last executing test programs:

1m12.422231403s ago: executing program 1 (id=1441):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0xfff5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x110, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x2dc}}, 0x0)

1m12.233374749s ago: executing program 1 (id=1444):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)

1m12.153964923s ago: executing program 1 (id=1446):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r4, 0x1)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r6=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000100)={r6, 0x0, 0x112}, 0x8)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0xd82, 0x0, 0x0, 0x1000, 0x100003, 0x0, 0x0, 0x162}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9825, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2b, 0x4, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x1, 0x1, 0x2000033d}}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x6cce81b2c8a85c0e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})

1m11.902162055s ago: executing program 1 (id=1454):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r0 = inotify_init1(0x80800)
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x528)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0xc) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000280)=0xc)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0xa0404, &(0x7f0000000480)={[{@redirect_dir_on}, {@index_on}, {@verity_on}, {@index_on}, {@workdir={'workdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}, {@uuid_auto}, {@metacopy_on}], [{@uid_eq={'uid', 0x3d, r1}}, {@uid_eq={'uid', 0x3d, r1}}]})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
mount$9p_rdma(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', &(0x7f0000001240), 0x80807, &(0x7f0000001280)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@sq={'sq', 0x3d, 0xf}}, {@rq={'rq', 0x3d, 0x5}}, {@sq}, {@sq={'sq', 0x3d, 0x3}}, {@common=@loose}, {@common=@posixacl}, {@rq={'rq', 0x3d, 0x4}}, {@sq={'sq', 0x3d, 0x5}}, {@common=@noextend}], [{@fowner_lt={'fowner<', r1}}, {@fsname={'fsname', 0x3d, 'metacopy=on'}}, {@appraise}, {@subj_type={'subj_type', 0x3d, 'verity=on'}}]}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x4000) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x4000)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10380, 0x0)
preadv2(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000000080030900f0ff72797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b400000000038000480340001800b00010065787468647200002400028005000200070000000800014000000003280006400000000408000140000000150900010073797a3000000000140000001100010000000000000000000700000a"], 0xd4}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000000080030900f0ff72797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b400000000038000480340001800b00010065787468647200002400028005000200070000000800014000000003280006400000000408000140000000150900010073797a3000000000140000001100010000000000000000000700000a"], 0xd4}}, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4004, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00') (async)
chdir(&(0x7f00000003c0)='./bus\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000000)='3', 0x4e) (async)
write(r4, &(0x7f0000000000)='3', 0x4e)
openat(r4, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000340)={[{@i_version}, {@mblk_io_submit}, {@dioread_nolock}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f0000000300)='./file0\x00') (async)
chdir(&(0x7f0000000300)='./file0\x00')
r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0xde0f9e45a02cc902) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0xde0f9e45a02cc902)

1m11.550835272s ago: executing program 1 (id=1457):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="1f0000000980ffff", 0x8)

1m11.069978519s ago: executing program 1 (id=1462):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r2, 0x400)
futex(&(0x7f0000000200), 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x2, 0x1)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x8, 0x0)
r3 = open_tree(r0, &(0x7f0000000340)='./file0\x00', 0x1000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000400)={r4, 0x2, r3, 0x4, 0x80000})
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r6 = syz_usbip_server_init(0x4)
ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000000580)={r6, 0x0, 0x0, 0x3, 0x7, 0x2})
writev(r0, &(0x7f0000002740)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="1f56f5ead0d2508888569b453a0a5262225902930888daf60ee4bbbec594a5932f9ef39ed5cf9173b6f0843ed790aa0db8e5436d81304d8793aa397371b32ffe99eb3598e3249dc117d3f0f9da9adc41d530347243e345bd6b8bfb33a2981c23636d702a57e740042814af72daf67fb45e0658900a9225293be74e69b165c8b906fd4f05177e0bf0ddf9f1f6e767697bc617", 0x92}, {&(0x7f0000001680)="94af8abcdc3320b809245da7f6243868", 0x10}, {&(0x7f00000016c0)="a4da5a8fc18778a316a7a40a5832cfc263fbc900f776feb56970caf7dbfba342c1bc4673dff21fceff183867165f208f9751cf4862a73a22f95dd34a5f3376bf23a528c9e038f764", 0x48}, {&(0x7f0000001740)="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", 0x1000}], 0x5)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002800), r3)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x5c, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3531}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xd815}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xcf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x10)
readv(r0, &(0x7f0000002a00)=[{&(0x7f0000002940)=""/132, 0x84}], 0x1)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0xf804e000)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000002a40)={&(0x7f0000ffb000/0x3000)=nil, 0x3000})
getsockopt$inet6_int(r3, 0x29, 0x18, &(0x7f0000002a80), &(0x7f0000002ac0)=0x4)
r8 = socket(0x6, 0x5, 0x7)
io_uring_enter(r3, 0x3150, 0xa0ff, 0xc2, &(0x7f0000002b00)={[0xd3]}, 0x8)
openat$fb0(0xffffffffffffff9c, &(0x7f0000002b40), 0xc0881, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003d40)={r3, 0x0, 0x69, 0x1000, &(0x7f0000002b80)="02f5424b47cb24151ccb84a9b7c35191375562fc1e1843921a7ed7c7f6b544550ab5afe3ad4823e2698b36c5548ed214472ee84bf480403fe91810de90b9137888037353b8beb0326c6129cc8e90ce3ff848228637fa910795e5e2ecb97425e880475d37c8a3c228cf", &(0x7f0000002c00)=""/4096, 0xfffffffb, 0x0, 0x39, 0xf0, &(0x7f0000003c00)="1ab9934e44b0ad8c620994802b187652347c07f6c7b54975ebd9a31656cc4bf12b89b3f2290738fbe50ac31b00e1f8507ffb6f1c63eb213297", &(0x7f0000003c40)="8e5205885620f62774155bc88b32da60f9cfd6c3d1208a3e7da5ca7006350c703c0f7afc7620305412ba5ec62ac3ec9d7ce05e9e1aa760fe88a7227ed414d3c86a7bedabbfc06886de6f1a6b92f7b7f7fd26b0835fce1b57f0a5ca78253ed8954c4c2b56ceb8328c33e69e284156b1ab3c0dfd74b5a857cacb1243c050cefa290176f4a6edd0be318cc3e3760c3cd47065068f09139324f1f70a916effc153af38b2b4ec1b48fc7acb6b6bc87aca78f59f0fb0418dfb6cf6489af769990d7e2ba396732a0200f40313996a1d24acfe80778fca1e1f8993084620314d27468b2b62d4f324b0acb5b8919fdbfeb604d3fe", 0x4, 0x0, 0x3}, 0x50)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000003e00)={0x5, &(0x7f0000003dc0)=[{0x2, 0x0, 0xf7, 0x40}, {0x7, 0x3, 0x5, 0x7}, {0x7, 0x9, 0x8, 0x9}, {0x8, 0x8, 0x0, 0x4}, {0xff, 0xfc, 0x2, 0x1}]}, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003e80), r8)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000004280)={&(0x7f0000003e40), 0xc, &(0x7f0000004240)={&(0x7f0000003ec0)={0x370, r10, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x147}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffc01}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x82}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x91}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xefed}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb126}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d7b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x66}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7868}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8b8d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x370}}, 0x4000000)
socket$nl_audit(0x10, 0x3, 0x9)
recvfrom$unix(0xffffffffffffffff, &(0x7f00000042c0)=""/72, 0x48, 0x100, &(0x7f0000004340)=@file={0x0, './file0\x00'}, 0x6e)

1m11.045445407s ago: executing program 32 (id=1462):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r2, 0x400)
futex(&(0x7f0000000200), 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x2, 0x1)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x8, 0x0)
r3 = open_tree(r0, &(0x7f0000000340)='./file0\x00', 0x1000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000400)={r4, 0x2, r3, 0x4, 0x80000})
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r6 = syz_usbip_server_init(0x4)
ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000000580)={r6, 0x0, 0x0, 0x3, 0x7, 0x2})
writev(r0, &(0x7f0000002740)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="1f56f5ead0d2508888569b453a0a5262225902930888daf60ee4bbbec594a5932f9ef39ed5cf9173b6f0843ed790aa0db8e5436d81304d8793aa397371b32ffe99eb3598e3249dc117d3f0f9da9adc41d530347243e345bd6b8bfb33a2981c23636d702a57e740042814af72daf67fb45e0658900a9225293be74e69b165c8b906fd4f05177e0bf0ddf9f1f6e767697bc617", 0x92}, {&(0x7f0000001680)="94af8abcdc3320b809245da7f6243868", 0x10}, {&(0x7f00000016c0)="a4da5a8fc18778a316a7a40a5832cfc263fbc900f776feb56970caf7dbfba342c1bc4673dff21fceff183867165f208f9751cf4862a73a22f95dd34a5f3376bf23a528c9e038f764", 0x48}, {&(0x7f0000001740)="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", 0x1000}], 0x5)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002800), r3)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x5c, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3531}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xd815}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xcf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x10)
readv(r0, &(0x7f0000002a00)=[{&(0x7f0000002940)=""/132, 0x84}], 0x1)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0xf804e000)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000002a40)={&(0x7f0000ffb000/0x3000)=nil, 0x3000})
getsockopt$inet6_int(r3, 0x29, 0x18, &(0x7f0000002a80), &(0x7f0000002ac0)=0x4)
r8 = socket(0x6, 0x5, 0x7)
io_uring_enter(r3, 0x3150, 0xa0ff, 0xc2, &(0x7f0000002b00)={[0xd3]}, 0x8)
openat$fb0(0xffffffffffffff9c, &(0x7f0000002b40), 0xc0881, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003d40)={r3, 0x0, 0x69, 0x1000, &(0x7f0000002b80)="02f5424b47cb24151ccb84a9b7c35191375562fc1e1843921a7ed7c7f6b544550ab5afe3ad4823e2698b36c5548ed214472ee84bf480403fe91810de90b9137888037353b8beb0326c6129cc8e90ce3ff848228637fa910795e5e2ecb97425e880475d37c8a3c228cf", &(0x7f0000002c00)=""/4096, 0xfffffffb, 0x0, 0x39, 0xf0, &(0x7f0000003c00)="1ab9934e44b0ad8c620994802b187652347c07f6c7b54975ebd9a31656cc4bf12b89b3f2290738fbe50ac31b00e1f8507ffb6f1c63eb213297", &(0x7f0000003c40)="8e5205885620f62774155bc88b32da60f9cfd6c3d1208a3e7da5ca7006350c703c0f7afc7620305412ba5ec62ac3ec9d7ce05e9e1aa760fe88a7227ed414d3c86a7bedabbfc06886de6f1a6b92f7b7f7fd26b0835fce1b57f0a5ca78253ed8954c4c2b56ceb8328c33e69e284156b1ab3c0dfd74b5a857cacb1243c050cefa290176f4a6edd0be318cc3e3760c3cd47065068f09139324f1f70a916effc153af38b2b4ec1b48fc7acb6b6bc87aca78f59f0fb0418dfb6cf6489af769990d7e2ba396732a0200f40313996a1d24acfe80778fca1e1f8993084620314d27468b2b62d4f324b0acb5b8919fdbfeb604d3fe", 0x4, 0x0, 0x3}, 0x50)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000003e00)={0x5, &(0x7f0000003dc0)=[{0x2, 0x0, 0xf7, 0x40}, {0x7, 0x3, 0x5, 0x7}, {0x7, 0x9, 0x8, 0x9}, {0x8, 0x8, 0x0, 0x4}, {0xff, 0xfc, 0x2, 0x1}]}, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003e80), r8)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000004280)={&(0x7f0000003e40), 0xc, &(0x7f0000004240)={&(0x7f0000003ec0)={0x370, r10, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x147}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffc01}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x82}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x91}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xefed}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb126}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d7b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x66}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7868}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8b8d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x370}}, 0x4000000)
socket$nl_audit(0x10, 0x3, 0x9)
recvfrom$unix(0xffffffffffffffff, &(0x7f00000042c0)=""/72, 0x48, 0x100, &(0x7f0000004340)=@file={0x0, './file0\x00'}, 0x6e)

1m2.876005006s ago: executing program 5 (id=1554):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080100003e0007010000000005000000047c000004004980ec000180060006003b000000e0001c"], 0x108}, 0x1, 0x0, 0x0, 0x8044}, 0x4010)

1m2.781755303s ago: executing program 5 (id=1559):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r1, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x4}, 0x10}, 0x94)
madvise(0xffffffffffffffff, 0x0, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000180)={'sit0\x00', <r3=>0x0, 0x0, 0x7800, 0xffffc8c4, 0xffffffff, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x64, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @ssrr={0x89, 0xf, 0x31, [@remote, @dev={0xac, 0x14, 0x14, 0xf}, @broadcast]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', <r4=>r3, 0x700, 0x7800, 0x80000000, 0x606, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x65, 0x0, 0x0, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@noop, @noop]}}}}})
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtaction={0xc8, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xb4, 0x1, [@m_mirred={0xb0, 0x1, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x401, 0x6, 0xa, 0x3}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0x1, 0x2, 0x1, 0xfff}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x6, 0x2f1, 0x101}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x570, 0x0, 0x357, 0x1}, 0x3, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r6, &(0x7f0000001300)='3\x00', 0x2)

1m2.373428613s ago: executing program 5 (id=1563):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r2, 0x1)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r4=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x0, 0x112}, 0x8)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0xd82, 0x0, 0x0, 0x1000, 0x100003, 0x0, 0x0, 0x162}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9825, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2b, 0x4, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x1, 0x1, 0x2000033d}}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1m2.218162535s ago: executing program 5 (id=1566):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0xc810)

1m2.216477755s ago: executing program 5 (id=1568):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0) (async)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b35383a301a0890e0878f0e1ac6e7049b073c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b39340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/ipt_hashlimit/lo\x00', 0x0, 0x0)
read(r3, &(0x7f0000000200)=""/1024, 0x400)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a40)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}]}}]}, 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x8, 0x696c, 0x5, 0x0, 0x1, 0x0, '\x00', r6, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x11}, 0x50)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)={0x2c, r11, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2a, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0x2]}]}]}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r9, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x18}, 0x40040050)
sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x20, r7, 0x3, 0x70bd27, 0x25dbdbfb, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4004044) (async)
sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x20, r7, 0x3, 0x70bd27, 0x25dbdbfb, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4004044)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil)
syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m2.106825496s ago: executing program 5 (id=1570):
r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x19, @void}, 0x10)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={<r1=>r0, &(0x7f0000000100)='T+\x00', 0x181102, &(0x7f0000000140)={@align, {0xfecb, 0x1ff, 0x39f8, 0xb}}, 0x6, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x80})
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0xffffffffffffff9a)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
socket$inet_udp(0x2, 0x2, 0x0)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6)

46.161806451s ago: executing program 33 (id=1570):
r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x19, @void}, 0x10)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={<r1=>r0, &(0x7f0000000100)='T+\x00', 0x181102, &(0x7f0000000140)={@align, {0xfecb, 0x1ff, 0x39f8, 0xb}}, 0x6, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x80})
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0xffffffffffffff9a)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
socket$inet_udp(0x2, 0x2, 0x0)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6)

39.522958904s ago: executing program 2 (id=1825):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000280)="$eJzs3EtvG1UbAOB3xk16+3L5Srn0AjUUREQhadICFWIDAqkbJCRYwDKkoQpNW9QEiVYVLQgVsUL8AmCJxC9gBRsErEBsYY+QKtQNhQUymvEMceIkOHZdN/XzSGOfM5ec887Mic/M8TiAvlXNXpKIWkT8HBEj9ezyFar1t+vXLs78ee3iTBK12ku/J/l6f1y7OFOuWm63s8iMpRHp+0nsW6XchfMXTk3Pz8+eK/ITi6ffnFg4f+GxudPTJ2dPzp6ZOnbs6JHJJ5+YevyGxDmU1XXvO2f37zn+6scvzNTite++yOr7v2J5Yxx1ox2XWY3q8n2ZG8xfH+r4r99ahhrSyZYeVoQNqUREdrgG8vY/EpVYOngj8fx7Pa0c0FW1Wq22tWlupUxcrgG3sSR6XQOgN8oP+uz6t5xuYvej564+U78AyuK+Xkz1JVsizd621a/Yh7pUfjUiXrn81yfZFKveh1jdti7VBwC4/X2V9X8eXa3/N5zc1bDecDE2NBoRhyJiV0TcERG7I+LOiMjWvTsi7tlg+dUV+eb+z4/b2wqsRVn/7+libGt5/y8tVxmtFLmhPP6B5PW5+dnDxT4Zi4GtWX5ynTK+fu6nj9Za1tj/y6as/LIvWNTjty0rbtCdmF6c7iTmRk/N1d+b41+6L5BExJ6I2Lt0udCybJ/NPfL5/iw9vLN5+X/Hv44bMM5U+yzi4Xr8l2NF/KWkXtJa45MT22J+9vBEeVY0+/6HKy825gca0h3FfwNcfTdixxrHP1c2g3K8dmHjZVz55YM1r2naPf8Hk5fz9GAx7+3pxcVzkxGDxYxl86eWti3z5fpZ/GMHV4t/ONkV8fenxXb7IiI7ie+NiPsi4kBR9/sj4oGIOLhO/N8+++Ab6++h3h7/E+sd/4jRpHG8vo1E5dQ3X65VfmvH/2ieGivmtPL/r9UKdrLvAAAAYLNI8+/AJ+n4v+k0HR+vf4d/d+xI588uLB6qxltnTtS/Kz8aA2l5p2uk4X7oZHFvuMxPrcgfiYj/53cUt+f58Zmz890aUwdas3ON9p/5tdLr2gFdt6FxtOYn2oBNzPOa0KcGtH/oZ9o/9C/tH/rXau3/UsT1HlQFuMl8/kP/0v6hf2n/0L+0f+hLzY/Elz+30s6T/kuJXcc72nxTJT6M9jbfnicqXapYNP5oRxcSkfZ+z7edSG+FahwoElsjotWtLnX1mK48fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa/fwIAAP//5w/pXg==")
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010102000000406d04900940000102030109026e000301046008080b0001012430010904000000010130000a2401f50a0005000000090401000001023000090401010101023000090501090002b905030a252500020000010600090402000001023000090402010101023000090582092000066f398f255fb58e02d40025250700000001050015b64c1ebc29b9ee059ea43a43"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$EVIOCRMFF(r1, 0x40095505, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)='v', 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@dstopts_2292={{0x150, 0x29, 0x4, {0xff, 0x26, '\x00', [@generic={0x6, 0x56, "c9f8991ffc7d51416174be43b9f110022f265003c3a68555d090510a95312d050b39940103e14278ef2336c47154d78eaf8905bb4d96c18cf4ba47609a6d7415d4314728fc00e66ea951f3cf17a8009438c5e6c1c432"}, @jumbo={0xc2, 0x4, 0xf3c1}, @generic={0xd, 0xd1, "6799ed06742a9e53fff80b5769b461c5b94a8d7a4a9062d8be9cbb108cf77b0ea4882af4626ff80a27c5b095886bf3cac2eca55594d33241370f5717e77f1cf02a0d7c2c86a3f3c1d01d428f341abbceaeb937f55623eb22f28e5b1651529f94680199f42ff15eb8d8243161d282d301cfdf8e0120c65fec8e5a5e537c3731047d86b195a6862e39d4a3e9d5dd4778aca7a62d02e5288c944018ac7b4dacd19f0f033d12a732a8b618f30ca1a94bc5284483d2c7a2b64d806ab93b2bba54f53d81f205661a4bf52038652b0859bd6abc22"}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x168}}], 0x2, 0x4404c880)

38.567583583s ago: executing program 2 (id=1833):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi0\x00', 0x40, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000000c0)={0xa000006, 0x0, 0x0, 0x8, 0x10})
r1 = syz_usbip_server_init(0x5)
write$usbip_server(r1, &(0x7f0000000080)=@ret_unlink={{0x4, 0x8001, 0x0, 0x0, 0xfff}, {0x9ba}}, 0x30)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd, {0x10000000}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7, 0x9, 0x7, 0xfffffffffffffffe, 0x52}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r5 = accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x0)
getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000100)=0x14)
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000040000000800160001000000800000008c6b3427b9289a41f84651cec6dc2975b0af71b399655adbaf1d2e25bdbb85f6235a78d94fad3edbe29219d36e66a2ce639f09637b26eba55947dc8a348137fe86cba7a818ce360f3615ccb0d52f382c03580164b64ff0ee6df1347c4d36214f8a43c81789fe4e7330ad36727d80a3646a16c65fb1aee1d11d9bd2816edfedb71b0b8417e7cb527a09127095cdee79239da99db0d76bcc", @ANYRES32=r7, @ANYBLOB="ffff00"/20, @ANYRES64=r0, @ANYRES8=r6, @ANYBLOB="000000000100"/28], 0x50)
ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000200)={{0x1, @addr=0x6}, "d5722c74732740c3c41fb37e7d6d7f327a595c728fbad3f085cda81549aa0e02", 0x2})
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x100, 0x801, &(0x7f0000000500))

37.901436976s ago: executing program 2 (id=1843):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x180, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0xfff5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0x210}}, 0x0)

37.841053593s ago: executing program 0 (id=1844):
syz_usb_connect(0x6, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="12010900000000407b060323000101020367462c8ed8bd8d5631424e77a80700ff00010100890009041e557351776528e70a628b9c5436c4f0724371285e5a82bf000003"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
r5 = socket(0x2, 0x3, 0x100)
sendmmsg$inet(r5, &(0x7f0000003780)=[{{&(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e25, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001600)=ANY=[], 0x188}}], 0x2, 0x20048880)
io_uring_register$IORING_REGISTER_QUERY(r4, 0x23, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000240), 0x8)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000100)={0x8}, 0x4)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x1)
ioctl$TCFLSH(r9, 0x89f2, 0xbffffffffffffffb)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'caif0\x00', @multicast})
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}}, 0x8004)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}}}, 0xb8}}, 0x0)
write$tun(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be60302bfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef)

37.808864521s ago: executing program 2 (id=1845):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xa9}]}, &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c636865636b3d72656c617865642c757466383d312c756e695f786c6174653d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f77657865632c757466383d302c752835e27a638a1fea3d312c73606f72746e616d653d77696e6e742c696f636861727365743d6d6163726f6d616e2c696f636861727365743d6d616363656c7469632c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c00"/209], 0x7, 0x2a6, &(0x7f0000000740)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_clone(0x0, &(0x7f0000000180)="21dc76eea9ed92ba347224b7075f5359e48c000c404c3e70e7aceea3d1811dbb36f46dee0248913ad988916a8976f68db112debc6855baba78f3585d362175f2f1c160a35783fd918dba637e78ac1f507a1bd93e3a0868bc8d03db94cba5a68084c7dcb0ae739aff1545bbe78f0b829ba0be31df874883", 0x77, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000002280)="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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000000)={0x3, 0x400, 0x2, 0x9, 0x832c, 0x3, 0x3}, &(0x7f0000000200)={0xfffffffffffffff7, 0x1, 0x10001, 0x9, 0x2, 0x3, 0x5, 0x6}, &(0x7f0000000240)={0x3, 0xc, 0x7f, 0x7, 0x20000000000000, 0x1, 0x3c0, 0x3}, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000540)={&(0x7f0000000400)={[0x7]}, 0x8})
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000ffffffff800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c6173740000000004b6028008000340000001", @ANYRESDEC], 0xe4}}, 0x8000)
sched_setaffinity(r3, 0x8, &(0x7f0000001180)=0x1ff)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x3, 'lo\x00', {0x4}, 0x7})
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4)
r6 = syz_clone(0x20804000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/net\x00')
syz_open_procfs(r6, &(0x7f0000000580)='net/ip_tables_names\x00')
bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x2, 0x3)
connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0)

37.243941235s ago: executing program 2 (id=1850):
prlimit64(0x0, 0x2, &(0x7f0000000040)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000fff000/0x1000)=nil)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
setxattr$security_ima(&(0x7f0000000140)='./proc/sys/net/ipv4/ip_forward\x00', &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x4, "9a1685c7af"}, 0x7, 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1', 0x1)
write(r1, &(0x7f0000000300)="03b392", 0x3)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x2}]}}}}}}}}, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf", 0x4f}], 0x1}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x4604, &(0x7f00000005c0))
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00')
read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020)

36.921256632s ago: executing program 2 (id=1853):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0xa4)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000380)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000380)='./file0\x00')
write(r0, &(0x7f0000000000)='3', 0x4e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)

36.684805072s ago: executing program 34 (id=1853):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0xa4)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000380)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000380)='./file0\x00')
write(r0, &(0x7f0000000000)='3', 0x4e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)

36.51722622s ago: executing program 0 (id=1858):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xbbcd469aa9adfb25, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x2, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}, {0xa, 0x4e21, 0x800000b, @loopback, 0x3}, r1, 0x1000}}, 0x48) (fail_nth: 1)

36.260049334s ago: executing program 0 (id=1859):
setfsgid(0xee00)
setresgid(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="791001002b0000000a000100aaaaaaaaaa2d00001c0012800b000100627269646765"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r3 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r3, 0x0, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semctl$SETALL(0x0, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4000000)
r7 = socket$inet(0x2, 0x2, 0x1)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0xffdf}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001010e0000001c000000000000000000000008"], 0x40}, 0xee00)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000", @ANYRES16=r1], 0x14}}, 0x200040c1)

35.332429284s ago: executing program 0 (id=1864):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x756c51182137b80d}, {0xfff5, 0x5}, {0x2, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x80}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x204c0c5}, 0x14)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780), 0x40000, 0x0)
readv(r2, &(0x7f0000004a00)=[{&(0x7f0000002640)=""/8, 0x8}], 0x1)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESDEC=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x283016, 0x0, 0x13, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x808404, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@workdir={'workdir', 0x3d, './bus'}}]})
write(r3, &(0x7f0000000200)='0', 0x1)
read$alg(r3, &(0x7f0000000500)=""/198, 0xc6)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x80c019, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/oops_count', 0x40002, 0x2)
setsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f0000000280)=0x8000, 0x4)
read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, <r5=>0x0}, 0x2020)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x21, 0x3, 0x8000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r6=>0x0}, 0x2020)
flistxattr(r4, &(0x7f0000000600)=""/192, 0xc0)
write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r6}, 0x10)
llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x3)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00')
read$FUSE(r7, &(0x7f0000001840)={0x2020}, 0x2020)

34.974681486s ago: executing program 0 (id=1865):
r0 = syz_open_dev$mtd(&(0x7f0000000040), 0x0, 0x20000)
ioctl$MEMGETREGIONCOUNT(r0, 0x80044d07, &(0x7f0000000080)) (fail_nth: 4)
syz_emit_ethernet(0x0, 0x0, 0x0)

34.612898987s ago: executing program 0 (id=1869):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$sysctl(r1, &(0x7f0000001300)='3\x00', 0x2)

34.600267239s ago: executing program 35 (id=1869):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$sysctl(r1, &(0x7f0000001300)='3\x00', 0x2)

13.492386483s ago: executing program 8 (id=2087):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x1, 0x0, 0x14000000, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x14}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)

13.464276773s ago: executing program 8 (id=2088):
r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42)
dup(r0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
connect$inet(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x8)
setxattr$smack_xattr_label(0x0, 0x0, 0x0, 0x0, 0x6)
epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r3, 0x40106f52, 0x0)

13.422487606s ago: executing program 8 (id=2089):
io_setup(0x3, &(0x7f0000000040)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000b00)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x5)
syz_extract_tcp_res$synack(&(0x7f0000002340)={<r2=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "66f59e", 0x24, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], {{0x4e22, 0x4e23, 0x41424344, r2, 0x1, 0x0, 0x9, 0x80, 0x4, 0x0, 0x4, {[@fastopen={0x22, 0xe, "436e2dc8bc3fe63f091f6838"}]}}}}}}}}, 0x0)
r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"})
r5 = syz_open_pts(r4, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0))
ioctl$TCSETS(r5, 0x5402, &(0x7f00000007c0)={0xff7f, 0x4, 0x0, 0x7fff, 0x12, "68e086e2df361089000000000000000400"})
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x1)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x8, r3, &(0x7f00000000c0), 0x0, 0x1000000000000000}])
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
read$FUSE(r7, &(0x7f0000000280)={0x2020}, 0x2020)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f00000022c0)={0x0, 0x7}, &(0x7f0000002300)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, 0x0, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={<r9=>0x0, 0x3, 0x9, [0x3f, 0x8000, 0x84, 0x5, 0x6, 0x8, 0x18, 0x6, 0x9]}, &(0x7f0000000100)=0x1a)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000140)={0x1000, 0x8, 0x201, 0x80000001, 0xd1, 0x3, 0x4, 0x5, r9}, &(0x7f0000000200)=0x20)

12.923103738s ago: executing program 8 (id=2097):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}, 0x1, 0x0, 0x0, 0x4040041}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x5700, 0x0, 0x4b6ae4f95a5de35b)

12.873480555s ago: executing program 8 (id=2100):
r0 = socket$inet6(0xa, 0x3, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="9bbf54613447920367fff229978a5fcad5a4cf0ff3ca457672211e34bc8e3e3d5a7b900fe042c17910d5193c305c8aca693dc50a0e075ca99c81217567895b2c33b0", 0x42}], 0x1, 0x3, 0x9)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7fffffff, 0x10000, @value=r1}, 0x28)
setns(0xc9, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000040)={'wlan0\x00'})
epoll_create1(0x80000)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000002, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0xf, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
pread64(r2, &(0x7f0000000080)=""/173, 0xad, 0x24)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0x40000000})
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
ioctl$EXT4_IOC_MIGRATE(r6, 0xff02)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="f00000001000010000000008fedbdf25ac1e000100000000000000000000000000000000000000000000000000000000fffe00004e2000000000200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000040000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000008056000000000000000000ff000000000000000000000000000000000001040000090000000000000000000000000000000a0001009000000000000000"], 0xf0}}, 0x24000058)
r8 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x10000})
r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff)
close(r9)
openat$smackfs_onlycap(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$binfmt_script(r9, 0x0, 0x0)

12.737218974s ago: executing program 8 (id=2104):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = socket(0xa, 0x5, 0x0)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x4}, &(0x7f0000000200)=0x8)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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"/1369, 0x559, r0)

3.357870389s ago: executing program 4 (id=2203):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000480)=0x10)
fallocate(r1, 0x0, 0x0, 0x8000)
write(r0, &(0x7f00000001c0)="21000000471161aaaaaaaaaa00000000000000000000000000000003001491612f71354faeb50000000000000000000000000000000000000000000000000000000000000000000000000000000000653d35402604553399604967e752e2cf7574d3f21ebc82a19d33f965fd7790f4fd1cbe3c78b6792cbeaa52c36a40cbbd4880e08a13eb3f0ac80a81526e446b14c10f9dd7e8cf613b4170457d8b4b3dc222c90c4fc21f3ad180cdfa108f6d8ae388f44bc34b9475c2e514cd34f7f00b7e4b0a6c376530d4c281d4e478ed23a7f1d7003540343b80b25a428ac178992f559a621dc818ac926ff43b5d38a70f6276d636e58a021e4e25b7f2d7322cbe45260ecd5f4ed12bdfb681b51ecff823e5ce9fab6895eaee94b0f18bdeb78a010100008000000000a653b2ac5786ed4f6cc068399e6e1fd002affcb7e9eff4a74aeaa35cb10d809e136030900149a823070014c3406a8b9dd9835098872cd1b9841a36d0e4f30000000000", 0x168)

3.268410692s ago: executing program 4 (id=2205):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.22068228s ago: executing program 4 (id=2206):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240), 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000000000e0"])
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4)
setsockopt$inet_int(r0, 0x29, 0x17, 0x0, 0x0)

3.154404577s ago: executing program 4 (id=2207):
r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/load2\x00', 0x2, 0x0)
read(r0, &(0x7f0000000080)=""/46, 0x2e)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}}, 0x8095)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080100003e0007010000000005000000047c000004004980ec000180060006003b000000e0001c"], 0x108}, 0x1, 0x0, 0x0, 0x8044}, 0x4010)

2.293222175s ago: executing program 6 (id=2217):
statx(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1000, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000340)={[{@nobh}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@inlinecrypt}, {@nolazytime}, {@dioread_nolock}, {@dioread_lock}], [{@smackfsdef={'smackfsdef', 0x3d, ':&-+[}\x1a\xf9\x8fE\f\x16l\xbe\xaf.\xae\xa3b\x0e\x9f\xf5\xc0\xf6?`h\xdcD\xe7r\xe3w\xd1.h\xf6\x17a\\(Dd\x88H\xbeu\xc2\x1dJ\x90\br\xffl\x80\x15\x8dJ<\xd1\x1f\x8aA!\xa8\xf4\x9a.\xfd\xe1\x0e\xc5\xf8\x10\xebr2\x8d\x8a\\\xac\xc3\x02M\x9c\xfb\x8c\xa5\xa7\xc30Q\xa9\v\x87\xad\xd5\xf0\xdc\x18\xb9uMe\a\xc9\xd6\x16j\x90\xc4\x87\xb8\xdf\xa5\x91\xa2\xda\xef}\xeb\xcd\xed\xf3\xdc_\x1a\xe0/\t\\\"5\x8a*\xde@\xd3;\xb9\xcb9\x00~\x99\xbalv9\x8c\xed\xe6b\xd9\xb9\xf1\xc0\xdco\x96\xd3*\xdf\xb0\x1ds\x83^\x1f\r\x91\xbe\xc6\xf3\xaa\x9d\xe7\x1fr:\xe0Z/\b\x86\x19\x98T\xbc\xee;\x8e\xd7\xee\xbe\x10\x7f\xe9\xa6*6[\xc0\x1e\xd4\x84X@\xcd\xf9\xdb\x98@*Aw<\x1a#'}}, {@fowner_lt={'fowner<', r0}}]}, 0x1, 0x490, &(0x7f0000000c00)="$eJzs3M9vVNUeAPDvvf0BPH6Ux+O9J4haJSaNxpYWVBZuNJoYg9FEF+iutgNpGKih1QgSKca4MjEkuiYujf4F7oyJUVcmbF25MiRE2QCuau6de8t0mKEDTJnS+XySmZ4z90zP+fbcO/fcc+Y2gJ41nD0lEVsi4reIGKpllxcYrv24duXM1PUrZ6aSWFx8488kL3f1ypmpeLtWtHzf5iIzkkaknyRFJcvNnTp9bLJarZws8mPzx98dmzt1+qn3j08erRytnJg4ePDA/vFnn5l4uiNxZnFd3f3R7J5dL791/tWpw+ff+fnbrL1biu15HB02nAX+12Kucdvjna6sy7bWpZP+W5cdXO3G0La+iMi6ayA//oeiL2503lC89HFXGwesquzctKH15oVFYB1LotstALqjPNFn17/l4x4NPdaEy8/XLoCyuK8Vj9qW/kiLMgMN17edNBwRhxf+vpA9YpXmIQAA6n029eWhwYj48Po3r2Rjj6GIKOeD/pc//54/byvWULZHxL8jYkdE/CcidkbEf4uy/4+IB5rWkrbdnpvHP+mlO42tHdn477libWv5+G+pzdv7itzWPP6B5MhMtbIvNuR/k5EY2JDlx29Rx/cvXvy81bb68V/2yOovx4JFOy71N0zQTU/OT+aD0g64fC5id3+z+JOllYAkInZFxO7b+9XbysTME1/vaVWoefxXL7RVwwrrTO1Y/CoLbyGLfyEa4i8l9euTMzetT45tjGpl31htr2jml18/fb1V/Sv3/+q6XKn9rOv/xiLbk/r12rnO1n+H+386mLyZrzOXa4kfTM7PnxyPGEwO5fllr0/ceG+ZL8tn+//I3ubH/47iPVn8D0ZEthM/FBEPR8QjRdsfjYjHImLvLWL86YWV44+0S/1/LmK66eff0v7f0P+3n+g79uN3repvr/8P5KmR4pX8828FzZqTfVw0NvBu/nYAAABwv0jz78An6ehSOk1HR2vf4d8Z/0qrs3PzTx6Zfe/EdFzcVpv/TMuZrqFiPrQ6U62MJwvFb6zNj04Uc8XlfOn+Yt74i75NeX50arY63eXYoddtbnH8Z/7o63brgFW2qemrE+7Sgp7QuI7e8HWNs6+5ZRPWrQ58jwa4T5XHf4vr/fr7YIB1xvkfelez4/9sQ95aAKxPzv/Quxz/0KPSH+7iza4K4H7n/A896W7u61/FxMZ7UNdAk38HsCYSa7VT8kREmUjXRHskbj+xmLRRuNufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xTwAAAP//YyLmIQ==")

2.286346852s ago: executing program 6 (id=2219):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xa, 0x148, 0x290, 0x10, 0x4b0, 0x2a8, 0x2a8, 0x4b0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x81, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x4, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240, 0x0, 0x8}, {0xfffffffffffffffc}}}, @common=@addrtype={{0x30}, {0xe84, 0x48}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5a8)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000040)={0x40000000})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000000)={0xa0000001})

1.751805809s ago: executing program 3 (id=2221):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xb4}}, 0x0)

1.42133729s ago: executing program 3 (id=2222):
getresuid(&(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)=<r0=>0x0)
setreuid(r0, 0xee00)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x15, 0x4)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, &(0x7f00000000c0)='*!\xaf\x00', 0x80, &(0x7f0000000100)={@_ha_fsid={[0xfffffffe, 0x2]}, {0x40, 0x0, 0x9, 0x9}}, 0x8, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xffff})
setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000200)=0x1, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0fff3ff000000000800000018190000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9720000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$eJzs281OE18Yx/EfL/8/CMJUURSM8YludDOBegUNgcTYRIPU+JKYDDLVpkNLOg2mxgg7t14HcenOxHgDbLwCF+7YuGRhHMNMLS2UqAuZaL+fzXnI4deck+dMcxadnXuvV8vF0C16dfX3mQalTe1KGfVrQIm+5tgf1/+r3aauTeQ/Xbxz/8HNXD4/v2i2kFu6njWz8Uvvn714c/lDffTu2/F3Q9rOPNr5kv28Pbk9tfNt6WkptFJolWrdPFuuVuvecuDbSiksu2a3A98LfStVQr/WMV8MqmtrDfMqK2MjazU/DM2rNKzsN6xetXqtYd4Tr1Qx13VtbET4mcLW4qKXS3sV+LNqtZw3J2n60ExhK5UFAQCAVHH/72Xc/3vB3v3/YfP57cT9HwAAAAAAAAAAAAAAAAAAAACAv8FuFDlRFDk/xv+k+A2fqPn3CUkjkkYlnZQ0JmlckiMpI+mUpNOSJiSdkXRW0qSkc5LOS5pq+6y094rDjur/AP3vCTz/vY3+97a2F3eHpdVX64X1QjIm87miSgrka0aOvsa9bErqhRv5+RmLZXRhdaOZ31gvDHTmZ+XsHZhu+dkkb535ofjctfJZOXsHrFs+2zU/rKtX2vKuHH18rKoCrcRncj//ctZs7lb+QH46/r9/nWstXfvnukfNJ/lfOB/RTNf+DGp6MN29Qwobz8teEPg1CgoKilaR9jcTjsN+09NeCQAAAAAAAAAAAAAAAADgdxzHzwnT3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9DwAA//+TC2AL")
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
fchmod(r6, 0x8)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000a00)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x20004004)
recvmmsg(r7, &(0x7f0000000800), 0x62, 0x12141, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="68000000020601000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a32000000002000078005000300000000000c0001800800014080ffffaf050014001400000014eed8e657216198ed05000500020000000500010006000000b4f70f5e082a0f26e4bae7a5d8ad9ff0abe0ab781ce7b56da83cd4d43bfb3093a661fb15137a0c38fdcf3206e504e615a340f945a1380380dceacd"], 0x68}}, 0x0)

1.371317038s ago: executing program 6 (id=2223):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
dup(0xffffffffffffffff)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

1.370323685s ago: executing program 4 (id=2224):
bpf$MAP_CREATE(0x0, &(0x7f0000002100)=ANY=[], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00')
read$FUSE(r3, &(0x7f00000059c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20)
read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x2020)
r6 = socket$netlink(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0xe, "43488172070000000000476f6094"}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, &(0x7f00000000c0)=0x14)
socket(0x11, 0x80a, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="60300300001400005900128009000100566f6e6400000000480002802c000895c4572852996ce7e5386866b217b2eaf4c0621ae3751836610de1f5299cdd683cc37f93815f83d22be720b40298d34c8aaef148d1af8bc7b1", @ANYRES32=r3], 0x78}}, 0x0)

1.302631609s ago: executing program 3 (id=2225):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
fcntl$addseals(r2, 0x409, 0x3)
close(0x3)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000001c00)=@IORING_OP_SPLICE={0x1e, 0x55, 0x0, @fd_index=0x5, 0x6, 0x9, 0x4})
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})

1.284556312s ago: executing program 3 (id=2226):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket(0x2, 0x80805, 0x0)
socket$tipc(0x1e, 0x7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000883b6000000000000000200910700"/32], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x3, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x8, 0x40000)
signalfd4(r0, &(0x7f0000000140), 0x8, 0x800)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0x4, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x54fb3000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xdaa02, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@oldalloc}, {@sysvgroups}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@lazytime}, {@grpid}, {@debug}, {@oldalloc}, {@noacl}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
syz_io_uring_setup(0x3f7f, &(0x7f0000000200)={0x0, 0xc3b0, 0x800, 0x1, 0x82}, &(0x7f00000001c0), &(0x7f0000000540), &(0x7f0000000480))
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002"], 0x64}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@errors_remount}, {@nouser_xattr}, {@stripe={'stripe', 0x3d, 0x401}}]}, 0x3, 0x79b, &(0x7f0000001200)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm")
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
ioctl$MEMWRITE(r2, 0xc0304d18, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)

709.983602ms ago: executing program 7 (id=2227):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00"], 0x5c}}, 0x0)

688.951462ms ago: executing program 7 (id=2228):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

628.986197ms ago: executing program 7 (id=2229):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8002, 0x3a, '\\.@+', 0x3a, '}-\\-', 0x3a, './file1', 0x3a, [0x50, 0x4f, 0x50, 0x43, 0x4f]}, 0x34)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704000007000000b70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1005, &(0x7f000001b180)=""/4101}, 0x94)
r3 = socket$packet(0x11, 0x3, 0x300)
setresgid(0xee00, 0xffffffffffffffff, 0xffffffffffffffff)
unshare(0x20020600)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4)
setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000380)={0x41, 0x0, 0x2}, 0x4)
r5 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRES64=r0], 0xe8}, 0x1, 0x0, 0x0, 0x8048190}, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x0)
prctl$PR_SET_TSC(0x1a, 0x1)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x2, 0x70)
write(r6, &(0x7f0000000000)='3', 0x4e)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='setgroups\x00')
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4, 0x3}, 0x10)
add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000000000016161616161616161616161616161616161616161616161616161616161616161313131313131313131310918b34a933dd2120252f331313131313131313131313131313131313131313131", @ANYRESDEC=r3, @ANYBLOB="cff76a4c36668669ee8ee9d3de001a2d6aa86847b2dfb2a9dff9b3f0fa59f6e7a66643ff8c29b2615c32f8364872"], 0x48, 0xffffffffffffffff)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x9, 0x424142)
ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x3c, '\x00', @buffer={"e5bb9769ca4fc9dbe55d6aa80e3dea2fc0713c424675bb0905147dee0975dd4f", 0x20}, 0x9}]})
ioctl$FE_GET_INFO(r8, 0x80a86f3d, &(0x7f0000000140))

628.672339ms ago: executing program 7 (id=2230):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000e060d0000000000000000000a000009050001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = landlock_create_ruleset(&(0x7f0000000080)={0xd0f8, 0x1, 0x3}, 0x30, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x5)
r5 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"})

595.548366ms ago: executing program 7 (id=2231):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)='v', 0x1}], 0x2}}], 0x1, 0x4404c880)

540.008924ms ago: executing program 7 (id=2232):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, 0x3e, 0x107, 0x0, 0x5, {0x4, 0x7c}, [@nested={0x4, 0x149}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str=';\x00'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @pid}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8044}, 0x4010)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xa, 0x148, 0x290, 0x10, 0x4b0, 0x2a8, 0x2a8, 0x4b0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x81, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x4, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240, 0x0, 0x8}, {0xfffffffffffffffc}}}, @common=@addrtype={{0x30}, {0xe84, 0x48}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5a8)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)={0x40000000})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})

448.984315ms ago: executing program 6 (id=2233):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xb4}}, 0x0)

414.465838ms ago: executing program 4 (id=2234):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, 0x3e, 0x107, 0x0, 0x5, {0x4, 0x7c}, [@nested={0x4, 0x149}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str=';\x00'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @pid}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8044}, 0x4010)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xa, 0x148, 0x290, 0x10, 0x4b0, 0x2a8, 0x2a8, 0x4b0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x81, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x4, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240, 0x0, 0x8}, {0xfffffffffffffffc}}}, @common=@addrtype={{0x30}, {0xe84, 0x48}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5a8)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000040)={0x40000000})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xa0000001})

397.268846ms ago: executing program 3 (id=2235):
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x8, 0x0, 0x0)
preadv2(0xffffffffffffffff, &(0x7f0000002780), 0x0, 0x5, 0xffffffff, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
socket$inet(0x2, 0x2, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000100002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

298.01355ms ago: executing program 6 (id=2236):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000007f80), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0x40046f41, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="63202a3a2a2083"], 0xa)
ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000000))
r3 = socket$nl_route(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x403, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x2843, 0x4000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x8}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40}]}}}]}, 0x60}, 0x1, 0x2000000000000000, 0x0, 0x20040080}, 0x80)

25.816722ms ago: executing program 3 (id=2237):
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@bsdgroups}, {@nobarrier}, {@noinit_itable}]}, 0xfc, 0x574, &(0x7f0000001980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143442, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x10d080, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000080), 0x58, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = memfd_create(&(0x7f0000000000)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcdX\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9=\t\xbb\x0e\xbb\xb5\x02\x95u\x94r\xfd\x00\xb9\xf8z\xa0\xe6\xcc\x85QO\x1dD\xd5\xe2\xa56j\\', 0x1)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86)
read$FUSE(r0, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2"], 0x48)
mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0)

0s ago: executing program 6 (id=2238):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x14}, 0x60)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r2, &(0x7f0000001300)='3\x00', 0x2)

kernel console output (not intermixed with test programs):

 193.885905][ T4708] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.038932][ T4714] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.066086][T10449] loop2: detected capacity change from 0 to 1024
[  194.086743][T10449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.281769][T10456] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  194.282069][T10456] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  194.282102][T10456] EXT4-fs (loop2): This should not happen!! Data will be lost
[  194.282102][T10456] 
[  194.282131][T10456] EXT4-fs (loop2): Total free blocks count 0
[  194.282159][T10456] EXT4-fs (loop2): Free/Dirty block details
[  194.282189][T10456] EXT4-fs (loop2): free_blocks=68451041280
[  194.282219][T10456] EXT4-fs (loop2): dirty_blocks=64
[  194.282246][T10456] EXT4-fs (loop2): Block reservation details
[  194.282274][T10456] EXT4-fs (loop2): i_reserved_data_blocks=4
[  194.942197][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.997505][T10476] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1727'.
[  195.002765][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  195.005527][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  195.006000][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  195.007749][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  195.008759][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  195.189724][T10477] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.189780][T10477] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.189918][T10477] bridge_slave_0: entered allmulticast mode
[  195.190437][T10477] bridge_slave_0: entered promiscuous mode
[  195.191376][T10477] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.191420][T10477] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.191484][T10477] bridge_slave_1: entered allmulticast mode
[  195.191970][T10477] bridge_slave_1: entered promiscuous mode
[  195.206810][T10477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.207955][T10477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.221019][T10477] team0: Port device team_slave_0 added
[  195.221901][T10477] team0: Port device team_slave_1 added
[  195.235302][T10477] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.235309][T10477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  195.235323][T10477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.235923][T10477] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.235928][T10477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  195.235940][T10477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.260057][T10477] hsr_slave_0: entered promiscuous mode
[  195.260445][T10477] hsr_slave_1: entered promiscuous mode
[  195.260722][T10477] debugfs: 'hsr0' already exists in 'hsr'
[  195.260731][T10477] Cannot create hsr debugfs directory
[  195.341591][ T5805] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.382615][T10477] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  195.387115][T10477] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  195.387688][T10477] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  195.403886][T10477] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  195.405175][T10477] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  195.411728][T10477] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  195.412213][T10477] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  195.423865][T10477] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  195.435565][T10477] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.435588][T10477] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.435694][T10477] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.435722][T10477] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.459475][ T5805] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.475548][T10477] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.479556][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.479890][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.490203][T10477] 8021q: adding VLAN 0 to HW filter on device team0
[  195.497277][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.497300][ T5800] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.499556][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.499576][ T5803] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.530045][ T5805] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.535677][T10505] loop0: detected capacity change from 0 to 1024
[  195.552021][T10505] EXT4-fs: Ignoring removed nomblk_io_submit option
[  195.567277][T10477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  195.572650][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1730'.
[  195.622073][T10519] loop4: detected capacity change from 0 to 128
[  195.645017][T10516] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  195.645037][T10516] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  195.645084][T10516] vhci_hcd vhci_hcd.0: Device attached
[  195.646798][T10519] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  195.650248][T10517] vhci_hcd: cannot find the pending unlink 32769
[  195.686441][T10519] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  195.765523][T10529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1729'.
[  195.777524][ T5805] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.925134][ T4797] usb 9-1: SetAddress Request (2) to port 0
[  195.929938][ T4797] usb 9-1: new SuperSpeed USB device number 2 using vhci_hcd
[  195.965375][T10516] nvme_rdma: malformed address passed: 1å#åº-&Q
öÙ;?²s>#ÕZÙÞ>U´ñ7×Û÷h‘-Ø–ÏíÒY†ïFxŠH:4420
[  195.970754][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  195.984519][T10477] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.015078][T10517] vhci_hcd: connection reset by peer
[  196.020690][ T5946] vhci_hcd vhci_hcd.3: stop threads
[  196.020705][ T5946] vhci_hcd vhci_hcd.3: release socket
[  196.020767][ T5946] vhci_hcd vhci_hcd.3: disconnect device
[  196.026523][T10477] veth0_vlan: entered promiscuous mode
[  196.029303][T10477] veth1_vlan: entered promiscuous mode
[  196.036141][T10477] veth0_macvtap: entered promiscuous mode
[  196.037597][T10477] veth1_macvtap: entered promiscuous mode
[  196.043430][T10477] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.047205][T10477] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.113366][ T5804] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.113820][ T5804] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.113843][ T5804] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.113863][ T5804] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.189678][ T5805] bridge_slave_1: left allmulticast mode
[  196.189701][ T5805] bridge_slave_1: left promiscuous mode
[  196.190381][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.192564][ T5805] bridge_slave_0: left allmulticast mode
[  196.192575][ T5805] bridge_slave_0: left promiscuous mode
[  196.192636][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.198226][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1736'.
[  196.524341][ T5805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.557714][ T5805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.639343][ T5805] bond0 (unregistering): Released all slaves
[  196.667933][ T5805] bond1 (unregistering): Released all slaves
[  196.721276][ T5798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.721292][ T5798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.761916][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0
[  196.842332][T10565] FAULT_INJECTION: forcing a failure.
[  196.842332][T10565] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.842347][T10565] CPU: 1 UID: 0 PID: 10565 Comm: syz.3.1741 Not tainted syzkaller #0 PREEMPT 
[  196.842357][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  196.842369][T10565] Call trace:
[  196.842372][T10565]  show_stack+0x2c/0x3c (C)
[  196.842391][T10565]  __dump_stack+0x30/0x40
[  196.842404][T10565]  dump_stack_lvl+0xd8/0x12c
[  196.842413][T10565]  dump_stack+0x1c/0x28
[  196.842422][T10565]  should_fail_ex+0x418/0x58c
[  196.842435][T10565]  should_fail+0x14/0x24
[  196.842445][T10565]  should_fail_usercopy+0x20/0x30
[  196.842455][T10565]  strncpy_from_user+0x48/0x388
[  196.842463][T10565]  do_getname+0x84/0x234
[  196.842471][T10565]  getname_flags+0x2c/0x3c
[  196.842478][T10565]  do_sys_openat2+0xd0/0x1e8
[  196.842488][T10565]  do_sys_open+0xb0/0xe0
[  196.842497][T10565]  __arm64_sys_openat+0xa8/0xc4
[  196.842506][T10565]  invoke_syscall+0x98/0x244
[  196.842517][T10565]  el0_svc_common+0xec/0x23c
[  196.842526][T10565]  do_el0_svc+0x4c/0x5c
[  196.842535][T10565]  el0_svc+0x60/0x1d8
[  196.842545][T10565]  el0t_64_sync_handler+0x44/0x104
[  196.842554][T10565]  el0t_64_sync+0x198/0x19c
[  196.886143][ T5945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.886153][ T5945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.907665][T10571] input: syz0 as /devices/virtual/input/input4
[  196.937484][T10569] hub 5-0:1.0: USB hub found
[  196.940175][T10569] hub 5-0:1.0: 8 ports detected
[  196.941325][T10573] loop0: detected capacity change from 0 to 128
[  196.955086][T10573] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  196.968217][T10578] loop4: detected capacity change from 0 to 512
[  196.981779][T10573] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  196.990544][T10578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.992181][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1
[  197.028837][ T4708] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  197.057323][T10583] FAULT_INJECTION: forcing a failure.
[  197.057323][T10583] name failslab, interval 1, probability 0, space 0, times 0
[  197.057338][T10583] CPU: 1 UID: 0 PID: 10583 Comm: syz.6.1724 Not tainted syzkaller #0 PREEMPT 
[  197.057350][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  197.057363][T10583] Call trace:
[  197.057366][T10583]  show_stack+0x2c/0x3c (C)
[  197.057385][T10583]  __dump_stack+0x30/0x40
[  197.057396][T10583]  dump_stack_lvl+0xd8/0x12c
[  197.057406][T10583]  dump_stack+0x1c/0x28
[  197.057415][T10583]  should_fail_ex+0x418/0x58c
[  197.057426][T10583]  should_failslab+0xc4/0x120
[  197.057437][T10583]  __kmalloc_noprof+0x108/0x6c8
[  197.057448][T10583]  genl_family_rcv_msg_attrs_parse+0xcc/0x27c
[  197.057459][T10583]  genl_family_rcv_msg_doit+0xd8/0x2d4
[  197.057469][T10583]  genl_rcv_msg+0x43c/0x620
[  197.057478][T10583]  netlink_rcv_skb+0x238/0x414
[  197.057486][T10583]  genl_rcv+0x38/0x50
[  197.057495][T10583]  netlink_unicast+0x600/0x7f8
[  197.057503][T10583]  netlink_sendmsg+0x648/0x948
[  197.057511][T10583]  __sock_sendmsg+0xc8/0x17c
[  197.057520][T10583]  ____sys_sendmsg+0x3d0/0x6c8
[  197.057528][T10583]  ___sys_sendmsg+0x198/0x224
[  197.057537][T10583]  __sys_sendmsg+0x158/0x204
[  197.057545][T10583]  __arm64_sys_sendmsg+0x88/0x9c
[  197.057554][T10583]  invoke_syscall+0x98/0x244
[  197.057564][T10583]  el0_svc_common+0xec/0x23c
[  197.057574][T10583]  do_el0_svc+0x4c/0x5c
[  197.057583][T10583]  el0_svc+0x60/0x1d8
[  197.057593][T10583]  el0t_64_sync_handler+0x44/0x104
[  197.057602][T10583]  el0t_64_sync+0x198/0x19c
[  197.063132][   T51] Bluetooth: hci5: command tx timeout
[  197.142235][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.181307][T10592] FAULT_INJECTION: forcing a failure.
[  197.181307][T10592] name failslab, interval 1, probability 0, space 0, times 0
[  197.181324][T10592] CPU: 0 UID: 0 PID: 10592 Comm: syz.6.1751 Not tainted syzkaller #0 PREEMPT 
[  197.181335][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  197.181349][T10592] Call trace:
[  197.181353][T10592]  show_stack+0x2c/0x3c (C)
[  197.181374][T10592]  __dump_stack+0x30/0x40
[  197.181387][T10592]  dump_stack_lvl+0xd8/0x12c
[  197.181399][T10592]  dump_stack+0x1c/0x28
[  197.181410][T10592]  should_fail_ex+0x418/0x58c
[  197.181423][T10592]  should_failslab+0xc4/0x120
[  197.181435][T10592]  __kmalloc_noprof+0x108/0x6c8
[  197.181449][T10592]  tomoyo_init_log+0x15ec/0x1a4c
[  197.181463][T10592]  tomoyo_supervisor+0x280/0xf28
[  197.181471][T10592]  tomoyo_audit_path_log+0xc8/0x100
[  197.181480][T10592]  tomoyo_path_permission+0x160/0x250
[  197.181490][T10592]  tomoyo_check_open_permission+0x22c/0x394
[  197.181500][T10592]  tomoyo_file_open+0x78/0xcc
[  197.181510][T10592]  security_file_open+0xbc/0x258
[  197.181520][T10592]  do_dentry_open+0x2a8/0xfbc
[  197.181531][T10592]  vfs_open+0x44/0x2dc
[  197.181542][T10592]  path_openat+0x1084/0x18f0
[  197.181551][T10592]  do_file_open+0x1c8/0x2e8
[  197.181561][T10592]  do_sys_openat2+0x114/0x1e8
[  197.181572][T10592]  do_sys_open+0xb0/0xe0
[  197.181582][T10592]  __arm64_sys_openat+0xa8/0xc4
[  197.181593][T10592]  invoke_syscall+0x98/0x244
[  197.181606][T10592]  el0_svc_common+0xec/0x23c
[  197.181618][T10592]  do_el0_svc+0x4c/0x5c
[  197.181629][T10592]  el0_svc+0x60/0x1d8
[  197.181640][T10592]  el0t_64_sync_handler+0x44/0x104
[  197.181650][T10592]  el0t_64_sync+0x198/0x19c
[  197.262111][ T5805] hsr_slave_0: left promiscuous mode
[  197.266567][ T5805] hsr_slave_1: left promiscuous mode
[  197.267039][ T5805] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.267061][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.267521][ T5805] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.267528][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.282788][T10607] netlink: 'syz.3.1755': attribute type 11 has an invalid length.
[  197.287694][ T5798] Bluetooth: hci4: Frame reassembly failed (-84)
[  197.317331][ T5805] veth1_macvtap: left promiscuous mode
[  197.317369][ T5805] veth0_macvtap: left promiscuous mode
[  197.317420][ T5805] veth1_vlan: left promiscuous mode
[  197.317506][ T5805] veth0_vlan: left promiscuous mode
[  197.338152][T10611] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  197.469197][T10613] loop4: detected capacity change from 0 to 2048
[  197.487850][T10613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  197.490652][T10613] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:168: inode #12: comm syz.4.1750: inline data xattr refers to an external xattr inode
[  197.635529][ T6205] usb usb5-port1: attempt power cycle
[  198.030628][ T5805] team0 (unregistering): Port device team_slave_1 removed
[  198.038971][ T5805] team0 (unregistering): Port device team_slave_0 removed
[  198.138017][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1750'.
[  198.169009][   T14] net_ratelimit: 1004 callbacks suppressed
[  198.180610][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  198.196497][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2
[  198.317490][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3
[  198.593568][ T6205] usb usb5-port1: unable to enumerate USB device
[  198.681120][T10637] loop6: detected capacity change from 0 to 256
[  198.710661][T10637] FAT-fs (loop6): bogus logical sector size 2302
[  198.710686][T10637] FAT-fs (loop6): Can't find a valid FAT filesystem
[  198.868717][T10651] loop0: detected capacity change from 0 to 128
[  198.991649][T10665] dvmrp6: entered allmulticast mode
[  199.023313][T10669] loop0: detected capacity change from 0 to 128
[  199.078921][T10669] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  199.143822][ T4724] Bluetooth: hci5: command tx timeout
[  199.154665][ T4708] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  199.303200][ T4724] Bluetooth: hci4: command 0x1003 tx timeout
[  199.303291][   T51] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  199.327421][T10684] futex_wake_op: syz.4.1775 tries to shift op by 144; fix this program
[  199.327509][T10684] futex_wake_op: syz.4.1775 tries to shift op by 144; fix this program
[  199.350529][T10687] loop0: detected capacity change from 0 to 128
[  199.530317][T10697] loop0: detected capacity change from 0 to 512
[  199.536757][T10697] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  199.547530][T10697] EXT4-fs (loop0): 1 truncate cleaned up
[  199.549469][T10697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.605595][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.638095][T10704] loop4: detected capacity change from 0 to 128
[  199.650712][T10704] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  199.719908][T10713] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  199.780168][T10716] loop0: detected capacity change from 0 to 128
[  199.800959][T10716] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  199.841043][ T4708] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  199.943282][T10722] FAULT_INJECTION: forcing a failure.
[  199.943282][T10722] name failslab, interval 1, probability 0, space 0, times 0
[  199.943302][T10722] CPU: 0 UID: 0 PID: 10722 Comm: syz.0.1784 Not tainted syzkaller #0 PREEMPT 
[  199.943312][T10722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  199.943326][T10722] Call trace:
[  199.943329][T10722]  show_stack+0x2c/0x3c (C)
[  199.943349][T10722]  __dump_stack+0x30/0x40
[  199.943361][T10722]  dump_stack_lvl+0xd8/0x12c
[  199.943373][T10722]  dump_stack+0x1c/0x28
[  199.943384][T10722]  should_fail_ex+0x418/0x58c
[  199.943397][T10722]  should_failslab+0xc4/0x120
[  199.943410][T10722]  __kmalloc_noprof+0x108/0x6c8
[  199.943424][T10722]  tomoyo_supervisor+0x8b8/0xf28
[  199.943433][T10722]  tomoyo_audit_path_log+0xc8/0x100
[  199.943442][T10722]  tomoyo_path_permission+0x160/0x250
[  199.943452][T10722]  tomoyo_check_open_permission+0x22c/0x394
[  199.943461][T10722]  tomoyo_file_open+0x78/0xcc
[  199.943472][T10722]  security_file_open+0xbc/0x258
[  199.943481][T10722]  do_dentry_open+0x2a8/0xfbc
[  199.943493][T10722]  vfs_open+0x44/0x2dc
[  199.943503][T10722]  path_openat+0x1084/0x18f0
[  199.943513][T10722]  do_file_open+0x1c8/0x2e8
[  199.943522][T10722]  do_sys_openat2+0x114/0x1e8
[  199.943533][T10722]  do_sys_open+0xb0/0xe0
[  199.943543][T10722]  __arm64_sys_openat+0xa8/0xc4
[  199.943554][T10722]  invoke_syscall+0x98/0x244
[  199.943567][T10722]  el0_svc_common+0xec/0x23c
[  199.943578][T10722]  do_el0_svc+0x4c/0x5c
[  199.943589][T10722]  el0_svc+0x60/0x1d8
[  199.943600][T10722]  el0t_64_sync_handler+0x44/0x104
[  199.943611][T10722]  el0t_64_sync+0x198/0x19c
[  200.487003][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  200.535765][T10747] FAULT_INJECTION: forcing a failure.
[  200.535765][T10747] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.535781][T10747] CPU: 0 UID: 0 PID: 10747 Comm: syz.4.1792 Not tainted syzkaller #0 PREEMPT 
[  200.535792][T10747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  200.535806][T10747] Call trace:
[  200.535810][T10747]  show_stack+0x2c/0x3c (C)
[  200.535829][T10747]  __dump_stack+0x30/0x40
[  200.535842][T10747]  dump_stack_lvl+0xd8/0x12c
[  200.535854][T10747]  dump_stack+0x1c/0x28
[  200.535866][T10747]  should_fail_ex+0x418/0x58c
[  200.535878][T10747]  should_fail+0x14/0x24
[  200.535889][T10747]  should_fail_usercopy+0x20/0x30
[  200.535901][T10747]  bpf_verifier_vlog+0x478/0xbc0
[  200.535914][T10747]  btf_verifier_log+0x120/0x1a0
[  200.535922][T10747]  btf_func_proto_log+0x658/0x7a0
[  200.535931][T10747]  __btf_verifier_log_type+0x3bc/0x5e4
[  200.535944][T10747]  btf_func_proto_check_meta+0xd0/0x154
[  200.535953][T10747]  btf_parse_type_sec+0x36c/0x17a8
[  200.535969][T10747]  btf_new_fd+0x33c/0xa24
[  200.535981][T10747]  bpf_btf_load+0x144/0x190
[  200.535991][T10747]  __sys_bpf+0x7f0/0x82c
[  200.536000][T10747]  __arm64_sys_bpf+0xd0/0xec
[  200.536008][T10747]  invoke_syscall+0x98/0x244
[  200.536020][T10747]  el0_svc_common+0xec/0x23c
[  200.536031][T10747]  do_el0_svc+0x4c/0x5c
[  200.536043][T10747]  el0_svc+0x60/0x1d8
[  200.536054][T10747]  el0t_64_sync_handler+0x44/0x104
[  200.536064][T10747]  el0t_64_sync+0x198/0x19c
[  200.537121][T10747] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1792'.
[  200.630815][T10751] loop4: detected capacity change from 0 to 128
[  200.636933][T10751] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  200.645955][T10751] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  200.657707][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  200.838067][T10762] loop2: detected capacity change from 0 to 512
[  200.841390][T10762] EXT4-fs: Ignoring removed nobh option
[  200.851150][T10762] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  200.851308][T10762] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[  200.851705][T10762] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #13: comm syz.2.1798: inode has both inline data and extents flags
[  200.851721][T10762] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  200.852558][T10762] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1798: couldn't read orphan inode 13 (err -117)
[  200.852581][T10762] loop2: lost filesystem error report for type 5 error -117
[  200.853276][T10762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.878373][T10762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.878659][T10762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.889703][T10762] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  200.897402][T10762] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  200.954502][T10765] EXT4-fs: Ignoring removed oldalloc option
[  200.954518][T10765] EXT4-fs: Ignoring removed oldalloc option
[  200.954526][T10765] ext3: Unknown parameter 'no'
[  200.970687][T10765] netlink: 'syz.6.1799': attribute type 2 has an invalid length.
[  200.971672][T10770] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  200.985075][T10765] ext4: Unknown parameter 'nouser_xattr'
[  201.016636][ T4709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  201.029789][ T4797] usb 9-1: device descriptor read/8, error -110
[  201.123484][T10777] sit0: entered promiscuous mode
[  201.126090][T10777] netlink: 'syz.6.1804': attribute type 1 has an invalid length.
[  201.126102][T10777] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1804'.
[  201.132971][T10778] FAULT_INJECTION: forcing a failure.
[  201.132971][T10778] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  201.132996][T10778] CPU: 1 UID: 0 PID: 10778 Comm: syz.0.1803 Not tainted syzkaller #0 PREEMPT 
[  201.133008][T10778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  201.133021][T10778] Call trace:
[  201.133024][T10778]  show_stack+0x2c/0x3c (C)
[  201.133042][T10778]  __dump_stack+0x30/0x40
[  201.133053][T10778]  dump_stack_lvl+0xd8/0x12c
[  201.133063][T10778]  dump_stack+0x1c/0x28
[  201.133072][T10778]  should_fail_ex+0x418/0x58c
[  201.133084][T10778]  should_fail+0x14/0x24
[  201.133093][T10778]  should_fail_usercopy+0x20/0x30
[  201.133103][T10778]  _copy_from_iter+0x188/0x1064
[  201.133115][T10778]  file_tty_write+0x370/0x66c
[  201.133123][T10778]  tty_write+0x44/0x54
[  201.133129][T10778]  vfs_write+0x51c/0xa0c
[  201.133140][T10778]  ksys_write+0x12c/0x228
[  201.133150][T10778]  __arm64_sys_write+0x84/0x98
[  201.133160][T10778]  invoke_syscall+0x98/0x244
[  201.133170][T10778]  el0_svc_common+0xec/0x23c
[  201.133180][T10778]  do_el0_svc+0x4c/0x5c
[  201.133189][T10778]  el0_svc+0x60/0x1d8
[  201.133199][T10778]  el0t_64_sync_handler+0x44/0x104
[  201.133208][T10778]  el0t_64_sync+0x198/0x19c
[  201.164900][T10774] futex_wake_op: syz.3.1802 tries to shift op by 144; fix this program
[  201.164981][T10774] futex_wake_op: syz.3.1802 tries to shift op by 144; fix this program
[  201.262271][   T51] Bluetooth: hci5: command tx timeout
[  201.447245][ T4797] usb usb9-port1: attempt power cycle
[  201.587249][T10797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.605878][T10803] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1812'.
[  201.635920][T10805] vlan3: entered promiscuous mode
[  201.635928][T10805] hsr0: entered promiscuous mode
[  201.640229][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1813'.
[  201.640360][T10805] hsr_slave_0: left promiscuous mode
[  201.641782][T10805] hsr_slave_1: left promiscuous mode
[  201.660588][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.691805][T10808] FAULT_INJECTION: forcing a failure.
[  201.691805][T10808] name failslab, interval 1, probability 0, space 0, times 0
[  201.691824][T10808] CPU: 0 UID: 0 PID: 10808 Comm: syz.2.1814 Not tainted syzkaller #0 PREEMPT 
[  201.691833][T10808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  201.691846][T10808] Call trace:
[  201.691849][T10808]  show_stack+0x2c/0x3c (C)
[  201.691866][T10808]  __dump_stack+0x30/0x40
[  201.691877][T10808]  dump_stack_lvl+0xd8/0x12c
[  201.691886][T10808]  dump_stack+0x1c/0x28
[  201.691896][T10808]  should_fail_ex+0x418/0x58c
[  201.691907][T10808]  should_failslab+0xc4/0x120
[  201.691917][T10808]  kmem_cache_alloc_noprof+0x94/0x5d4
[  201.691928][T10808]  skb_clone+0x1ac/0x320
[  201.691939][T10808]  __netlink_deliver_tap+0x364/0x6f4
[  201.691948][T10808]  netlink_deliver_tap+0x1d8/0x1dc
[  201.691956][T10808]  netlink_unicast+0x5dc/0x7f8
[  201.691972][T10808]  netlink_sendmsg+0x648/0x948
[  201.691981][T10808]  __sock_sendmsg+0xc8/0x17c
[  201.691990][T10808]  __sys_sendto+0x250/0x328
[  201.691998][T10808]  __arm64_sys_sendto+0xec/0x10c
[  201.692007][T10808]  invoke_syscall+0x98/0x244
[  201.692018][T10808]  el0_svc_common+0xec/0x23c
[  201.692027][T10808]  do_el0_svc+0x4c/0x5c
[  201.692037][T10808]  el0_svc+0x60/0x1d8
[  201.692047][T10808]  el0t_64_sync_handler+0x44/0x104
[  201.692056][T10808]  el0t_64_sync+0x198/0x19c
[  201.692073][T10808] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1814'.
[  201.704939][T10806] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  201.705022][T10806] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  201.705034][T10806] EXT4-fs (loop6): This should not happen!! Data will be lost
[  201.705034][T10806] 
[  201.705042][T10806] EXT4-fs (loop6): Total free blocks count 0
[  201.705049][T10806] EXT4-fs (loop6): Free/Dirty block details
[  201.705057][T10806] EXT4-fs (loop6): free_blocks=68451041280
[  201.705066][T10806] EXT4-fs (loop6): dirty_blocks=64
[  201.705072][T10806] EXT4-fs (loop6): Block reservation details
[  201.705079][T10806] EXT4-fs (loop6): i_reserved_data_blocks=4
[  201.798646][T10816] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1817'.
[  201.885196][T10810] EXT4-fs: Ignoring removed oldalloc option
[  201.885213][T10810] EXT4-fs: Ignoring removed oldalloc option
[  201.885220][T10810] ext3: Unknown parameter 'no'
[  201.906272][T10810] netlink: 'syz.2.1815': attribute type 2 has an invalid length.
[  201.926425][T10810] ext4: Unknown parameter 'nouser_xattr'
[  202.035170][ T4797] usb usb9-port1: unable to enumerate USB device
[  202.148646][T10827] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  202.152333][T10830] FAULT_INJECTION: forcing a failure.
[  202.152333][T10830] name failslab, interval 1, probability 0, space 0, times 0
[  202.152350][T10830] CPU: 1 UID: 0 PID: 10830 Comm: syz.0.1824 Not tainted syzkaller #0 PREEMPT 
[  202.152361][T10830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  202.152376][T10830] Call trace:
[  202.152379][T10830]  show_stack+0x2c/0x3c (C)
[  202.152398][T10830]  __dump_stack+0x30/0x40
[  202.152411][T10830]  dump_stack_lvl+0xd8/0x12c
[  202.152422][T10830]  dump_stack+0x1c/0x28
[  202.152433][T10830]  should_fail_ex+0x418/0x58c
[  202.152447][T10830]  should_failslab+0xc4/0x120
[  202.152460][T10830]  __kmalloc_noprof+0x108/0x6c8
[  202.152473][T10830]  tomoyo_init_log+0x15ec/0x1a4c
[  202.152487][T10830]  tomoyo_supervisor+0x280/0xf28
[  202.152494][T10830]  tomoyo_audit_path_log+0xc8/0x100
[  202.152504][T10830]  tomoyo_path_permission+0x160/0x250
[  202.152514][T10830]  tomoyo_check_open_permission+0x22c/0x394
[  202.152523][T10830]  tomoyo_file_open+0x78/0xcc
[  202.152534][T10830]  security_file_open+0xbc/0x258
[  202.152544][T10830]  do_dentry_open+0x2a8/0xfbc
[  202.152555][T10830]  vfs_open+0x44/0x2dc
[  202.152565][T10830]  path_openat+0x1084/0x18f0
[  202.152576][T10830]  do_file_open+0x1c8/0x2e8
[  202.152585][T10830]  do_sys_openat2+0x114/0x1e8
[  202.152596][T10830]  do_sys_open+0xb0/0xe0
[  202.152606][T10830]  __arm64_sys_openat+0xa8/0xc4
[  202.152618][T10830]  invoke_syscall+0x98/0x244
[  202.152630][T10830]  el0_svc_common+0xec/0x23c
[  202.152642][T10830]  do_el0_svc+0x4c/0x5c
[  202.152653][T10830]  el0_svc+0x60/0x1d8
[  202.152664][T10830]  el0t_64_sync_handler+0x44/0x104
[  202.152675][T10830]  el0t_64_sync+0x198/0x19c
[  202.171289][T10837] EXT4-fs: Ignoring removed nobh option
[  202.180101][T10837] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  202.180121][T10837] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[  202.187408][T10837] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #13: comm syz.2.1825: inode has both inline data and extents flags
[  202.187431][T10837] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  202.187813][T10837] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1825: couldn't read orphan inode 13 (err -117)
[  202.187834][T10837] loop2: lost filesystem error report for type 5 error -117
[  202.187939][    C1] EXT4-fs (loop2): error count since last fsck: 2
[  202.187952][    C1] EXT4-fs (loop2): initial error at time 207: ext4_orphan_get:1403: inode 13
[  202.187968][    C1] EXT4-fs (loop2): last error at time 207: ext4_orphan_get:1408
[  202.194785][T10841] FAULT_INJECTION: forcing a failure.
[  202.194785][T10841] name failslab, interval 1, probability 0, space 0, times 0
[  202.194800][T10841] CPU: 1 UID: 0 PID: 10841 Comm: syz.3.1823 Not tainted syzkaller #0 PREEMPT 
[  202.194812][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  202.194826][T10841] Call trace:
[  202.194829][T10841]  show_stack+0x2c/0x3c (C)
[  202.194846][T10841]  __dump_stack+0x30/0x40
[  202.194857][T10841]  dump_stack_lvl+0xd8/0x12c
[  202.194866][T10841]  dump_stack+0x1c/0x28
[  202.194876][T10841]  should_fail_ex+0x418/0x58c
[  202.194886][T10841]  should_failslab+0xc4/0x120
[  202.194897][T10841]  kmem_cache_alloc_node_noprof+0x98/0x604
[  202.194909][T10841]  __alloc_skb+0x1f0/0x610
[  202.194918][T10841]  netlink_alloc_large_skb+0xd4/0x114
[  202.194927][T10841]  netlink_sendmsg+0x4c4/0x948
[  202.194936][T10841]  __sock_sendmsg+0xc8/0x17c
[  202.194944][T10841]  ____sys_sendmsg+0x3d0/0x6c8
[  202.194952][T10841]  ___sys_sendmsg+0x198/0x224
[  202.194961][T10841]  __sys_sendmsg+0x158/0x204
[  202.194969][T10841]  __arm64_sys_sendmsg+0x88/0x9c
[  202.194985][T10841]  invoke_syscall+0x98/0x244
[  202.194996][T10841]  el0_svc_common+0xec/0x23c
[  202.195006][T10841]  do_el0_svc+0x4c/0x5c
[  202.195015][T10841]  el0_svc+0x60/0x1d8
[  202.195025][T10841]  el0t_64_sync_handler+0x44/0x104
[  202.195034][T10841]  el0t_64_sync+0x198/0x19c
[  202.251815][T10837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.252102][T10837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.252510][T10837] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  202.376717][T10850] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  202.376737][T10850] EXT4-fs (loop0): Test dummy encryption mode enabled
[  202.379056][T10850] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002]
[  202.379108][T10850] System zones: 0-5
[  202.618441][T10855] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1830'.
[  202.766165][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'.
[  203.141922][T10868] overlay: Unknown parameter 'dont_hash'
[  203.193823][T10872] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  203.193835][T10872] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  203.194685][T10872] vhci_hcd vhci_hcd.0: Device attached
[  203.196242][T10874] vhci_hcd: cannot find the pending unlink 32769
[  203.238035][T10874] vhci_hcd: connection closed
[  203.239936][ T5798] vhci_hcd vhci_hcd.2: stop threads
[  203.239950][ T5798] vhci_hcd vhci_hcd.2: release socket
[  203.239971][ T5798] vhci_hcd vhci_hcd.2: disconnect device
[  203.243588][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'.
[  203.243697][T10877] veth0: entered promiscuous mode
[  203.243706][T10877] veth0: entered allmulticast mode
[  203.350865][T10879] set_capacity_and_notify: 12 callbacks suppressed
[  203.350873][T10879] loop4: detected capacity change from 0 to 512
[  203.351805][T10879] EXT4-fs: Ignoring removed oldalloc option
[  203.351824][T10879] EXT4-fs: Ignoring removed oldalloc option
[  203.351832][T10879] ext3: Unknown parameter 'no'
[  203.385696][T10879] netlink: 'syz.4.1836': attribute type 2 has an invalid length.
[  203.401582][   T51] Bluetooth: hci5: command tx timeout
[  203.410909][    C0] net_ratelimit: 1526 callbacks suppressed
[  203.415054][T10879] loop4: detected capacity change from 0 to 2048
[  203.417702][T10879] ext4: Unknown parameter 'nouser_xattr'
[  203.574554][T10882] loop6: detected capacity change from 0 to 128
[  203.592000][T10882] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  203.618666][T10887] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1838'.
[  203.680448][T10891] loop4: detected capacity change from 0 to 4096
[  203.682727][T10891] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  203.682742][T10891] EXT4-fs (loop4): Test dummy encryption mode enabled
[  203.684707][T10891] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002]
[  203.684762][T10891] System zones: 0-5
[  203.711837][T10894] loop0: detected capacity change from 0 to 1024
[  203.991578][T10903] loop2: detected capacity change from 0 to 256
[  203.992067][T10903] vfat: Unknown parameter 'u(5âzcŠê'
[  203.995398][T10905] loop3: detected capacity change from 0 to 512
[  204.078954][T10918] FAULT_INJECTION: forcing a failure.
[  204.078954][T10918] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.078973][T10918] CPU: 0 UID: 0 PID: 10918 Comm: syz.4.1848 Not tainted syzkaller #0 PREEMPT 
[  204.078983][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  204.078996][T10918] Call trace:
[  204.079000][T10918]  show_stack+0x2c/0x3c (C)
[  204.079021][T10918]  __dump_stack+0x30/0x40
[  204.079032][T10918]  dump_stack_lvl+0xd8/0x12c
[  204.079041][T10918]  dump_stack+0x1c/0x28
[  204.079051][T10918]  should_fail_ex+0x418/0x58c
[  204.079062][T10918]  should_fail+0x14/0x24
[  204.079071][T10918]  should_fail_usercopy+0x20/0x30
[  204.079081][T10918]  simple_read_from_buffer+0xc4/0x238
[  204.079092][T10918]  proc_fail_nth_read+0x1a8/0x248
[  204.079100][T10918]  vfs_read+0x230/0x8c8
[  204.079111][T10918]  ksys_read+0x12c/0x228
[  204.079120][T10918]  __arm64_sys_read+0x84/0x98
[  204.079129][T10918]  invoke_syscall+0x98/0x244
[  204.079140][T10918]  el0_svc_common+0xec/0x23c
[  204.079149][T10918]  do_el0_svc+0x4c/0x5c
[  204.079158][T10918]  el0_svc+0x60/0x1d8
[  204.079168][T10918]  el0t_64_sync_handler+0x44/0x104
[  204.079177][T10918]  el0t_64_sync+0x198/0x19c
[  204.440733][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'.
[  204.572153][T10936] FAULT_INJECTION: forcing a failure.
[  204.572153][T10936] name failslab, interval 1, probability 0, space 0, times 0
[  204.572171][T10936] CPU: 0 UID: 0 PID: 10936 Comm: syz.6.1851 Not tainted syzkaller #0 PREEMPT 
[  204.572183][T10936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  204.572198][T10936] Call trace:
[  204.572201][T10936]  show_stack+0x2c/0x3c (C)
[  204.572223][T10936]  __dump_stack+0x30/0x40
[  204.572236][T10936]  dump_stack_lvl+0xd8/0x12c
[  204.572247][T10936]  dump_stack+0x1c/0x28
[  204.572258][T10936]  should_fail_ex+0x418/0x58c
[  204.572271][T10936]  should_failslab+0xc4/0x120
[  204.572283][T10936]  __kmalloc_noprof+0x108/0x6c8
[  204.572297][T10936]  tomoyo_init_log+0x15ec/0x1a4c
[  204.572311][T10936]  tomoyo_supervisor+0x280/0xf28
[  204.572319][T10936]  tomoyo_audit_path_log+0xc8/0x100
[  204.572328][T10936]  tomoyo_path_permission+0x160/0x250
[  204.572338][T10936]  tomoyo_check_open_permission+0x22c/0x394
[  204.572348][T10936]  tomoyo_file_open+0x78/0xcc
[  204.572358][T10936]  security_file_open+0xbc/0x258
[  204.572367][T10936]  do_dentry_open+0x2a8/0xfbc
[  204.572379][T10936]  vfs_open+0x44/0x2dc
[  204.572389][T10936]  path_openat+0x1084/0x18f0
[  204.572399][T10936]  do_file_open+0x1c8/0x2e8
[  204.572408][T10936]  do_sys_openat2+0x114/0x1e8
[  204.572419][T10936]  do_sys_open+0xb0/0xe0
[  204.572430][T10936]  __arm64_sys_openat+0xa8/0xc4
[  204.572441][T10936]  invoke_syscall+0x98/0x244
[  204.572453][T10936]  el0_svc_common+0xec/0x23c
[  204.572465][T10936]  do_el0_svc+0x4c/0x5c
[  204.572476][T10936]  el0_svc+0x60/0x1d8
[  204.572487][T10936]  el0t_64_sync_handler+0x44/0x104
[  204.572498][T10936]  el0t_64_sync+0x198/0x19c
[  204.849406][ T5945] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.851914][T10943] FAULT_INJECTION: forcing a failure.
[  204.851914][T10943] name failslab, interval 1, probability 0, space 0, times 0
[  204.851931][T10943] CPU: 1 UID: 0 PID: 10943 Comm: syz.6.1852 Not tainted syzkaller #0 PREEMPT 
[  204.851943][T10943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  204.851958][T10943] Call trace:
[  204.851961][T10943]  show_stack+0x2c/0x3c (C)
[  204.851988][T10943]  __dump_stack+0x30/0x40
[  204.852001][T10943]  dump_stack_lvl+0xd8/0x12c
[  204.852013][T10943]  dump_stack+0x1c/0x28
[  204.852024][T10943]  should_fail_ex+0x418/0x58c
[  204.852037][T10943]  should_failslab+0xc4/0x120
[  204.852050][T10943]  __kmalloc_noprof+0x108/0x6c8
[  204.852063][T10943]  tomoyo_init_log+0x15ec/0x1a4c
[  204.852077][T10943]  tomoyo_supervisor+0x280/0xf28
[  204.852085][T10943]  tomoyo_audit_path_log+0xc8/0x100
[  204.852095][T10943]  tomoyo_path_permission+0x160/0x250
[  204.852104][T10943]  tomoyo_check_open_permission+0x22c/0x394
[  204.852114][T10943]  tomoyo_file_open+0x78/0xcc
[  204.852124][T10943]  security_file_open+0xbc/0x258
[  204.852134][T10943]  do_dentry_open+0x2a8/0xfbc
[  204.852146][T10943]  vfs_open+0x44/0x2dc
[  204.852156][T10943]  path_openat+0x1084/0x18f0
[  204.852166][T10943]  do_file_open+0x1c8/0x2e8
[  204.852175][T10943]  do_sys_openat2+0x114/0x1e8
[  204.852186][T10943]  do_sys_open+0xb0/0xe0
[  204.852196][T10943]  __arm64_sys_openat+0xa8/0xc4
[  204.852208][T10943]  invoke_syscall+0x98/0x244
[  204.852220][T10943]  el0_svc_common+0xec/0x23c
[  204.852231][T10943]  do_el0_svc+0x4c/0x5c
[  204.852243][T10943]  el0_svc+0x60/0x1d8
[  204.852254][T10943]  el0t_64_sync_handler+0x44/0x104
[  204.852264][T10943]  el0t_64_sync+0x198/0x19c
[  204.987540][ T5945] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.071434][ T4724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  205.076659][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  205.077331][ T4724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  205.078079][ T4724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  205.078772][ T4724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  205.114917][ T5945] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.355646][T10961] futex_wake_op: syz.6.1855 tries to shift op by 144; fix this program
[  205.355716][T10961] futex_wake_op: syz.6.1855 tries to shift op by 144; fix this program
[  205.367823][T10965] FAULT_INJECTION: forcing a failure.
[  205.367823][T10965] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.367836][T10965] CPU: 0 UID: 0 PID: 10965 Comm: syz.0.1858 Not tainted syzkaller #0 PREEMPT 
[  205.367846][T10965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  205.367858][T10965] Call trace:
[  205.367861][T10965]  show_stack+0x2c/0x3c (C)
[  205.367877][T10965]  __dump_stack+0x30/0x40
[  205.367888][T10965]  dump_stack_lvl+0xd8/0x12c
[  205.367897][T10965]  dump_stack+0x1c/0x28
[  205.367907][T10965]  should_fail_ex+0x418/0x58c
[  205.367918][T10965]  should_fail+0x14/0x24
[  205.367930][T10965]  should_fail_usercopy+0x20/0x30
[  205.367941][T10965]  _inline_copy_from_user+0x3c/0x174
[  205.367951][T10965]  ucma_write+0x13c/0x2b8
[  205.367960][T10965]  vfs_write+0x2a4/0xa0c
[  205.367976][T10965]  ksys_write+0x12c/0x228
[  205.367986][T10965]  __arm64_sys_write+0x84/0x98
[  205.367996][T10965]  invoke_syscall+0x98/0x244
[  205.368006][T10965]  el0_svc_common+0xec/0x23c
[  205.368016][T10965]  do_el0_svc+0x4c/0x5c
[  205.368025][T10965]  el0_svc+0x60/0x1d8
[  205.368035][T10965]  el0t_64_sync_handler+0x44/0x104
[  205.368044][T10965]  el0t_64_sync+0x198/0x19c
[  205.458227][ T5945] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.955730][ T5945] bridge_slave_1: left allmulticast mode
[  205.955746][ T5945] bridge_slave_1: left promiscuous mode
[  205.955838][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.961518][ T5945] bridge_slave_0: left allmulticast mode
[  205.961545][ T5945] bridge_slave_0: left promiscuous mode
[  205.961616][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.965181][ T5945] dvmrp6: left allmulticast mode
[  205.973925][ T5945] bond_slave_0: left promiscuous mode
[  205.973951][ T5945] bond_slave_1: left promiscuous mode
[  205.996719][T10983] Device name cannot be null; rc = [-22]
[  205.999131][T10982] loop4: detected capacity change from 0 to 1024
[  206.141495][T10988] binder: 10981:10988 tried to acquire reference to desc 0, got 1 instead
[  206.141943][T10987] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  206.142020][T10987] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  206.142040][T10987] EXT4-fs (loop4): This should not happen!! Data will be lost
[  206.142040][T10987] 
[  206.142048][T10987] EXT4-fs (loop4): Total free blocks count 0
[  206.142072][T10987] EXT4-fs (loop4): Free/Dirty block details
[  206.142082][T10987] EXT4-fs (loop4): free_blocks=68451041280
[  206.142093][T10987] EXT4-fs (loop4): dirty_blocks=64
[  206.142100][T10987] EXT4-fs (loop4): Block reservation details
[  206.142108][T10987] EXT4-fs (loop4): i_reserved_data_blocks=4
[  206.167662][T10988] binder: 10981:10988 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  206.167681][T10988] binder: 10988 RLIMIT_NICE not set
[  206.193791][T10989] binder: 10981:10989 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  206.193805][T10989] binder: 10989 RLIMIT_NICE not set
[  206.273995][ T5945] bond0 (unregistering): left allmulticast mode
[  206.274003][ T5945] bond_slave_0: left allmulticast mode
[  206.274012][ T5945] bond_slave_1: left allmulticast mode
[  206.282421][ T5945] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[  206.286032][ T5945] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[  206.331705][ T5945] macvlan2 (unregistering): left allmulticast mode
[  206.346327][ T5945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.358966][T10993] __nla_validate_parse: 2 callbacks suppressed
[  206.358976][T10993] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1864'.
[  206.395971][ T5945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.413490][T10995] loop0: detected capacity change from 0 to 512
[  206.413955][T10995] EXT4-fs: Ignoring removed bh option
[  206.414845][T10995] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  206.422246][T10995] EXT4-fs (loop0): 1 truncate cleaned up
[  206.458395][ T5945] bond0 (unregistering): Released all slaves
[  206.471355][ T5945] bond1 (unregistering): Released all slaves
[  206.588338][T10995] overlayfs: upper fs needs to support d_type.
[  206.665615][ T4708] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  206.675945][ T4708] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  206.707536][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4
[  206.767972][T10953] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.768028][T10953] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.768102][T10953] bridge_slave_0: entered allmulticast mode
[  206.768665][T10953] bridge_slave_0: entered promiscuous mode
[  206.817440][T10953] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.817565][T10953] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.817658][T10953] bridge_slave_1: entered allmulticast mode
[  206.818165][T10953] bridge_slave_1: entered promiscuous mode
[  206.885314][T11005] loop6: detected capacity change from 0 to 128
[  206.910285][T10953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.916046][T10953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.949634][ T5945] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.949647][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.950804][ T5945] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.950812][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.957022][ T5945] batman_adv: batadv0: Interface deactivated: ipvlan2
[  206.957033][ T5945] batman_adv: batadv0: Removing interface: ipvlan2
[  207.047542][ T5945] veth1_macvtap: left promiscuous mode
[  207.047640][ T5945] veth0_macvtap: left promiscuous mode
[  207.047685][ T5945] veth1_vlan: left promiscuous mode
[  207.047720][ T5945] veth0_vlan: left promiscuous mode
[  207.206472][   T51] Bluetooth: hci2: command tx timeout
[  207.388919][T11017] futex_wake_op: syz.6.1871 tries to shift op by 144; fix this program
[  207.389007][T11017] futex_wake_op: syz.6.1871 tries to shift op by 144; fix this program
[  207.390320][T11021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1872'.
[  207.392267][ T4724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  207.396368][ T4724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  207.398088][ T4724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  207.402685][ T4724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  207.403540][ T4724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  207.587040][ T5945] team0 (unregistering): Port device team_slave_1 removed
[  207.592607][ T5945] team0 (unregistering): Port device team_slave_0 removed
[  207.680928][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5
[  207.712514][T10953] team0: Port device team_slave_0 added
[  207.713377][T10953] team0: Port device team_slave_1 added
[  207.773003][T11030] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.773752][T10953] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.773758][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.773769][T10953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.774447][T10953] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.774452][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.774464][T10953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.871422][T10953] hsr_slave_0: entered promiscuous mode
[  207.873113][T10953] hsr_slave_1: entered promiscuous mode
[  207.962712][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6
[  208.180655][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'.
[  208.207823][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7
[  208.296238][T10953] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  208.326021][T10953] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  208.332451][T11066] futex_wake_op: syz.6.1882 tries to shift op by 144; fix this program
[  208.332532][T11066] futex_wake_op: syz.6.1882 tries to shift op by 144; fix this program
[  208.339470][T10953] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  208.384349][T10953] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  208.384714][T10953] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  208.408683][T10953] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  208.554670][    C1] net_ratelimit: 1590 callbacks suppressed
[  208.715330][T11081] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  208.715409][T11081] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  208.715422][T11081] EXT4-fs (loop4): This should not happen!! Data will be lost
[  208.715422][T11081] 
[  208.715429][T11081] EXT4-fs (loop4): Total free blocks count 0
[  208.715436][T11081] EXT4-fs (loop4): Free/Dirty block details
[  208.715445][T11081] EXT4-fs (loop4): free_blocks=68451041280
[  208.715454][T11081] EXT4-fs (loop4): dirty_blocks=64
[  208.715460][T11081] EXT4-fs (loop4): Block reservation details
[  208.715466][T11081] EXT4-fs (loop4): i_reserved_data_blocks=4
[  208.899800][T10953] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  208.903811][T10953] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  208.956045][T10953] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.961050][T10953] 8021q: adding VLAN 0 to HW filter on device team0
[  208.974057][ T4564] tipc: Node number set to 721921417
[  208.987887][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.987910][ T5945] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.988673][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.988692][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.299602][   T51] Bluetooth: hci2: command tx timeout
[  209.313765][T11022] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.313791][T11022] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.314048][T11022] bridge_slave_0: entered allmulticast mode
[  209.314722][T11022] bridge_slave_0: entered promiscuous mode
[  209.320182][T11022] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.320206][T11022] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.320289][T11022] bridge_slave_1: entered allmulticast mode
[  209.320852][T11022] bridge_slave_1: entered promiscuous mode
[  209.360593][T11022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.384219][T11022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.429119][T11022] team0: Port device team_slave_0 added
[  209.434154][T11022] team0: Port device team_slave_1 added
[  209.458735][T11022] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.458741][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  209.458753][T11022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.460438][T11022] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.460444][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  209.460459][T11022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.515006][T11022] hsr_slave_0: entered promiscuous mode
[  209.515481][T11022] hsr_slave_1: entered promiscuous mode
[  209.516193][T11022] debugfs: 'hsr0' already exists in 'hsr'
[  209.516203][T11022] Cannot create hsr debugfs directory
[  209.532396][   T51] Bluetooth: hci0: command tx timeout
[  209.547660][T10953] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.628803][T10953] veth0_vlan: entered promiscuous mode
[  209.649194][T10953] veth1_vlan: entered promiscuous mode
[  209.679487][T10953] veth0_macvtap: entered promiscuous mode
[  209.681150][T10953] veth1_macvtap: entered promiscuous mode
[  209.704414][T10953] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.708266][T10953] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.742008][ T5941] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.742043][ T5941] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.742060][ T5941] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.764874][T11022] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  209.774775][T11022] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  209.775118][T11022] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  209.775626][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'.
[  209.785920][T11022] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  209.795579][T11022] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  209.820904][T11022] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  209.821294][T11022] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  209.831915][T11022] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  209.834213][ T5945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.834222][ T5945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.849351][T11137] set_capacity_and_notify: 2 callbacks suppressed
[  209.849358][T11137] loop6: detected capacity change from 0 to 128
[  209.860342][ T5941] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.891809][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.891819][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.041737][T11022] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.284772][T11154] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1894'.
[  210.289895][T11154] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1894'.
[  210.290529][T11022] 8021q: adding VLAN 0 to HW filter on device team0
[  210.294587][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.294612][ T5805] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.311478][T11022] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  210.311488][T11022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  210.314038][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.314059][ T5805] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.393569][T11022] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.414109][T11165] FAULT_INJECTION: forcing a failure.
[  210.414109][T11165] name failslab, interval 1, probability 0, space 0, times 0
[  210.414129][T11165] CPU: 1 UID: 0 PID: 11165 Comm: syz.3.1896 Not tainted syzkaller #0 PREEMPT 
[  210.414140][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  210.414156][T11165] Call trace:
[  210.414160][T11165]  show_stack+0x2c/0x3c (C)
[  210.414179][T11165]  __dump_stack+0x30/0x40
[  210.414192][T11165]  dump_stack_lvl+0xd8/0x12c
[  210.414204][T11165]  dump_stack+0x1c/0x28
[  210.414215][T11165]  should_fail_ex+0x418/0x58c
[  210.414228][T11165]  should_failslab+0xc4/0x120
[  210.414242][T11165]  __kmalloc_noprof+0x108/0x6c8
[  210.414255][T11165]  tomoyo_init_log+0x15ec/0x1a4c
[  210.414268][T11165]  tomoyo_supervisor+0x280/0xf28
[  210.414276][T11165]  tomoyo_audit_path_log+0xc8/0x100
[  210.414286][T11165]  tomoyo_path_permission+0x160/0x250
[  210.414295][T11165]  tomoyo_check_open_permission+0x22c/0x394
[  210.414305][T11165]  tomoyo_file_open+0x78/0xcc
[  210.414316][T11165]  security_file_open+0xbc/0x258
[  210.414325][T11165]  do_dentry_open+0x2a8/0xfbc
[  210.414336][T11165]  vfs_open+0x44/0x2dc
[  210.414347][T11165]  path_openat+0x1084/0x18f0
[  210.414356][T11165]  do_file_open+0x1c8/0x2e8
[  210.414365][T11165]  do_sys_openat2+0x114/0x1e8
[  210.414376][T11165]  do_sys_open+0xb0/0xe0
[  210.414387][T11165]  __arm64_sys_openat+0xa8/0xc4
[  210.414398][T11165]  invoke_syscall+0x98/0x244
[  210.414410][T11165]  el0_svc_common+0xec/0x23c
[  210.414422][T11165]  do_el0_svc+0x4c/0x5c
[  210.414433][T11165]  el0_svc+0x60/0x1d8
[  210.414444][T11165]  el0t_64_sync_handler+0x44/0x104
[  210.414455][T11165]  el0t_64_sync+0x198/0x19c
[  210.454967][T11169] vlan2: entered promiscuous mode
[  210.454979][T11169] hsr0: entered promiscuous mode
[  210.496587][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1897'.
[  210.501789][T11169] hsr_slave_0: left promiscuous mode
[  210.502369][T11169] hsr_slave_1: left promiscuous mode
[  210.809916][T11022] veth0_vlan: entered promiscuous mode
[  210.813141][T11022] veth1_vlan: entered promiscuous mode
[  210.840951][T11022] veth0_macvtap: entered promiscuous mode
[  210.847448][T11022] veth1_macvtap: entered promiscuous mode
[  211.145894][T11196] loop4: detected capacity change from 0 to 128
[  211.162901][T11022] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.171215][T11022] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.177002][ T5798] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.177105][ T5798] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.185610][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1902'.
[  211.211838][ T5798] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.217208][ T5805] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.268552][ T1410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.268568][ T1410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.300968][ T5941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.300976][ T5941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.308780][T11206] netlink: 'syz.6.1906': attribute type 1 has an invalid length.
[  211.361515][T11209] loop4: detected capacity change from 0 to 2048
[  211.424545][   T51] Bluetooth: hci2: command tx timeout
[  211.456890][T11209]  loop4: p1 < > p2 p3 < > p4 < p5 >
[  211.456902][T11209] loop4: partition table partially beyond EOD, truncated
[  211.457031][T11209] loop4: p1 start 3405774849 is beyond EOD, truncated
[  211.465242][T11209] loop4: p3 start 4225 is beyond EOD, truncated
[  211.840780][   T51] Bluetooth: hci0: command tx timeout
[  212.939324][T11241] can0: slcan on ptm0.
[  213.019562][T11240] can0 (unregistered): slcan off ptm0.
[  213.035204][T11232] loop4: detected capacity change from 0 to 512
[  213.035653][T11232] EXT4-fs: Ignoring removed oldalloc option
[  213.035670][T11232] EXT4-fs: Ignoring removed oldalloc option
[  213.035677][T11232] ext3: Unknown parameter 'no'
[  213.065385][T11232] netlink: 'syz.4.1912': attribute type 2 has an invalid length.
[  213.075516][T11232] loop4: detected capacity change from 0 to 2048
[  213.075876][T11232] ext4: Unknown parameter 'nouser_xattr'
[  213.519290][   T51] Bluetooth: hci2: command tx timeout
[  213.584077][ T1301] wlan1: Trigger new scan to find an IBSS to join
[  213.677519][ T4399] net_ratelimit: 1948 callbacks suppressed
[  213.785228][T11245] loop7: detected capacity change from 0 to 512
[  213.786832][T11245] EXT4-fs: Ignoring removed oldalloc option
[  213.786849][T11245] EXT4-fs: Ignoring removed oldalloc option
[  213.786856][T11245] ext3: Unknown parameter 'no'
[  213.811705][T11245] netlink: 'syz.7.1916': attribute type 2 has an invalid length.
[  213.825562][T11245] loop7: detected capacity change from 0 to 2048
[  213.827039][T11245] ext4: Unknown parameter 'nouser_xattr'
[  213.871279][T11263] FAULT_INJECTION: forcing a failure.
[  213.871279][T11263] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  213.871300][T11263] CPU: 1 UID: 0 PID: 11263 Comm: syz.4.1922 Not tainted syzkaller #0 PREEMPT 
[  213.871313][T11263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  213.871326][T11263] Call trace:
[  213.871329][T11263]  show_stack+0x2c/0x3c (C)
[  213.871347][T11263]  __dump_stack+0x30/0x40
[  213.871357][T11263]  dump_stack_lvl+0xd8/0x12c
[  213.871367][T11263]  dump_stack+0x1c/0x28
[  213.871376][T11263]  should_fail_ex+0x418/0x58c
[  213.871387][T11263]  should_fail+0x14/0x24
[  213.871396][T11263]  should_fail_usercopy+0x20/0x30
[  213.871406][T11263]  simple_read_from_buffer+0xc4/0x238
[  213.871416][T11263]  proc_fail_nth_read+0x1a8/0x248
[  213.871424][T11263]  vfs_read+0x230/0x8c8
[  213.871435][T11263]  ksys_read+0x12c/0x228
[  213.871444][T11263]  __arm64_sys_read+0x84/0x98
[  213.871454][T11263]  invoke_syscall+0x98/0x244
[  213.871464][T11263]  el0_svc_common+0xec/0x23c
[  213.871473][T11263]  do_el0_svc+0x4c/0x5c
[  213.871482][T11263]  el0_svc+0x60/0x1d8
[  213.871492][T11263]  el0t_64_sync_handler+0x44/0x104
[  213.871501][T11263]  el0t_64_sync+0x198/0x19c
[  213.881960][T11264] syzkaller0: entered promiscuous mode
[  213.881972][T11264] syzkaller0: entered allmulticast mode
[  213.884406][T11261] tipc: Started in network mode
[  213.884419][T11261] tipc: Node identity 0ea69a95edc4, cluster identity 4711
[  213.884497][T11261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.887485][T11260] tipc: Resetting bearer <eth:syzkaller0>
[  213.901288][T11260] tipc: Disabling bearer <eth:syzkaller0>
[  213.919297][   T51] Bluetooth: hci0: command tx timeout
[  214.017917][T11270] smc: net device lo applied user defined pnetid SYZ0
[  214.017977][T11270] smc: smcd device lo applied user defined pnetid SYZ0
[  214.283031][T11272] futex_wake_op: syz.3.1926 tries to shift op by 144; fix this program
[  214.283098][T11272] futex_wake_op: syz.3.1926 tries to shift op by 144; fix this program
[  214.300498][T11279] loop7: detected capacity change from 0 to 128
[  214.316150][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1929'.
[  214.316167][T11283] openvswitch: netlink: nsh attribute has 220 unknown bytes.
[  214.356990][T11286] loop3: detected capacity change from 0 to 512
[  214.370755][T11286] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  214.374966][T11286] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  214.380794][T11288] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1927'.
[  214.380845][T11288] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1927'.
[  214.381021][T11288] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1927'.
[  214.381879][T11286] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.1930: bg 0: block 248: padding at end of block bitmap is not set
[  214.381903][T11286] loop3: lost filesystem error report for type 5 error -117
[  214.383059][T11286] __quota_error: 3 callbacks suppressed
[  214.383070][T11286] Quota error (device loop3): write_blk: dquota write failed
[  214.383096][T11286] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  214.383120][T11286] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.1930: Failed to acquire dquot type 1
[  214.383129][T11286] loop3: lost filesystem error report for type 5 error -28
[  214.384307][T11286] EXT4-fs (loop3): 1 truncate cleaned up
[  214.411285][T11291] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  214.415205][T11022] cgroup: fork rejected by pids controller in 
[  214.415266][T11022] /syz8
[  214.469528][T11296] Can't find ip_set type hash:net,po
[  214.505217][T11302] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1936'.
[  214.532213][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1937'.
[  214.584887][T11311] loop6: detected capacity change from 0 to 1024
[  214.594151][T11304] EXT4-fs: Ignoring removed oldalloc option
[  214.594200][T11304] EXT4-fs: Ignoring removed oldalloc option
[  214.594210][T11304] ext3: Unknown parameter 'no'
[  214.653847][T11304] netlink: 'syz.3.1935': attribute type 2 has an invalid length.
[  214.674821][T11304] ext4: Unknown parameter 'nouser_xattr'
[  214.690258][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1939'.
[  214.714580][T11318] futex_wake_op: syz.6.1940 tries to shift op by 144; fix this program
[  214.714637][T11318] futex_wake_op: syz.6.1940 tries to shift op by 144; fix this program
[  215.084079][T11324] EXT4-fs mount: 32 callbacks suppressed
[  215.084096][T11324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.125088][T11330] set_capacity_and_notify: 3 callbacks suppressed
[  215.125095][T11330] loop4: detected capacity change from 0 to 128
[  215.129000][T11330] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  215.171613][T10953] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  215.193088][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  215.219792][T11335] Can't find ip_set type hash:net,po
[  215.241274][T11340] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4)
[  215.241293][T11340] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  215.241411][T11340] vhci_hcd vhci_hcd.0: Device attached
[  215.241910][T11341] vhci_hcd: cannot find the pending unlink 32769
[  215.256487][T11341] vhci_hcd: connection closed
[  215.256741][   T14] vhci_hcd vhci_hcd.7: stop threads
[  215.256753][   T14] vhci_hcd vhci_hcd.7: release socket
[  215.256766][   T14] vhci_hcd vhci_hcd.7: disconnect device
[  215.263786][T11344] loop4: detected capacity change from 0 to 1024
[  215.282415][T11344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.615948][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1950'.
[  215.650423][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.676772][T11356] futex_wake_op: syz.3.1951 tries to shift op by 144; fix this program
[  215.676830][T11356] futex_wake_op: syz.3.1951 tries to shift op by 144; fix this program
[  215.761697][T11358] loop3: detected capacity change from 0 to 512
[  215.765387][T11358] EXT4-fs: Ignoring removed oldalloc option
[  215.765407][T11358] EXT4-fs: Ignoring removed oldalloc option
[  215.765415][T11358] ext3: Unknown parameter 'no'
[  215.769430][T11358] netlink: 'syz.3.1953': attribute type 2 has an invalid length.
[  215.892412][T11367] loop3: detected capacity change from 0 to 128
[  215.921284][T11367] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  216.104447][T11371] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  216.137958][ T1301] Bluetooth: hci0: Frame reassembly failed (-84)
[  216.138445][T11375] Bluetooth: hci0: Frame reassembly failed (-84)
[  216.141397][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.779252][ T4709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  216.984722][ T1301] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.086038][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  217.087078][ T4721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  217.092064][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  217.093295][ T4721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  217.093721][ T4721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  217.102517][T11388] loop3: detected capacity change from 0 to 1024
[  217.127677][T11388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.223949][T11405] loop4: detected capacity change from 0 to 128
[  217.223949][ T1301] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.236843][T11405] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  217.304842][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  217.333415][T11411] futex_wake_op: syz.4.1964 tries to shift op by 144; fix this program
[  217.333479][T11411] futex_wake_op: syz.4.1964 tries to shift op by 144; fix this program
[  217.342239][ T1301] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.400861][   T14] wlan1: Trigger new scan to find an IBSS to join
[  217.427276][ T1301] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.633553][T11389] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.634894][T11389] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.634990][T11389] bridge_slave_0: entered allmulticast mode
[  217.637015][T11389] bridge_slave_0: entered promiscuous mode
[  217.641921][T11389] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.641950][T11389] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.642047][T11389] bridge_slave_1: entered allmulticast mode
[  217.645308][T11389] bridge_slave_1: entered promiscuous mode
[  218.002103][T11389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.011799][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.046286][T11389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.104677][T11434] tipc: Invalid UDP bearer configuration
[  218.104704][T11434] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  218.127649][ T1301] bridge_slave_1: left allmulticast mode
[  218.127660][ T1301] bridge_slave_1: left promiscuous mode
[  218.128252][ T1301] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.138928][ T1301] bridge_slave_0: left allmulticast mode
[  218.138944][ T1301] bridge_slave_0: left promiscuous mode
[  218.139033][ T1301] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.159108][T11436] FAULT_INJECTION: forcing a failure.
[  218.159108][T11436] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  218.159124][T11436] CPU: 0 UID: 0 PID: 11436 Comm: syz.3.1971 Not tainted syzkaller #0 PREEMPT 
[  218.159135][T11436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  218.159147][T11436] Call trace:
[  218.159150][T11436]  show_stack+0x2c/0x3c (C)
[  218.159169][T11436]  __dump_stack+0x30/0x40
[  218.159182][T11436]  dump_stack_lvl+0xd8/0x12c
[  218.159192][T11436]  dump_stack+0x1c/0x28
[  218.159201][T11436]  should_fail_ex+0x418/0x58c
[  218.159212][T11436]  should_fail+0x14/0x24
[  218.159221][T11436]  should_fail_usercopy+0x20/0x30
[  218.159231][T11436]  _inline_copy_from_user+0x3c/0x174
[  218.159241][T11436]  ucma_resolve_ip+0xac/0x200
[  218.159249][T11436]  ucma_write+0x25c/0x2b8
[  218.159257][T11436]  vfs_write+0x2a4/0xa0c
[  218.159268][T11436]  ksys_write+0x12c/0x228
[  218.159277][T11436]  __arm64_sys_write+0x84/0x98
[  218.159287][T11436]  invoke_syscall+0x98/0x244
[  218.159297][T11436]  el0_svc_common+0xec/0x23c
[  218.159306][T11436]  do_el0_svc+0x4c/0x5c
[  218.159316][T11436]  el0_svc+0x60/0x1d8
[  218.159325][T11436]  el0t_64_sync_handler+0x44/0x104
[  218.159334][T11436]  el0t_64_sync+0x198/0x19c
[  218.206080][T11438] loop3: detected capacity change from 0 to 128
[  218.218859][ T4721] Bluetooth: hci0: command 0x1003 tx timeout
[  218.218936][   T51] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  218.462601][ T1301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  218.789069][ T1301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.806351][ T1301] bond0 (unregistering): Released all slaves
[  218.812482][T11389] team0: Port device team_slave_0 added
[  218.813844][T11389] team0: Port device team_slave_1 added
[  218.832531][T11456] FAULT_INJECTION: forcing a failure.
[  218.832531][T11456] name failslab, interval 1, probability 0, space 0, times 0
[  218.832546][T11456] CPU: 0 UID: 0 PID: 11456 Comm: syz.6.1978 Not tainted syzkaller #0 PREEMPT 
[  218.832558][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  218.832573][T11456] Call trace:
[  218.832576][T11456]  show_stack+0x2c/0x3c (C)
[  218.832593][T11456]  __dump_stack+0x30/0x40
[  218.832605][T11456]  dump_stack_lvl+0xd8/0x12c
[  218.832617][T11456]  dump_stack+0x1c/0x28
[  218.832628][T11456]  should_fail_ex+0x418/0x58c
[  218.832642][T11456]  should_failslab+0xc4/0x120
[  218.832654][T11456]  __kmalloc_cache_noprof+0x94/0x5fc
[  218.832663][T11456]  nci_allocate_device+0xe4/0x348
[  218.832675][T11456]  virtual_ncidev_open+0x7c/0x1a0
[  218.832690][T11456]  misc_open+0x2dc/0x338
[  218.832702][T11456]  chrdev_open+0x398/0x3e8
[  218.832712][T11456]  do_dentry_open+0x5c4/0xfbc
[  218.832723][T11456]  vfs_open+0x44/0x2dc
[  218.832734][T11456]  path_openat+0x1084/0x18f0
[  218.832744][T11456]  do_file_open+0x1c8/0x2e8
[  218.832753][T11456]  do_sys_openat2+0x114/0x1e8
[  218.832764][T11456]  do_sys_open+0xb0/0xe0
[  218.832775][T11456]  __arm64_sys_openat+0xa8/0xc4
[  218.832786][T11456]  invoke_syscall+0x98/0x244
[  218.832799][T11456]  el0_svc_common+0xec/0x23c
[  218.832810][T11456]  do_el0_svc+0x4c/0x5c
[  218.832822][T11456]  el0_svc+0x60/0x1d8
[  218.832832][T11456]  el0t_64_sync_handler+0x44/0x104
[  218.832843][T11456]  el0t_64_sync+0x198/0x19c
[  218.935613][    C0] net_ratelimit: 333 callbacks suppressed
[  219.144357][ T1301] tipc: Left network mode
[  219.148622][T11389] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.148628][T11389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  219.148640][T11389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.151852][T11389] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.151860][T11389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  219.151874][T11389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.178398][   T51] Bluetooth: hci4: command tx timeout
[  219.185858][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8
[  219.202998][T11465] loop4: detected capacity change from 0 to 1024
[  219.235087][T11465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.300856][   T24] kernel write not supported for file /input/event0 (pid: 24 comm: kworker/1:0)
[  219.303636][T11472] FAULT_INJECTION: forcing a failure.
[  219.303636][T11472] name failslab, interval 1, probability 0, space 0, times 0
[  219.303652][T11472] CPU: 1 UID: 0 PID: 11472 Comm: syz.6.1982 Not tainted syzkaller #0 PREEMPT 
[  219.303662][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  219.303675][T11472] Call trace:
[  219.303677][T11472]  show_stack+0x2c/0x3c (C)
[  219.303694][T11472]  __dump_stack+0x30/0x40
[  219.303705][T11472]  dump_stack_lvl+0xd8/0x12c
[  219.303714][T11472]  dump_stack+0x1c/0x28
[  219.303724][T11472]  should_fail_ex+0x418/0x58c
[  219.303734][T11472]  should_failslab+0xc4/0x120
[  219.303745][T11472]  kmem_cache_alloc_noprof+0x94/0x5d4
[  219.303756][T11472]  skb_clone+0x1ac/0x320
[  219.303766][T11472]  __netlink_deliver_tap+0x364/0x6f4
[  219.303776][T11472]  netlink_deliver_tap+0x1d8/0x1dc
[  219.303784][T11472]  __netlink_sendskb+0x78/0xd0
[  219.303792][T11472]  netlink_sendskb+0x2c/0xdc
[  219.303799][T11472]  netlink_unicast+0x2c0/0x7f8
[  219.303807][T11472]  ctrl_getfamily+0x270/0x318
[  219.303816][T11472]  genl_family_rcv_msg_doit+0x1e4/0x2d4
[  219.303826][T11472]  genl_rcv_msg+0x43c/0x620
[  219.303834][T11472]  netlink_rcv_skb+0x238/0x414
[  219.303843][T11472]  genl_rcv+0x38/0x50
[  219.303851][T11472]  netlink_unicast+0x600/0x7f8
[  219.303859][T11472]  netlink_sendmsg+0x648/0x948
[  219.303867][T11472]  __sock_sendmsg+0xc8/0x17c
[  219.303875][T11472]  __sys_sendto+0x250/0x328
[  219.303883][T11472]  __arm64_sys_sendto+0xec/0x10c
[  219.303892][T11472]  invoke_syscall+0x98/0x244
[  219.303901][T11472]  el0_svc_common+0xec/0x23c
[  219.303911][T11472]  do_el0_svc+0x4c/0x5c
[  219.303920][T11472]  el0_svc+0x60/0x1d8
[  219.303930][T11472]  el0t_64_sync_handler+0x44/0x104
[  219.303938][T11472]  el0t_64_sync+0x198/0x19c
[  219.306391][   T24] kernel write not supported for file /input/event0 (pid: 24 comm: kworker/1:0)
[  219.308133][T11472] FAULT_INJECTION: forcing a failure.
[  219.308133][T11472] name fail_futex, interval 1, probability 0, space 0, times 0
[  219.308148][T11472] CPU: 1 UID: 0 PID: 11472 Comm: syz.6.1982 Not tainted syzkaller #0 PREEMPT 
[  219.308159][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  219.308171][T11472] Call trace:
[  219.308173][T11472]  show_stack+0x2c/0x3c (C)
[  219.308197][T11472]  __dump_stack+0x30/0x40
[  219.308211][T11472]  dump_stack_lvl+0xd8/0x12c
[  219.308220][T11472]  dump_stack+0x1c/0x28
[  219.308230][T11472]  should_fail_ex+0x418/0x58c
[  219.308241][T11472]  should_fail+0x14/0x24
[  219.308250][T11472]  get_futex_key+0x1ec/0x12b0
[  219.308260][T11472]  futex_wait_setup+0x58/0x674
[  219.308269][T11472]  __futex_wait+0x108/0x25c
[  219.308278][T11472]  futex_wait+0x108/0x2c0
[  219.308287][T11472]  do_futex+0x320/0x378
[  219.308295][T11472]  __arm64_sys_futex+0x2e4/0x418
[  219.308304][T11472]  invoke_syscall+0x98/0x244
[  219.308315][T11472]  el0_svc_common+0xec/0x23c
[  219.308324][T11472]  do_el0_svc+0x4c/0x5c
[  219.308333][T11472]  el0_svc+0x60/0x1d8
[  219.308342][T11472]  el0t_64_sync_handler+0x44/0x104
[  219.308351][T11472]  el0t_64_sync+0x198/0x19c
[  219.332316][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'.
[  219.383437][T11389] hsr_slave_0: entered promiscuous mode
[  219.383946][T11389] hsr_slave_1: entered promiscuous mode
[  219.384223][T11389] debugfs: 'hsr0' already exists in 'hsr'
[  219.384232][T11389] Cannot create hsr debugfs directory
[  219.408444][T11484] loop3: detected capacity change from 0 to 128
[  219.417457][T11484] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  219.467474][ T4709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
** 115 printk messages dropped **
** 135 printk messages dropped **
** 93 printk messages dropped **
** 100 printk messages dropped **
** 94 printk messages dropped **
** 123 printk messages dropped **
** 114 printk messages dropped **
** 129 printk messages dropped **
** 269 printk messages dropped **
** 131 printk messages dropped **
** 115 printk messages dropped **
** 132 printk messages dropped **
** 116 printk messages dropped **
** 218 printk messages dropped **
** 130 printk messages dropped **
** 133 printk messages dropped **
** 149 printk messages dropped **
** 97 printk messages dropped **
** 129 printk messages dropped **
** 114 printk messages dropped **
** 128 printk messages dropped **
** 109 printk messages dropped **
** 117 printk messages dropped **
** 101 printk messages dropped **
** 102 printk messages dropped **
** 94 printk messages dropped **
** 100 printk messages dropped **
** 320 printk messages dropped **
** 123 printk messages dropped **
** 103 printk messages dropped **
** 135 printk messages dropped **
** 110 printk messages dropped **
** 130 printk messages dropped **
** 126 printk messages dropped **
** 130 printk messages dropped **
** 105 printk messages dropped **
** 125 printk messages dropped **
** 108 printk messages dropped **
** 127 printk messages dropped **
** 106 printk messages dropped **
** 124 printk messages dropped **
** 110 printk messages dropped **
** 122 printk messages dropped **
** 125 printk messages dropped **
** 141 printk messages dropped **
** 112 printk messages dropped **
** 142 printk messages dropped **
** 112 printk messages dropped **
** 133 printk messages dropped **
** 90 printk messages dropped **
** 20 printk messages dropped **
** 107 printk messages dropped **
** 120 printk messages dropped **
** 111 printk messages dropped **
** 131 printk messages dropped **
** 111 printk messages dropped **
** 164 printk messages dropped **
** 146 printk messages dropped **
** 132 printk messages dropped **
** 115 printk messages dropped **
** 121 printk messages dropped **
** 105 printk messages dropped **
** 134 printk messages dropped **
** 107 printk messages dropped **
** 149 printk messages dropped **
** 113 printk messages dropped **
** 130 printk messages dropped **
** 107 printk messages dropped **
** 125 printk messages dropped **
** 103 printk messages dropped **
** 111 printk messages dropped **
** 116 printk messages dropped **
** 121 printk messages dropped **
** 97 printk messages dropped **
** 126 printk messages dropped **
** 103 printk messages dropped **
** 129 printk messages dropped **
** 111 printk messages dropped **
** 135 printk messages dropped **
** 121 printk messages dropped **
** 124 printk messages dropped **
** 124 printk messages dropped **
** 125 printk messages dropped **
** 98 printk messages dropped **
** 106 printk messages dropped **
** 92 printk messages dropped **
** 114 printk messages dropped **
** 1 printk messages dropped **
** 221 printk messages dropped **
** 143 printk messages dropped **
** 126 printk messages dropped **
** 119 printk messages dropped **
** 99 printk messages dropped **
** 124 printk messages dropped **
** 94 printk messages dropped **
** 113 printk messages dropped **
** 96 printk messages dropped **
** 109 printk messages dropped **
** 111 printk messages dropped **
** 114 printk messages dropped **
** 113 printk messages dropped **
** 132 printk messages dropped **
** 106 printk messages dropped **
** 114 printk messages dropped **
** 97 printk messages dropped **
** 107 printk messages dropped **
** 95 printk messages dropped **
** 115 printk messages dropped **
** 94 printk messages dropped **
** 106 printk messages dropped **
** 95 printk messages dropped **
** 107 printk messages dropped **
** 93 printk messages dropped **
** 92 printk messages dropped **
** 92 printk messages dropped **
** 103 printk messages dropped **
** 104 printk messages dropped **
** 120 printk messages dropped **
** 90 printk messages dropped **
** 103 printk messages dropped **
** 90 printk messages dropped **
** 100 printk messages dropped **
** 96 printk messages dropped **
** 102 printk messages dropped **
** 86 printk messages dropped **
** 51 printk messages dropped **
** 103 printk messages dropped **
** 118 printk messages dropped **
** 106 printk messages dropped **
** 116 printk messages dropped **
** 94 printk messages dropped **
** 104 printk messages dropped **
** 110 printk messages dropped **
** 115 printk messages dropped **
** 100 printk messages dropped **
** 130 printk messages dropped **
** 108 printk messages dropped **
** 130 printk messages dropped **
** 110 printk messages dropped **
** 118 printk messages dropped **
** 107 printk messages dropped **
** 104 printk messages dropped **
** 116 printk messages dropped **
** 120 printk messages dropped **
** 94 printk messages dropped **
** 112 printk messages dropped **
** 94 printk messages dropped **
** 106 printk messages dropped **
** 106 printk messages dropped **
** 117 printk messages dropped **
** 97 printk messages dropped **
** 106 printk messages dropped **
** 95 printk messages dropped **
** 110 printk messages dropped **
** 99 printk messages dropped **
** 95 printk messages dropped **
** 95 printk messages dropped **
** 107 printk messages dropped **
** 97 printk messages dropped **
** 118 printk messages dropped **
** 92 printk messages dropped **
** 110 printk messages dropped **
** 52 printk messages dropped **
** 316 printk messages dropped **
** 104 printk messages dropped **
** 113 printk messages dropped **
** 103 printk messages dropped **
** 115 printk messages dropped **
** 96 printk messages dropped **
** 111 printk messages dropped **
** 119 printk messages dropped **
** 110 printk messages dropped **
** 100 printk messages dropped **
** 121 printk messages dropped **
** 101 printk messages dropped **
** 113 printk messages dropped **
** 97 printk messages dropped **
** 114 printk messages dropped **
** 96 printk messages dropped **
** 108 printk messages dropped **
** 92 printk messages dropped **
** 95 printk messages dropped **
** 90 printk messages dropped **
** 95 printk messages dropped **
** 83 printk messages dropped **
** 96 printk messages dropped **
** 96 printk messages dropped **
** 113 printk messages dropped **
** 105 printk messages dropped **
** 124 printk messages dropped **
** 94 printk messages dropped **
** 114 printk messages dropped **
** 91 printk messages dropped **
** 107 printk messages dropped **
** 263 printk messages dropped **
** 118 printk messages dropped **
** 81 printk messages dropped **
[  219.883401][T11502] loop6: detected capacity change from 0 to 128
** 170 printk messages dropped **
[  219.905204][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.905214][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_1
** 1130 printk messages dropped **
** 1721 printk messages dropped **
** 35 printk messages dropped **
** 35 printk messages dropped **
** 16 printk messages dropped **
[  220.107515][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.112478][ T1301] veth1_macvtap: left promiscuous mode
[  220.112505][ T1301] veth0_macvtap: left promiscuous mode
[  220.112551][ T1301] veth1_vlan: left promiscuous mode
[  220.112586][ T1301] veth0_vlan: left promiscuous mode
[  220.136220][T11502] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  220.179923][T11507] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
** 119 printk messages dropped **
[  220.312335][T10953] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  220.315637][T10477] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
** 2561 printk messages dropped **
[  220.490038][ T5941] wlan1: Trigger new scan to find an IBSS to join
[  220.546083][T11516] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1993'.
[  220.577838][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1995'.
** 340 printk messages dropped **
** 1784 printk messages dropped **
** 2316 printk messages dropped **
[  220.942246][ T1301] team0 (unregistering): Port device team_slave_1 removed
** 872 printk messages dropped **
** 121 printk messages dropped **
** 103 printk messages dropped **
** 110 printk messages dropped **
** 121 printk messages dropped **
** 120 printk messages dropped **
** 108 printk messages dropped **
** 113 printk messages dropped **
** 89 printk messages dropped **
[  220.989043][ T1301] team0 (unregistering): Port device team_slave_0 removed
[  221.279754][   T51] Bluetooth: hci4: command tx timeout
[  221.383330][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9
[  221.491849][ T5805] wlan1: Creating new IBSS network, BSSID a6:8b:4a:bc:67:cb
[  221.622119][T11542] set_capacity_and_notify: 1 callbacks suppressed
[  221.622126][T11542] loop6: detected capacity change from 0 to 256
[  221.724613][T11543] scsi_nl_rcv_msg: discarding partial skb
[  221.733457][T11545] loop6: detected capacity change from 0 to 1024
[  221.768356][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10
** 128 printk messages dropped **
[  221.815747][T11545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
** 1650 printk messages dropped **
** 455 printk messages dropped **
** 3 printk messages dropped **
[  221.948452][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2002'.
[  222.027310][T11557] loop7: detected capacity change from 0 to 128
** 947 printk messages dropped **
** 755 printk messages dropped **
[  222.136604][T11557] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  222.167342][T10953] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
** 1651 printk messages dropped **
[  222.562993][T11389] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  222.572055][T11389] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  222.572548][T11389] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  222.598833][T10477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.604458][T11389] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  222.612582][T11389] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  222.619474][T11389] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  222.624751][T11389] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  222.640223][T11389] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  222.674141][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2009'.
[  223.157361][T11389] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.164898][T11389] 8021q: adding VLAN 0 to HW filter on device team0
[  223.167338][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.167369][ T5805] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.183188][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.183211][ T5805] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.195881][T11596] netlink: 'syz.3.2013': attribute type 1 has an invalid length.
[  223.233493][T11596] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.256062][T11596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2013'.
[  223.327683][T11389] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.361319][T11621] loop3: detected capacity change from 0 to 128
[  223.375098][T11621] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  223.377805][T11389] veth0_vlan: entered promiscuous mode
[  223.384521][   T51] Bluetooth: hci4: command tx timeout
[  223.396865][T11389] veth1_vlan: entered promiscuous mode
[  223.427540][T11389] veth0_macvtap: entered promiscuous mode
[  223.440194][T11627] loop7: detected capacity change from 0 to 128
[  223.446938][T11627] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  223.451216][T11389] veth1_macvtap: entered promiscuous mode
[  223.476729][T11627] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  223.480788][T11389] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.483074][T11389] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.492206][ T5941] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.492440][ T5941] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.492551][ T5941] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.492636][ T5941] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.494250][ T4709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  223.548383][T10953] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  223.588050][T11632] loop6: detected capacity change from 0 to 512
[  223.588763][ T5805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.588771][ T5805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.593093][T11632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  223.607927][ T5941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.607936][ T5941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.629637][T11632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.767159][T11639] loop3: detected capacity change from 0 to 1024
[  223.795520][T11639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.802564][T11635] syzkaller0: entered promiscuous mode
[  223.802576][T11635] syzkaller0: entered allmulticast mode
[  224.130942][ T5805] net_ratelimit: 690 callbacks suppressed
[  224.141417][T10477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.147547][T11649] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  224.204305][T11649] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  224.204319][T11649] md: pers->run() failed ...
[  224.213486][T11657] loop6: detected capacity change from 0 to 128
[  224.216933][T11657] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  224.244545][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2024'.
[  224.253549][T10477] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  224.298728][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2025'.
[  224.746283][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.814081][T11682] loop3: detected capacity change from 0 to 128
[  224.873379][T11682] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  224.942795][ T4709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  224.997289][T11698] loop4: detected capacity change from 0 to 128
[  225.010044][T11698] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  225.341654][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  225.414784][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'.
[  225.415553][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2039'.
[  225.450293][T11708] FAULT_INJECTION: forcing a failure.
[  225.450293][T11708] name failslab, interval 1, probability 0, space 0, times 0
[  225.450308][T11708] CPU: 0 UID: 0 PID: 11708 Comm: syz.8.2038 Not tainted syzkaller #0 PREEMPT 
[  225.450320][T11708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  225.450335][T11708] Call trace:
[  225.450338][T11708]  show_stack+0x2c/0x3c (C)
[  225.450360][T11708]  __dump_stack+0x30/0x40
[  225.450375][T11708]  dump_stack_lvl+0xd8/0x12c
[  225.450387][T11708]  dump_stack+0x1c/0x28
[  225.450398][T11708]  should_fail_ex+0x418/0x58c
[  225.450411][T11708]  should_failslab+0xc4/0x120
[  225.450424][T11708]  __kmalloc_cache_noprof+0x94/0x5fc
[  225.450433][T11708]  nci_allocate_device+0xe4/0x348
[  225.450445][T11708]  virtual_ncidev_open+0x7c/0x1a0
[  225.450460][T11708]  misc_open+0x2dc/0x338
[  225.450472][T11708]  chrdev_open+0x398/0x3e8
[  225.450484][T11708]  do_dentry_open+0x5c4/0xfbc
[  225.450495][T11708]  vfs_open+0x44/0x2dc
[  225.450505][T11708]  path_openat+0x1084/0x18f0
[  225.450515][T11708]  do_file_open+0x1c8/0x2e8
[  225.450524][T11708]  do_sys_openat2+0x114/0x1e8
[  225.450536][T11708]  do_sys_open+0xb0/0xe0
[  225.450546][T11708]  __arm64_sys_openat+0xa8/0xc4
[  225.450558][T11708]  invoke_syscall+0x98/0x244
[  225.450571][T11708]  el0_svc_common+0xec/0x23c
[  225.450582][T11708]  do_el0_svc+0x4c/0x5c
[  225.450594][T11708]  el0_svc+0x60/0x1d8
[  225.450605][T11708]  el0t_64_sync_handler+0x44/0x104
[  225.450615][T11708]  el0t_64_sync+0x198/0x19c
[  225.467389][   T51] Bluetooth: hci4: command tx timeout
[  225.484275][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'.
[  225.558074][T11722] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  225.602844][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  225.739501][T11734] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  225.764240][T10477] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  226.110155][T11668] kexec: Could not allocate control_code_buffer
[  226.143792][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2051'.
[  226.146735][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2052'.
[  226.217548][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2054'.
[  226.243122][T11755] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  226.246267][T11755] EXT4-fs (loop3): 1 truncate cleaned up
[  226.247048][T11755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.350687][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.378224][T11763] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  226.666251][T11389] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  226.699970][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2063'.
[  227.014558][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2065'.
[  227.071127][T11778] blk-mq: reduced tag depth (128 -> 64)
[  227.102929][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2070'.
[  227.172835][T11799] set_capacity_and_notify: 4 callbacks suppressed
[  227.172841][T11799] loop6: detected capacity change from 0 to 128
[  227.183924][T11801] loop4: detected capacity change from 0 to 128
[  227.184348][T11801] vfat: Bad value for 'time_offset'
[  227.251676][T11799] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  227.255734][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2071'.
[  227.279092][T11810] FAULT_INJECTION: forcing a failure.
[  227.279092][T11810] name failslab, interval 1, probability 0, space 0, times 0
[  227.279106][T11810] CPU: 1 UID: 0 PID: 11810 Comm: syz.3.2076 Not tainted syzkaller #0 PREEMPT 
[  227.279118][T11810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  227.279132][T11810] Call trace:
[  227.279136][T11810]  show_stack+0x2c/0x3c (C)
[  227.279157][T11810]  __dump_stack+0x30/0x40
[  227.279172][T11810]  dump_stack_lvl+0xd8/0x12c
[  227.279184][T11810]  dump_stack+0x1c/0x28
[  227.279195][T11810]  should_fail_ex+0x418/0x58c
[  227.279208][T11810]  should_failslab+0xc4/0x120
[  227.279222][T11810]  __kmalloc_cache_noprof+0x94/0x5fc
[  227.279231][T11810]  nci_allocate_device+0xe4/0x348
[  227.279245][T11810]  virtual_ncidev_open+0x7c/0x1a0
[  227.279259][T11810]  misc_open+0x2dc/0x338
[  227.279272][T11810]  chrdev_open+0x398/0x3e8
[  227.279282][T11810]  do_dentry_open+0x5c4/0xfbc
[  227.279293][T11810]  vfs_open+0x44/0x2dc
[  227.279304][T11810]  path_openat+0x1084/0x18f0
[  227.279313][T11810]  do_file_open+0x1c8/0x2e8
[  227.279323][T11810]  do_sys_openat2+0x114/0x1e8
[  227.279334][T11810]  do_sys_open+0xb0/0xe0
[  227.279345][T11810]  __arm64_sys_openat+0xa8/0xc4
[  227.279356][T11810]  invoke_syscall+0x98/0x244
[  227.279369][T11810]  el0_svc_common+0xec/0x23c
[  227.279381][T11810]  do_el0_svc+0x4c/0x5c
[  227.279392][T11810]  el0_svc+0x60/0x1d8
[  227.279403][T11810]  el0t_64_sync_handler+0x44/0x104
[  227.279413][T11810]  el0t_64_sync+0x198/0x19c
[  227.283462][T10477] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  227.361469][T11812] syz.4.2074: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  227.361805][T11812] CPU: 1 UID: 0 PID: 11812 Comm: syz.4.2074 Not tainted syzkaller #0 PREEMPT 
[  227.361817][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  227.361830][T11812] Call trace:
[  227.361833][T11812]  show_stack+0x2c/0x3c (C)
[  227.361854][T11812]  __dump_stack+0x30/0x40
[  227.361869][T11812]  dump_stack_lvl+0xd8/0x12c
[  227.361880][T11812]  dump_stack+0x1c/0x28
[  227.361892][T11812]  warn_alloc+0x1c4/0x1d8
[  227.361907][T11812]  __vmalloc_node_range_noprof+0x110/0xe9c
[  227.361917][T11812]  xskq_create+0x178/0x278
[  227.361926][T11812]  xsk_init_queue+0x9c/0xf8
[  227.361939][T11812]  xsk_setsockopt+0x45c/0x6c4
[  227.361952][T11812]  do_sock_setsockopt+0x1f0/0x330
[  227.361963][T11812]  __sys_setsockopt+0x104/0x170
[  227.361982][T11812]  __arm64_sys_setsockopt+0xc8/0xe4
[  227.361992][T11812]  invoke_syscall+0x98/0x244
[  227.362005][T11812]  el0_svc_common+0xec/0x23c
[  227.362017][T11812]  do_el0_svc+0x4c/0x5c
[  227.362028][T11812]  el0_svc+0x60/0x1d8
[  227.362038][T11812]  el0t_64_sync_handler+0x44/0x104
[  227.362049][T11812]  el0t_64_sync+0x198/0x19c
[  227.362072][T11812] Mem-Info:
[  227.362110][T11812] active_anon:54 inactive_anon:11740 isolated_anon:0
[  227.362110][T11812]  active_file:3970 inactive_file:14777 isolated_file:0
[  227.362110][T11812]  unevictable:768 dirty:340 writeback:0
[  227.362110][T11812]  slab_reclaimable:9965 slab_unreclaimable:95810
[  227.362110][T11812]  mapped:35975 shmem:6673 pagetables:1289
[  227.362110][T11812]  sec_pagetables:0 bounce:0
[  227.362110][T11812]  kernel_misc_reclaimable:0
[  227.362110][T11812]  free:1430644 free_pcp:38788 free_cma:7616
[  227.362156][T11812] Node 0 active_anon:216kB inactive_anon:46960kB active_file:15880kB inactive_file:59108kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:143900kB dirty:1360kB writeback:0kB shmem:26692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13844kB pagetables:5156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  227.362190][T11812] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB
[  227.362237][T11812] lowmem_reserve[]: 0 0 3652 3652 3652
[  227.362332][T11812] Node 0 Normal free:2644688kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:216kB inactive_anon:46960kB active_file:15880kB inactive_file:59108kB unevictable:3072kB writepending:1360kB zspages:0kB present:5242880kB managed:3740016kB mlocked:0kB bounce:0kB free_pcp:155152kB local_pcp:141940kB free_cma:0kB
[  227.362380][T11812] lowmem_reserve[]: 0 0 0 0 0
[  227.362474][T11812] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB
[  227.362749][T11812] Node 0 Normal: 301*4kB (UME) 108*8kB (U) 77*16kB (UME) 123*32kB (UE) 205*64kB (UME) 142*128kB (UME) 162*256kB (UME) 113*512kB (UME) 76*1024kB (UM) 46*2048kB (UME) 570*4096kB (UM) = 2644612kB
[  227.363123][T11812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  227.363142][T11812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB
[  227.363160][T11812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  227.363178][T11812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB
[  227.363196][T11812] 25414 total pagecache pages
[  227.363211][T11812] 0 pages in swap cache
[  227.363226][T11812] Free swap  = 124996kB
[  227.363241][T11812] Total swap = 124996kB
[  227.363256][T11812] 2097152 pages RAM
[  227.363270][T11812] 0 pages HighMem/MovableOnly
[  227.363285][T11812] 392100 pages reserved
[  227.363300][T11812] 8192 pages cma reserved
[  227.363314][T11812] 6 pages hwpoisoned
[  228.156684][T11839] vlan2: entered promiscuous mode
[  228.156690][T11839] hsr0: entered promiscuous mode
[  228.158641][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2085'.
[  228.160770][T11839] hsr_slave_0: left promiscuous mode
[  228.162614][T11839] hsr_slave_1: left promiscuous mode
[  228.214992][T11845] loop8: detected capacity change from 0 to 128
[  228.225352][T11845] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  228.443547][T11389] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  228.556028][T11851] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2090'.
[  228.583794][T11857] loop6: detected capacity change from 0 to 512
[  228.586006][T11857] EXT4-fs: Ignoring removed nomblk_io_submit option
[  228.586035][T11857] EXT4-fs: Ignoring removed mblk_io_submit option
[  228.586617][T11857] EXT4-fs: journaled quota format not specified
[  228.588823][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2092'.
[  228.623136][T11859] loop7: detected capacity change from 0 to 128
[  228.641930][T11859] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  228.681666][T10953] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  228.771899][T11878] block2mtd: illegal erase size
[  228.790414][T11884] loop6: detected capacity change from 0 to 128
[  228.799638][T11884] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  228.813369][T11887] FAULT_INJECTION: forcing a failure.
[  228.813369][T11887] name failslab, interval 1, probability 0, space 0, times 0
[  228.813386][T11887] CPU: 1 UID: 0 PID: 11887 Comm: syz.7.2103 Not tainted syzkaller #0 PREEMPT 
[  228.813400][T11887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  228.813412][T11887] Call trace:
[  228.813415][T11887]  show_stack+0x2c/0x3c (C)
[  228.813433][T11887]  __dump_stack+0x30/0x40
[  228.813443][T11887]  dump_stack_lvl+0xd8/0x12c
[  228.813453][T11887]  dump_stack+0x1c/0x28
[  228.813462][T11887]  should_fail_ex+0x418/0x58c
[  228.813473][T11887]  should_failslab+0xc4/0x120
[  228.813484][T11887]  __kmalloc_noprof+0x108/0x6c8
[  228.813495][T11887]  alloc_pipe_info+0x208/0x420
[  228.813505][T11887]  create_pipe_files+0x90/0x650
[  228.813515][T11887]  __do_pipe_flags+0x5c/0x204
[  228.813525][T11887]  do_pipe2+0xa0/0x250
[  228.813532][T11887]  __arm64_sys_pipe2+0x64/0x7c
[  228.813542][T11887]  invoke_syscall+0x98/0x244
[  228.813552][T11887]  el0_svc_common+0xec/0x23c
[  228.813561][T11887]  do_el0_svc+0x4c/0x5c
[  228.813571][T11887]  el0_svc+0x60/0x1d8
[  228.813580][T11887]  el0t_64_sync_handler+0x44/0x104
[  228.813589][T11887]  el0t_64_sync+0x198/0x19c
[  228.857192][T11892] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  229.009333][T11899] No control pipe specified
[  229.088292][T11901] loop4: detected capacity change from 0 to 128
[  229.153458][T11901] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  229.177166][    C1] net_ratelimit: 811 callbacks suppressed
[  229.454182][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  229.590581][T11910] loop3: detected capacity change from 0 to 256
[  229.611951][T11910] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006)
[  229.611964][T11910] FAT-fs (loop3): Filesystem has been set read-only
[  229.654139][T10477] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  229.706686][T11922] loop6: detected capacity change from 0 to 8
[  229.709060][T11922] SQUASHFS error: Failed to read block 0x6ee: -5
[  229.709075][T11922] SQUASHFS error: Unable to read metadata cache entry [6ec]
[  229.709081][T11922] SQUASHFS error: Unable to read inode 0x127
[  229.847410][T11931] No control pipe specified
[  229.869403][T11933] loop6: detected capacity change from 0 to 128
[  229.888355][T11933] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  229.964296][T11933] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  229.990153][T10477] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  230.291423][T11948] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  230.399726][T11953] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  230.703237][T11965] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  230.703356][T11965] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal
[  230.817850][T11969] FAULT_INJECTION: forcing a failure.
[  230.817850][T11969] name failslab, interval 1, probability 0, space 0, times 0
[  230.817865][T11969] CPU: 1 UID: 0 PID: 11969 Comm: syz.3.2130 Not tainted syzkaller #0 PREEMPT 
[  230.817878][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  230.817893][T11969] Call trace:
[  230.817896][T11969]  show_stack+0x2c/0x3c (C)
[  230.817918][T11969]  __dump_stack+0x30/0x40
[  230.817931][T11969]  dump_stack_lvl+0xd8/0x12c
[  230.817943][T11969]  dump_stack+0x1c/0x28
[  230.817954][T11969]  should_fail_ex+0x418/0x58c
[  230.817967][T11969]  should_failslab+0xc4/0x120
[  230.817985][T11969]  __kmalloc_cache_noprof+0x94/0x5fc
[  230.817994][T11969]  nci_allocate_device+0xe4/0x348
[  230.818007][T11969]  virtual_ncidev_open+0x7c/0x1a0
[  230.818021][T11969]  misc_open+0x2dc/0x338
[  230.818034][T11969]  chrdev_open+0x398/0x3e8
[  230.818044][T11969]  do_dentry_open+0x5c4/0xfbc
[  230.818055][T11969]  vfs_open+0x44/0x2dc
[  230.818066][T11969]  path_openat+0x1084/0x18f0
[  230.818076][T11969]  do_file_open+0x1c8/0x2e8
[  230.818085][T11969]  do_sys_openat2+0x114/0x1e8
[  230.818096][T11969]  do_sys_open+0xb0/0xe0
[  230.818107][T11969]  __arm64_sys_openat+0xa8/0xc4
[  230.818118][T11969]  invoke_syscall+0x98/0x244
[  230.818131][T11969]  el0_svc_common+0xec/0x23c
[  230.818142][T11969]  do_el0_svc+0x4c/0x5c
[  230.818154][T11969]  el0_svc+0x60/0x1d8
[  230.818165][T11969]  el0t_64_sync_handler+0x44/0x104
[  230.818176][T11969]  el0t_64_sync+0x198/0x19c
[  231.102327][   T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  231.105479][   T51] Bluetooth: hci2: Injecting HCI hardware error event
[  231.125791][ T4721] Bluetooth: hci2: hardware error 0x00
[  231.283817][T10953] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  231.339800][T11984] FAULT_INJECTION: forcing a failure.
[  231.339800][T11984] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  231.339817][T11984] CPU: 0 UID: 0 PID: 11984 Comm: syz.7.2136 Not tainted syzkaller #0 PREEMPT 
[  231.339827][T11984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  231.339840][T11984] Call trace:
[  231.339842][T11984]  show_stack+0x2c/0x3c (C)
[  231.339860][T11984]  __dump_stack+0x30/0x40
[  231.339871][T11984]  dump_stack_lvl+0xd8/0x12c
[  231.339880][T11984]  dump_stack+0x1c/0x28
[  231.339890][T11984]  should_fail_ex+0x418/0x58c
[  231.339901][T11984]  should_fail+0x14/0x24
[  231.339910][T11984]  should_fail_usercopy+0x20/0x30
[  231.339920][T11984]  simple_read_from_buffer+0xc4/0x238
[  231.339930][T11984]  proc_fail_nth_read+0x1a8/0x248
[  231.339939][T11984]  vfs_read+0x230/0x8c8
[  231.339950][T11984]  ksys_read+0x12c/0x228
[  231.339959][T11984]  __arm64_sys_read+0x84/0x98
[  231.339976][T11984]  invoke_syscall+0x98/0x244
[  231.339986][T11984]  el0_svc_common+0xec/0x23c
[  231.339996][T11984]  do_el0_svc+0x4c/0x5c
[  231.340006][T11984]  el0_svc+0x60/0x1d8
[  231.340016][T11984]  el0t_64_sync_handler+0x44/0x104
[  231.340024][T11984]  el0t_64_sync+0x198/0x19c
[  231.516635][T11989] __nla_validate_parse: 8 callbacks suppressed
[  231.516647][T11989] netlink: 296 bytes leftover after parsing attributes in process `syz.7.2138'.
[  231.517164][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2138'.
[  231.580819][T11985] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2135'.
[  231.702342][T12000] FAULT_INJECTION: forcing a failure.
[  231.702342][T12000] name failslab, interval 1, probability 0, space 0, times 0
[  231.702357][T12000] CPU: 0 UID: 0 PID: 12000 Comm: syz.4.2142 Not tainted syzkaller #0 PREEMPT 
[  231.702369][T12000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  231.702383][T12000] Call trace:
[  231.702387][T12000]  show_stack+0x2c/0x3c (C)
[  231.702406][T12000]  __dump_stack+0x30/0x40
[  231.702418][T12000]  dump_stack_lvl+0xd8/0x12c
[  231.702430][T12000]  dump_stack+0x1c/0x28
[  231.702441][T12000]  should_fail_ex+0x418/0x58c
[  231.702454][T12000]  should_failslab+0xc4/0x120
[  231.702466][T12000]  __kmalloc_cache_noprof+0x94/0x5fc
[  231.702475][T12000]  nfc_allocate_device+0x11c/0x474
[  231.702489][T12000]  nci_allocate_device+0x1a4/0x348
[  231.702500][T12000]  virtual_ncidev_open+0x7c/0x1a0
[  231.702514][T12000]  misc_open+0x2dc/0x338
[  231.702526][T12000]  chrdev_open+0x398/0x3e8
[  231.702536][T12000]  do_dentry_open+0x5c4/0xfbc
[  231.702547][T12000]  vfs_open+0x44/0x2dc
[  231.702557][T12000]  path_openat+0x1084/0x18f0
[  231.702567][T12000]  do_file_open+0x1c8/0x2e8
[  231.702577][T12000]  do_sys_openat2+0x114/0x1e8
[  231.702587][T12000]  do_sys_open+0xb0/0xe0
[  231.702598][T12000]  __arm64_sys_openat+0xa8/0xc4
[  231.702609][T12000]  invoke_syscall+0x98/0x244
[  231.702621][T12000]  el0_svc_common+0xec/0x23c
[  231.702633][T12000]  do_el0_svc+0x4c/0x5c
[  231.702644][T12000]  el0_svc+0x60/0x1d8
[  231.702654][T12000]  el0t_64_sync_handler+0x44/0x104
[  231.702665][T12000]  el0t_64_sync+0x198/0x19c
[  232.454333][T12013] FAULT_INJECTION: forcing a failure.
[  232.454333][T12013] name failslab, interval 1, probability 0, space 0, times 0
[  232.454344][T12013] CPU: 1 UID: 0 PID: 12013 Comm: syz.6.2146 Not tainted syzkaller #0 PREEMPT 
[  232.454353][T12013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  232.454364][T12013] Call trace:
[  232.454366][T12013]  show_stack+0x2c/0x3c (C)
[  232.454384][T12013]  __dump_stack+0x30/0x40
[  232.454394][T12013]  dump_stack_lvl+0xd8/0x12c
[  232.454404][T12013]  dump_stack+0x1c/0x28
[  232.454413][T12013]  should_fail_ex+0x418/0x58c
[  232.454424][T12013]  should_failslab+0xc4/0x120
[  232.454434][T12013]  __kmalloc_noprof+0x108/0x6c8
[  232.454446][T12013]  x509_fabricate_name+0x498/0x858
[  232.454455][T12013]  x509_note_subject+0x8c/0xc0
[  232.454464][T12013]  asn1_ber_decoder+0xf24/0x1944
[  232.454473][T12013]  x509_cert_parse+0x1a4/0x65c
[  232.454481][T12013]  x509_key_preparse+0x74/0x630
[  232.454490][T12013]  asymmetric_key_preparse+0xcc/0x1c0
[  232.454498][T12013]  __key_create_or_update+0x2a4/0x848
[  232.454509][T12013]  key_create_or_update+0x60/0x7c
[  232.454519][T12013]  __arm64_sys_add_key+0x384/0x43c
[  232.454527][T12013]  invoke_syscall+0x98/0x244
[  232.454537][T12013]  el0_svc_common+0xec/0x23c
[  232.454546][T12013]  do_el0_svc+0x4c/0x5c
[  232.454556][T12013]  el0_svc+0x60/0x1d8
[  232.454565][T12013]  el0t_64_sync_handler+0x44/0x104
[  232.454574][T12013]  el0t_64_sync+0x198/0x19c
[  232.546578][T12018] set_capacity_and_notify: 3 callbacks suppressed
[  232.546592][T12018] loop7: detected capacity change from 0 to 128
[  232.591085][T12018] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  232.598484][T12018] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000100 undefined
[  232.627079][T10953] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  233.102932][T12033] loop3: detected capacity change from 0 to 1024
[  233.138473][T12033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.345199][ T4721] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  233.465736][T12041] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  233.465806][T12041] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  233.465818][T12041] EXT4-fs (loop3): This should not happen!! Data will be lost
[  233.465818][T12041] 
[  233.465826][T12041] EXT4-fs (loop3): Total free blocks count 0
[  233.465833][T12041] EXT4-fs (loop3): Free/Dirty block details
[  233.465842][T12041] EXT4-fs (loop3): free_blocks=68451041280
[  233.465850][T12041] EXT4-fs (loop3): dirty_blocks=64
[  233.465857][T12041] EXT4-fs (loop3): Block reservation details
[  233.465863][T12041] EXT4-fs (loop3): i_reserved_data_blocks=4
[  233.529034][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2155'.
[  233.558948][T12045] loop4: detected capacity change from 0 to 128
[  234.063512][T12060] loop4: detected capacity change from 0 to 128
[  234.100986][T12060] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000100 undefined
[  234.388788][    C1] net_ratelimit: 637 callbacks suppressed
[  234.487326][T12070] loop3: detected capacity change from 0 to 512
[  234.896328][T12087] loop6: detected capacity change from 0 to 512
[  234.900081][T12087] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  234.911671][T12087] EXT4-fs (loop6): 1 truncate cleaned up
[  234.938190][T12087] EXT4-fs error (device loop6): ext4_get_parent:1838: comm syz.6.2167: inode #2: comm syz.6.2167: iget: illegal inode #
[  234.943664][T12087] EXT4-fs (loop6): Remounting filesystem read-only
[  235.005643][T12092] nvme nvme0: resetting controller
[  235.011970][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2170'.
[  235.084545][ T1410] nvme nvme0: 2/0/0 default/read/poll queues
[  235.109801][T12100] loop6: detected capacity change from 0 to 1024
[  235.225508][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2173'.
[  235.257759][T12103] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  235.257837][T12103] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  235.257849][T12103] EXT4-fs (loop6): This should not happen!! Data will be lost
[  235.257849][T12103] 
[  235.257857][T12103] EXT4-fs (loop6): Total free blocks count 0
[  235.257865][T12103] EXT4-fs (loop6): Free/Dirty block details
[  235.257873][T12103] EXT4-fs (loop6): free_blocks=68451041280
[  235.257883][T12103] EXT4-fs (loop6): dirty_blocks=64
[  235.257889][T12103] EXT4-fs (loop6): Block reservation details
[  235.257896][T12103] EXT4-fs (loop6): i_reserved_data_blocks=4
[  235.704799][T12116] loop4: detected capacity change from 0 to 512
[  235.705289][T12116] EXT4-fs: Ignoring removed oldalloc option
[  235.705306][T12116] EXT4-fs: Ignoring removed oldalloc option
[  235.705313][T12116] ext3: Unknown parameter 'no'
[  235.740336][T12116] loop4: detected capacity change from 0 to 2048
[  235.740758][T12116] ext4: Unknown parameter 'nouser_xattr'
[  236.307193][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2184'.
[  236.645714][T12147] netlink: 'syz.4.2187': attribute type 39 has an invalid length.
[  236.712924][T12151] netlink: 296 bytes leftover after parsing attributes in process `syz.3.2189'.
[  236.753841][T12157] dvmrp0: left allmulticast mode
[  236.841629][T12160] loop4: detected capacity change from 0 to 1024
[  236.946332][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2190'.
[  236.974576][T12169] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  236.974645][T12169] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  236.974657][T12169] EXT4-fs (loop4): This should not happen!! Data will be lost
[  236.974657][T12169] 
[  236.974664][T12169] EXT4-fs (loop4): Total free blocks count 0
[  236.974672][T12169] EXT4-fs (loop4): Free/Dirty block details
[  236.974680][T12169] EXT4-fs (loop4): free_blocks=68451041280
[  236.974689][T12169] EXT4-fs (loop4): dirty_blocks=64
[  236.974696][T12169] EXT4-fs (loop4): Block reservation details
[  236.974702][T12169] EXT4-fs (loop4): i_reserved_data_blocks=4
[  237.858539][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2197'.
[  238.294559][T12195] netlink: 296 bytes leftover after parsing attributes in process `syz.4.2202'.
[  238.467658][T12205] loop4: detected capacity change from 0 to 1024
[  238.948149][T12217] trusted_key: encrypted_key: insufficient parameters specified
[  238.952513][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2207'.
[  239.042436][T12224] loop3: detected capacity change from 0 to 128
[  239.109829][T12222] loop6: detected capacity change from 0 to 512
[  239.110300][T12222] EXT4-fs: Ignoring removed oldalloc option
[  239.110317][T12222] EXT4-fs: Ignoring removed oldalloc option
[  239.110324][T12222] ext3: Unknown parameter 'no'
[  239.147536][T12222] loop6: detected capacity change from 0 to 2048
[  239.147837][T12222] ext4: Unknown parameter 'nouser_xattr'
[  239.165263][T12227] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  239.287044][T12232] netlink: 296 bytes leftover after parsing attributes in process `syz.7.2214'.
[  239.341202][T12238] loop6: detected capacity change from 0 to 512
[  239.342381][T12238] EXT4-fs: Ignoring removed nobh option
[  239.350485][T12238] EXT4-fs error (device loop6): ext4_xattr_inode_iget:473: comm syz.6.2217: EA inode 11 has unexpected i_nlink=0 ref_count=7168870745731235840
[  239.350509][T12238] loop6: lost filesystem error report for type 5 error -117
[  239.353704][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  239.353721][    C0] EXT4-fs (loop6): initial error at time 243: ext4_xattr_inode_iget:473
[  239.353736][    C0] EXT4-fs (loop6): last error at time 243: ext4_xattr_inode_iget:473
[  239.355857][T12238] EXT4-fs (loop6): Remounting filesystem read-only
[  239.356306][T12238] EXT4-fs (loop6): 1 orphan inode deleted
[  239.443935][    C0] net_ratelimit: 530 callbacks suppressed
[  240.965190][T12265] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2227'.
[  241.026112][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2230'.
[  241.032274][T12273] 
: renamed from bond_slave_0 (while UP)
[  241.083025][T12267] loop3: detected capacity change from 0 to 512
[  241.083503][T12267] EXT4-fs: Ignoring removed oldalloc option
[  241.083520][T12267] EXT4-fs: Ignoring removed oldalloc option
[  241.083528][T12267] ext3: Unknown parameter 'no'
[  241.099027][T12267] loop3: detected capacity change from 0 to 2048
[  241.099357][T12267] ext4: Unknown parameter 'nouser_xattr'
[  241.385406][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2235'.
[  241.696855][T12294] loop3: detected capacity change from 0 to 1024
[  241.707304][T12296] ==================================================================
[  241.707311][T12296] BUG: KASAN: slab-out-of-bounds in string_nocheck+0xd8/0x140
[  241.707329][T12296] Read of size 1 at addr ffff0000c940d894 by task syz.6.2238/12296
[  241.707339][T12296] 
[  241.707344][T12296] CPU: 0 UID: 0 PID: 12296 Comm: syz.6.2238 Not tainted syzkaller #0 PREEMPT 
[  241.707355][T12296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  241.707369][T12296] Call trace:
[  241.707372][T12296]  show_stack+0x2c/0x3c (C)
[  241.707391][T12296]  __dump_stack+0x30/0x40
[  241.707406][T12296]  dump_stack_lvl+0xd8/0x12c
[  241.707417][T12296]  print_address_description+0xb0/0x238
[  241.707427][T12296]  print_report+0x68/0x84
[  241.707435][T12296]  kasan_report+0x8c/0xc4
[  241.707445][T12296]  __asan_report_load1_noabort+0x20/0x2c
[  241.707456][T12296]  string_nocheck+0xd8/0x140
[  241.707464][T12296]  string+0x8c/0xc8
[  241.707479][T12296]  vsnprintf+0x880/0xd10
[  241.707492][T12296]  pointer+0x5e8/0x6b4
[  241.707504][T12296]  vsnprintf+0x618/0xd10
[  241.707517][T12296]  vprintk_store+0x344/0xb94
[  241.707528][T12296]  vprintk_emit+0x1bc/0x514
[  241.707539][T12296]  vprintk_default+0x54/0x80
[  241.707550][T12296]  vprintk+0x9c/0x13c
[  241.707562][T12296]  _printk+0xe0/0x130
[  241.707574][T12296]  __dynamic_pr_debug+0x148/0x1e4
[  241.707588][T12296]  nfc_llcp_get_sdp_ssap+0x350/0x3fc
[  241.707598][T12296]  llcp_sock_bind+0x2e0/0x58c
[  241.707608][T12296]  __sys_bind+0x1c4/0x268
[  241.707618][T12296]  __arm64_sys_bind+0x84/0x9c
[  241.707628][T12296]  invoke_syscall+0x98/0x244
[  241.707640][T12296]  el0_svc_common+0xec/0x23c
[  241.707652][T12296]  do_el0_svc+0x4c/0x5c
[  241.707664][T12296]  el0_svc+0x60/0x1d8
[  241.707674][T12296]  el0t_64_sync_handler+0x44/0x104
[  241.707685][T12296]  el0t_64_sync+0x198/0x19c
[  241.707694][T12296] 
[  241.707696][T12296] Allocated by task 12296:
[  241.707701][T12296]  kasan_save_track+0x40/0x78
[  241.707709][T12296]  kasan_save_alloc_info+0x40/0x50
[  241.707717][T12296]  __kasan_kmalloc+0x9c/0xb4
[  241.707724][T12296]  __kmalloc_node_track_caller_noprof+0x440/0x6e0
[  241.707732][T12296]  kmemdup_noprof+0x44/0x8c
[  241.707739][T12296]  llcp_sock_bind+0x2b0/0x58c
[  241.707747][T12296]  __sys_bind+0x1c4/0x268
[  241.707755][T12296]  __arm64_sys_bind+0x84/0x9c
[  241.707762][T12296]  invoke_syscall+0x98/0x244
[  241.707773][T12296]  el0_svc_common+0xec/0x23c
[  241.707783][T12296]  do_el0_svc+0x4c/0x5c
[  241.707793][T12296]  el0_svc+0x60/0x1d8
[  241.707800][T12296]  el0t_64_sync_handler+0x44/0x104
[  241.707809][T12296]  el0t_64_sync+0x198/0x19c
[  241.707816][T12296] 
[  241.707818][T12296] The buggy address belongs to the object at ffff0000c940d880
[  241.707818][T12296]  which belongs to the cache kmalloc-32 of size 32
[  241.707825][T12296] The buggy address is located 0 bytes to the right of
[  241.707825][T12296]  allocated 20-byte region [ffff0000c940d880, ffff0000c940d894)
[  241.707835][T12296] 
[  241.707837][T12296] The buggy address belongs to the physical page:
[  241.707841][T12296] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10940d
[  241.707848][T12296] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff)
[  241.707856][T12296] page_type: f5(slab)
[  241.707864][T12296] raw: 05ffc00000000000 ffff0000c0001780 dead000000000100 dead000000000122
[  241.707871][T12296] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000
[  241.707876][T12296] page dumped because: kasan: bad access detected
[  241.707879][T12296] 
[  241.707881][T12296] Memory state around the buggy address:
[  241.707886][T12296]  ffff0000c940d780: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  241.707891][T12296]  ffff0000c940d800: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc
[  241.707897][T12296] >ffff0000c940d880: 00 00 04 fc fc fc fc fc 00 00 00 00 fc fc fc fc
[  241.707901][T12296]                          ^
[  241.707905][T12296]  ffff0000c940d900: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  241.707911][T12296]  ffff0000c940d980: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc
[  241.707915][T12296] ==================================================================
[  241.707919][T12296] Disabling lock debugging due to kernel taint
[  242.053422][T12302] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  242.053483][T12302] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  242.053495][T12302] EXT4-fs (loop3): This should not happen!! Data will be lost
[  242.053495][T12302] 
[  242.053503][T12302] EXT4-fs (loop3): Total free blocks count 0
[  242.053510][T12302] EXT4-fs (loop3): Free/Dirty block details
[  242.053517][T12302] EXT4-fs (loop3): free_blocks=68451041280
[  242.053525][T12302] EXT4-fs (loop3): dirty_blocks=64
[  242.053531][T12302] EXT4-fs (loop3): Block reservation details
[  242.053537][T12302] EXT4-fs (loop3): i_reserved_data_blocks=4
[  244.494844][    C1] net_ratelimit: 549 callbacks suppressed
[  249.303144][ T1597] ieee802154 phy0 wpan0: encryption failed: -22
[  249.303170][ T1597] ieee802154 phy1 wpan1: encryption failed: -22
[  249.702903][    C1] net_ratelimit: 463 callbacks suppressed
[  251.693005][ T5945] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)