x1bc
[   39.309049][ T5162]  __debugfs_create_file+0x7c/0x36c
[   39.309060][ T5162]  debugfs_create_file_full+0x58/0x70
[   39.309070][ T5162]  ref_tracker_dir_debugfs+0x174/0x2f0
[   39.309086][ T5162]  alloc_netdev_mqs+0x1fc/0xf34
[   39.309097][ T5162]  rtnl_create_link+0x2b0/0xb78
[   39.309104][ T5162]  rtnl_newlink_create+0x210/0x6b8
[   39.309112][ T5162]  rtnl_newlink+0xfe4/0x138c
[   39.309119][ T5162]  rtnetlink_rcv_msg+0x66c/0x9bc
[   39.309127][ T5162]  netlink_rcv_skb+0x238/0x414
[   39.309136][ T5162]  rtnetlink_rcv+0x28/0x38
[   39.309143][ T5162]  netlink_unicast+0x600/0x7f8
[   39.309151][ T5162]  netlink_sendmsg+0x648/0x948
[   39.309159][ T5162]  __sock_sendmsg+0xc8/0x17c
[   39.309167][ T5162]  ____sys_sendmsg+0x3d0/0x6c8
[   39.309176][ T5162]  ___sys_sendmsg+0x198/0x224
[   39.309184][ T5162]  __sys_sendmsg+0x158/0x204
[   39.309192][ T5162]  __arm64_sys_sendmsg+0x88/0x9c
[   39.309201][ T5162]  invoke_syscall+0x98/0x244
[   39.309210][ T5162]  el0_svc_common+0xec/0x23c
[   39.309220][ T5162]  do_el0_svc+0x4c/0x5c
[   39.309229][ T5162]  el0_svc+0x64/0x260
[   39.309239][ T5162]  el0t_64_sync_handler+0x44/0x104
[   39.309248][ T5162]  el0t_64_sync+0x198/0x19c
[   39.354828][ T5162] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[   39.355441][ T1096] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   39.355530][ T1096] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   39.355565][ T1096] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   39.355580][ T1096] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   39.620780][ T4719] Bluetooth: hci0: command 0x040f tx timeout
[   39.988784][ T5198] set_capacity_and_notify: 2 callbacks suppressed
[   39.988797][ T5198] loop1: detected capacity change from 0 to 1024
[   39.989181][ T5198] EXT4-fs: Ignoring removed mblk_io_submit option
[   39.989199][ T5198] EXT4-fs: Ignoring removed orlov option
[   39.989209][ T5198] ext4: Unknown parameter 'euid'
[   40.045413][   T30] audit: type=1326 audit(40.010:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5199 comm="syz.3.90" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[   40.045445][   T30] audit: type=1326 audit(40.010:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5199 comm="syz.3.90" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[   40.046439][   T30] audit: type=1326 audit(40.010:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5199 comm="syz.3.90" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[   40.046456][   T30] audit: type=1326 audit(40.010:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5199 comm="syz.3.90" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[   40.046680][   T30] audit: type=1326 audit(40.010:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5199 comm="syz.3.90" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=282 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[   40.046695][   T30] audit: type=1326 audit(40.010:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5199 comm="syz.3.90" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[   40.046709][   T30] audit: type=1326 audit(40.010:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5199 comm="syz.3.90" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[   40.046824][   T30] audit: type=1326 audit(40.010:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5199 comm="syz.3.90" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[   40.047027][   T30] audit: type=1326 audit(40.010:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5199 comm="syz.3.90" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[   40.047041][   T30] audit: type=1326 audit(40.010:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5199 comm="syz.3.90" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[   40.131116][ T5204] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.136601][ T5213] loop3: detected capacity change from 0 to 256
[   40.168490][ T5218] FAULT_INJECTION: forcing a failure.
[   40.168490][ T5218] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   40.168513][ T5218] CPU: 0 UID: 0 PID: 5218 Comm: syz.1.95 Tainted: G             L      syzkaller #0 PREEMPT 
[   40.168527][ T5218] Tainted: [L]=SOFTLOCKUP
[   40.168530][ T5218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   40.168535][ T5218] Call trace:
[   40.168538][ T5218]  show_stack+0x2c/0x3c (C)
[   40.168555][ T5218]  __dump_stack+0x30/0x40
[   40.168567][ T5218]  dump_stack_lvl+0xd8/0x12c
[   40.168576][ T5218]  dump_stack+0x1c/0x28
[   40.168585][ T5218]  should_fail_ex+0x41c/0x590
[   40.168597][ T5218]  should_fail+0x14/0x24
[   40.168607][ T5218]  should_fail_usercopy+0x20/0x30
[   40.168617][ T5218]  _inline_copy_from_user+0x3c/0x174
[   40.168627][ T5218]  lo_ioctl+0x5dc/0x1740
[   40.168634][ T5218]  blkdev_ioctl+0x574/0x904
[   40.168644][ T5218]  __arm64_sys_ioctl+0x154/0x1cc
[   40.168655][ T5218]  invoke_syscall+0x98/0x244
[   40.168665][ T5218]  el0_svc_common+0xec/0x23c
[   40.168674][ T5218]  do_el0_svc+0x4c/0x5c
[   40.168683][ T5218]  el0_svc+0x64/0x260
[   40.168694][ T5218]  el0t_64_sync_handler+0x44/0x104
[   40.168703][ T5218]  el0t_64_sync+0x198/0x19c
[   40.179144][ T5213] netlink: 168 bytes leftover after parsing attributes in process `syz.3.93'.
[   40.198825][ T5214] netlink: 168 bytes leftover after parsing attributes in process `syz.3.93'.
[   40.574974][ T5229] loop3: detected capacity change from 0 to 1024
[   40.575047][ T5226] team0: Device ipvlan2 is already an upper device of the team interface
[   40.578787][ T5229] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[   40.599517][ T5229] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.99: lblock 2 mapped to illegal pblock 2 (length 1)
[   40.599541][ T5229] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   40.599919][ T5229] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.99: lblock 0 mapped to illegal pblock 48 (length 1)
[   40.599944][ T5229] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   40.600300][ T5229] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.99: Failed to acquire dquot type 0
[   40.600326][ T5229] loop3: lost filesystem error report for type 5 error -117
[   40.600740][    C0] EXT4-fs (loop3): error count since last fsck: 3
[   40.600754][    C0] EXT4-fs (loop3): initial error at time 40: ext4_map_blocks:790: inode 3: block 2
[   40.600773][    C0] EXT4-fs (loop3): last error at time 40: ext4_acquire_dquot:7069
[   40.600918][ T5229] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem
[   40.600928][ T5229] loop3: lost filesystem error report for type 5 error -117
[   40.609882][ T5229] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.99: mark_inode_dirty error
[   40.609910][ T5229] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   40.612303][ T5229] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[   40.612375][ T5229] EXT4-fs (loop3): 1 orphan inode deleted
[   40.613030][ T5229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.674933][ T1404] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[   40.676222][ T1404] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:8: Failed to release dquot type 0
[   40.676351][ T5241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.99'.
[   40.755226][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'.
[   40.887748][ T5257] netlink: 'syz.0.106': attribute type 13 has an invalid length.
[   40.887764][ T5257] netlink: 44 bytes leftover after parsing attributes in process `syz.0.106'.
[   40.901972][ T4719] Bluetooth: hci1: command 0x0419 tx timeout
[   40.902002][ T4719] Bluetooth: hci2: command 0x0419 tx timeout
[   40.902020][ T4719] Bluetooth: hci3: command 0x0419 tx timeout
[   40.902036][ T4719] Bluetooth: hci4: command 0x0419 tx timeout
[   40.920917][ T5247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.922553][ T5247] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.99: Invalid inode table block 1 in block_group 0
[   40.922574][ T5247] loop3: lost filesystem error report for type 5 error -117
[   40.923200][ T5247] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem
[   40.923213][ T5247] loop3: lost filesystem error report for type 5 error -117
[   40.923474][ T5247] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz.3.99: mark_inode_dirty error
[   40.923495][ T5247] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   40.924661][ T5247] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.99: Invalid inode table block 1 in block_group 0
[   40.924679][ T5247] loop3: lost filesystem error report for type 5 error -117
[   40.968122][   T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.999111][ T4817] wiimote 0005:057E:0330.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0
[   40.999481][ T4817] wiimote 0005:057E:0330.0001: New device registered
[   41.002828][ T5263] wiimote 0005:057E:0330.0001: Device removed
[   41.030599][ T5264] fido_id[5264]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   41.059254][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   41.059896][ T4719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   41.060283][ T4719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   41.065840][ T4719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   41.066111][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   41.080494][   T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.143116][   T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.455009][   T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.476291][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.476355][ T5269] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.476410][ T5269] bridge_slave_0: entered allmulticast mode
[   41.477141][ T5269] bridge_slave_0: entered promiscuous mode
[   41.478096][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.478152][ T5269] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.478203][ T5269] bridge_slave_1: entered allmulticast mode
[   41.478605][ T5269] bridge_slave_1: entered promiscuous mode
[   41.486211][ T5269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.487212][ T5269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.498672][ T5269] team0: Port device team_slave_0 added
[   41.501016][ T5269] team0: Port device team_slave_1 added
[   41.508310][ T5269] batman_adv: batadv0: Adding interface: batadv_slave_0
[   41.508322][ T5269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   41.508336][ T5269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   41.508938][ T5269] batman_adv: batadv0: Adding interface: batadv_slave_1
[   41.508946][ T5269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   41.508962][ T5269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   41.529296][ T5269] hsr_slave_0: entered promiscuous mode
[   41.529759][ T5269] hsr_slave_1: entered promiscuous mode
[   41.529969][ T5269] debugfs: 'hsr0' already exists in 'hsr'
[   41.529980][ T5269] Cannot create hsr debugfs directory
[   41.626754][ T5269] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   41.641211][ T5269] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   41.645890][   T40] bridge_slave_1: left promiscuous mode
[   41.646371][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.650357][   T40] bridge_slave_0: left allmulticast mode
[   41.650377][   T40] bridge_slave_0: left promiscuous mode
[   41.650463][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.655813][   T40] dvmrp0: left allmulticast mode
[   41.775816][   T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   41.823024][   T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   41.870512][   T40] bond0 (unregistering): Released all slaves
[   41.896617][ T5269] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   41.900621][ T5269] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   41.906860][ T5269] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   41.908893][ T5269] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   41.909223][ T5269] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   41.910361][ T5269] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   41.960629][ T5305] binder: 5303:5305 tried to acquire reference to desc 0, got 1 instead
[   41.973908][ T5305] binder: 5303:5305 ioctl 8010743f 20000180 returned -22
[   41.974578][ T5305] Bluetooth: MGMT ver 1.23
[   41.974976][ T5305] binder: 5303:5305 got transaction to invalid handle, 4294967295
[   41.975039][ T5305] binder: 5303:5305 cannot find target node
[   41.975056][ T5305] binder: 5303:5305 transaction call to 0:0 failed 6/29201/-22, code 0 size 0-0 line 3252
[   41.975958][ T5305] binder: 5303:5305 got new transaction with bad transaction stack, transaction 5 has target 5303:0
[   41.975981][ T5305] binder: 5303:5305 transaction call to 5303:0 failed 7/29201/-71, code 0 size 0-0 line 3312
[   41.976959][   T26] binder: release 5303:5305 transaction 5 out, still active
[   41.976974][   T26] binder: undelivered TRANSACTION_ERROR: 29201
[   42.002172][   T26] binder: send failed reply for transaction 5, target dead
[   42.004579][ T5269] 8021q: adding VLAN 0 to HW filter on device bond0
[   42.017538][ T5269] 8021q: adding VLAN 0 to HW filter on device team0
[   42.021551][ T4817] wiimote 0005:057E:0330.0001: detected device: Nintendo Wii Remote Plus (Gen 2)
[   42.044982][ T4817] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input6
[   42.049146][ T4817] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input7
[   42.052868][ T5321] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size.
[   42.066418][ T4817] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input5
[   42.147710][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.147741][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.151633][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.151660][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.251770][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0
[   42.356650][ T5340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'.
[   42.414790][   T40] hsr_slave_0: left promiscuous mode
[   42.415295][   T40] hsr_slave_1: left promiscuous mode
[   42.415605][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.415620][   T40] batman_adv: batadv0: Removing interface: batadv_slave_0
[   42.416344][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.416354][   T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.429861][   T40] veth1_macvtap: left promiscuous mode
[   42.429908][   T40] veth0_macvtap: left promiscuous mode
[   42.429963][   T40] veth1_vlan: left promiscuous mode
[   42.430009][   T40] veth0_vlan: left promiscuous mode
[   42.588668][   T40] team0 (unregistering): Port device team_slave_1 removed
[   42.594996][   T40] team0 (unregistering): Port device team_slave_0 removed
[   42.661220][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1
[   42.662677][ T5359] FAULT_INJECTION: forcing a failure.
[   42.662677][ T5359] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   42.662693][ T5359] CPU: 1 UID: 0 PID: 5359 Comm: syz.2.121 Tainted: G             L      syzkaller #0 PREEMPT 
[   42.662704][ T5359] Tainted: [L]=SOFTLOCKUP
[   42.662707][ T5359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   42.662712][ T5359] Call trace:
[   42.662714][ T5359]  show_stack+0x2c/0x3c (C)
[   42.662732][ T5359]  __dump_stack+0x30/0x40
[   42.662743][ T5359]  dump_stack_lvl+0xd8/0x12c
[   42.662753][ T5359]  dump_stack+0x1c/0x28
[   42.662762][ T5359]  should_fail_ex+0x41c/0x590
[   42.662774][ T5359]  should_fail+0x14/0x24
[   42.662783][ T5359]  should_fail_usercopy+0x20/0x30
[   42.662793][ T5359]  _inline_copy_from_user+0x3c/0x174
[   42.662801][ T5359]  kstrtouint_from_user+0xcc/0x174
[   42.662808][ T5359]  proc_fail_nth_write+0x9c/0x234
[   42.662818][ T5359]  vfs_write+0x2a4/0xa0c
[   42.662829][ T5359]  ksys_write+0x12c/0x228
[   42.662839][ T5359]  __arm64_sys_write+0x84/0x98
[   42.662849][ T5359]  invoke_syscall+0x98/0x244
[   42.662859][ T5359]  el0_svc_common+0xec/0x23c
[   42.662868][ T5359]  do_el0_svc+0x4c/0x5c
[   42.662877][ T5359]  el0_svc+0x64/0x260
[   42.662895][ T5359]  el0t_64_sync_handler+0x44/0x104
[   42.662905][ T5359]  el0t_64_sync+0x198/0x19c
[   42.718657][ T5269] 8021q: adding VLAN 0 to HW filter on device batadv0
[   42.804067][ T5269] veth0_vlan: entered promiscuous mode
[   42.807074][ T5269] veth1_vlan: entered promiscuous mode
[   42.819023][ T5269] veth0_macvtap: entered promiscuous mode
[   42.820156][ T5269] veth1_macvtap: entered promiscuous mode
[   42.826374][ T5269] batman_adv: batadv0: Interface activated: batadv_slave_0
[   42.827363][ T5269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   42.852321][ T1063] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.862354][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.862627][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.862643][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.869052][ T5383] misc userio: Invalid payload size
[   42.893216][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   42.893235][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.913060][ T5385] syz.4.124 uses obsolete (PF_INET,SOCK_PACKET)
[   42.936414][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   42.936431][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.944234][ T5385] netlink: 'syz.4.124': attribute type 2 has an invalid length.
[   42.973426][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2
[   42.982066][ T4719] Bluetooth: hci4: command 0x0419 tx timeout
[   42.982095][ T4719] Bluetooth: hci3: command 0x0419 tx timeout
[   42.982116][ T4719] Bluetooth: hci2: command 0x0419 tx timeout
[   42.982133][ T4719] Bluetooth: hci1: command 0x0419 tx timeout
[   43.027444][ T5401] netlink: 108 bytes leftover after parsing attributes in process `syz.2.126'.
[   43.083506][ T5401] loop2: detected capacity change from 0 to 2048
[   43.090571][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'.
[   43.091318][ T5410] FAULT_INJECTION: forcing a failure.
[   43.091318][ T5410] name failslab, interval 1, probability 0, space 0, times 0
[   43.091340][ T5410] CPU: 1 UID: 0 PID: 5410 Comm: syz.0.127 Tainted: G             L      syzkaller #0 PREEMPT 
[   43.091352][ T5410] Tainted: [L]=SOFTLOCKUP
[   43.091356][ T5410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   43.091360][ T5410] Call trace:
[   43.091363][ T5410]  show_stack+0x2c/0x3c (C)
[   43.091381][ T5410]  __dump_stack+0x30/0x40
[   43.091392][ T5410]  dump_stack_lvl+0xd8/0x12c
[   43.091401][ T5410]  dump_stack+0x1c/0x28
[   43.091410][ T5410]  should_fail_ex+0x41c/0x590
[   43.091422][ T5410]  should_failslab+0xc4/0x120
[   43.091433][ T5410]  kmem_cache_alloc_node_noprof+0x98/0x604
[   43.091441][ T5410]  __alloc_skb+0x1f0/0x610
[   43.091450][ T5410]  rtmsg_ifinfo_build_skb+0x94/0x25c
[   43.091458][ T5410]  rtmsg_ifinfo_event+0xb0/0x114
[   43.091465][ T5410]  rtmsg_ifinfo+0x60/0x7c
[   43.091471][ T5410]  netif_state_change+0x244/0x360
[   43.091482][ T5410]  do_setlink+0x928/0x31e8
[   43.091489][ T5410]  rtnl_newlink+0xe90/0x138c
[   43.091497][ T5410]  rtnetlink_rcv_msg+0x66c/0x9bc
[   43.091504][ T5410]  netlink_rcv_skb+0x238/0x414
[   43.091513][ T5410]  rtnetlink_rcv+0x28/0x38
[   43.091520][ T5410]  netlink_unicast+0x600/0x7f8
[   43.091528][ T5410]  netlink_sendmsg+0x648/0x948
[   43.091537][ T5410]  __sock_sendmsg+0xc8/0x17c
[   43.091545][ T5410]  ____sys_sendmsg+0x3d0/0x6c8
[   43.091553][ T5410]  ___sys_sendmsg+0x198/0x224
[   43.091562][ T5410]  __sys_sendmsg+0x158/0x204
[   43.091570][ T5410]  __arm64_sys_sendmsg+0x88/0x9c
[   43.091579][ T5410]  invoke_syscall+0x98/0x244
[   43.091589][ T5410]  el0_svc_common+0xec/0x23c
[   43.091598][ T5410]  do_el0_svc+0x4c/0x5c
[   43.091607][ T5410]  el0_svc+0x64/0x260
[   43.091617][ T5410]  el0t_64_sync_handler+0x44/0x104
[   43.091626][ T5410]  el0t_64_sync+0x198/0x19c
[   43.124713][ T5401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.152425][ T4710] Bluetooth: hci0: command tx timeout
[   43.158451][ T5401] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.126: bg 0: block 2: invalid block bitmap
[   43.166852][ T5401] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -28
[   43.172990][ T5415] FAULT_INJECTION: forcing a failure.
[   43.172990][ T5415] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   43.173014][ T5415] CPU: 0 UID: 0 PID: 5415 Comm: syz.5.129 Tainted: G             L      syzkaller #0 PREEMPT 
[   43.173028][ T5415] Tainted: [L]=SOFTLOCKUP
[   43.173032][ T5415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   43.173037][ T5415] Call trace:
[   43.173040][ T5415]  show_stack+0x2c/0x3c (C)
[   43.173058][ T5415]  __dump_stack+0x30/0x40
[   43.173072][ T5415]  dump_stack_lvl+0xd8/0x12c
[   43.173081][ T5415]  dump_stack+0x1c/0x28
[   43.173090][ T5415]  should_fail_ex+0x41c/0x590
[   43.173105][ T5415]  should_fail+0x14/0x24
[   43.173114][ T5415]  should_fail_usercopy+0x20/0x30
[   43.173125][ T5415]  _copy_from_iter+0x188/0x1064
[   43.173134][ T5415]  copy_page_from_iter+0x220/0x2e8
[   43.173141][ T5415]  skb_copy_datagram_from_iter+0x270/0x5c8
[   43.173151][ T5415]  tun_get_user+0xa14/0x36d0
[   43.173161][ T5415]  tun_chr_write_iter+0xfc/0x168
[   43.173169][ T5415]  vfs_write+0x51c/0xa0c
[   43.173181][ T5415]  ksys_write+0x12c/0x228
[   43.173191][ T5415]  __arm64_sys_write+0x84/0x98
[   43.173201][ T5415]  invoke_syscall+0x98/0x244
[   43.173212][ T5415]  el0_svc_common+0xec/0x23c
[   43.173221][ T5415]  do_el0_svc+0x4c/0x5c
[   43.173230][ T5415]  el0_svc+0x64/0x260
[   43.173241][ T5415]  el0t_64_sync_handler+0x44/0x104
[   43.173250][ T5415]  el0t_64_sync+0x198/0x19c
[   43.257343][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.298365][ T5432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'.
[   43.323027][ T5434] netlink: 'syz.2.134': attribute type 8 has an invalid length.
[   43.323056][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'.
[   43.328282][ T5434] veth1_to_team: entered promiscuous mode
[   43.328812][ T5434] gretap0: entered promiscuous mode
[   43.358329][ T5434] veth1_to_team: left promiscuous mode
[   43.359027][ T5434] gretap0: left promiscuous mode
[   43.366935][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3
[   43.378513][ T5430] syzkaller0: entered promiscuous mode
[   43.378530][ T5430] syzkaller0: entered allmulticast mode
[   43.508500][ T5444] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   43.509657][ T5444] IPVS: length: 103 != 8
[   43.773536][ T5454] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   44.124499][ T5467] netlink: 52 bytes leftover after parsing attributes in process `syz.2.144'.
[   44.127311][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.127665][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.134660][ T5467] netlink: 'syz.2.144': attribute type 6 has an invalid length.
[   44.134676][ T5467] netlink: 168 bytes leftover after parsing attributes in process `syz.2.144'.
[   44.272814][ T5479] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   44.397899][ T5486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.398454][ T5486] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.450592][ T5489] netlink: 96 bytes leftover after parsing attributes in process `syz.4.151'.
[   44.496237][ T5492] netlink: 1355 bytes leftover after parsing attributes in process `syz.4.152'.
[   44.609770][ T5497] netlink: 'syz.0.153': attribute type 11 has an invalid length.
[   44.677859][ T5501] vlan2: entered allmulticast mode
[   44.677881][ T5501] macsec0: entered allmulticast mode
[   44.677901][ T5501] veth1_macvtap: entered allmulticast mode
[   44.700173][ T5509] netlink: 36 bytes leftover after parsing attributes in process `syz.4.157'.
[   44.757603][ T5515] netlink: 'syz.4.161': attribute type 1 has an invalid length.
[   44.905891][ T5534] loop0: detected capacity change from 0 to 256
[   44.964838][ T5539] loop2: detected capacity change from 0 to 512
[   44.970620][ T5544] Driver unsupported XDP return value 0 on prog  (id 18) dev N/A, expect packet loss!
[   44.997299][ T5536] could not allocate digest TFM handle sha256-arm64-neon
[   45.080634][ T5552] loop5: detected capacity change from 0 to 128
[   45.095861][ T5552] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   45.135391][ T5558] gtp0: entered allmulticast mode
[   45.148168][ T5269] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   45.231110][ T4710] Bluetooth: hci0: command tx timeout
[   45.329403][ T5579] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances
[   45.724553][ T5608] loop5: detected capacity change from 0 to 512
[   45.773624][ T5608] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.192: iget: bad i_size value: 38620345925642
[   45.773650][ T5608] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   45.774630][ T5608] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.192: couldn't read orphan inode 15 (err -117)
[   45.774653][ T5608] loop5: lost filesystem error report for type 5 error -117
[   45.775223][ T5608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.809597][ T5269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.364879][ T5639] bridge1: port 1(veth0_to_bond) entered blocking state
[   46.365667][ T5639] bridge1: port 1(veth0_to_bond) entered disabled state
[   46.365761][ T5639] veth0_to_bond: entered allmulticast mode
[   46.366800][ T5639] veth0_to_bond: entered promiscuous mode
[   46.422915][ T4719] Bluetooth: hci2: command 0x0419 tx timeout
[   46.607235][ T5649] tmpfs: Unknown parameter 'mp#;��MX]a*7�ol'
[   46.892986][ T5663] loop5: detected capacity change from 0 to 7
[   46.894635][ T5663] Dev loop5: unable to read RDB block 7
[   46.894651][ T5663]  loop5: unable to read partition table
[   46.894716][ T5663] loop5: partition table beyond EOD, truncated
[   46.894726][ T5663] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[   47.069782][ T5671] loop2: detected capacity change from 0 to 512
[   47.077630][ T5671] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.219: inode has both inline data and extents flags
[   47.077650][ T5671] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   47.077765][ T5671] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.219: couldn't read orphan inode 15 (err -117)
[   47.077778][ T5671] loop2: lost filesystem error report for type 5 error -117
[   47.080090][ T5671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.165222][ T5675] loop4: detected capacity change from 0 to 256
[   47.301234][ T4710] Bluetooth: hci0: command tx timeout
[   47.302688][ T5679] loop5: detected capacity change from 0 to 8
[   47.306542][ T5679] squashfs: Unknown parameter '0177777777777777777777700000000000000000041��'
[   47.813907][ T5687] loop4: detected capacity change from 0 to 1024
[   47.925319][ T5671] nvme nvme0: using deprecated NVME_IOCTL_IO_CMD ioctl on the char device!
[   47.946185][ T5690] loop0: detected capacity change from 0 to 512
[   47.952799][ T5690] EXT4-fs (loop0): Test dummy encryption mode enabled
[   47.952817][ T5690] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   47.952824][ T5690] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   47.967639][ T5690] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.226: bad orphan inode 131083
[   47.967661][ T5690] loop0: lost filesystem error report for type 5 error -117
[   47.968258][ T5690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.097260][ T4724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.101479][ T5689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.101668][ T5689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.110310][ T5696] loop5: detected capacity change from 0 to 1024
[   48.123432][ T5671] __nla_validate_parse: 11 callbacks suppressed
[   48.123446][ T5671] netlink: 104 bytes leftover after parsing attributes in process `syz.2.219'.
[   48.144027][ T5696] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   48.155513][ T5696] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #3: block 1: comm syz.5.227: lblock 1 mapped to illegal pblock 1 (length 1)
[   48.155556][ T5696] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   48.155801][ T5696] EXT4-fs (loop5): Remounting filesystem read-only
[   48.155813][ T5696] __quota_error: 84 callbacks suppressed
[   48.155822][ T5696] Quota error (device loop5): write_blk: dquota write failed
[   48.155838][ T5696] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[   48.155905][ T5696] EXT4-fs (loop5): 1 orphan inode deleted
[   48.176107][ T5696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.240242][ T5703] loop0: detected capacity change from 0 to 512
[   48.250196][ T5703] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   48.254205][ T5703] EXT4-fs (loop0): 1 truncate cleaned up
[   48.254659][ T5703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.366300][ T5718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'.
[   48.396766][ T5718] gre1: entered promiscuous mode
[   48.497612][ T5269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.500178][ T4724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.584515][ T5728] capability: warning: `syz.5.234' uses deprecated v2 capabilities in a way that may be insecure
[   48.804179][ T5732] 0x000000000000-0x000000020000 : ""
[   48.807733][ T5732] ftl_cs: FTL header not found.
[   48.862552][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.971200][ T5735] syzkaller1: entered promiscuous mode
[   48.971218][ T5735] syzkaller1: entered allmulticast mode
[   49.372831][ T5739] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   49.381513][ T4719] Bluetooth: hci0: command tx timeout
[   49.517126][ T4708] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   49.517162][ T4708] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /31/file1/lost+found: directory fails checksum at offset 0
[   49.541153][ T4708] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /31/file1/lost+found: directory fails checksum at offset 1024
[   49.544797][ T4708] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /31/file1/lost+found: directory fails checksum at offset 8192
[   49.545064][ T4708] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /31/file1/lost+found: directory fails checksum at offset 11264
[   49.545287][ T4708] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   49.545299][ T4708] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: Directory block failed checksum
[   49.550174][ T4708] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   49.550197][ T4708] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /31/file1/lost+found: directory fails checksum at offset 0
[   49.550441][ T4708] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /31/file1/lost+found: directory fails checksum at offset 1024
[   49.550613][ T4708] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /31/file1/lost+found: directory fails checksum at offset 8192
[   49.578767][ T4708] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /31/file1/lost+found: directory fails checksum at offset 11264
[   49.588936][ T4708] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   49.588958][ T4708] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: Directory block failed checksum
[   49.598677][ T4708] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   49.599839][ T4708] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   49.608244][ T4708] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   49.615108][ T4708] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   49.615385][ T4708] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   49.634808][ T4708] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   49.684288][ T5763] 9p: Bad value for 'wfdno'
[   50.018859][ T5779] sctp: [Deprecated]: syz.4.247 (pid 5779) Use of int in maxseg socket option.
[   50.018859][ T5779] Use struct sctp_assoc_value instead
[   50.028703][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'.
[   50.028724][ T5791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'.
[   50.099250][ T5790] set_capacity_and_notify: 2 callbacks suppressed
[   50.099265][ T5790] loop5: detected capacity change from 0 to 1024
[   50.336159][ T5800] loop2: detected capacity change from 0 to 512
[   50.399234][ T5806] loop2: detected capacity change from 0 to 512
[   50.586332][ T4719] Bluetooth: hci2: command 0x0419 tx timeout
[   50.729016][ T5829] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.3276800.0), cmd(9)
[   50.933795][ T5838] bridge_slave_0: left allmulticast mode
[   50.933814][ T5838] bridge_slave_0: left promiscuous mode
[   50.933894][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.961035][ T4708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   50.984147][ T5838] bridge_slave_1: left allmulticast mode
[   50.984326][ T5838] bridge_slave_1: left promiscuous mode
[   50.984402][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.054791][ T5855] netlink: 'syz.2.260': attribute type 9 has an invalid length.
[   51.079402][ T5838] bond0: (slave bond_slave_0): Releasing backup interface
[   51.168172][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.168750][ T4719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   51.169014][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   51.169330][ T4719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   51.169563][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   51.210251][ T5864] netlink: 'syz.0.264': attribute type 5 has an invalid length.
[   51.221605][ T5838] bond0: (slave bond_slave_1): Releasing backup interface
[   51.249357][ T5866] FAULT_INJECTION: forcing a failure.
[   51.249357][ T5866] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   51.249378][ T5866] CPU: 0 UID: 0 PID: 5866 Comm: syz.0.265 Tainted: G             L      syzkaller #0 PREEMPT 
[   51.249389][ T5866] Tainted: [L]=SOFTLOCKUP
[   51.249392][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   51.249397][ T5866] Call trace:
[   51.249400][ T5866]  show_stack+0x2c/0x3c (C)
[   51.249419][ T5866]  __dump_stack+0x30/0x40
[   51.249430][ T5866]  dump_stack_lvl+0xd8/0x12c
[   51.249439][ T5866]  dump_stack+0x1c/0x28
[   51.249448][ T5866]  should_fail_ex+0x41c/0x590
[   51.249459][ T5866]  should_fail+0x14/0x24
[   51.249468][ T5866]  should_fail_usercopy+0x20/0x30
[   51.249479][ T5866]  copy_to_sockptr_offset+0x84/0x1b0
[   51.249488][ T5866]  sk_getsockopt+0xfd0/0x18a8
[   51.249498][ T5866]  do_sock_getsockopt+0x278/0x720
[   51.249507][ T5866]  __sys_getsockopt+0xfc/0x168
[   51.249516][ T5866]  __arm64_sys_getsockopt+0xc8/0xe4
[   51.249524][ T5866]  invoke_syscall+0x98/0x244
[   51.249534][ T5866]  el0_svc_common+0xec/0x23c
[   51.249543][ T5866]  do_el0_svc+0x4c/0x5c
[   51.249552][ T5866]  el0_svc+0x64/0x260
[   51.249563][ T5866]  el0t_64_sync_handler+0x44/0x104
[   51.249572][ T5866]  el0t_64_sync+0x198/0x19c
[   51.357823][ T5872] loop0: detected capacity change from 0 to 512
[   51.365386][ T5872] EXT4-fs (loop0): 1 truncate cleaned up
[   51.369480][ T5872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.395422][ T5872] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.267: invalid indirect mapped block 234881024 (level 0)
[   51.395460][ T5872] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   51.399520][ T5872] EXT4-fs (loop0): Remounting filesystem read-only
[   51.437443][ T5838] team0: Port device team_slave_0 removed
[   51.450106][ T5838] team0: Port device team_slave_1 removed
[   51.457811][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.457826][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.467704][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.467720][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.476378][ T5838] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   51.534378][ T4724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.642905][   T30] audit: type=1326 audit(51.580:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5882 comm="syz.0.268" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87d79368 code=0x0
[   51.723751][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   51.723770][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   51.723779][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   51.723788][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   51.723796][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   51.723804][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   51.730587][   T10] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [] on 
[   51.847296][ T5899] netlink: 56 bytes leftover after parsing attributes in process `syz.4.269'.
[   51.888248][ T5896] fido_id[5896]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   53.220943][ T4710] Bluetooth: hci1: command tx timeout
[   53.300175][ T1404] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.316028][ T5931] syzkaller0: entered promiscuous mode
[   53.316046][ T5931] syzkaller0: entered allmulticast mode
[   53.393435][ T5948] netlink: 'syz.4.278': attribute type 12 has an invalid length.
[   53.393463][ T5948] netlink: 132 bytes leftover after parsing attributes in process `syz.4.278'.
[   53.571385][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.571441][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.571495][ T5860] bridge_slave_0: entered allmulticast mode
[   53.571942][ T5860] bridge_slave_0: entered promiscuous mode
[   53.578478][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.578539][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.578634][ T5860] bridge_slave_1: entered allmulticast mode
[   53.579100][ T5860] bridge_slave_1: entered promiscuous mode
[   53.596342][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.597315][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.608724][ T5860] team0: Port device team_slave_0 added
[   53.609528][ T5860] team0: Port device team_slave_1 added
[   53.620916][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.620930][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.620946][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.621495][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.621503][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.621517][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.653270][ T5860] hsr_slave_0: entered promiscuous mode
[   53.653612][ T5860] hsr_slave_1: entered promiscuous mode
[   53.704082][ T5838] FAULT_INJECTION: forcing a failure.
[   53.704082][ T5838] name fail_futex, interval 1, probability 0, space 0, times 0
[   53.704105][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz.5.255 Tainted: G             L      syzkaller #0 PREEMPT 
[   53.704117][ T5838] Tainted: [L]=SOFTLOCKUP
[   53.704120][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   53.704124][ T5838] Call trace:
[   53.704127][ T5838]  show_stack+0x2c/0x3c (C)
[   53.704147][ T5838]  __dump_stack+0x30/0x40
[   53.704157][ T5838]  dump_stack_lvl+0xd8/0x12c
[   53.704166][ T5838]  dump_stack+0x1c/0x28
[   53.704175][ T5838]  should_fail_ex+0x41c/0x590
[   53.704186][ T5838]  should_fail+0x14/0x24
[   53.704196][ T5838]  get_futex_key+0x718/0x12b0
[   53.704205][ T5838]  futex_wake+0x10c/0x594
[   53.704214][ T5838]  do_futex+0x2c4/0x378
[   53.704223][ T5838]  mm_exit_exec_release+0x190/0x27c
[   53.704231][ T5838]  exit_mm+0x54/0x264
[   53.704240][ T5838]  do_exit+0x524/0x1a74
[   53.704250][ T5838]  do_group_exit+0x198/0x238
[   53.704259][ T5838]  get_signal+0xfb0/0x1094
[   53.704267][ T5838]  arch_do_signal_or_restart+0x288/0x444c
[   53.704276][ T5838]  exit_to_user_mode_loop+0x70/0x17c
[   53.704286][ T5838]  el0_svc+0x18c/0x260
[   53.704296][ T5838]  el0t_64_sync_handler+0x44/0x104
[   53.704305][ T5838]  el0t_64_sync+0x198/0x19c
[   53.749355][ T5860] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   53.756565][ T5860] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   53.757194][ T5860] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   53.760617][ T5860] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   53.767257][ T5860] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   53.772329][ T5860] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   53.772673][ T5860] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   53.785493][ T5860] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   53.807571][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.807603][ T5860] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.807674][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.807703][ T5860] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.841057][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.279711][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.287094][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.325708][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   54.352592][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.352624][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.353193][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.353216][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.374437][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.527017][ T4710] block nbd4: Receive control failed (result -32)
[   54.535343][ T5956] block nbd4: shutting down sockets
[   54.794884][ T1404] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.139273][   T30] audit: type=1326 audit(55.100:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf779368 code=0x7ffc0000
[   55.139357][   T30] audit: type=1326 audit(55.100:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf779368 code=0x7ffc0000
[   55.139591][   T30] audit: type=1326 audit(55.100:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf779368 code=0x7ffc0000
[   55.139663][   T30] audit: type=1326 audit(55.100:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffaf779368 code=0x7ffc0000
[   55.139730][   T30] audit: type=1326 audit(55.100:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf779368 code=0x7ffc0000
[   55.139791][   T30] audit: type=1326 audit(55.100:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf779368 code=0x7ffc0000
[   55.139882][   T30] audit: type=1326 audit(55.100:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf779368 code=0x7ffc0000
[   55.139959][   T30] audit: type=1326 audit(55.100:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf779368 code=0x7ffc0000
[   55.140070][   T30] audit: type=1326 audit(55.100:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf779368 code=0x7ffc0000
[   55.140141][   T30] audit: type=1326 audit(55.100:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffaf779368 code=0x7ffc0000
[   55.300994][ T4710] Bluetooth: hci1: command tx timeout
[   55.345562][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.421605][ T6016] loop5: detected capacity change from 0 to 1024
[   55.423822][ T6016] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   55.423885][ T6016] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   55.428680][ T6016] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   55.428812][ T6016] EXT4-fs (loop5): orphan cleanup on readonly fs
[   55.429061][ T6016] EXT4-fs error (device loop5): ext4_quota_enable:7256: comm syz.5.295: Bad quota inum: 9, type: 2
[   55.429075][ T6016] loop5: lost filesystem error report for type 5 error -117
[   55.430740][    C0] EXT4-fs (loop5): error count since last fsck: 1
[   55.430755][    C0] EXT4-fs (loop5): initial error at time 55: ext4_quota_enable:7256
[   55.430768][    C0] EXT4-fs (loop5): last error at time 55: ext4_quota_enable:7256
[   55.449080][ T6016] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix.
[   55.449571][ T6016] EXT4-fs (loop5): Cannot turn on quotas: error -117
[   55.450075][ T6016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   55.520961][ T5269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.613558][ T1404] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.617900][ T6023] netlink: 40 bytes leftover after parsing attributes in process `syz.5.296'.
[   55.675167][ T5860] veth0_vlan: entered promiscuous mode
[   55.677163][ T5860] veth1_vlan: entered promiscuous mode
[   55.707148][ T5860] veth0_macvtap: entered promiscuous mode
[   55.708695][ T5860] veth1_macvtap: entered promiscuous mode
[   55.725202][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.729088][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.871044][ T1096] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.871097][ T1096] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.871124][ T1096] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.871141][ T1096] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.897601][ T1063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.897615][ T1063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.933068][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.933085][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.078774][ T6050] team0 (unregistering): Port device team_slave_0 removed
[   56.091740][ T6050] team0 (unregistering): Port device team_slave_1 removed
[   56.153624][ T6055] loop6: detected capacity change from 0 to 512
[   56.173605][ T6055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.314404][ T5860] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.460462][ T6062] loop6: detected capacity change from 0 to 2048
[   56.503537][ T6066] netlink: 'syz.5.304': attribute type 10 has an invalid length.
[   56.522057][ T6066] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.523126][ T6066] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[   56.523797][ T6066] team0: Failed to send options change via netlink (err -105)
[   56.523806][ T6066] team0: Port device netdevsim1 added
[   56.563216][ T6062] Alternate GPT is invalid, using primary GPT.
[   56.563254][ T6062]  loop6: p1 p2 p3
[   56.563264][ T6062] loop6: partition table partially beyond EOD, truncated
[   56.618960][ T6062] overlay: ./file0 is not a directory
[   56.672180][ T1404] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.272101][ T5014] udevd[5014]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[   57.329238][ T5717] udevd[5717]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[   57.339272][ T4889] udevd[4889]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[   57.382115][ T4710] Bluetooth: hci1: command tx timeout
[   57.382762][ T5716] udevd[5716]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[   57.411112][ T5717] udevd[5717]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[   57.428894][ T4889] udevd[4889]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[   57.433675][ T5716] udevd[5716]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[   57.451569][ T6101] FAULT_INJECTION: forcing a failure.
[   57.451569][ T6101] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   57.451597][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: syz.5.312 Tainted: G             L      syzkaller #0 PREEMPT 
[   57.451613][ T6101] Tainted: [L]=SOFTLOCKUP
[   57.451617][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   57.451623][ T6101] Call trace:
[   57.451626][ T6101]  show_stack+0x2c/0x3c (C)
[   57.451646][ T6101]  __dump_stack+0x30/0x40
[   57.451658][ T6101]  dump_stack_lvl+0xd8/0x12c
[   57.451670][ T6101]  dump_stack+0x1c/0x28
[   57.451681][ T6101]  should_fail_ex+0x41c/0x590
[   57.451694][ T6101]  should_fail+0x14/0x24
[   57.451706][ T6101]  should_fail_usercopy+0x20/0x30
[   57.451718][ T6101]  strncpy_from_user+0x48/0x388
[   57.451728][ T6101]  do_getname+0x84/0x234
[   57.451737][ T6101]  getname_flags+0x2c/0x3c
[   57.451746][ T6101]  do_sys_openat2+0xd0/0x1e8
[   57.451758][ T6101]  do_sys_open+0xb0/0xe0
[   57.451769][ T6101]  __arm64_sys_openat+0xa8/0xc4
[   57.451780][ T6101]  invoke_syscall+0x98/0x244
[   57.451792][ T6101]  el0_svc_common+0xec/0x23c
[   57.451804][ T6101]  do_el0_svc+0x4c/0x5c
[   57.451815][ T6101]  el0_svc+0x64/0x260
[   57.451827][ T6101]  el0t_64_sync_handler+0x44/0x104
[   57.451838][ T6101]  el0t_64_sync+0x198/0x19c
[   57.511667][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'.
[   57.515557][ T6101] loop0: detected capacity change from 0 to 2049
[   57.624457][ T4342] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[   57.624473][ T4342] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   57.624499][ T4342]  loop0:
[   57.625258][ T6101] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[   57.625268][ T6101] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   57.625291][ T6101]  loop0:
[   57.747541][ T6118] FAULT_INJECTION: forcing a failure.
[   57.747541][ T6118] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   57.747567][ T6118] CPU: 0 UID: 0 PID: 6118 Comm: syz.6.316 Tainted: G             L      syzkaller #0 PREEMPT 
[   57.747583][ T6118] Tainted: [L]=SOFTLOCKUP
[   57.747587][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   57.747593][ T6118] Call trace:
[   57.747596][ T6118]  show_stack+0x2c/0x3c (C)
[   57.747617][ T6118]  __dump_stack+0x30/0x40
[   57.747628][ T6118]  dump_stack_lvl+0xd8/0x12c
[   57.747637][ T6118]  dump_stack+0x1c/0x28
[   57.747646][ T6118]  should_fail_ex+0x41c/0x590
[   57.747658][ T6118]  should_fail+0x14/0x24
[   57.747667][ T6118]  should_fail_usercopy+0x20/0x30
[   57.747678][ T6118]  _copy_from_iter+0x188/0x1064
[   57.747686][ T6118]  copy_page_from_iter+0x220/0x2e8
[   57.747693][ T6118]  skb_copy_datagram_from_iter+0x270/0x5c8
[   57.747702][ T6118]  tun_get_user+0xa14/0x36d0
[   57.747711][ T6118]  tun_chr_write_iter+0xfc/0x168
[   57.747719][ T6118]  vfs_write+0x51c/0xa0c
[   57.747730][ T6118]  ksys_write+0x12c/0x228
[   57.747740][ T6118]  __arm64_sys_write+0x84/0x98
[   57.747750][ T6118]  invoke_syscall+0x98/0x244
[   57.747760][ T6118]  el0_svc_common+0xec/0x23c
[   57.747769][ T6118]  do_el0_svc+0x4c/0x5c
[   57.747778][ T6118]  el0_svc+0x64/0x260
[   57.747788][ T6118]  el0t_64_sync_handler+0x44/0x104
[   57.747797][ T6118]  el0t_64_sync+0x198/0x19c
[   57.810835][ T6116] netlink: 'syz.5.317': attribute type 10 has an invalid length.
[   57.839096][ T6122] binder: 6121:6122 tried to acquire reference to desc 0, got 1 instead
[   57.850125][ T6122] binder: 6121:6122 got transaction with invalid handle, 3
[   57.850140][ T6122] binder: 6122:6121 translate handle failed
[   57.850239][ T6122] binder: 6121:6122 transaction call to 6121:0 failed 12/29201/-22, code 0 size 72-24 line 3571
[   57.850513][ T4383] binder: undelivered TRANSACTION_ERROR: 29201
[   58.111165][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'.
[   58.159290][ T1404] bridge_slave_1: left allmulticast mode
[   58.159310][ T1404] bridge_slave_1: left promiscuous mode
[   58.159398][ T1404] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.177843][ T1404] bridge_slave_0: left allmulticast mode
[   58.177864][ T1404] bridge_slave_0: left promiscuous mode
[   58.177960][ T1404] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.230343][ T6148] loop4: detected capacity change from 0 to 512
[   58.265518][ T6148] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   58.265769][ T6148] EXT4-fs (loop4): external journal device major/minor numbers have changed
[   58.330037][ T6148] EXT4-fs (loop4): failed to open journal device unknown-block(4,2) -ENXIO
[   58.584343][ T1404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.688129][ T1404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.746428][ T1404] bond0 (unregistering): Released all slaves
[   58.795267][ T6151] syzkaller0: entered promiscuous mode
[   58.795286][ T6151] syzkaller0: entered allmulticast mode
[   58.833908][ T6180] Injecting memory failure for pfn 0x1332b0 at process virtual address 0x205e8000
[   58.872445][ T6180] Memory failure: 0x1332b0: recovery action for clean LRU page: Recovered
[   58.872471][ T6180] Injecting memory failure for pfn 0x1332b1 at process virtual address 0x205e9000
[   58.872920][ T6180] Memory failure: 0x1332b1: recovery action for clean LRU page: Recovered
[   58.872931][ T6180] Injecting memory failure for pfn 0x1332b2 at process virtual address 0x205ea000
[   58.872975][ T6180] Memory failure: 0x1332b2: recovery action for clean LRU page: Recovered
[   58.896132][ T6132] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[   59.488659][ T4710] Bluetooth: hci1: command tx timeout
[   63.080713][    C0] sched: DL replenish lagged too much
[   64.800746][ T1596] ieee802154 phy0 wpan0: encryption failed: -22
[   64.812394][ T1596] ieee802154 phy1 wpan1: encryption failed: -22
[   64.936239][    T9] cfg80211: failed to load regulatory.db
[  120.832906][    C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 52s!
[  120.832955][    C0] Showing busy workqueues and worker pools:
[  120.832961][    C0] workqueue events: flags=0x100
[  120.832972][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=18 refcnt=19
[  120.832989][    C0]     in-flight: 9:request_firmware_work_func for 117s
[  120.833012][    C0]     pending: 6*nsim_dev_hwstats_traffic_work, free_obj_work, 2*ovs_dp_masks_rebalance, psi_avgs_work, vmstat_shepherd, 3*psi_avgs_work, ovs_dp_masks_rebalance, 2*psi_avgs_work
[  120.833093][    C0]   pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2
[  120.833109][    C0]     pending: nsim_dev_hwstats_traffic_work
[  120.833121][    C0] workqueue events_unbound: flags=0x2
[  120.833126][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=23 refcnt=24
[  120.833140][    C0]     in-flight: 14:cfg80211_wiphy_work for 27s ,1454:cfg80211_wiphy_work for 52s ,40:cfg80211_wiphy_work for 53s ,1096:cfg80211_wiphy_work for 59s cfg80211_wiphy_work ,1476:linkwatch_event for 56s ,93:cfg80211_wiphy_work for 54s ,1063:cfg80211_wiphy_work for 59s cfg80211_wiphy_work
[  120.833234][    C0]     pending: cfg80211_wiphy_work, nsim_dev_trap_report_work, cfg80211_wiphy_work, nsim_dev_trap_report_work, 3*cfg80211_wiphy_work, nsim_dev_trap_report_work, flush_memcg_stats_dwork, 3*macvlan_process_broadcast, cfg80211_wiphy_work, macvlan_process_broadcast
[  120.833300][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=15 refcnt=16
[  120.833313][    C0]     in-flight: 54:cfg80211_wiphy_work for 10s ,1325:cfg80211_wiphy_work for 57s cfg80211_wiphy_work
[  120.833342][    C0]     pending: crng_reseed, nsim_dev_trap_report_work, 4*macvlan_process_broadcast, nsim_dev_trap_report_work, macvlan_process_broadcast, cfg80211_wiphy_work, toggle_allocation_gate, 2*nsim_dev_trap_report_work
[  120.833396][    C0] workqueue events_power_efficient: flags=0x82
[  120.833400][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=4 refcnt=5
[  120.833413][    C0]     pending: 2*neigh_periodic_work, do_cache_clean, reg_check_chans_work
[  120.833443][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=6 refcnt=7
[  120.833455][    C0]     in-flight: 12:gc_worker for 5s
[  120.833473][    C0]     pending: wg_ratelimiter_gc_entries, neigh_managed_work, fb_flashcursor, hash_netportnet6_gc, neigh_managed_work
[  120.833511][    C0] workqueue events_dfl_long: flags=0x2
[  120.833517][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=8 refcnt=9
[  120.833530][    C0]     pending: 8*defense_work_handler
[  120.833547][    C0] workqueue netns: flags=0x6000a
[  120.833551][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=5
[  120.833564][    C0]     in-flight: 1404:cleanup_net for 69s
[  120.833581][    C0]     inactive: cleanup_net
[  120.833592][    C0] workqueue mm_percpu_wq: flags=0x108
[  120.833597][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2
[  120.833612][    C0]     pending: vmstat_update
[  120.833630][    C0] workqueue writeback: flags=0x4a
[  120.833635][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 MAYDAY
[  120.833647][    C0]     in-flight: 33(RESCUER):wb_workfn for 53s
[  120.833707][    C0] workqueue bat_events: flags=0x6000a
[  120.833711][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=50 MAYDAY
[  120.833724][    C0]     in-flight: 2857(RESCUER):batadv_tt_purge for 11s
[  120.833742][    C0]     pending: mayday_cursor_func
[  120.833753][    C0]     inactive: 2*batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, 2*batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_tt_purge, batadv_mcast_mla_update, batadv_dat_purge, batadv_bla_periodic_work, 4*batadv_mcast_mla_update, 4*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, 3*batadv_purge_orig, 5*batadv_iv_send_outstanding_bat_ogm_packet, batadv_mcast_mla_update, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 4*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 2*batadv_tt_purge
[  120.833931][    C0] workqueue wg-kex-wg0: flags=0x6
[  120.833936][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.833949][    C0]     pending: wg_packet_handshake_send_worker
[  120.833962][    C0] workqueue wg-crypt-wg0: flags=0x128
[  120.833966][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.833981][    C0]     pending: wg_packet_tx_worker, wg_packet_decrypt_worker, wg_packet_encrypt_worker
[  120.834003][    C0] workqueue wg-kex-wg1: flags=0x6
[  120.834007][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.834020][    C0]     pending: wg_packet_handshake_send_worker
[  120.834033][    C0] workqueue wg-crypt-wg1: flags=0x128
[  120.834037][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.834052][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker
[  120.834073][    C0] workqueue wg-crypt-wg2: flags=0x128
[  120.834078][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3
[  120.834093][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker
[  120.834110][    C0] workqueue wg-kex-wg1: flags=0x6
[  120.834115][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3
[  120.834129][    C0]     pending: 2*wg_packet_handshake_send_worker
[  120.834142][    C0] workqueue wg-crypt-wg0: flags=0x128
[  120.834146][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.834161][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker
[  120.834182][    C0] workqueue wg-kex-wg2: flags=0x6
[  120.834187][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3
[  120.834200][    C0]     pending: 2*wg_packet_handshake_send_worker
[  120.834213][    C0] workqueue wg-kex-wg0: flags=0x6
[  120.834218][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.834231][    C0]     pending: wg_packet_handshake_send_worker
[  120.834243][    C0] workqueue wg-crypt-wg0: flags=0x128
[  120.834247][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.834262][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker
[  120.834283][    C0] workqueue wg-crypt-wg1: flags=0x128
[  120.834288][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.834302][    C0]     pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker
[  120.834324][    C0] workqueue wg-crypt-wg2: flags=0x128
[  120.834328][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3
[  120.834343][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker
[  120.834360][    C0] workqueue wg-kex-wg1: flags=0x6
[  120.834364][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.834377][    C0]     pending: wg_packet_handshake_send_worker
[  120.834389][    C0] workqueue wg-crypt-wg1: flags=0x128
[  120.834394][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.834409][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker
[  120.834430][    C0] workqueue wg-crypt-wg2: flags=0x128
[  120.834434][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3
[  120.834449][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker
[  120.834471][    C0] workqueue wg-crypt-wg0: flags=0x128
[  120.834476][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.834490][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker
[  120.834512][    C0] workqueue wg-crypt-wg1: flags=0x128
[  120.834516][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.834531][    C0]     pending: wg_packet_decrypt_worker, wg_packet_tx_worker, wg_packet_encrypt_worker
[  120.834552][    C0] workqueue wg-crypt-wg2: flags=0x128
[  120.834557][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3
[  120.834571][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker
[  120.834590][    C0] workqueue wg-kex-wg0: flags=0x6
[  120.834595][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.834608][    C0]     pending: wg_packet_handshake_send_worker
[  120.834618][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.834631][    C0]     pending: wg_packet_handshake_send_worker
[  120.834642][    C0] workqueue wg-crypt-wg0: flags=0x128
[  120.834647][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.834661][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker
[  120.834682][    C0] workqueue wg-kex-wg1: flags=0x124
[  120.834687][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2
[  120.834702][    C0]     pending: wg_packet_handshake_receive_worker
[  120.834714][    C0] workqueue wg-crypt-wg1: flags=0x128
[  120.834719][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4
[  120.834733][    C0]     pending: wg_packet_tx_worker, wg_packet_decrypt_worker, wg_packet_encrypt_worker
[  120.834754][    C0] workqueue wg-kex-wg2: flags=0x6
[  120.834759][    C0]   pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2
[  120.834771][    C0]     pending: wg_packet_handshake_send_worker
[  120.834784][    C0] workqueue wg-crypt-wg2: flags=0x128
[  120.834789][    C0]   pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3
[  120.834803][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker
[  120.834823][    C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=52s workers=10 idle: 4383 4897 4801 10 4794 4804 4815 4816 1060
[  120.834894][    C0] pool 8: cpus=0-1 flags=0x6 nice=0 hung=5s workers=12 manager: 6185
[  120.834914][    C0] Showing backtraces of busy workers in stalled worker pools:
[  120.834919][    C0] pool 2: no worker in running state, cpu=0 is busy (nr_workers=10 nr_idle=9)
[  120.834926][    C0] The pool might have trouble waking an idle worker.
[  120.834928][    C0] Backtrace of last woken worker:
[  120.834932][    C0] task:kworker/0:3     state:R  running task     stack:0     pid:4383  tgid:4383  ppid:2      task_flags:0x4208060 flags:0x00000010
[  120.834952][    C0] Workqueue:  0x0 (wg-crypt-wg0)
[  120.834965][    C0] Call trace:
[  120.834968][    C0]  __switch_to+0x2b4/0x6e4 (T)
[  120.834981][    C0]  __schedule+0x1370/0x2d80
[  120.834990][    C0]  schedule+0x13c/0x20c
[  120.834998][    C0]  worker_thread+0x924/0xbd0
[  120.835008][    C0]  kthread+0x304/0x3d4
[  120.835017][    C0]  ret_from_fork+0x10/0x20
[  120.835028][    C0] NMI backtrace for cpu 0
[  120.835036][    C0] CPU: 0 UID: 0 PID: 2857 Comm: kworker/R-bat_e Tainted: G             L      syzkaller #0 PREEMPT 
[  120.835046][    C0] Tainted: [L]=SOFTLOCKUP
[  120.835049][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  120.835053][    C0] Workqueue: bat_events batadv_tt_purge
[  120.835063][    C0] Call trace:
[  120.835066][    C0]  show_stack+0x2c/0x3c (C)
[  120.835076][    C0]  __dump_stack+0x30/0x40
[  120.835086][    C0]  dump_stack_lvl+0xd8/0x12c
[  120.835096][    C0]  dump_stack+0x1c/0x28
[  120.835106][    C0]  nmi_cpu_backtrace+0x270/0x2b8
[  120.835116][    C0]  nmi_trigger_cpumask_backtrace+0x1c0/0x430
[  120.835126][    C0]  arch_trigger_cpumask_backtrace+0x30/0x40
[  120.835137][    C0]  cpumask_backtrace+0x28/0x38
[  120.835146][    C0]  show_cpu_pools_busy_workers+0x640/0x830
[  120.835157][    C0]  wq_watchdog_timer_fn+0x648/0x740
[  120.835167][    C0]  call_timer_fn+0x194/0xa4c
[  120.835175][    C0]  __run_timer_base+0x530/0x744
[  120.835185][    C0]  run_timer_base+0x84/0x1b8
[  120.835192][    C0]  run_timer_softirq+0x28/0x48
[  120.835203][    C0]  handle_softirqs+0x2ec/0xd98
[  120.835211][    C0]  __do_softirq+0x14/0x20
[  120.835219][    C0]  ____do_softirq+0x14/0x20
[  120.835227][    C0]  call_on_irq_stack+0x30/0x48
[  120.835234][    C0]  do_softirq_own_stack+0x20/0x2c
[  120.835242][    C0]  do_softirq+0x90/0xf8
[  120.835249][    C0]  __local_bh_enable_ip+0x240/0x35c
[  120.835257][    C0]  _raw_spin_unlock_bh+0x3c/0x4c
[  120.835267][    C0]  batadv_tt_purge+0x3e4/0x7b4
[  120.835277][    C0]  process_scheduled_works+0x91c/0x1250
[  120.835287][    C0]  rescuer_thread+0x68c/0xd90
[  120.835296][    C0]  kthread+0x304/0x3d4
[  120.835304][    C0]  ret_from_fork+0x10/0x20
[  126.540842][ T1596] ieee802154 phy0 wpan0: encryption failed: -22
[  126.552609][ T1596] ieee802154 phy1 wpan1: encryption failed: -22