last executing test programs:

2m29.206526563s ago: executing program 1 (id=22):
r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
setresuid(r2, r2, r2)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_INPUT(r3, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006)
r4 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000001c00), 0x12)

2m28.909682673s ago: executing program 1 (id=24):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async)
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000000c0)={0x0, r1, 0x1}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m28.873202501s ago: executing program 1 (id=25):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000002000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

2m26.771493469s ago: executing program 4 (id=52):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x9, 0x20002, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x4, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x0, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5302, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0xd9ef, 0xfffff57d, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa6, 0x4, 0xa9, 0xff, 0x0, 0xac8, 0xbf, 0x2000002, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x4, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x0, 0x3, 0x2, 0x40, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x10000, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x8000, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x70d0, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c)
socket$inet6_sctp(0xa, 0x5, 0x84)
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8000}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x8000}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x80}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
r4 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x14101, 0x100, 0x1}, 0x18)
sendmsg$nl_xfrm(r4, &(0x7f0000000dc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b40)=@polexpire={0x218, 0x1b, 0x400, 0x70bd29, 0x25dfdbfd, {{{@in6=@loopback, @in=@multicast1, 0x4e20, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x16, r3, 0xee01}, {0x1, 0x921, 0x2, 0xec17, 0x77, 0x1, 0x8000000000000001, 0x9}, {0x8000000000000000, 0x3ff, 0x80000, 0x8e}, 0x7, 0x6e6bb4, 0x0, 0x1, 0x1, 0x1}, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d2, 0x3c}, 0x2, @in=@broadcast, 0x3501, 0x0, 0x2, 0x9, 0x60, 0x7, 0x9}, {{@in=@private=0xa010101, 0x4d6, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x34ff, 0x1, 0x0, 0xf0, 0x0, 0xfffffff7, 0x4}, {{@in=@empty, 0x4d5, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x4, 0x1, 0x33, 0x8000, 0x1, 0x9}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x4d6, 0xff}, 0x2, @in=@multicast1, 0x3503, 0x1, 0x2, 0x7, 0x7, 0x66, 0x200}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x6c}, 0x2, @in=@local, 0x3501, 0x5, 0x1, 0x7, 0x82, 0x40}]}, @policy_type={0xa, 0x10, {0x1}}, @etimer_thresh={0x8, 0xc, 0xb}]}, 0x218}, 0x1, 0x0, 0x0, 0x8890}, 0xd597d63f95829246)
bind$bt_rfcomm(r4, &(0x7f0000000100)={0x1f, @any, 0x2}, 0xa)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x20481, 0x0)
write(r6, &(0x7f0000000280)='1', 0x1)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x76b, 0x8}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000300)}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@delqdisc={0x24, 0x26, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
write(r5, &(0x7f00000001c0)="a3bac9f786f6bb37ae3aaad16b70609fd68295e29678c777262411ae65cc92fd4d405f80d99ab7e05797f969130daa1fe6f602ce71", 0x35)

2m26.374803398s ago: executing program 4 (id=55):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x7}, 0x1c)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x11}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
getpid()
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0)
ioctl$I2C_FUNCS(r2, 0x705, 0x0)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x1)
sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/147, 0x93, 0x0, 0x0, 0x43}, &(0x7f0000000380)=0x40)

2m26.299298678s ago: executing program 4 (id=57):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3f, 0x0, 0x0)
removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210080, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x13}}, {@abort}, {@noinit_itable}]}, 0x3, 0x594, &(0x7f0000000940)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x3, 0xc, 0x6})
r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x5, 0x200)
openat(r3, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @mcast2, 0x7e}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x1822b, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x0)

2m26.066388519s ago: executing program 1 (id=59):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xb, 0x3a, 'usrj\x0f\x97ota=\x8b\x8dP{\x11\x96n\xc3~\x83{\x05\r\xf1o\x12\xe8~\x1a\xc8\xdcR\xc2X\xc2\xff\xb9\xefD=*J\xf4!\xee\xb6\x99\x81<\x04z\xef\xa4;\x94\x0eHw\xdc\n\xb9\x1c\xec\xdaf,\b`\xa6/G\xf2 5\xdf\xa4kn\x19\xc8\xea\xa0\xb4\xf5\xdaR\x05\xc3o&g\xf4M\xe7q\xe4JW\x81\xb9\x8d=L(\xae\xaf\xb9+\x99\nG\x12\x8d\xc39\xb8\xdc\x95\xb1\xa9\xd5F\xe7\b\x9b\x1d\xf1\xe8O\x12\x7f\xc8=5g\x8a\xf9\xbajh(WX\xcfl4\xa6\xd7Ge2\"S\x1bH\x82B\xcf\x14s\x04%w\r}\x19\xed\x84o\xc2{Z\xd2_\xcamc\xe5\xb4\xcd\x14\xc0\xb3\xf5\xce\xa1T5\x02\\Y\xdcY\xf9c~\xea\f\xab]\x93%\xfbh\xa2\xf4\x034\x13\n\xc1\x13V\x9f^\xd1\x84\xeb\xe5bBv\x0f\x1b\xec\x18\x9c\xb8g\xec3A\xc9\x97]\x1fp\xef\xc6yQ\xa7mi\xed}\xca\x8c\x98\xd0\xa10\x16\xf0m#Jy\x19\x8b', 0x3a, 'Ew\x1f\x9c\nF\xe5\xa7\xa3#q\xf6\xa1\xd0\x8f\x11\xd7\x9b\xa4\x04\xe2d\xae\x8e2*\x81\xbf@', 0x3a, './file2/file0'}, 0x14e)
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0xf58, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10)
listen(r1, 0x3)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0xfffffffe}, 0x1c)
listen(r2, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x270902)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="010028bd7000fedbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4840}, 0x80)
mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)

2m25.421360161s ago: executing program 4 (id=63):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c) (async)
sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x18, 0x1, 0x0, "14a5593b595ccb9e289f1548f12ec9745f90084a013424cf6dc99d2466980300"}) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x35, 0x81, 0x4, 0xb7, 0x2, 0x3, 0x7, 0xb, 0x7, 0xc, 0x8, 0x80, 0xa}, 0xe) (rerun: 32)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40000023, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x3, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x8, "0476bc4b4c9e"}, @timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x0, [{@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async, rerun: 64)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
r3 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
r4 = fsmount(r3, 0x0, 0x9)
fchdir(r4) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000340)=""/49, 0x31) (async)
sync()

2m25.235228786s ago: executing program 1 (id=65):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r1=>0x0})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
write$input_event(r2, &(0x7f00000000c0)={{r3, r4/1000+60000}, 0x14, 0xa, 0x1ff}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000800)='./bus\x00', 0x1008040, &(0x7f0000000200)={[{@noblock_validity}, {@nojournal_checksum}, {@nodelalloc}, {@grpjquota}, {@journal_ioprio}, {@nodelalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1000001}}, {@noinit_itable}, {@nogrpid}]}, 0x1, 0x5ca, &(0x7f0000000a40)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
write$tun(r5, &(0x7f00000002c0)={@val={0x0, 0x11}, @val={0x3, 0x0, 0x6, 0x2, 0x7f, 0x1}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@llc={0x4, {@snap={0x0, 0x1, "94", '9E4', 0x884c}}}}}}, 0x24)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0})
fallocate(r5, 0x0, 0xfff, 0x9)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r1}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)

2m25.005401412s ago: executing program 0 (id=67):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c)
ioctl$TCFLSH(r0, 0x541b, 0xffefff1f00000000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x7}, 0x1c)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pwrite64(r3, &(0x7f0000001000), 0x100000, 0x0)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
syz_clone(0x4011, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x4000)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f00000001c0))
sendfile(r4, r5, 0x0, 0x2000fb)
r7 = fcntl$dupfd(r2, 0x0, r2)
sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x1)
sendmmsg$inet6(r7, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/147, 0x93, 0x0, 0x0, 0x43}, &(0x7f0000000380)=0x40)

2m24.516510806s ago: executing program 4 (id=68):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x101100, 0x118)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080)={0xd, 0x7, 0x1, 0xd, 0xa9, 0xe, 0x81, 0x40, 0x1, 0x45, 0x6, 0xf6, 0x4, 0xc}, 0xe)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)

2m24.514535341s ago: executing program 2 (id=69):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000003000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

2m24.204614438s ago: executing program 3 (id=70):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) (async)
ioctl$TCFLSH(r4, 0x80047456, 0xffefff1f00000000) (async)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)

2m24.199520534s ago: executing program 2 (id=71):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, 0x12, 0x0, 0x101, 0x70bd27, 0x25dfdbfa, {0x7, 0x0, 0x6}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}, @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000840)

2m24.156229111s ago: executing program 1 (id=72):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3f, 0x0, 0x0)
removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210080, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x13}}, {@abort}, {@noinit_itable}]}, 0x3, 0x594, &(0x7f0000000940)="$eJzs3c9rHFUcAPDvbHb7W5tCKVZECj1Yqd00iT8qeKhH0WJBPdeQbEPJpluym9LEgu3BXrxIEUQsiHe9e/BQvHj0ryhooUgJCnpZmc1sfjS72U26MTH7+cAk782b3TdvZr6PN/t2mQD61on0Ty7ieER8kUQcXlGWj6zwxOJ2C49vjqdLEvX6B38kkWTrmtsn2f+DWea5iPj5s4jTubX1Vufmp8bK5dJMlh+qTV8bqs7Nn7kyPTZZmixdHRkdPffa6Mibb7zes7a+fPGvr9+//865z08ufPXDwyN3kzgfh7Kyle1oYU/bkr2rcrdWZk7U69kxKcT5J142vNGd3+GS7d4BNmUgi/NCRBwvHC40ox7Y/T6NiDrQp5INxv9e/QXsEs1xQPPevsN98K7z6O3FG6C17c8vfjYS+xr3RgcWklV3Run97mAP6k/r+PH3e3fTJTp/DgHQM7duR8TZfH5t/5dk/d/mne1imyfr0P/Bf+d+Ov55pdX4J7c0/okW45+DLWJ3MzrHf+5hD6ppKx3/vdVy/Ls0aTU4kOWeaYz5CsnlK+VS2rc9GxGnorA3za83n3Nu4UG9XdnK8V+6pPU3x4LZfjzMr55jiomx2tjTtHmlR7cjnm85/k2Wzn/S4vynx+OjLus4Vrr3Yruyzu3fWvXvIl5qef6XZ7SS9ecnhxrXw1DzqljrzzvHfm1Xf+v2//LTFjS1pfT8H1i//YPJyvna6sbr+HbfP6V2ZZu9/vckHzbSzYnZG2O12sxwxJ7kvbXrR5Zf28w3t0/bf+rk+v1fq+t/f0R83GX77xz9/oXNt39rpe2f2ND533jiwbuffNOu/u7O/6uN1KlszXL/137WudsdfNrjBwAAAAAAADtJLiIORZIrxr4sncsVi4vf7zgaB3LlSrV2+nJl9upENH4rOxiFXHOm+/CK70MMZ9+HbeQHlt+/WT4aEUci4suB/Y18cbxSntjOhgMAAAAAAAAAAAAAAAAAAMAOcnDp9/+x6vf/qd8GtnvvgC2XX3z+N9CHOj7yvxdPegJ2pI7xD+xa4h/6l/iH/iX+oS81pvjEP/Qv8Q/9S/xD/xL/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FMXL1xIl/rC45vjaX7i+tzsVOX6mYlSdao4PTteHK/MXCtOViqT5VJxvDLd6f3Klcq14ZGYvTFUK1VrQ9W5+UvTldmrtUtXpscmS5dKnjMOAAAAAAAAAAAAAAAAAAAAa1Xn5qfGyuXSTA8ShXK5lIuIbjaO6FGl/7vE30/9Pul5u5Xv7jhvTSKJufmp4pHGmvyOOKoSvU5sd88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMv+DQAA//+KEjCk")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x3, 0xc, 0x6})
r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x5, 0x200)
openat(r3, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @mcast2, 0x7e}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x1822b, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x0)

2m24.155838643s ago: executing program 2 (id=73):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@local, 0x0, 0x33}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x1}, {}, 0x0, 0x3502, 0xa}, [@offload={0xc, 0x1c, {0x0, 0x6}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x1a00}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000010}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getpid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001000)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x40040c4)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffefffff08"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x240088c0)
r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40e8662e, &(0x7f0000000040)={0x15fff, 0x100000000, 0x7, 0x5, 0xffffffff, 0xc})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000016c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x320}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4f22}]}}}]}, 0x3c}}, 0x4d044)

2m24.085923337s ago: executing program 0 (id=74):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="04f8960886a574f8e4cc1c6ab42be5cbfb0bcf295862db682faa8c40914837e93607f256886e63ce854f80cdfee4c08bd5a20898f4e802cd644f2380078599c8222ab1ab112be2dc347d249f082f7028cec3ecaf07f0abc55c5df3e88d4ba06fc77bd7679781cd7d63ddfd8caf6220da1567d536c72123ac90c3df1fad724eb1f176", 0x82, 0x4c015, 0x0, 0x0)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000007)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xd, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@timestamp, @timestamp, @mss={0x2, 0x8}, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @mss, @window={0x3, 0x1, 0x10}, @sack_perm, @sack_perm, @window={0x3, 0x1, 0x8001}, @sack_perm], 0xb)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

2m24.048984285s ago: executing program 2 (id=75):
socket(0x10, 0x80002, 0x0) (async)
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x402, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_MTU={0x8, 0x4, 0xfffffffe}]}, 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=r0, @ANYBLOB="fecc"], 0x48}}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={<r2=>0x0}, &(0x7f0000000040)=0x8)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}}, 0x1, 0xfff6}, &(0x7f0000000280)=0x90)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

2m24.00443084s ago: executing program 0 (id=76):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000000000104000000200000000000000000000001040000002000000000000000"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000004000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200"/28], 0x48)

2m23.996105754s ago: executing program 3 (id=77):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4)
sendto$inet(r1, &(0x7f0000000480)="0c57cfb5e260713bf31d199980a68d01affda2f0d8815038a39123acb69e793add990b7ecad8f5188481bc66432a8cba0e9b3743544e23b2c543468c222f6c8e19083170d8f470c5acaa4783d673ad004036bd1ce07f0a2b803d058cd754222035f72187ba09dc01acae7a1dab91f23ddfcb151872a7298d7fc5378c28c53cbac833dc7cb94ace4f1fa3fa734869561e0bef956051ee43dcf91e8e0241affaecc92e77fd9cf2f68c5b8e52597ad222c3c2ef5de7cfe43533bc2c97ab8a097169a94da70521445081cde4e72b4a4090fcebbcef5eced60ab8b388eeab82ab793320922a9c6fd3b46044fadf4f3c", 0xed, 0x10, &(0x7f0000000580)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000f40)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000300)=0x2a0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4002}, 0x2}}, 0x10)
bind$tipc(r4, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="68c9", 0xffffff1b}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000001a0100000100000015000000000000e20f0000000000000000000000070000004278edc62bc6d1d49404010086045a20441cb874b6f3c31875c0670395de68ea067bf3e000000200"], 0x50}, 0x0)

2m23.994154781s ago: executing program 0 (id=78):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x799, &(0x7f00000000c0)={[{@usrquota}, {@nobarrier}], [], 0x2c}, 0x0, 0x4f6, &(0x7f00000002c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
r1 = fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r3, 0x0, 0x0)
write(r0, &(0x7f0000000180)='tps25750 0x3', 0xc)
setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x0)

2m23.942930793s ago: executing program 2 (id=79):
setns(0xc9, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00')
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x230, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x14, r4, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000041)
sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x110, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1c}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xef, 0xac, "8e5e114b8174c3524cdf5b2db75009b1a3044003ee083c9e7da4977ba45a5a3d1f2501a267ac832e33c0af31678537244a99ecccebee62b37d61f7dbf2faaacfae708bd9a56f4bde37f906343efcc7a02fefd0286ea6b6d9623d48c4ff60399f953993151661a67302563c10e009cbe97b859980a2314b11e1e270752f8d2f0edc8429a8937fa440bbd7217f4194e993a144a813c2af7f4e4312c89da61da51a6de849198c617855eebc5a1cbab916fc5787b3c60c5ce0e3589898895481e87cda9aaf5f6b18f499787f456c3630c09e576a5e99464b2adfe03e26573cd3d4bef1616bb9aa1d6829bcd8d6"}]}, 0x110}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000480)={0x2}) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r6, &(0x7f0000000000)='7', 0x1) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000440)={'veth0_macvtap\x00', @local})

2m23.911673906s ago: executing program 3 (id=80):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x6002, 0x4, 0x410, 0x218, 0x328, 0x110, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@remote, @dev={0xac, 0x14, 0x14, 0xa}, 0xffffff00, 0x0, 0x0, 0xf, {@mac=@remote, {[0x0, 0xff, 0x0, 0x181, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x18, 0x3ff, 0x1, 0x4, 0x1, 0x8, 'syzkaller1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x37c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f06cc6001e11", @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb4, 'syz1\x00', {0x93bf}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="1b00be002004", @local, @local, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getstats={0x1c, 0x5e, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x1}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0)

2m23.852181303s ago: executing program 2 (id=81):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x110e22fff2)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000400)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x70b7c1, 0x0)
pwritev(r6, 0x0, 0x0, 0x0, 0x1)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000200)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x6558, 0x26, 0x0, @wg=@data={0x4, 0x4, 0x8, "4014a084de25e2df8e3a1680d5e9"}}}}}}}, 0x4c)
syz_emit_ethernet(0x70, &(0x7f0000000240)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x7f00, @multicast1}, {0x0, 0x4e20, 0x4e, 0x0, @opaque="08c8e3636d791bdbbba8e031bc30378ba3470e33bdffb7d00a9526268855b3a3dc82d95d51a36d024930671475b92fb3365a3609174ec656ce0f5ba8daaeddd3c916aa692493"}}}}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x20, 0x7fffffff, 0xfffffffd, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x68, 0x0, 0x6, 0x29, 0x0, @local, @broadcast, {[@generic={0x7, 0x11, "63aaa29cb472ff92c607a326ec3d7b"}, @lsrr={0x83, 0x3, 0x8}, @timestamp={0x44, 0xc, 0x1c, 0x0, 0x8, [0x0, 0x4]}]}}}}})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg$kcm(r2, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6)

2m23.852027925s ago: executing program 3 (id=82):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000340)={0x2, @raw_data="fe35f490e9e307180c2ee0c9f27595cbfdeffee917b482fb56bd8d61d385e24742a9ac61eaf1ca3f452569114f865c6e7bdb12cb14de719f9341b79d9b9249fb8a8fc30740e298333622e5f3cdf962df21cd5683b50b627fd47f39259fcb13b3bc32abfff2ed8890bdd376e412335d2744221a5972e9376694d1f98f1a491cde48772b12a9eeedd0e3f8050b8c52c58b8eb869b5c20ed08edc162ae1be4d84c2b13e0ab8c1a254940299e7dd7a2da9edb463b4ea0ccc296891bd271bf57239f45a8fa15ee1c10d81"})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2m23.847680194s ago: executing program 0 (id=83):
r0 = syz_open_procfs(0x0, &(0x7f0000000880)='clear_refs\x00')
close(0x3)
openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='-6', 0x2}], 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async)
listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9", @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESHEX=r1, @ANYRES32=r1], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})

2m23.843632989s ago: executing program 3 (id=84):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='./file1\x00', 0x28bc41d, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x7fff, 0x343, 0x190, 0x100, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x40, 0x6, 0x9}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x0, 0x0, 0x1bb, 0x2000000000004}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4e}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffc}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008001}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, 0x3e, 0x107, 0x0, 0x5, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str=';\x00'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0x15}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4010)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff})
fchown(r0, 0x0, 0xee01)
fchown(r0, 0x0, 0x0)

2m23.781008071s ago: executing program 0 (id=85):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x7}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000100001042abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="8031050000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000ffff7f000001040012000500160001000000080015"], 0x60}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x6c, 0x10, 0x400, 0xfffffffd, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4002, 0x842}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x33547}, @IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}, @IFLA_AF_SPEC={0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3b494}]}, 0x6c}}, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x1)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000180)={0x1, 0x80000000})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
io_setup(0x8, &(0x7f0000000540)=<r7=>0x0)
io_cancel(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x800, r2, &(0x7f0000000580)="ab41d5a82ef466bf64419e22b7b6827d2dec8ffffc931cabf6878375d003731ab55faf5bf86f786939436120d2258d1addb8abefc69d3aef0c9bfc4f402cd395474ab738342c86875574104bd6b0bde281f9ffd26cb1e8c248d6f092ecfe08c6909189dbc3", 0x65, 0x2, 0x0, 0x3, r4}, &(0x7f0000000640))
sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0xfda9, &(0x7f0000000340)=[{&(0x7f00000002c0)="e9", 0x1}], 0x1}, 0x41)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x40, 0x2, [@TCA_FW_ACT={0x3c, 0x4, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6a64}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x404884d)
recvmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffccf}, 0x40000060)
sendmmsg$inet6(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/147, 0x93, 0x0, 0x0, 0x43}, &(0x7f0000000380)=0x40)

2m23.775822877s ago: executing program 3 (id=86):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24008054}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x40040, 0x0)
readv(r2, &(0x7f0000001580)=[{&(0x7f0000005880)=""/30, 0x1e}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = getpgid(0x0)
fcntl$setownex(r8, 0xf, &(0x7f0000000140)={0x2, r9})
sendmmsg$unix(r7, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000019c0)="ae", 0x1}], 0x1}}], 0x1, 0x4044815)
sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c060000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf251300000008000100", @ANYRES32, @ANYBLOB="b80113"], 0x68c}, 0x1, 0x0, 0x0, 0x1}, 0xe4b7614124ca226)

2m20.865266393s ago: executing program 4 (id=87):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000200), 0x5, 0x40000)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000003c0)={0x1, r2, 0x80000})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a3200000000140000001100010000000000000000000a00000a"], 0x15c}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000b7d0"})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000080a010000000000000000000a0000000900010073797a31000000000900020073797a310000000020000000020a010000000000000000000a0000000900010073797a3100000000140000001100010000000000000000000a00000a", @ANYRESHEX=r0, @ANYRESHEX, @ANYRESOCT=r0], 0x68}}, 0x0)

1m50.454925836s ago: executing program 32 (id=85):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x7}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000100001042abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="8031050000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000ffff7f000001040012000500160001000000080015"], 0x60}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x6c, 0x10, 0x400, 0xfffffffd, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4002, 0x842}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x33547}, @IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}, @IFLA_AF_SPEC={0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3b494}]}, 0x6c}}, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x1)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000180)={0x1, 0x80000000})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
io_setup(0x8, &(0x7f0000000540)=<r7=>0x0)
io_cancel(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x800, r2, &(0x7f0000000580)="ab41d5a82ef466bf64419e22b7b6827d2dec8ffffc931cabf6878375d003731ab55faf5bf86f786939436120d2258d1addb8abefc69d3aef0c9bfc4f402cd395474ab738342c86875574104bd6b0bde281f9ffd26cb1e8c248d6f092ecfe08c6909189dbc3", 0x65, 0x2, 0x0, 0x3, r4}, &(0x7f0000000640))
sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0xfda9, &(0x7f0000000340)=[{&(0x7f00000002c0)="e9", 0x1}], 0x1}, 0x41)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x40, 0x2, [@TCA_FW_ACT={0x3c, 0x4, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6a64}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x404884d)
recvmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffccf}, 0x40000060)
sendmmsg$inet6(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/147, 0x93, 0x0, 0x0, 0x43}, &(0x7f0000000380)=0x40)

14.249542386s ago: executing program 33 (id=72):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3f, 0x0, 0x0)
removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210080, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x13}}, {@abort}, {@noinit_itable}]}, 0x3, 0x594, &(0x7f0000000940)="$eJzs3c9rHFUcAPDvbHb7W5tCKVZECj1Yqd00iT8qeKhH0WJBPdeQbEPJpluym9LEgu3BXrxIEUQsiHe9e/BQvHj0ryhooUgJCnpZmc1sfjS72U26MTH7+cAk782b3TdvZr6PN/t2mQD61on0Ty7ieER8kUQcXlGWj6zwxOJ2C49vjqdLEvX6B38kkWTrmtsn2f+DWea5iPj5s4jTubX1Vufmp8bK5dJMlh+qTV8bqs7Nn7kyPTZZmixdHRkdPffa6Mibb7zes7a+fPGvr9+//865z08ufPXDwyN3kzgfh7Kyle1oYU/bkr2rcrdWZk7U69kxKcT5J142vNGd3+GS7d4BNmUgi/NCRBwvHC40ox7Y/T6NiDrQp5INxv9e/QXsEs1xQPPevsN98K7z6O3FG6C17c8vfjYS+xr3RgcWklV3Run97mAP6k/r+PH3e3fTJTp/DgHQM7duR8TZfH5t/5dk/d/mne1imyfr0P/Bf+d+Ov55pdX4J7c0/okW45+DLWJ3MzrHf+5hD6ppKx3/vdVy/Ls0aTU4kOWeaYz5CsnlK+VS2rc9GxGnorA3za83n3Nu4UG9XdnK8V+6pPU3x4LZfjzMr55jiomx2tjTtHmlR7cjnm85/k2Wzn/S4vynx+OjLus4Vrr3Yruyzu3fWvXvIl5qef6XZ7SS9ecnhxrXw1DzqljrzzvHfm1Xf+v2//LTFjS1pfT8H1i//YPJyvna6sbr+HbfP6V2ZZu9/vckHzbSzYnZG2O12sxwxJ7kvbXrR5Zf28w3t0/bf+rk+v1fq+t/f0R83GX77xz9/oXNt39rpe2f2ND533jiwbuffNOu/u7O/6uN1KlszXL/137WudsdfNrjBwAAAAAAADtJLiIORZIrxr4sncsVi4vf7zgaB3LlSrV2+nJl9upENH4rOxiFXHOm+/CK70MMZ9+HbeQHlt+/WT4aEUci4suB/Y18cbxSntjOhgMAAAAAAAAAAAAAAAAAAMAOcnDp9/+x6vf/qd8GtnvvgC2XX3z+N9CHOj7yvxdPegJ2pI7xD+xa4h/6l/iH/iX+oS81pvjEP/Qv8Q/9S/xD/xL/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FMXL1xIl/rC45vjaX7i+tzsVOX6mYlSdao4PTteHK/MXCtOViqT5VJxvDLd6f3Klcq14ZGYvTFUK1VrQ9W5+UvTldmrtUtXpscmS5dKnjMOAAAAAAAAAAAAAAAAAAAAa1Xn5qfGyuXSTA8ShXK5lIuIbjaO6FGl/7vE30/9Pul5u5Xv7jhvTSKJufmp4pHGmvyOOKoSvU5sd88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMv+DQAA//+KEjCk")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x3, 0xc, 0x6})
r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x5, 0x200)
openat(r3, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @mcast2, 0x7e}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x1822b, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x0)

11.158479307s ago: executing program 34 (id=81):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x110e22fff2)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000400)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x70b7c1, 0x0)
pwritev(r6, 0x0, 0x0, 0x0, 0x1)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000200)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x6558, 0x26, 0x0, @wg=@data={0x4, 0x4, 0x8, "4014a084de25e2df8e3a1680d5e9"}}}}}}}, 0x4c)
syz_emit_ethernet(0x70, &(0x7f0000000240)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x7f00, @multicast1}, {0x0, 0x4e20, 0x4e, 0x0, @opaque="08c8e3636d791bdbbba8e031bc30378ba3470e33bdffb7d00a9526268855b3a3dc82d95d51a36d024930671475b92fb3365a3609174ec656ce0f5ba8daaeddd3c916aa692493"}}}}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x20, 0x7fffffff, 0xfffffffd, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x68, 0x0, 0x6, 0x29, 0x0, @local, @broadcast, {[@generic={0x7, 0x11, "63aaa29cb472ff92c607a326ec3d7b"}, @lsrr={0x83, 0x3, 0x8}, @timestamp={0x44, 0xc, 0x1c, 0x0, 0x8, [0x0, 0x4]}]}}}}})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg$kcm(r2, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6)

11.069320727s ago: executing program 35 (id=86):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24008054}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x40040, 0x0)
readv(r2, &(0x7f0000001580)=[{&(0x7f0000005880)=""/30, 0x1e}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = getpgid(0x0)
fcntl$setownex(r8, 0xf, &(0x7f0000000140)={0x2, r9})
sendmmsg$unix(r7, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000019c0)="ae", 0x1}], 0x1}}], 0x1, 0x4044815)
sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c060000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf251300000008000100", @ANYRES32, @ANYBLOB="b80113"], 0x68c}, 0x1, 0x0, 0x0, 0x1}, 0xe4b7614124ca226)

11.005206951s ago: executing program 36 (id=87):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000200), 0x5, 0x40000)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000003c0)={0x1, r2, 0x80000})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a3200000000140000001100010000000000000000000a00000a"], 0x15c}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000b7d0"})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000080a010000000000000000000a0000000900010073797a31000000000900020073797a310000000020000000020a010000000000000000000a0000000900010073797a3100000000140000001100010000000000000000000a00000a", @ANYRESHEX=r0, @ANYRESHEX, @ANYRESOCT=r0], 0x68}}, 0x0)

2.736283943s ago: executing program 8 (id=150):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x0) (fail_nth: 5)

2.57224749s ago: executing program 8 (id=154):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x94}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r2 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async, rerun: 32)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32)
pwritev(r3, &(0x7f0000000600)=[{0x0}, {&(0x7f00000001c0)="01200000", 0x4}], 0x2, 0x3, 0x7fffffff) (async)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r7 = socket(0x18, 0x2, 0x2)
connect$unix(r7, &(0x7f0000002740)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r5, 0x25, 0x0, @val=@perf_event={0x17}}, 0x18) (async)
syz_emit_ethernet(0x66, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000180)=[0x8, 0x6], &(0x7f0000000240)=[0x5, 0x81, 0xfff9, 0x2], &(0x7f0000000280)=[0x4]}) (async)
r8 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0, &(0x7f0000000080)=<r11=>0x0)
mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, '-'}}, {@name={'name', 0x3d, '-'}}]}) (async)
syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x28, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r8, 0x19, &(0x7f00000000c0)={0x1000, 0x4}, 0x0) (async, rerun: 32)
syz_open_procfs(0x0, 0x0) (rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.571308368s ago: executing program 6 (id=156):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x0, 0x5003)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x321, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x4000000)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000002a00)={0x0, 0x1, 0x4})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000080), 0x1)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (fail_nth: 3)
r6 = dup(r4)
ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000000180)=""/239)

1.991193148s ago: executing program 9 (id=162):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x40000) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) (async)
syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000006a2ddcf6177a8864434800240064005711219078e0000002e000"], 0x0)

1.844137124s ago: executing program 9 (id=164):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8082}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, 0x0, 0x111, 0x1}}, 0x20)
syz_open_dev$tty1(0xc, 0x4, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4090080, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x0)

1.803653568s ago: executing program 5 (id=165):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x0) (fail_nth: 6)

1.729148019s ago: executing program 9 (id=166):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xf}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0)

1.632382848s ago: executing program 6 (id=167):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
unshare(0x6030680)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x5, 0x0, 0x3009, 0x3, 0xf, 0x3, 0x2, 0x4}})

1.631619038s ago: executing program 9 (id=168):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
setxattr$security_evm(&(0x7f0000000040)='./sys/bus/netdevsim/new_device\x00', &(0x7f0000000080), 0x0, 0x0, 0x2)

1.584418516s ago: executing program 5 (id=169):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180))
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r1, 0xe0, 0xc5}, &(0x7f00000000c0)={'enc=', 'raw', ' hash=', {'tgr192\x00'}}, &(0x7f00000001c0)="4faa1e59a1ff370cc70208f95fbf5264816903f2a6bef9d65b854bf1dee494b4d934d94a1b2e8f03fba42cc6e33653fb24b492cbe5dc21fbb2c87dfc671ced47c96ba113925f3de22a0d566a188e3d64aec6fc273c5e696914929f07ccb65af4b8f033c2a0f88efc21ad0bb82fc28c7f530f17b7ff725fcb2a784ee9241fd6a162d87d230ed6b39e54d5997a43f08db02081aefb22541aebff060de2b0a5bc12957c206ada81c703dcc9dd3fc33788dc8ba9303bbb0311f234428d56dafbbdb04d1f2938dcfb46580061549b6b38124f6433761d608ffd7432c3e917efdbde5f", &(0x7f00000002c0)=""/197)

1.584042798s ago: executing program 7 (id=170):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) (async)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r1, 0xee01, 0x0) (async)
keyctl$setperm(0x5, r1, 0x30925) (async)
keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000120001a218bd70000000000007"], 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x20, 0x7, 0x10001, 0x9, 0x1}, 0x50)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newnexthop={0x3c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0x4, 0x0, 0x21}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x68}, {0x1, 0x6}, {0x1, 0x9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) (async)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0xfffffffd, 0x40055}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) (async)
io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f0000002480)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9203803afffe8000"], 0x0)

1.580871056s ago: executing program 6 (id=171):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f00000000c0), 0x1011f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = io_uring_setup(0x211e, &(0x7f00000002c0)={0x0, 0xfca5, 0x2000, 0x1, 0x21c})
syz_ublk_setup_io_uring(0x73bb, &(0x7f0000000340)={0x0, 0xcd37, 0x80, 0x0, 0x297, 0x0, r5}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f00000000c0)=<r6=>0x0)
munmap$IORING_OFF_SQES(r6, 0xc5059c)
msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe)
fsopen(0x0, 0x1)
r7 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000080)=0xfffffffe, 0x4)
openat$comedi(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f0000000100)='ufs\x00', 0x1002003, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x1, 0x0)
write(r8, 0x0, 0x0)

1.512058675s ago: executing program 7 (id=172):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x10, 0x2, 0x6}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xe}}}, &(0x7f0000000b00)='GPL\x00'}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x40000000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)

1.48492905s ago: executing program 5 (id=173):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000280)=@assoc_value, &(0x7f0000000880)=0x8)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}], 0x1, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x51, 0x1, 0x200, "ff00000000000000050040000000000700ef3809000000000000000000000004", 0x59455247})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1d, 0x16, &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2dc, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18b1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8345}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x365}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x512b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x47}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x80000000, @empty, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private1, 0x9}}}}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x10}, 0x10)

1.360268305s ago: executing program 7 (id=174):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r4=>0x0}, &(0x7f0000000880)=0x8)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x100, 0x12}, 0x8)
r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x51, 0x1, 0x200, "ff00000000000000050040000000000700ef3809000000000000000000000004", 0x59455247})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1d, 0x16, &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2dc, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18b1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8345}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x365}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x512b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x47}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x80000000, @empty, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private1, 0x9}}}}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x10}, 0x10)

794.950776ms ago: executing program 8 (id=175):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)={0x20})

725.01787ms ago: executing program 8 (id=176):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000054)

681.635982ms ago: executing program 6 (id=177):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = gettid()
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0xb, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0xfffffffe, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x13, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x8001, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x7, 0xf69b, 0x40000006, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x89b, 0xad, 0x2, 0x809, 0x40, 0xa7, 0xffd, 0x0, 0x200b398, 0xff, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x8002, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x2000010, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x1, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x8d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x3, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x0, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r5, 0x0, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r1, 0x1, 0x1, 0x5, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
accept$packet(r6, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002900)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afc5bceeb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253ba5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde000000000000000000d4fd710a526223440f9df8d22bf9224e4b71b0757dbc8311a2ffbf680a2c09a893ffd79f0a645df3e2dce61e24c28750f50ccb9244fdb344773f79483ec0b6936fd853fda9ee154914a00831cf4bf6f9e6fe6cdfab5ab31de15450e6e703316d9597100d83d0444d511ec95edfc460461eef194209655b2a966078be83da84fe699fa66295c9995c869c18501c3d3bf6b17e5b2211c4903580dcdc7ea2bf9e3b202d7b01ea0b800868eb22cbb86e927b364c9c5642ea6188f53c36dffecbdeda61ceb3b1c1f4a7bc77e39a9ff7e547cef240c3cf78f61d3e0000000000000000005053dce6504d3a9b5e891fc0bd9b81af50ea72cad72041fbdb6cead0ffb504bfb37a892a68a84b184e5643f2ba5bc612cffa1a4edfa6defd6ef2e15df10c7b988d56bb0da9436025cae5adc9e6f5a137aba102c4064232018ba0434333d60bc2cce49623a06b190f21abb52c411d7454a38a14495a683bf0b91ad6c19f04d36541a92e5148b9292d48d9be857b"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

680.819102ms ago: executing program 9 (id=178):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0)
r1 = gettid()
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x22, 0x4, @tid=r1}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x0)

640.632404ms ago: executing program 8 (id=179):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0xf00, 0x0)
fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x101000, 0x128)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r3, &(0x7f00000004c0)='./file0\x00', 0x2)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r4, &(0x7f00000004c0)='./file0\x00', 0x2)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0)
pwrite64(r6, &(0x7f00000002c0)="0635", 0x2, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000240)={0x17c04, r6, 0x8000002, 0x6f1f, 0x4, 0x80000001})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x9, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
r8 = syz_io_uring_setup(0x5016, &(0x7f0000010400)={0x0, 0x6fb9, 0x40, 0x3, 0x1b6}, &(0x7f0000010080), &(0x7f0000000300), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PROBE(r8, 0x24, 0xfffffffffffffffe, 0x0)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8)

609.998874ms ago: executing program 5 (id=180):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22020600)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfd}, 0x18)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r4, @ANYBLOB="040046000a0034000202020202020000080026006c0900004c0051802c0000800800030005ac0f000400051c0500020003000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804)

548.522963ms ago: executing program 6 (id=181):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
unshare(0x6030680)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x5, 0x0, 0x3009, 0x3, 0xf, 0x3, 0x2, 0x4}})

548.179015ms ago: executing program 9 (id=182):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f00000000c0)={{@align=0x1, {0x10, 0xfffe, 0x5, 0x7}}, {{[0x8, 0x7, 0x37, 0xe8c7]}, 0x0, 0x3, 0x7, 0x0, &(0x7f0000000080)=[{{@_ha_fsid={[0x5153, 0x9]}, {0x8, 0xae56, 0x3, 0x16}}, 0x5, 0x0, 'tls'}]}})
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x622a02, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000180)={0x0, <r3=>0x0, 0x8})
ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r2, 0xc0086444, &(0x7f00000001c0)={r3})
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r7, 0x0, 0x0)
preadv(r7, 0x0, 0x0, 0x0, 0x3f)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000006a0000012cbd7000fbdbdf2500000000f1e477d9c8e5a6e735322e06ac54086deddbce2287d5b13a7becea14f90b873fae72a631ed098761bf3991d42233908d748caa055562cfb6460d67fc624be375132570da3b"], 0x1c}}, 0x0)
syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x9, 0x9936c5154318bee0, 0x8}}]}}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

547.243147ms ago: executing program 6 (id=183):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "268100ba7af9819e79b058d9f2a15b8c4800000000010011000000000200"})

476.320157ms ago: executing program 7 (id=184):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xf, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) (fail_nth: 5)

428.406267ms ago: executing program 5 (id=185):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x10040)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x200003, @dev={0xfe, 0x80, '\x00', 0x21}, 0x20000098}, 0x1c)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r1, 0x200204)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000020ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x3, @none, 0xfffd, 0x2}, 0xe)
setresgid(0x0, 0xee01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000010c0), 0x80c000, &(0x7f0000001300)={[{@mode={'mode', 0x3d, 0x47}}]})
r4 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00')
read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
setsockopt$sock_void(r0, 0x1, 0x29, 0x0, 0x0)

74.831393ms ago: executing program 5 (id=186):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x2, 0x4, "1cea06", 0x36, 0x9})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={<r3=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000008c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x8, 0x4, {"dec678212ccafdb64a24803f2f862372"}, 0x7ee7, 0x5, 0x3}}}, 0x90)
unshare(0x200)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r5, &(0x7f0000000400)="2ae0e710", 0x4, 0x84, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c)
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5b, 0x2)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/rcu_stall_count', 0x2082, 0xd9)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sync_file_range(r0, 0xfffffffffffffffa, 0x8, 0x7)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000207010200000000000000008000000000000000"], 0x18}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="180000000109030040000000000000000000000004000200"], 0x18}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r11=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001001100000000444456f9109986db000000952a6a37a0329cae890b2d4d89090000004133f5350a479f912871513b14148aad1a4d93fa3b53f9745f17"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', r11}, 0x94)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000800000000000000000000000850000000900000085082b780165df748500000007b302c586e411341d6cf300"], &(0x7f0000000680)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r12, 0x0, 0xe, 0x0, &(0x7f0000000d00)="e87b7385eb488997050a35a3e13f", 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x814, 0x2, 0x20, "268100ba7af98181ef0000d9f20100050000000020200400"})
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10)
ioctl$RTC_AIE_ON(r7, 0x7001)
sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40400}, 0x22000044)

52.030541ms ago: executing program 7 (id=187):
syz_io_uring_setup(0x5f37, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x4, 0x3}, &(0x7f0000000280), &(0x7f0000000140), &(0x7f0000000180))
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x10101, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0)
r1 = socket(0x26, 0xa, 0x43f5)
openat(0xffffffffffffffff, 0x0, 0x10080, 0x11)
pipe2$watch_queue(0x0, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'sit0\x00', <r3=>0x0, 0x7, 0x1, 0x9, 0x3, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x65, 0x0, 0xf6, 0x29, 0x0, @multicast2, @empty}}}})
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x18d880, 0x0)
syz_emit_vhci(&(0x7f00000028c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x1c}, @l2cap_cid_signaling={{0x18}, [@l2cap_move_chan_rsp={{0xf, 0x5, 0x4}, {0x7f, 0x3}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0xd, 0xa2b3}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x4, 0xecb}}]}}, 0x21)
syz_clone(0x1100, &(0x7f0000002900)="4c244272cdced9b267c75fa987ad7263f49bf14da683ba081b974272abeadf250b36cfab040f1444dabaa2b14890778d8663838eded40918efe1292fe44a", 0x3e, &(0x7f0000002980), &(0x7f00000029c0), 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003a80)={'wlan0\x00'})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r3], 0x31)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

10.036643ms ago: executing program 8 (id=188):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xf}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) (fail_nth: 1)

0s ago: executing program 7 (id=189):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
setxattr$security_evm(&(0x7f0000000040)='./sys/bus/netdevsim/new_device\x00', &(0x7f0000000080), 0x0, 0x0, 0x2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts.
[   28.880282][ T4695] cgroup: Unknown subsys name 'net'
[   29.040086][ T4695] cgroup: Unknown subsys name 'cpuset'
[   29.042140][ T4695] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   29.182135][ T4695] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   29.994898][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   29.994908][ T4713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   29.996038][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   29.996384][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   29.996584][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   29.996692][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   29.996958][ T4718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   29.997095][ T4718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   29.997811][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   29.998042][ T4718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   29.998596][ T4718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   29.998847][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   29.999115][ T4718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   30.000153][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   30.000279][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   30.000410][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   30.006301][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   30.006570][ T4707] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   30.007514][ T4715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   30.009345][ T4719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   30.018486][ T4713] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   30.028670][ T4712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   30.030248][ T4712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   30.031887][ T4712] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   30.033550][ T4712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   30.406933][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.408010][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.408095][ T4710] bridge_slave_0: entered allmulticast mode
[   30.411732][ T4710] bridge_slave_0: entered promiscuous mode
[   30.418539][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.419834][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.419911][ T4711] bridge_slave_0: entered allmulticast mode
[   30.420352][ T4711] bridge_slave_0: entered promiscuous mode
[   30.421500][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.421522][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.421579][ T4711] bridge_slave_1: entered allmulticast mode
[   30.422010][ T4711] bridge_slave_1: entered promiscuous mode
[   30.430048][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.431463][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.432863][ T4710] bridge_slave_1: entered allmulticast mode
[   30.434449][ T4710] bridge_slave_1: entered promiscuous mode
[   30.476219][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.477226][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.495788][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.511386][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.513870][ T4711] team0: Port device team_slave_0 added
[   30.514713][ T4711] team0: Port device team_slave_1 added
[   30.517630][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.518230][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.518323][ T4706] bridge_slave_0: entered allmulticast mode
[   30.519203][ T4706] bridge_slave_0: entered promiscuous mode
[   30.520305][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.520331][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.520415][ T4706] bridge_slave_1: entered allmulticast mode
[   30.520881][ T4706] bridge_slave_1: entered promiscuous mode
[   30.529967][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.530007][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.530137][ T4705] bridge_slave_0: entered allmulticast mode
[   30.530578][ T4705] bridge_slave_0: entered promiscuous mode
[   30.531440][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.531461][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.531550][ T4705] bridge_slave_1: entered allmulticast mode
[   30.531970][ T4705] bridge_slave_1: entered promiscuous mode
[   30.547796][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.549908][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.556205][ T4710] team0: Port device team_slave_0 added
[   30.557412][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.558810][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.559131][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.559139][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.559153][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.559904][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.559912][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.559925][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.571284][ T4711] hsr_slave_0: entered promiscuous mode
[   30.571630][ T4711] hsr_slave_1: entered promiscuous mode
[   30.582271][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.582316][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.582401][ T4717] bridge_slave_0: entered allmulticast mode
[   30.582841][ T4717] bridge_slave_0: entered promiscuous mode
[   30.588082][ T4710] team0: Port device team_slave_1 added
[   30.599234][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.600580][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.602294][ T4717] bridge_slave_1: entered allmulticast mode
[   30.604061][ T4717] bridge_slave_1: entered promiscuous mode
[   30.606174][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.606200][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.606213][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.613161][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.613170][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.613184][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.619577][ T4706] team0: Port device team_slave_0 added
[   30.620291][ T4706] team0: Port device team_slave_1 added
[   30.626877][ T4705] team0: Port device team_slave_0 added
[   30.627651][ T4705] team0: Port device team_slave_1 added
[   30.636545][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.636569][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.636718][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.637300][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.637307][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.637322][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.647830][ T4705] hsr_slave_0: entered promiscuous mode
[   30.648113][ T4705] hsr_slave_1: entered promiscuous mode
[   30.648318][ T4705] debugfs: 'hsr0' already exists in 'hsr'
[   30.648352][ T4705] Cannot create hsr debugfs directory
[   30.662979][ T4710] hsr_slave_0: entered promiscuous mode
[   30.663287][ T4710] hsr_slave_1: entered promiscuous mode
[   30.663483][ T4710] debugfs: 'hsr0' already exists in 'hsr'
[   30.663492][ T4710] Cannot create hsr debugfs directory
[   30.669302][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.669324][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.669337][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.670209][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.670215][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.670226][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.680241][ T4706] hsr_slave_0: entered promiscuous mode
[   30.680540][ T4706] hsr_slave_1: entered promiscuous mode
[   30.680751][ T4706] debugfs: 'hsr0' already exists in 'hsr'
[   30.680760][ T4706] Cannot create hsr debugfs directory
[   30.696117][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.696996][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.723020][ T4717] team0: Port device team_slave_0 added
[   30.725623][ T4717] team0: Port device team_slave_1 added
[   30.763850][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.765273][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.769840][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.770717][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.770727][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.770742][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.786490][ T4717] hsr_slave_0: entered promiscuous mode
[   30.788123][ T4717] hsr_slave_1: entered promiscuous mode
[   30.788354][ T4717] debugfs: 'hsr0' already exists in 'hsr'
[   30.788371][ T4717] Cannot create hsr debugfs directory
[   30.816663][ T4711] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.821343][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.829925][ T4711] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.832791][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.833100][ T4711] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.834902][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.842430][ T4711] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.844693][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.869662][ T4706] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.872951][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.875060][ T4706] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.877368][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.880781][ T4706] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.883076][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.884702][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.884758][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.884906][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.884942][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.892422][ T4706] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.894506][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.912382][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.912424][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.912517][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.912556][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.921190][ T4705] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.923517][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.925448][ T4705] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.927510][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.927834][ T4705] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.930908][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.932069][ T4705] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.933510][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.949835][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.956150][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.956189][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.956287][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.956328][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.976283][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.981523][ T4706] 8021q: adding VLAN 0 to HW filter on device team0
[   30.985458][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.986994][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.991117][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.992803][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.994225][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.001691][ T4710] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.003832][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.004149][ T4710] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.006303][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.015954][ T4711] 8021q: adding VLAN 0 to HW filter on device team0
[   31.018197][ T4710] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.020815][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.021139][ T4710] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.022835][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.029134][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.029178][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.040207][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.040254][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.046168][ T4717] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.048512][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.050624][ T4717] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.052843][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.057273][ T4717] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.060048][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.063291][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.063332][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.066638][ T4717] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.069057][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.075384][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.099903][ T4705] 8021q: adding VLAN 0 to HW filter on device team0
[   31.102980][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.103024][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.105000][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.124079][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.130793][ T4710] 8021q: adding VLAN 0 to HW filter on device team0
[   31.142082][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.142124][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.157104][ T4705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.157139][ T4705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.174630][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.174668][ T3371] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.175014][ T3371] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.175032][ T3371] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.201863][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.206290][ T4717] 8021q: adding VLAN 0 to HW filter on device team0
[   31.223738][  T864] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.223784][  T864] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.240165][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.242272][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.246104][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.246157][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.356576][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.365190][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.410659][ T4705] veth0_vlan: entered promiscuous mode
[   31.416201][ T4705] veth1_vlan: entered promiscuous mode
[   31.424806][ T4706] veth0_vlan: entered promiscuous mode
[   31.428257][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.444003][ T4706] veth1_vlan: entered promiscuous mode
[   31.453294][ T4706] veth0_macvtap: entered promiscuous mode
[   31.455659][ T4706] veth1_macvtap: entered promiscuous mode
[   31.463387][ T4705] veth0_macvtap: entered promiscuous mode
[   31.464515][ T4705] veth1_macvtap: entered promiscuous mode
[   31.467183][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.468230][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.470576][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.479753][ T4710] veth0_vlan: entered promiscuous mode
[   31.488188][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.493826][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.497641][ T4710] veth1_vlan: entered promiscuous mode
[   31.502816][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.519266][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.525176][ T4710] veth0_macvtap: entered promiscuous mode
[   31.529755][ T4710] veth1_macvtap: entered promiscuous mode
[   31.542122][  T864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.560051][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.562753][ T3371] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.569899][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.571428][   T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.594920][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.594950][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.613597][ T4717] veth0_vlan: entered promiscuous mode
[   31.621115][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.621146][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.625160][  T864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.626677][  T864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.629717][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.629950][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.630088][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.635066][ T4717] veth1_vlan: entered promiscuous mode
[   31.641124][ T4711] veth0_vlan: entered promiscuous mode
[   31.644250][ T4711] veth1_vlan: entered promiscuous mode
[   31.655023][ T4717] veth0_macvtap: entered promiscuous mode
[   31.668478][ T4717] veth1_macvtap: entered promiscuous mode
[   31.675123][  T864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.675147][  T864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.682621][ T4711] veth0_macvtap: entered promiscuous mode
[   31.685196][ T4711] veth1_macvtap: entered promiscuous mode
[   31.692409][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.695937][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.696857][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.696867][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.700480][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.704125][ T4706] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.712432][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.749355][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.749389][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.760259][   T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.760298][   T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.760329][   T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.760351][   T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.760372][   T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.760393][   T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.760413][   T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.760436][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.760459][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.760480][   T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.760496][   T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.760511][   T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.840009][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.840036][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.865714][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.865745][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.866753][ T4891] nvme_rdma: malformed address passed: 1å#åº-&Q
öÙ;?²s>#ÕZÙÞ>U´ñ7×Û÷h‘-Ø–ÏíÒY†ïFxŠH:4420
[   31.876042][  T864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.876073][  T864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.879340][ T3371] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.895838][  T864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.895868][  T864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.016992][ T4712] Bluetooth: hci0: command tx timeout
[   32.091408][ T4719] Bluetooth: hci1: command tx timeout
[   32.091691][ T4719] Bluetooth: hci4: command tx timeout
[   32.091941][ T4719] Bluetooth: hci3: command tx timeout
[   32.096136][ T4712] Bluetooth: hci2: command tx timeout
[   32.855745][ T4917] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10'.
[   33.741321][ T4933] loop2: detected capacity change from 0 to 128
[   33.743706][ T4933] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   33.747834][ T4933] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   33.801053][ T4938] syzkaller0: entered promiscuous mode
[   33.801082][ T4938] syzkaller0: entered allmulticast mode
[   34.088834][ T4715] Bluetooth: hci0: command tx timeout
[   34.166594][ T4943] syz.0.17 uses obsolete (PF_INET,SOCK_PACKET)
[   34.176589][ T4719] Bluetooth: hci4: command tx timeout
[   34.176628][ T4719] Bluetooth: hci1: command tx timeout
[   34.179392][ T4712] Bluetooth: hci3: command tx timeout
[   34.180833][ T4715] Bluetooth: hci2: command tx timeout
[   34.890832][ T4968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'.
[   34.892936][ T4968] xfrm1: entered promiscuous mode
[   34.892964][ T4968] xfrm1: entered allmulticast mode
[   34.893145][ T4968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'.
[   34.893308][ T4968] Zero length message leads to an empty skb
[   34.922331][ T4972] syzkaller0: entered promiscuous mode
[   34.922362][ T4972] syzkaller0: entered allmulticast mode
[   34.929377][ T4972] tipc: Started in network mode
[   34.930266][ T4972] tipc: Node identity 162e9d08c8b5, cluster identity 4711
[   34.931292][ T4972] tipc: Enabled bearer <eth:syzkaller0>, priority 2
[   34.933617][ T4971] tipc: Resetting bearer <eth:syzkaller0>
[   35.021434][ T4973] FAULT_INJECTION: forcing a failure.
[   35.021434][ T4973] name failslab, interval 1, probability 0, space 0, times 1
[   35.021572][ T4973] CPU: 1 UID: 0 PID: 4973 Comm: syz.0.23 Not tainted syzkaller #0 PREEMPT 
[   35.021586][ T4973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   35.021592][ T4973] Call trace:
[   35.021595][ T4973]  show_stack+0x2c/0x3c (C)
[   35.021617][ T4973]  __dump_stack+0x30/0x40
[   35.021630][ T4973]  dump_stack_lvl+0xd8/0x12c
[   35.021642][ T4973]  dump_stack+0x1c/0x28
[   35.021653][ T4973]  should_fail_ex+0x41c/0x590
[   35.021667][ T4973]  should_failslab+0xc4/0x120
[   35.021680][ T4973]  __kmalloc_noprof+0x108/0x6c8
[   35.021689][ T4973]  tomoyo_realpath_from_path+0xbc/0x4dc
[   35.021701][ T4973]  tomoyo_path_number_perm+0x1f0/0x500
[   35.021711][ T4973]  tomoyo_file_ioctl+0x2c/0x3c
[   35.021722][ T4973]  security_file_ioctl+0xdc/0x2b0
[   35.021732][ T4973]  __arm64_sys_ioctl+0xb0/0x1cc
[   35.021746][ T4973]  invoke_syscall+0x98/0x244
[   35.021758][ T4973]  el0_svc_common+0xec/0x23c
[   35.021770][ T4973]  do_el0_svc+0x4c/0x5c
[   35.021781][ T4973]  el0_svc+0x64/0x260
[   35.021792][ T4973]  el0t_64_sync_handler+0x44/0x104
[   35.021802][ T4973]  el0t_64_sync+0x198/0x19c
[   35.021829][ T4973] ERROR: Out of memory at tomoyo_realpath_from_path.
[   35.083198][ T4973] loop0: detected capacity change from 0 to 512
[   35.086398][ T4973] EXT4-fs: Ignoring removed orlov option
[   35.243106][ T4973] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   35.243133][ T4973] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)!
[   35.243148][ T4973] EXT4-fs (loop0): group descriptors corrupted!
[   35.261104][ T4971] tipc: Disabling bearer <eth:syzkaller0>
[   35.329072][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[   35.331909][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[   35.355173][ T4982] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   35.355259][ T4982] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   35.477422][ T4986] loop3: detected capacity change from 0 to 512
[   35.546036][ T5002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'.
[   36.054334][ T5025] loop0: detected capacity change from 0 to 1024
[   36.056718][ T5025] ext4: Unknown parameter 'defcontext'
[   36.169781][ T4713] Bluetooth: hci0: command tx timeout
[   36.187380][ T5030] netlink: 'syz.4.44': attribute type 4 has an invalid length.
[   36.249690][ T4713] Bluetooth: hci2: command tx timeout
[   36.249727][ T4713] Bluetooth: hci3: command tx timeout
[   36.249892][ T4713] Bluetooth: hci1: command tx timeout
[   36.249919][ T4713] Bluetooth: hci4: command tx timeout
[   36.305859][   T30] audit: type=1326 audit(36.280:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5033 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc379368 code=0x7ffc0000
[   36.305908][   T30] audit: type=1326 audit(36.280:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5033 comm="syz.2.45" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=99 compat=0 ip=0xffffbc3577d0 code=0x7ffc0000
[   36.305933][   T30] audit: type=1326 audit(36.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5033 comm="syz.2.45" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffbc357830 code=0x7ffc0000
[   36.306233][   T30] audit: type=1326 audit(36.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5033 comm="syz.2.45" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffbc379368 code=0x7ffc0000
[   36.306249][   T30] audit: type=1326 audit(36.280:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5033 comm="syz.2.45" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc379368 code=0x7ffc0000
[   36.306265][   T30] audit: type=1326 audit(36.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5033 comm="syz.2.45" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc379368 code=0x7ffc0000
[   36.306336][   T30] audit: type=1326 audit(36.280:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5033 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc379368 code=0x7ffc0000
[   36.306532][   T30] audit: type=1326 audit(36.280:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5033 comm="syz.2.45" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffbc3580d0 code=0x7ffc0000
[   36.306681][   T30] audit: type=1326 audit(36.280:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5033 comm="syz.2.45" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc379368 code=0x7ffc0000
[   36.306749][   T30] audit: type=1326 audit(36.280:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5033 comm="syz.2.45" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc379368 code=0x7ffc0000
[   36.364756][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'.
[   36.367986][ T5038] vlan2: entered allmulticast mode
[   36.367999][ T5038] dummy0: entered allmulticast mode
[   36.368140][ T5038] bridge0: port 3(vlan2) entered blocking state
[   36.368168][ T5038] bridge0: port 3(vlan2) entered disabled state
[   36.369211][ T5038] vlan2: entered promiscuous mode
[   36.369223][ T5038] dummy0: entered promiscuous mode
[   36.613217][ T5045] loop3: detected capacity change from 0 to 512
[   36.618377][ T5045] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[   36.623243][ T5045] netlink: 140 bytes leftover after parsing attributes in process `syz.3.47'.
[   36.764289][ T5050] loop3: detected capacity change from 0 to 512
[   36.767634][ T5050] EXT4-fs (loop3): Test dummy encryption mode enabled
[   36.772917][ T5050] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.48: inode has both inline data and extents flags
[   36.772996][ T5050] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   36.773293][ T5050] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.48: couldn't read orphan inode 15 (err -117)
[   36.773331][ T5050] loop3: lost filesystem error report for type 5 error -117
[   36.774129][ T5050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.794536][ T5050] fscrypt: AES-256-XTS using blk-crypto-fallback
[   36.851465][ T5050] netlink: 6 bytes leftover after parsing attributes in process `syz.3.48'.
[   36.871517][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.025739][ T5068] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   37.037277][ T5066] loop3: detected capacity change from 0 to 1024
[   37.037601][ T5066] =======================================================
[   37.037601][ T5066] WARNING: The mand mount option has been deprecated and
[   37.037601][ T5066]          and is ignored by this kernel. Remove the mand
[   37.037601][ T5066]          option from the mount to silence this warning.
[   37.037601][ T5066] =======================================================
[   37.057029][ T5071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'.
[   37.068507][ T5066] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[   37.095932][ T5066] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.51: lblock 2 mapped to illegal pblock 2 (length 1)
[   37.099070][ T5066] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   37.100176][ T5066] EXT4-fs (loop3): Remounting filesystem read-only
[   37.103783][ T5066] EXT4-fs (loop3): 1 orphan inode deleted
[   37.106778][ T5066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.132075][ T5066] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.453208][ T5090] cgroup: Invalid name
[   37.491272][ T5090] 9p: Could not find request transport: xen
[   37.535818][ T5105] loop3: detected capacity change from 0 to 2048
[   37.552766][ T5105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.564374][ T5106] loop4: detected capacity change from 0 to 1024
[   37.572767][ T5106] EXT4-fs: Invalid want_extra_isize 9
[   37.627159][ T5110] FAULT_INJECTION: forcing a failure.
[   37.627159][ T5110] name fail_futex, interval 1, probability 0, space 0, times 1
[   37.630097][ T5110] CPU: 0 UID: 0 PID: 5110 Comm: syz.3.58 Not tainted syzkaller #0 PREEMPT 
[   37.630130][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   37.630137][ T5110] Call trace:
[   37.630141][ T5110]  show_stack+0x2c/0x3c (C)
[   37.630163][ T5110]  __dump_stack+0x30/0x40
[   37.630175][ T5110]  dump_stack_lvl+0xd8/0x12c
[   37.630186][ T5110]  dump_stack+0x1c/0x28
[   37.630195][ T5110]  should_fail_ex+0x41c/0x590
[   37.630207][ T5110]  should_fail+0x14/0x24
[   37.630216][ T5110]  get_futex_key+0x1ec/0x12b0
[   37.630226][ T5110]  futex_wake+0x10c/0x594
[   37.630235][ T5110]  do_futex+0x2c4/0x378
[   37.630244][ T5110]  __arm64_sys_futex+0x2e4/0x418
[   37.630253][ T5110]  invoke_syscall+0x98/0x244
[   37.630263][ T5110]  el0_svc_common+0xec/0x23c
[   37.630272][ T5110]  do_el0_svc+0x4c/0x5c
[   37.630282][ T5110]  el0_svc+0x64/0x260
[   37.630291][ T5110]  el0t_64_sync_handler+0x44/0x104
[   37.630300][ T5110]  el0t_64_sync+0x198/0x19c
[   37.651485][ T5105] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks
[   37.651519][ T5105] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted
[   37.678526][ T4705] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   37.689477][ T5126] loop1: detected capacity change from 0 to 1024
[   37.691156][ T5126] EXT4-fs: Ignoring removed bh option
[   37.694590][ T5126] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   37.708826][ T5126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.712668][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.765373][ T5132] ext4: Unknown parameter 'defcontext'
[   38.248654][ T4715] Bluetooth: hci0: command tx timeout
[   38.328835][ T4715] Bluetooth: hci4: command tx timeout
[   38.338749][ T4715] Bluetooth: hci1: command tx timeout
[   38.338777][ T4713] Bluetooth: hci3: command tx timeout
[   38.338783][ T4712] Bluetooth: hci2: command tx timeout
[   38.476544][ T5155] EXT4-fs: Invalid want_extra_isize 9
[   38.544818][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.581979][ T5158] EXT4-fs (loop1): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   38.585362][ T5158] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.65: lblock 0 mapped to illegal pblock 0 (length 1)
[   38.586768][ T5158] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.65: lblock 0 mapped to illegal pblock 0 (length 1)
[   38.588121][ T5158] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.65: bg 0: block 112: padding at end of block bitmap is not set
[   38.641554][ T5163] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.65: lblock 0 mapped to illegal pblock 0 (length 1)
[   39.301364][ T5174] syzkaller0: entered promiscuous mode
[   39.301391][ T5174] syzkaller0: entered allmulticast mode
[   39.304767][ T5174] tipc: Started in network mode
[   39.304934][ T5174] tipc: Node identity e2e172acbca3, cluster identity 4711
[   39.305017][ T5174] tipc: Enabled bearer <eth:syzkaller0>, priority 3
[   39.305833][ T5173] tipc: Resetting bearer <eth:syzkaller0>
[   39.312672][ T5173] tipc: Disabling bearer <eth:syzkaller0>
[   39.593095][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0100-0006-0000-000000000000.
[   39.596823][ T5178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'.
[   39.599971][ T5178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'.
[   39.640950][ T5185] set_capacity_and_notify: 3 callbacks suppressed
[   39.642430][ T5185] loop2: detected capacity change from 0 to 128
[   39.670514][ T5185] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   39.674009][ T5179] loop3: detected capacity change from 0 to 1024
[   39.706827][ T5189] loop1: detected capacity change from 0 to 1024
[   39.710416][ T5189] EXT4-fs: Invalid want_extra_isize 9
[   39.745227][ T4717] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   39.811779][ T5201] loop0: detected capacity change from 0 to 512
[   39.814593][ T5201] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   39.821796][ T5201] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[   39.823648][ T5201] System zones: 1-12
[   39.825280][ T5201] EXT4-fs (loop0): orphan cleanup on readonly fs
[   39.827441][ T5201] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.78: invalid indirect mapped block 12 (level 1)
[   39.831119][ T5201] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   39.831666][ T3585] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   39.835197][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   39.836964][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   39.844596][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   39.848068][ T5201] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.78: invalid indirect mapped block 2 (level 2)
[   39.848113][ T5201] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   39.848641][    C0] EXT4-fs (loop0): error count since last fsck: 2
[   39.848661][    C0] EXT4-fs (loop0): initial error at time 39: ext4_free_branches:1023: inode 11
[   39.848697][    C0] EXT4-fs (loop0): last error at time 39: ext4_free_branches:1023: inode 11
[   39.850985][ T5201] EXT4-fs (loop0): 1 truncate cleaned up
[   39.851460][ T5201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[   39.899771][ T5201] tps6598x 0-0003: probe with driver tps6598x failed with error -22
[   39.901435][ T5201] i2c i2c-0: new_device: Instantiated device tps25750 at 0x03
[   39.936348][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   39.947622][ T5215] loop3: detected capacity change from 0 to 512
[   39.966813][ T5220] overlayfs: overlapping lowerdir path
[   39.967660][ T5215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.976300][ T5220] ªªªªªª: renamed from vlan0 (while UP)
[   39.985805][ T5215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   39.986810][ T5215] capability: warning: `syz.3.84' uses 32-bit capabilities (legacy support in use)
[   40.004736][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.095600][ T5229] netlink: 'syz.0.85': attribute type 5 has an invalid length.
[   40.103388][ T5229] ip6erspan0: entered promiscuous mode
[   40.106675][ T5228] netlink: 1208 bytes leftover after parsing attributes in process `syz.3.86'.
[   43.998624][    C1] sched: DL replenish lagged too much
[   68.057363][    T9] cfg80211: failed to load regulatory.db
[   69.521376][ T1593] ieee802154 phy0 wpan0: encryption failed: -22
[   69.533556][ T1593] ieee802154 phy1 wpan1: encryption failed: -22
[  126.041099][ T1593] ieee802154 phy0 wpan0: encryption failed: -22
[  126.050836][ T1593] ieee802154 phy1 wpan1: encryption failed: -22
[  156.050865][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  156.060498][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  156.070072][   T51] Bluetooth: hci2: command tx timeout
[  156.080030][   T51] Bluetooth: hci3: command tx timeout
[  172.550962][ T5244] warning: `syz.4.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  172.561156][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  172.561967][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  172.562227][ T4712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  172.562563][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  172.563604][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  172.770733][ T4712] Bluetooth: hci4: link tx timeout
[  172.770816][ T4712] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  172.771184][ T4712] Bluetooth: hci4: link tx timeout
[  172.771192][ T4712] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  172.791625][ T4713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  172.806583][ T4713] Bluetooth: hci4: link tx timeout
[  172.806619][ T4713] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  172.806643][ T4713] Bluetooth: hci4: link tx timeout
[  172.806650][ T4713] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  172.815699][ T4713] Bluetooth: hci4: link tx timeout
[  172.815722][ T4713] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  172.815739][ T4713] Bluetooth: hci4: link tx timeout
[  172.815749][ T4713] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  172.816159][ T4713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  172.816651][ T4713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  172.817268][ T4713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  172.817500][ T4713] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  172.859014][ T4713] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  172.863102][ T4713] Bluetooth: hci4: link tx timeout
[  172.863136][ T4713] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  172.863153][ T4713] Bluetooth: hci4: link tx timeout
[  172.863164][ T4713] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  172.863274][ T4713] Bluetooth: hci4: link tx timeout
[  172.863284][ T4713] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  172.863290][ T4713] Bluetooth: hci4: link tx timeout
[  172.863295][ T4713] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  172.871197][ T4715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  172.872044][ T4715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  172.876019][ T4715] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  172.880991][ T4715] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  172.911683][ T4719] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  172.913579][ T4707] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  172.915559][ T4707] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  172.920447][ T4707] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  172.923597][ T4707] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  172.925048][ T1149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.928422][ T4713] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  172.928434][ T4707] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  172.931880][ T4707] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  172.934190][ T4719] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  172.934473][ T4719] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  173.025250][ T1149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.134110][ T1149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.200528][ T1149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.276336][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.277686][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.282483][ T5246] bridge_slave_0: entered allmulticast mode
[  173.284294][ T5246] bridge_slave_0: entered promiscuous mode
[  173.286887][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.286925][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.286993][ T5246] bridge_slave_1: entered allmulticast mode
[  173.287400][ T5246] bridge_slave_1: entered promiscuous mode
[  173.295389][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.296316][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.302814][ T5246] team0: Port device team_slave_0 added
[  173.303570][ T5246] team0: Port device team_slave_1 added
[  173.313811][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.315134][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.320061][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.322600][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.323936][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.328486][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.343029][ T5246] hsr_slave_0: entered promiscuous mode
[  173.344536][ T5246] hsr_slave_1: entered promiscuous mode
[  173.345807][ T5246] debugfs: 'hsr0' already exists in 'hsr'
[  173.346913][ T5246] Cannot create hsr debugfs directory
[  173.452803][ T5261] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.452848][ T5261] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.452921][ T5261] bridge_slave_0: entered allmulticast mode
[  173.453349][ T5261] bridge_slave_0: entered promiscuous mode
[  173.454099][ T5261] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.454130][ T5261] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.454202][ T5261] bridge_slave_1: entered allmulticast mode
[  173.454621][ T5261] bridge_slave_1: entered promiscuous mode
[  173.465616][ T5261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.485606][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.485643][ T5278] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.485712][ T5278] bridge_slave_0: entered allmulticast mode
[  173.486139][ T5278] bridge_slave_0: entered promiscuous mode
[  173.487893][ T5261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.501863][ T1149] bridge_slave_1: left allmulticast mode
[  173.501899][ T1149] bridge_slave_1: left promiscuous mode
[  173.502269][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.507946][ T1149] bridge_slave_0: left allmulticast mode
[  173.508771][ T1149] bridge_slave_0: left promiscuous mode
[  173.508843][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.576561][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.582812][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.619785][ T1149] bond0 (unregistering): Released all slaves
[  173.623829][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.623880][ T5278] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.623981][ T5278] bridge_slave_1: entered allmulticast mode
[  173.624451][ T5278] bridge_slave_1: entered promiscuous mode
[  173.635671][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.637138][ T5272] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.637479][ T5272] bridge_slave_0: entered allmulticast mode
[  173.637926][ T5272] bridge_slave_0: entered promiscuous mode
[  173.647462][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.647507][ T5276] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.647780][ T5276] bridge_slave_0: entered allmulticast mode
[  173.648228][ T5276] bridge_slave_0: entered promiscuous mode
[  173.664750][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.666093][ T5276] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.666212][ T5276] bridge_slave_1: entered allmulticast mode
[  173.666653][ T5276] bridge_slave_1: entered promiscuous mode
[  173.667955][ T5261] team0: Port device team_slave_0 added
[  173.669137][ T5261] team0: Port device team_slave_1 added
[  173.670017][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.670048][ T5272] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.670119][ T5272] bridge_slave_1: entered allmulticast mode
[  173.670578][ T5272] bridge_slave_1: entered promiscuous mode
[  173.676806][ T1149] tipc: Left network mode
[  173.687623][ T5278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.702577][ T5261] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.703943][ T5261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.708927][ T5261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.711811][ T5278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.718513][ T5276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.776762][ T5261] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.776786][ T5261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.776804][ T5261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.789495][ T5276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.790531][ T5272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.791560][ T5272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.816634][ T5272] team0: Port device team_slave_0 added
[  173.839916][ T5278] team0: Port device team_slave_0 added
[  173.840751][ T5278] team0: Port device team_slave_1 added
[  173.862312][ T5272] team0: Port device team_slave_1 added
[  173.869713][ T5278] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.869739][ T5278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.869755][ T5278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.870323][ T5278] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.870331][ T5278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.870345][ T5278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.879505][ T5276] team0: Port device team_slave_0 added
[  173.880285][ T5276] team0: Port device team_slave_1 added
[  173.885871][ T5276] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.885879][ T5276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.885892][ T5276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.886400][ T5276] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.886407][ T5276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.886422][ T5276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.895356][ T5278] hsr_slave_0: entered promiscuous mode
[  173.895656][ T5278] hsr_slave_1: entered promiscuous mode
[  173.895847][ T5278] debugfs: 'hsr0' already exists in 'hsr'
[  173.895856][ T5278] Cannot create hsr debugfs directory
[  173.903664][ T5272] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.903673][ T5272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.903687][ T5272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.904212][ T5272] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.904218][ T5272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.904232][ T5272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.944819][ T5246] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  173.947231][ T5246] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  173.950114][ T5261] hsr_slave_0: entered promiscuous mode
[  173.950467][ T5261] hsr_slave_1: entered promiscuous mode
[  173.950666][ T5261] debugfs: 'hsr0' already exists in 'hsr'
[  173.950675][ T5261] Cannot create hsr debugfs directory
[  173.970619][ T5276] hsr_slave_0: entered promiscuous mode
[  173.970951][ T5276] hsr_slave_1: entered promiscuous mode
[  173.971164][ T5276] debugfs: 'hsr0' already exists in 'hsr'
[  173.971173][ T5276] Cannot create hsr debugfs directory
[  173.971374][ T5246] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  173.977031][ T5246] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  173.977362][ T5246] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  173.986332][ T5246] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  173.997946][ T5272] hsr_slave_0: entered promiscuous mode
[  173.998574][ T5272] hsr_slave_1: entered promiscuous mode
[  173.998848][ T5272] debugfs: 'hsr0' already exists in 'hsr'
[  173.998857][ T5272] Cannot create hsr debugfs directory
[  174.031556][ T4397] 8021q: adding VLAN 0 to HW filter on device eth0
[  174.033219][ T5246] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  174.035843][ T5246] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  174.086639][ T1149] hsr_slave_0: left promiscuous mode
[  174.087769][ T1149] hsr_slave_1: left promiscuous mode
[  174.088096][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.088111][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.089556][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.089567][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.093681][ T1149] veth1_macvtap: left promiscuous mode
[  174.093712][ T1149] veth0_macvtap: left promiscuous mode
[  174.093758][ T1149] veth1_vlan: left promiscuous mode
[  174.093810][ T1149] veth0_vlan: left promiscuous mode
[  174.187455][ T1149] team0 (unregistering): Port device team_slave_1 removed
[  174.193299][ T1149] team0 (unregistering): Port device team_slave_0 removed
[  174.369786][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.377408][ T5278] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  174.382088][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  174.382422][ T5278] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  174.386731][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  174.397825][ T5278] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  174.400437][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  174.400749][ T5278] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  174.402620][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  174.424132][ T5246] 8021q: adding VLAN 0 to HW filter on device team0
[  174.460619][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.460672][ T3585] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.461294][ T3585] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.461313][ T3585] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.475942][ T5246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  174.475977][ T5246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.478114][ T5261] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  174.484198][ T5261] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  174.488290][ T5261] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  174.494991][ T5261] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  174.495359][ T5261] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  174.499489][ T5261] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  174.501246][ T5261] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  174.503400][ T5261] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  174.533596][ T5278] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.570199][ T4719] Bluetooth: hci0: command tx timeout
[  174.573200][ T1149] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.585935][ T5276] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  174.589487][ T5276] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  174.591875][ T5276] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  174.595187][ T5276] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  174.601367][ T5278] 8021q: adding VLAN 0 to HW filter on device team0
[  174.613334][ T5276] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  174.615495][ T5276] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  174.616132][ T5276] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  174.620494][ T5276] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  174.623128][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.623176][ T3371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.626955][ T4397] 8021q: adding VLAN 0 to HW filter on device eth1
[  174.644157][ T1149] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.651168][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.651208][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.666819][ T5272] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  174.668275][ T5272] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  174.677402][ T5272] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  174.680054][ T5272] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  174.684613][ T5272] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  174.686996][ T5272] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  174.687297][ T5272] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  174.693498][ T5272] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  174.702289][ T1149] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.746387][ T5276] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.753903][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.768184][ T5276] 8021q: adding VLAN 0 to HW filter on device team0
[  174.774431][ T5261] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.781136][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.781181][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.788276][ T1149] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.807040][ T5261] 8021q: adding VLAN 0 to HW filter on device team0
[  174.813073][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.813126][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.847949][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.848001][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.848557][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.848577][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.884202][ T5276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  174.884238][ T5276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.889224][ T4719] Bluetooth: hci2: command tx timeout
[  174.895076][ T5272] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.924023][ T5246] veth0_vlan: entered promiscuous mode
[  174.928378][ T5246] veth1_vlan: entered promiscuous mode
[  174.935768][ T5246] veth0_macvtap: entered promiscuous mode
[  174.948246][ T5246] veth1_macvtap: entered promiscuous mode
[  174.955582][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.958505][ T4397] 8021q: adding VLAN 0 to HW filter on device eth2
[  174.963929][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.970760][ T4719] Bluetooth: hci5: command tx timeout
[  174.971027][ T4719] Bluetooth: hci7: command tx timeout
[  174.971130][ T4719] Bluetooth: hci6: command tx timeout
[  174.973133][ T5272] 8021q: adding VLAN 0 to HW filter on device team0
[  174.986603][ T5272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  174.988569][ T5272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.994909][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.994961][ T3585] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.999554][ T3585] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.999596][ T3585] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.017273][ T1149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.062600][ T5278] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.090002][ T3371] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.117202][ T1149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.131880][ T5234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.131912][ T5234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.143717][ T5234] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.143918][ T5234] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.144049][ T5234] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.153401][ T5232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.154878][ T5232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.194218][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.233972][ T5261] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.266449][ T5483] loop5: detected capacity change from 0 to 512
[  175.281722][ T5483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  175.285698][ T1149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.303203][ T5276] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.315030][ T5483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.322353][ T5278] veth0_vlan: entered promiscuous mode
[  175.388267][ T5278] veth1_vlan: entered promiscuous mode
[  175.425444][ T5278] veth0_macvtap: entered promiscuous mode
[  175.427601][ T5278] veth1_macvtap: entered promiscuous mode
[  175.556706][ T5278] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.594253][ T4397] 8021q: adding VLAN 0 to HW filter on device eth3
[  175.696957][ T5278] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.712153][ T5272] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.793357][ T1149] bridge_slave_1: left allmulticast mode
[  175.793397][ T1149] bridge_slave_1: left promiscuous mode
[  175.793482][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.796365][ T1149] bridge_slave_0: left allmulticast mode
[  175.796381][ T1149] bridge_slave_0: left promiscuous mode
[  175.796468][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.802616][ T1149] bridge_slave_1: left allmulticast mode
[  175.802646][ T1149] bridge_slave_1: left promiscuous mode
[  175.802712][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.804468][ T1149] bridge_slave_0: left allmulticast mode
[  175.804481][ T1149] bridge_slave_0: left promiscuous mode
[  175.804544][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.890116][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.914114][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.929942][ T1149] bond0 (unregistering): Released all slaves
[  175.967799][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.990648][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.019546][ T1149] bond0 (unregistering): Released all slaves
[  176.023107][ T1149] bond1 (unregistering): Released all slaves
[  176.036377][ T5261] veth0_vlan: entered promiscuous mode
[  176.076863][ T5261] veth1_vlan: entered promiscuous mode
[  176.129819][ T5246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.146179][ T5544] loop5: detected capacity change from 0 to 512
[  176.147445][ T5544] journal_path: Non-blockdev passed as './file1'
[  176.147461][ T5544] EXT4-fs: error: could not find journal device path
[  176.149660][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.149964][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.149983][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.150000][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.162294][ T5276] veth0_vlan: entered promiscuous mode
[  176.177158][ T5261] veth0_macvtap: entered promiscuous mode
[  176.192523][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.192536][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.206025][ T5544] loop5: detected capacity change from 0 to 8192
[  176.232010][ T5276] veth1_vlan: entered promiscuous mode
[  176.238460][ T5276] veth0_macvtap: entered promiscuous mode
[  176.247134][ T5544]  loop5: p1 < > p3 p4 < >
[  176.249869][ T5544] loop5: p3 start 50659072 is beyond EOD, truncated
[  176.270683][ T5276] veth1_macvtap: entered promiscuous mode
[  176.282732][ T5276] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.303585][ T5261] veth1_macvtap: entered promiscuous mode
[  176.315724][ T5261] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.325497][ T5261] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.334302][ T5276] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.371550][  T864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.371578][  T864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.390150][ T5272] veth0_vlan: entered promiscuous mode
[  176.460144][ T5272] veth1_vlan: entered promiscuous mode
[  176.473660][ T5234] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.473710][ T5234] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.488875][   T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.489938][   T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.544797][ T5272] veth0_macvtap: entered promiscuous mode
[  176.575099][ T5234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.575135][ T5234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.580077][ T5272] veth1_macvtap: entered promiscuous mode
[  176.598449][ T5272] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.600022][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.600033][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.629683][   T26] device-mapper: raid1: All sides of mirror have failed.
[  176.631484][   T26] Buffer I/O error on dev dm-0, logical block 0, lost async page write
[  176.634606][   T26] device-mapper: raid1: Mirror read failed.
[  176.637587][ T5577] Buffer I/O error on dev dm-0, logical block 1, async page read
[  176.648859][ T4715] Bluetooth: hci0: command tx timeout
[  176.662311][ T5272] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.664580][ T5234] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.664680][ T5234] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.677570][ T5583] loop5: detected capacity change from 0 to 8192
[  176.686692][ T1149] hsr_slave_0: left promiscuous mode
[  176.688326][ T1149] hsr_slave_1: left promiscuous mode
[  176.691107][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.692747][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.695183][ T5591] netlink: 36 bytes leftover after parsing attributes in process `syz.7.95'.
[  176.695510][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.695520][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.703261][ T1149] hsr_slave_0: left promiscuous mode
[  176.704333][ T1149] hsr_slave_1: left promiscuous mode
[  176.704668][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.704678][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.705639][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.705650][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.720362][ T1149] veth1_macvtap: left promiscuous mode
[  176.720409][ T1149] veth0_macvtap: left promiscuous mode
[  176.720480][ T1149] veth1_vlan: left promiscuous mode
[  176.720512][ T1149] veth0_vlan: left promiscuous mode
[  176.724620][ T1149] veth1_macvtap: left promiscuous mode
[  176.724705][ T1149] veth0_macvtap: left promiscuous mode
[  176.724750][ T1149] veth1_vlan: left promiscuous mode
[  176.724781][ T1149] veth0_vlan: left promiscuous mode
[  176.773268][ T5594] netlink: 'syz.5.96': attribute type 1 has an invalid length.
[  176.856435][ T1149] team0 (unregistering): Port device team_slave_1 removed
[  176.862160][ T1149] team0 (unregistering): Port device team_slave_0 removed
[  176.968791][ T4712] Bluetooth: hci2: command tx timeout
[  176.976186][ T1149] team0 (unregistering): Port device team_slave_1 removed
[  176.982564][ T1149] team0 (unregistering): Port device team_slave_0 removed
[  177.030924][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.030950][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.048555][ T4397] 8021q: adding VLAN 0 to HW filter on device eth4
[  177.051386][ T4715] Bluetooth: hci7: command tx timeout
[  177.051403][ T4715] Bluetooth: hci5: command tx timeout
[  177.051469][ T4712] Bluetooth: hci6: command tx timeout
[  177.143797][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.143826][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.171470][ T5234] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.172941][   T40] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.173058][   T40] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.173197][   T40] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.173574][   T40] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.173870][   T40] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.184868][ T5608] loop5: detected capacity change from 0 to 256
[  177.194899][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.194924][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.215564][ T5608] 9p: Bad value for 'rfdno'
[  177.222910][ T5609] netlink: 256 bytes leftover after parsing attributes in process `syz.6.89'.
[  177.226646][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.226686][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.242208][ T5609] loop6: detected capacity change from 0 to 512
[  177.299066][ T5609] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4702: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  177.299108][ T5609] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  177.313063][ T5253] udevd[5253]: incorrect ext4 checksum on /dev/loop6
[  177.768312][   T40] Bluetooth: Error in BCSP hdr checksum
[  177.828727][ T4719] Bluetooth: hci7: unexpected cc 0x0c47 length: 2 > 1
[  177.839215][   T24] kernel read not supported for file /video7 (pid: 24 comm: kworker/1:0)
[  178.132950][  T864] Bluetooth: Error in BCSP hdr checksum
[  178.173670][ T5648] FAULT_INJECTION: forcing a failure.
[  178.173670][ T5648] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  178.176655][ T5648] CPU: 1 UID: 0 PID: 5648 Comm: syz.7.104 Not tainted syzkaller #0 PREEMPT 
[  178.176676][ T5648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  178.176682][ T5648] Call trace:
[  178.176686][ T5648]  show_stack+0x2c/0x3c (C)
[  178.176708][ T5648]  __dump_stack+0x30/0x40
[  178.176720][ T5648]  dump_stack_lvl+0xd8/0x12c
[  178.176730][ T5648]  dump_stack+0x1c/0x28
[  178.176739][ T5648]  should_fail_ex+0x41c/0x590
[  178.176751][ T5648]  should_fail+0x14/0x24
[  178.176760][ T5648]  should_fail_usercopy+0x20/0x30
[  178.176770][ T5648]  simple_read_from_buffer+0xc4/0x238
[  178.176781][ T5648]  proc_fail_nth_read+0x1a8/0x248
[  178.176790][ T5648]  vfs_read+0x230/0x8c8
[  178.176800][ T5648]  ksys_read+0x12c/0x228
[  178.176810][ T5648]  __arm64_sys_read+0x84/0x98
[  178.176820][ T5648]  invoke_syscall+0x98/0x244
[  178.176830][ T5648]  el0_svc_common+0xec/0x23c
[  178.176839][ T5648]  do_el0_svc+0x4c/0x5c
[  178.176849][ T5648]  el0_svc+0x64/0x260
[  178.176858][ T5648]  el0t_64_sync_handler+0x44/0x104
[  178.176866][ T5648]  el0t_64_sync+0x198/0x19c
[  178.223216][ T5651] netlink: 'syz.7.105': attribute type 3 has an invalid length.
[  178.225145][ T5651] netlink: 152 bytes leftover after parsing attributes in process `syz.7.105'.
[  178.227096][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.7.105'.
[  178.227125][ T4397] 8021q: adding VLAN 0 to HW filter on device eth5
[  178.230509][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.7.105'.
[  178.303387][  T864] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.303436][  T864] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.425667][ T5661] loop6: detected capacity change from 0 to 1024
[  178.477320][  T864] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.477367][  T864] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.757511][ T4719] Bluetooth: hci0: command tx timeout
[  178.823176][ T5689] ubi0: attaching mtd0
[  178.845583][  T864] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.847877][  T864] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.855317][ T4397] 8021q: adding VLAN 0 to HW filter on device eth7
[  178.906436][  T864] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.909369][  T864] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.974225][ T5698] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO)
[  178.974262][ T5698] device-mapper: ioctl: error adding target to table
[  179.024831][  T864] vlan2: left promiscuous mode
[  179.024863][  T864] dummy0: left promiscuous mode
[  179.030201][  T864] bridge0: port 3(vlan2) entered disabled state
[  179.040619][  T864] bridge_slave_1: left allmulticast mode
[  179.040648][  T864] bridge_slave_1: left promiscuous mode
[  179.040728][  T864] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.049517][ T4719] Bluetooth: hci2: command tx timeout
[  179.066302][ T5718] loop8: detected capacity change from 0 to 256
[  179.076015][  T864] bridge_slave_0: left allmulticast mode
[  179.076046][  T864] bridge_slave_0: left promiscuous mode
[  179.076132][  T864] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.083812][ T5718] FAT-fs (loop8): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  179.083847][ T5718] FAT-fs (loop8): Filesystem has been set read-only
[  179.129561][ T4715] Bluetooth: hci5: command tx timeout
[  179.129630][ T4719] Bluetooth: hci6: command tx timeout
[  179.542797][  T864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.574725][  T864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.599682][  T864] bond0 (unregistering): Released all slaves
[  179.605520][ T4397] 8021q: adding VLAN 0 to HW filter on device eth6
[  179.627966][  T864] tipc: Left network mode
[  179.704223][ T5750] FAULT_INJECTION: forcing a failure.
[  179.704223][ T5750] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  179.704260][ T5750] CPU: 1 UID: 0 PID: 5750 Comm: syz.7.127 Not tainted syzkaller #0 PREEMPT 
[  179.704274][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  179.704280][ T5750] Call trace:
[  179.704284][ T5750]  show_stack+0x2c/0x3c (C)
[  179.704302][ T5750]  __dump_stack+0x30/0x40
[  179.704315][ T5750]  dump_stack_lvl+0xd8/0x12c
[  179.704325][ T5750]  dump_stack+0x1c/0x28
[  179.704334][ T5750]  should_fail_ex+0x41c/0x590
[  179.704346][ T5750]  should_fail+0x14/0x24
[  179.704355][ T5750]  should_fail_usercopy+0x20/0x30
[  179.704365][ T5750]  simple_read_from_buffer+0xc4/0x238
[  179.704376][ T5750]  proc_fail_nth_read+0x1a8/0x248
[  179.704385][ T5750]  vfs_read+0x230/0x8c8
[  179.704395][ T5750]  ksys_read+0x12c/0x228
[  179.704405][ T5750]  __arm64_sys_read+0x84/0x98
[  179.704415][ T5750]  invoke_syscall+0x98/0x244
[  179.704425][ T5750]  el0_svc_common+0xec/0x23c
[  179.704434][ T5750]  do_el0_svc+0x4c/0x5c
[  179.704450][ T5750]  el0_svc+0x64/0x260
[  179.704460][ T5750]  el0t_64_sync_handler+0x44/0x104
[  179.704469][ T5750]  el0t_64_sync+0x198/0x19c
[  179.719409][ T5751] loop6: detected capacity change from 0 to 512
[  179.724729][ T5751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  179.751402][ T5751] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem
[  179.751436][ T5751] loop6: lost filesystem error report for type 5 error -117
[  179.754741][ T5751] EXT4-fs (loop6): 2 truncates cleaned up
[  179.764270][ T5751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.769760][ T4712] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  179.772952][ T5751] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.126: bad entry in directory: directory entry overrun - offset=60, inode=15, rec_len=1024, size=1024 fake=0
[  179.777372][ T4719] Bluetooth: Frame is too long (len 88, expected len 40)
[  179.779188][ T4719] Bluetooth: Wrong link type (-71)
[  179.851295][ T4719] Bluetooth: hci7: command tx timeout
[  179.864218][ T5766] loop5: detected capacity change from 0 to 256
[  179.903473][ T5751] netlink: 'syz.6.126': attribute type 12 has an invalid length.
[  179.903510][ T5751] netlink: 'syz.6.126': attribute type 29 has an invalid length.
[  179.903536][ T5751] netlink: 148 bytes leftover after parsing attributes in process `syz.6.126'.
[  179.903554][ T5751] netlink: 'syz.6.126': attribute type 1 has an invalid length.
[  179.903570][ T5751] netlink: 'syz.6.126': attribute type 2 has an invalid length.
[  179.903586][ T5751] netlink: 11 bytes leftover after parsing attributes in process `syz.6.126'.
[  179.904372][ T4397] 8021q: adding VLAN 0 to HW filter on device eth8
[  179.933172][ T5751] usb usb7: usbfs: process 5751 (syz.6.126) did not claim interface 0 before use
[  180.016449][ T5261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.042625][  T864] hsr_slave_0: left promiscuous mode
[  180.057570][  T864] hsr_slave_1: left promiscuous mode
[  180.078094][  T864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.078123][  T864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.093664][  T864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.093685][  T864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.100760][  T864] veth1_macvtap: left promiscuous mode
[  180.100791][  T864] veth0_macvtap: left promiscuous mode
[  180.101102][  T864] veth1_vlan: left promiscuous mode
[  180.101154][  T864] veth0_vlan: left promiscuous mode
[  180.136131][ T5782] FAT-fs (loop9): Directory bread(block 1285) failed
[  180.137343][ T5782] FAT-fs (loop9): Directory bread(block 1286) failed
[  180.138582][ T5782] FAT-fs (loop9): Directory bread(block 1287) failed
[  180.139623][ T5799] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[  180.139632][ T5799] unable to read xattr id index table
[  180.142990][ T5782] FAT-fs (loop9): Directory bread(block 1288) failed
[  180.237733][ T5804] FAULT_INJECTION: forcing a failure.
[  180.237733][ T5804] name failslab, interval 1, probability 0, space 0, times 0
[  180.237789][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: syz.6.133 Not tainted syzkaller #0 PREEMPT 
[  180.237804][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  180.237811][ T5804] Call trace:
[  180.237815][ T5804]  show_stack+0x2c/0x3c (C)
[  180.237835][ T5804]  __dump_stack+0x30/0x40
[  180.237847][ T5804]  dump_stack_lvl+0xd8/0x12c
[  180.237857][ T5804]  dump_stack+0x1c/0x28
[  180.237867][ T5804]  should_fail_ex+0x41c/0x590
[  180.237878][ T5804]  should_failslab+0xc4/0x120
[  180.237890][ T5804]  __kmalloc_noprof+0x108/0x6c8
[  180.237898][ T5804]  tomoyo_encode2+0x10c/0x330
[  180.237908][ T5804]  tomoyo_encode+0x34/0x50
[  180.237917][ T5804]  tomoyo_realpath_from_path+0x488/0x4dc
[  180.237926][ T5804]  tomoyo_path_number_perm+0x1f0/0x500
[  180.237935][ T5804]  tomoyo_file_ioctl+0x2c/0x3c
[  180.237944][ T5804]  security_file_ioctl+0xdc/0x2b0
[  180.237953][ T5804]  __arm64_sys_ioctl+0xb0/0x1cc
[  180.237964][ T5804]  invoke_syscall+0x98/0x244
[  180.237974][ T5804]  el0_svc_common+0xec/0x23c
[  180.237984][ T5804]  do_el0_svc+0x4c/0x5c
[  180.237993][ T5804]  el0_svc+0x64/0x260
[  180.238003][ T5804]  el0t_64_sync_handler+0x44/0x104
[  180.238012][ T5804]  el0t_64_sync+0x198/0x19c
[  180.238067][ T5804] ERROR: Out of memory at tomoyo_realpath_from_path.
[  180.545355][ T5818] FAULT_INJECTION: forcing a failure.
[  180.545355][ T5818] name failslab, interval 1, probability 0, space 0, times 0
[  180.548147][ T5818] CPU: 1 UID: 0 PID: 5818 Comm: syz.5.139 Not tainted syzkaller #0 PREEMPT 
[  180.548169][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  180.548177][ T5818] Call trace:
[  180.548181][ T5818]  show_stack+0x2c/0x3c (C)
[  180.548202][ T5818]  __dump_stack+0x30/0x40
[  180.548214][ T5818]  dump_stack_lvl+0xd8/0x12c
[  180.548226][ T5818]  dump_stack+0x1c/0x28
[  180.548236][ T5818]  should_fail_ex+0x41c/0x590
[  180.548247][ T5818]  should_failslab+0xc4/0x120
[  180.548258][ T5818]  __kmalloc_noprof+0x108/0x6c8
[  180.548266][ T5818]  tomoyo_realpath_from_path+0xbc/0x4dc
[  180.548276][ T5818]  tomoyo_path_number_perm+0x1f0/0x500
[  180.548284][ T5818]  tomoyo_file_ioctl+0x2c/0x3c
[  180.548293][ T5818]  security_file_ioctl+0xdc/0x2b0
[  180.548302][ T5818]  __arm64_sys_ioctl+0xb0/0x1cc
[  180.548312][ T5818]  invoke_syscall+0x98/0x244
[  180.548322][ T5818]  el0_svc_common+0xec/0x23c
[  180.548332][ T5818]  do_el0_svc+0x4c/0x5c
[  180.548341][ T5818]  el0_svc+0x64/0x260
[  180.548350][ T5818]  el0t_64_sync_handler+0x44/0x104
[  180.548359][ T5818]  el0t_64_sync+0x198/0x19c
[  180.559569][ T5818] ERROR: Out of memory at tomoyo_realpath_from_path.
[  180.644769][  T864] team0 (unregistering): Port device team_slave_1 removed
[  180.656998][  T864] team0 (unregistering): Port device team_slave_0 removed
[  180.666230][ T5826] netlink: 8 bytes leftover after parsing attributes in process `syz.9.134'.
[  180.689846][ T5828] set_capacity_and_notify: 2 callbacks suppressed
[  180.691487][ T5828] loop5: detected capacity change from 0 to 512
[  180.765003][ T5805] bridge_slave_0: left allmulticast mode
[  180.765045][ T5805] bridge_slave_0: left promiscuous mode
[  180.765139][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.774337][ T5805] bridge_slave_1: left allmulticast mode
[  180.774374][ T5805] bridge_slave_1: left promiscuous mode
[  180.774458][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.784335][ T5805] bond0: (slave bond_slave_0): Releasing backup interface
[  180.809547][ T4719] Bluetooth: hci0: command tx timeout
[  180.812002][ T5805] bond0: (slave bond_slave_1): Releasing backup interface
[  180.842193][ T5805] team0: Port device team_slave_0 removed
[  180.844694][ T5805] team0: Port device team_slave_1 removed
[  180.845248][ T5805] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.845260][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.846522][ T5805] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.846532][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.848250][ T5805] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  180.849764][ T4397] 8021q: adding VLAN 0 to HW filter on device eth9
[  180.876587][ T5836] usb usb7: usbfs: process 5836 (syz.8.144) did not claim interface 0 before use
[  180.954985][ T5838] tmpfs: Unknown parameter 'mc{l'
[  181.038215][ T5846] netlink: 32 bytes leftover after parsing attributes in process `syz.9.148'.
[  181.060114][ T5851] FAULT_INJECTION: forcing a failure.
[  181.060114][ T5851] name failslab, interval 1, probability 0, space 0, times 0
[  181.060149][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz.8.150 Not tainted syzkaller #0 PREEMPT 
[  181.060164][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  181.060171][ T5851] Call trace:
[  181.060175][ T5851]  show_stack+0x2c/0x3c (C)
[  181.060197][ T5851]  __dump_stack+0x30/0x40
[  181.060209][ T5851]  dump_stack_lvl+0xd8/0x12c
[  181.060219][ T5851]  dump_stack+0x1c/0x28
[  181.060229][ T5851]  should_fail_ex+0x41c/0x590
[  181.060240][ T5851]  should_failslab+0xc4/0x120
[  181.060251][ T5851]  kmem_cache_alloc_noprof+0x94/0x5d4
[  181.060261][ T5851]  skb_clone+0x1ac/0x320
[  181.060271][ T5851]  __netlink_deliver_tap+0x364/0x6f4
[  181.060281][ T5851]  netlink_deliver_tap+0x1d8/0x1dc
[  181.060289][ T5851]  netlink_unicast+0x5dc/0x7f8
[  181.060297][ T5851]  netlink_sendmsg+0x648/0x948
[  181.060305][ T5851]  __sock_sendmsg+0xc8/0x17c
[  181.060312][ T5851]  ____sys_sendmsg+0x3d0/0x6c8
[  181.060320][ T5851]  ___sys_sendmsg+0x198/0x224
[  181.060329][ T5851]  __sys_sendmsg+0x158/0x204
[  181.060337][ T5851]  __arm64_sys_sendmsg+0x88/0x9c
[  181.060345][ T5851]  invoke_syscall+0x98/0x244
[  181.060355][ T5851]  el0_svc_common+0xec/0x23c
[  181.060365][ T5851]  do_el0_svc+0x4c/0x5c
[  181.060374][ T5851]  el0_svc+0x64/0x260
[  181.060384][ T5851]  el0t_64_sync_handler+0x44/0x104
[  181.060392][ T5851]  el0t_64_sync+0x198/0x19c
[  181.129252][ T4719] Bluetooth: hci2: command tx timeout
[  181.211462][ T4712] Bluetooth: hci5: command tx timeout
[  181.211520][ T4719] Bluetooth: hci6: command tx timeout
[  181.272968][ T5863] loop9: detected capacity change from 0 to 8192
[  181.325139][ T5876] loop7: detected capacity change from 0 to 2048
[  181.412830][ T5889] FAULT_INJECTION: forcing a failure.
[  181.412830][ T5889] name failslab, interval 1, probability 0, space 0, times 0
[  181.412892][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: syz.6.156 Not tainted syzkaller #0 PREEMPT 
[  181.412907][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  181.412914][ T5889] Call trace:
[  181.412918][ T5889]  show_stack+0x2c/0x3c (C)
[  181.412939][ T5889]  __dump_stack+0x30/0x40
[  181.412950][ T5889]  dump_stack_lvl+0xd8/0x12c
[  181.412960][ T5889]  dump_stack+0x1c/0x28
[  181.412969][ T5889]  should_fail_ex+0x41c/0x590
[  181.412980][ T5889]  should_failslab+0xc4/0x120
[  181.412991][ T5889]  kmem_cache_alloc_lru_noprof+0x98/0x5d8
[  181.413002][ T5889]  alloc_inode+0x84/0x198
[  181.413012][ T5889]  path_from_stashed+0x1d8/0x4ec
[  181.413022][ T5889]  open_namespace+0xa0/0x1c4
[  181.413029][ T5889]  ns_ioctl+0x7bc/0xea8
[  181.413036][ T5889]  __arm64_sys_ioctl+0x154/0x1cc
[  181.413046][ T5889]  invoke_syscall+0x98/0x244
[  181.413056][ T5889]  el0_svc_common+0xec/0x23c
[  181.413066][ T5889]  do_el0_svc+0x4c/0x5c
[  181.413075][ T5889]  el0_svc+0x64/0x260
[  181.413084][ T5889]  el0t_64_sync_handler+0x44/0x104
[  181.413093][ T5889]  el0t_64_sync+0x198/0x19c
[  181.590954][ T5876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.612484][ T4397] 8021q: adding VLAN 0 to HW filter on device eth10
[  181.714413][ T5898] loop9: detected capacity change from 0 to 512
[  181.733750][ T5898] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  181.733787][ T5898] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  181.735530][ T5898] EXT4-fs (loop9): 1 truncate cleaned up
[  181.735981][ T5898] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.758505][ T5898] EXT4-fs error (device loop9): __ext4_expand_extra_isize:6537: inode #12: comm syz.9.158: bad extra_isize 62 (inode size 256)
[  181.762172][ T5898] EXT4-fs (loop9): Remounting filesystem read-only
[  181.784769][ T5276] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.794054][ T5905] 9pnet_fd: Insufficient options for proto=fd
[  181.946650][ T5924] FAULT_INJECTION: forcing a failure.
[  181.946650][ T5924] name failslab, interval 1, probability 0, space 0, times 0
[  181.946687][ T5924] CPU: 0 UID: 0 PID: 5924 Comm: syz.9.164 Not tainted syzkaller #0 PREEMPT 
[  181.946703][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  181.946708][ T5924] Call trace:
[  181.946712][ T5924]  show_stack+0x2c/0x3c (C)
[  181.946731][ T5924]  __dump_stack+0x30/0x40
[  181.946743][ T5924]  dump_stack_lvl+0xd8/0x12c
[  181.946755][ T5924]  dump_stack+0x1c/0x28
[  181.946766][ T5924]  should_fail_ex+0x41c/0x590
[  181.946778][ T5924]  should_failslab+0xc4/0x120
[  181.946791][ T5924]  __kmalloc_cache_node_noprof+0x98/0x618
[  181.946800][ T5924]  __get_vm_area_node+0x188/0x32c
[  181.946810][ T5924]  __vmalloc_node_range_noprof+0x2a0/0xe9c
[  181.946820][ T5924]  __vmalloc_node_noprof+0xec/0x14c
[  181.946829][ T5924]  vzalloc_noprof+0x3c/0x4c
[  181.946838][ T5924]  n_tty_open+0x24/0x170
[  181.946848][ T5924]  tty_ldisc_open+0x9c/0x144
[  181.946858][ T5924]  tty_ldisc_setup+0x50/0xf8
[  181.946869][ T5924]  tty_init_dev+0x1f0/0x3a4
[  181.946876][ T5924]  tty_open+0x2e0/0x89c
[  181.946885][ T5924]  chrdev_open+0x398/0x3e8
[  181.946895][ T5924]  do_dentry_open+0x5c4/0xfc0
[  181.946906][ T5924]  vfs_open+0x44/0x2dc
[  181.946917][ T5924]  path_openat+0x1084/0x18f4
[  181.946929][ T5924]  do_file_open+0x1c8/0x2e8
[  181.946940][ T5924]  do_sys_openat2+0x114/0x1e8
[  181.946951][ T5924]  do_sys_open+0xb0/0xe0
[  181.946962][ T5924]  __arm64_sys_openat+0xa8/0xc4
[  181.946973][ T5924]  invoke_syscall+0x98/0x244
[  181.946985][ T5924]  el0_svc_common+0xec/0x23c
[  181.946996][ T5924]  do_el0_svc+0x4c/0x5c
[  181.947007][ T5924]  el0_svc+0x64/0x260
[  181.947018][ T5924]  el0t_64_sync_handler+0x44/0x104
[  181.947028][ T5924]  el0t_64_sync+0x198/0x19c
[  181.947160][ T5924] syz.9.164: vmalloc error: size 9112, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  181.947220][ T5924] CPU: 0 UID: 0 PID: 5924 Comm: syz.9.164 Not tainted syzkaller #0 PREEMPT 
[  181.947230][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  181.947234][ T5924] Call trace:
[  181.947237][ T5924]  show_stack+0x2c/0x3c (C)
[  181.947249][ T5924]  __dump_stack+0x30/0x40
[  181.947262][ T5924]  dump_stack_lvl+0xd8/0x12c
[  181.947273][ T5924]  dump_stack+0x1c/0x28
[  181.947284][ T5924]  warn_alloc+0x1c4/0x1d8
[  181.947297][ T5924]  __vmalloc_node_range_noprof+0x2c4/0xe9c
[  181.947307][ T5924]  __vmalloc_node_noprof+0xec/0x14c
[  181.947317][ T5924]  vzalloc_noprof+0x3c/0x4c
[  181.947326][ T5924]  n_tty_open+0x24/0x170
[  181.947336][ T5924]  tty_ldisc_open+0x9c/0x144
[  181.947347][ T5924]  tty_ldisc_setup+0x50/0xf8
[  181.947357][ T5924]  tty_init_dev+0x1f0/0x3a4
[  181.947365][ T5924]  tty_open+0x2e0/0x89c
[  181.947374][ T5924]  chrdev_open+0x398/0x3e8
[  181.947385][ T5924]  do_dentry_open+0x5c4/0xfc0
[  181.947396][ T5924]  vfs_open+0x44/0x2dc
[  181.947407][ T5924]  path_openat+0x1084/0x18f4
[  181.947417][ T5924]  do_file_open+0x1c8/0x2e8
[  181.947426][ T5924]  do_sys_openat2+0x114/0x1e8
[  181.947444][ T5924]  do_sys_open+0xb0/0xe0
[  181.947455][ T5924]  __arm64_sys_openat+0xa8/0xc4
[  181.947467][ T5924]  invoke_syscall+0x98/0x244
[  181.947479][ T5924]  el0_svc_common+0xec/0x23c
[  181.947490][ T5924]  do_el0_svc+0x4c/0x5c
[  181.947502][ T5924]  el0_svc+0x64/0x260
[  181.947512][ T5924]  el0t_64_sync_handler+0x44/0x104
[  181.947522][ T5924]  el0t_64_sync+0x198/0x19c
[  181.947531][ T5924] Mem-Info:
[  181.947536][ T5924] active_anon:50 inactive_anon:11296 isolated_anon:0
[  181.947536][ T5924]  active_file:2648 inactive_file:4684 isolated_file:0
[  181.947536][ T5924]  unevictable:768 dirty:426 writeback:0
[  181.947536][ T5924]  slab_reclaimable:9500 slab_unreclaimable:110645
[  181.947536][ T5924]  mapped:35163 shmem:6907 pagetables:1125
[  181.947536][ T5924]  sec_pagetables:0 bounce:0
[  181.947536][ T5924]  kernel_misc_reclaimable:0
[  181.947536][ T5924]  free:1457571 free_pcp:12653 free_cma:7616
[  181.947558][ T5924] Node 0 active_anon:200kB inactive_anon:45184kB active_file:10592kB inactive_file:18736kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:140652kB dirty:1704kB writeback:0kB shmem:27628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10016kB pagetables:4500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  181.947580][ T5924] Node 0 DMA free:3039452kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:4096kB free_highatomic:4032kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:336kB local_pcp:192kB free_cma:30464kB
[  181.947605][ T5924] lowmem_reserve[]: 0 0 3650 3650 3650
[  181.947625][ T5924] Node 0 Normal free:2790832kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:200kB inactive_anon:45184kB active_file:10592kB inactive_file:18736kB unevictable:3072kB writepending:1704kB zspages:0kB present:5242880kB managed:3738144kB mlocked:0kB bounce:0kB free_pcp:50276kB local_pcp:14444kB free_cma:0kB
[  181.947650][ T5924] lowmem_reserve[]: 0 0 0 0 0
[  181.947668][ T5924] Node 0 DMA: 8173*4kB (U) 8047*8kB (U) 6682*16kB (U) 4130*32kB (UH) 1481*64kB (UH) 728*128kB (U) 690*256kB (UHC) 610*512kB (UHC) 435*1024kB (UHC) 264*2048kB (UH) 254*4096kB (UMC) = 3039564kB
[  181.947758][ T5924] Node 0 Normal: 11424*4kB (UM) 10878*8kB (UME) 8474*16kB (U) 2115*32kB (UE) 2283*64kB (UME) 981*128kB (UE) 686*256kB (U) 531*512kB (UE) 357*1024kB (UE) 213*2048kB (UE) 228*4096kB (U) = 2790832kB
[  181.947842][ T5924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  181.947850][ T5924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB
[  181.947856][ T5924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  181.947863][ T5924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB
[  181.947870][ T5924] 14258 total pagecache pages
[  181.947874][ T5924] 0 pages in swap cache
[  181.947877][ T5924] Free swap  = 124996kB
[  181.947881][ T5924] Total swap = 124996kB
[  181.947885][ T5924] 2097152 pages RAM
[  181.947888][ T5924] 0 pages HighMem/MovableOnly
[  181.947892][ T5924] 392568 pages reserved
[  181.947895][ T5924] 8192 pages cma reserved
[  181.947899][ T5924] 0 pages hwpoisoned
[  181.947923][ T5924] tty tty1: ldisc open failed (-12), clearing slot 0
[  181.964211][ T4397] 8021q: adding VLAN 0 to HW filter on device eth11
[  182.059815][ T5926] FAULT_INJECTION: forcing a failure.
[  182.059815][ T5926] name failslab, interval 1, probability 0, space 0, times 0
[  182.059834][ T5926] CPU: 0 UID: 0 PID: 5926 Comm: syz.5.165 Not tainted syzkaller #0 PREEMPT 
[  182.059844][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  182.059849][ T5926] Call trace:
[  182.059852][ T5926]  show_stack+0x2c/0x3c (C)
[  182.059870][ T5926]  __dump_stack+0x30/0x40
[  182.059884][ T5926]  dump_stack_lvl+0xd8/0x12c
[  182.059893][ T5926]  dump_stack+0x1c/0x28
[  182.059903][ T5926]  should_fail_ex+0x41c/0x590
[  182.059916][ T5926]  should_failslab+0xc4/0x120
[  182.059927][ T5926]  __kmalloc_cache_noprof+0x94/0x5fc
[  182.059935][ T5926]  nf_tables_newtable+0x460/0x10f4
[  182.059947][ T5926]  nfnetlink_rcv+0xc8c/0x16ec
[  182.059957][ T5926]  netlink_unicast+0x600/0x7f8
[  182.059965][ T5926]  netlink_sendmsg+0x648/0x948
[  182.059973][ T5926]  __sock_sendmsg+0xc8/0x17c
[  182.059982][ T5926]  ____sys_sendmsg+0x3d0/0x6c8
[  182.059990][ T5926]  ___sys_sendmsg+0x198/0x224
[  182.059998][ T5926]  __sys_sendmsg+0x158/0x204
[  182.060006][ T5926]  __arm64_sys_sendmsg+0x88/0x9c
[  182.060014][ T5926]  invoke_syscall+0x98/0x244
[  182.060024][ T5926]  el0_svc_common+0xec/0x23c
[  182.060034][ T5926]  do_el0_svc+0x4c/0x5c
[  182.060043][ T5926]  el0_svc+0x64/0x260
[  182.060053][ T5926]  el0t_64_sync_handler+0x44/0x104
[  182.060061][ T5926]  el0t_64_sync+0x198/0x19c
[  182.176681][ T5278] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.232898][ T5936] usb usb7: usbfs: process 5936 (syz.5.169) did not claim interface 0 before use
[  182.233997][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.7.170'.
[  182.833406][ T4397] 8021q: adding VLAN 0 to HW filter on device eth12
[  183.025826][ T4397] 8021q: adding VLAN 0 to HW filter on device eth13
[  183.040149][ T5989] usb usb7: usbfs: process 5989 (syz.8.175) did not claim interface 32 before use
[  183.287765][ T6017] loop8: detected capacity change from 0 to 512
[  183.340030][ T6017] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.346776][ T6017] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.728343][ T4397] 8021q: adding VLAN 0 to HW filter on device eth14
[  183.752150][ T4719] Bluetooth: Unknown BR/EDR signaling command 0x0f
[  183.752177][ T4719] Bluetooth: Wrong link type (-22)
[  183.752549][ T4719] Bluetooth: Unknown BR/EDR signaling command 0x10
[  183.752565][ T4719] Bluetooth: Wrong link type (-22)
[  183.805001][ T6048] FAULT_INJECTION: forcing a failure.
[  183.805001][ T6048] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  183.805037][ T6048] CPU: 1 UID: 0 PID: 6048 Comm: syz.8.188 Not tainted syzkaller #0 PREEMPT 
[  183.805052][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  183.805058][ T6048] Call trace:
[  183.805062][ T6048]  show_stack+0x2c/0x3c (C)
[  183.805081][ T6048]  __dump_stack+0x30/0x40
[  183.805092][ T6048]  dump_stack_lvl+0xd8/0x12c
[  183.805102][ T6048]  dump_stack+0x1c/0x28
[  183.805111][ T6048]  should_fail_ex+0x41c/0x590
[  183.805123][ T6048]  should_fail+0x14/0x24
[  183.805132][ T6048]  should_fail_usercopy+0x20/0x30
[  183.805142][ T6048]  _inline_copy_from_user+0x3c/0x174
[  183.805152][ T6048]  copy_msghdr_from_user+0xb8/0x194
[  183.805161][ T6048]  ___sys_sendmsg+0x14c/0x224
[  183.805169][ T6048]  __sys_sendmsg+0x158/0x204
[  183.805178][ T6048]  __arm64_sys_sendmsg+0x88/0x9c
[  183.805186][ T6048]  invoke_syscall+0x98/0x244
[  183.805196][ T6048]  el0_svc_common+0xec/0x23c
[  183.805205][ T6048]  do_el0_svc+0x4c/0x5c
[  183.805215][ T6048]  el0_svc+0x64/0x260
[  183.805224][ T6048]  el0t_64_sync_handler+0x44/0x104
[  183.805233][ T6048]  el0t_64_sync+0x198/0x19c
[  183.808090][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.186'.
[  183.812747][ T6043] ------------[ cut here ]------------
[  183.812754][ T6043] UBSAN: array-index-out-of-bounds in kernel/bpf/disasm.c:306:6
[  183.812763][ T6043] index 3 is out of range for type 'const char *const[3]'
[  183.812769][ T6043] CPU: 1 UID: 0 PID: 6043 Comm: syz.5.186 Not tainted syzkaller #0 PREEMPT 
[  183.812778][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  183.812783][ T6043] Call trace:
[  183.812786][ T6043]  show_stack+0x2c/0x3c (C)
[  183.812802][ T6043]  __dump_stack+0x30/0x40
[  183.812814][ T6043]  dump_stack_lvl+0xd8/0x12c
[  183.812825][ T6043]  dump_stack+0x1c/0x28
[  183.812836][ T6043]  ubsan_epilogue+0x14/0x48
[  183.812846][ T6043]  __ubsan_handle_out_of_bounds+0xd0/0xf8
[  183.812858][ T6043]  print_bpf_insn+0x19c4/0x1ee0
[  183.812869][ T6043]  diag_print_insn_context+0x360/0x808
[  183.812885][ T6043]  bpf_diag_source+0x518/0xfd0
[  183.812894][ T6043]  bpf_diag_program_structure+0x1b0/0x250
[  183.812903][ T6043]  check_subprogs+0x510/0x5c0
[  183.812916][ T6043]  bpf_check+0x19a4/0x243c
[  183.812928][ T6043]  bpf_prog_load+0xf4c/0x1554
[  183.812937][ T6043]  __sys_bpf+0x7d4/0x82c
[  183.812946][ T6043]  __arm64_sys_bpf+0xd0/0xec
[  183.812954][ T6043]  invoke_syscall+0x98/0x244
[  183.812966][ T6043]  el0_svc_common+0xec/0x23c
[  183.812977][ T6043]  do_el0_svc+0x4c/0x5c
[  183.812988][ T6043]  el0_svc+0x64/0x260
[  183.812998][ T6043]  el0t_64_sync_handler+0x44/0x104
[  183.813008][ T6043]  el0t_64_sync+0x198/0x19c
[  183.814113][ T6043] ---[ end trace ]---
[  183.814119][ T6043] ==================================================================
[  183.814123][ T6043] BUG: KASAN: global-out-of-bounds in print_bpf_insn+0x80c/0x1ee0
[  183.814136][ T6043] Read of size 8 at addr ffff800086ad37d8 by task syz.5.186/6043
[  183.814143][ T6043] 
[  183.814146][ T6043] CPU: 1 UID: 0 PID: 6043 Comm: syz.5.186 Not tainted syzkaller #0 PREEMPT 
[  183.814154][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  183.814159][ T6043] Call trace:
[  183.814161][ T6043]  show_stack+0x2c/0x3c (C)
[  183.814174][ T6043]  __dump_stack+0x30/0x40
[  183.814185][ T6043]  dump_stack_lvl+0xd8/0x12c
[  183.814196][ T6043]  print_address_description+0xb0/0x238
[  183.814205][ T6043]  print_report+0x68/0x84
[  183.814212][ T6043]  kasan_report+0x8c/0xc4
[  183.814222][ T6043]  __asan_report_load8_noabort+0x20/0x2c
[  183.814233][ T6043]  print_bpf_insn+0x80c/0x1ee0
[  183.814242][ T6043]  diag_print_insn_context+0x360/0x808
[  183.814252][ T6043]  bpf_diag_source+0x518/0xfd0
[  183.814260][ T6043]  bpf_diag_program_structure+0x1b0/0x250
[  183.814270][ T6043]  check_subprogs+0x510/0x5c0
[  183.814281][ T6043]  bpf_check+0x19a4/0x243c
[  183.814293][ T6043]  bpf_prog_load+0xf4c/0x1554
[  183.814302][ T6043]  __sys_bpf+0x7d4/0x82c
[  183.814311][ T6043]  __arm64_sys_bpf+0xd0/0xec
[  183.814319][ T6043]  invoke_syscall+0x98/0x244
[  183.814331][ T6043]  el0_svc_common+0xec/0x23c
[  183.814342][ T6043]  do_el0_svc+0x4c/0x5c
[  183.814353][ T6043]  el0_svc+0x64/0x260
[  183.814363][ T6043]  el0t_64_sync_handler+0x44/0x104
[  183.814372][ T6043]  el0t_64_sync+0x198/0x19c
[  183.814380][ T6043] 
[  183.814382][ T6043] The buggy address belongs to the variable:
[  183.814385][ T6043]  bpf_ldsx_string+0x18/0x60
[  183.814395][ T6043] 
[  183.814397][ T6043] The buggy address belongs to a 0-page vmalloc region starting at 0xffff8000869d0000 allocated at declare_kernel_vmas+0x54/0xb4
[  183.814414][ T6043] The buggy address belongs to the physical page:
[  183.814418][ T6043] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2190d3
[  183.814425][ T6043] flags: 0x5ffc00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  183.814437][ T6043] raw: 05ffc00000002000 fffffdffc76434c8 fffffdffc76434c8 0000000000000000
[  183.814448][ T6043] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  183.814452][ T6043] page dumped because: kasan: bad access detected
[  183.814456][ T6043] 
[  183.814458][ T6043] Memory state around the buggy address:
[  183.814462][ T6043]  ffff800086ad3680: 00 03 f9 f9 f9 f9 f9 f9 00 01 f9 f9 00 00 00 05
[  183.814467][ T6043]  ffff800086ad3700: f9 f9 f9 f9 00 06 f9 f9 00 04 f9 f9 00 05 f9 f9
[  183.814472][ T6043] >ffff800086ad3780: 00 00 00 06 f9 f9 f9 f9 00 00 00 f9 f9 f9 f9 f9
[  183.814476][ T6043]                                                     ^
[  183.814481][ T6043]  ffff800086ad3800: 00 00 00 00 00 00 00 03 f9 f9 f9 f9 00 00 00 00
[  183.814486][ T6043]  ffff800086ad3880: 01 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 00 04 f9 f9
[  183.814490][ T6043] ==================================================================
[  183.814494][ T6043] Disabling lock debugging due to kernel taint
[  183.965288][ T4397] 8021q: adding VLAN 0 to HW filter on device eth15
[  184.588973][ T6037] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  185.768775][ T4719] Bluetooth: hci2: command 0x0401 tx timeout
[  187.370447][ T1593] ieee802154 phy0 wpan0: encryption failed: -22
[  187.370489][ T1593] ieee802154 phy1 wpan1: encryption failed: -22