last executing test programs:

1m44.07393774s ago: executing program 1 (id=120):
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)
r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x6)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', <r3=>0x0, 0x8000, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}}}})
mount_setattr(0xffffffffffffff9c, 0x0, 0x1000, 0x0, 0xc65)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000240)={0x8001, 0x1, 0x2, 0x0, 0x9})
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405668, &(0x7f0000000280)={0x4005, 0x1, 0x1, "0000087aba10fdffff09e30b51751bc53051a30000000000000016ebffffff00", 0x34565559})
read$FUSE(r4, &(0x7f0000000e40)={0x2020}, 0x2020)
close(0x3)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r3, 0x0, 0x700, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x6}, @multicast2}}}})
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070000006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f3239000800034000000007200004800600010000020000050002000e0000000c0003"], 0xcd0}}, 0x0) (async)
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) (async)
ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x6) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}}}}) (async)
mount_setattr(0xffffffffffffff9c, 0x0, 0x1000, 0x0, 0xc65) (async)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000200), 0x7, 0x2) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000240)={0x8001, 0x1, 0x2, 0x0, 0x9}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405668, &(0x7f0000000280)={0x4005, 0x1, 0x1, "0000087aba10fdffff09e30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) (async)
read$FUSE(r4, &(0x7f0000000e40)={0x2020}, 0x2020) (async)
close(0x3) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r3, 0x0, 0x700, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x6}, @multicast2}}}}) (async)

1m43.029510341s ago: executing program 1 (id=131):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0x25, 0x0, 0x0) (fail_nth: 2)

1m42.65681365s ago: executing program 1 (id=133):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a0104000000000000ffff0200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000280003"], 0x100}, 0x1, 0x0, 0x0, 0x8894}, 0x0)

1m42.225127854s ago: executing program 1 (id=135):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000002300810000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000100000000b000000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000200)}, 0x10)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000940)=0x11, 0x4)
r2 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xee24, 0x0, 0x10, 0x42, 0x2}, {0x81000, 0x200000004, 0x2, 0x6, 0xf5f, 0x0, 0x200000003, 0x9}, {0x2, 0x0, 0x0, 0x7}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@private1, 0x4d5, 0x6c}, 0x0, @in=@loopback, 0x34fe, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x10000}}, 0xe8)
socket$packet(0x11, 0x3, 0x300)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x5001})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', 0x1})
r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x200008, &(0x7f0000000480)=ANY=[@ANYRES8=r5, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000004c0)="$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")
syz_mount_image$ext4(&(0x7f0000000900)='ext3\x00', &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x485, &(0x7f0000000b40)="$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")
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000001000)='.\x00', 0x8880, 0x85)
lseek(r7, 0x104, 0x1)
getdents64(r7, 0x0, 0x4f)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000880)={0x1f, 0x3}, 0x6)
write$bt_hci(r8, &(0x7f00000008c0)=ANY=[@ANYRES8=r6], 0x27)
syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10c52, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x3, 0x27b, &(0x7f00000012c0)="$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")
r9 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000015c0)='./proc\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r10, &(0x7f0000001680)='3', 0x4e)
fallocate(r9, 0x0, 0x5, 0x8ffff)
write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="03031b003000940006006300000001632fff00000000000000000000ffffac141419ff020000000000000000000000000001"], 0x195)
socket$inet_udp(0x2, 0x2, 0x0)

1m41.152782361s ago: executing program 1 (id=143):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000e30f000000000002000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30010010000000095"], &(0x7f0000000780)='syzkaller\x00', 0x8, 0xdf, &(0x7f00000007c0)=""/223, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94)

1m39.901472695s ago: executing program 1 (id=152):
setns(0xc9, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4c015}, 0x20004080)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000400000090001280080001007674690084000280080006000400000008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10)
statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x400, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$tmpfs(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), 0x14820, &(0x7f00000005c0)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x1d, 0x6d, 0x78, 0x78]}}, {@huge_never}], [{@pcr}, {@appraise}, {@obj_role}, {@dont_measure}, {@appraise}, {@fowner_gt={'fowner>', r2}}, {@audit}, {@measure}, {@dont_measure}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x6}})
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x10a)
flock(r3, 0x1)
flock(r3, 0x1)
recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0xffffffffffffff5d, 0x0, 0x0, &(0x7f00000002c0)=""/18, 0x21}, 0x9}], 0x1, 0x45833af92e4b38ff, 0x0)

1m39.521348159s ago: executing program 32 (id=152):
setns(0xc9, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4c015}, 0x20004080)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000400000090001280080001007674690084000280080006000400000008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10)
statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x400, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$tmpfs(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), 0x14820, &(0x7f00000005c0)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x1d, 0x6d, 0x78, 0x78]}}, {@huge_never}], [{@pcr}, {@appraise}, {@obj_role}, {@dont_measure}, {@appraise}, {@fowner_gt={'fowner>', r2}}, {@audit}, {@measure}, {@dont_measure}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x6}})
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x10a)
flock(r3, 0x1)
flock(r3, 0x1)
recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0xffffffffffffff5d, 0x0, 0x0, &(0x7f00000002c0)=""/18, 0x21}, 0x9}], 0x1, 0x45833af92e4b38ff, 0x0)

1m31.133769977s ago: executing program 0 (id=199):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x800, &(0x7f0000000680)={[{@debug}, {@nolazytime}, {@dax_inode}, {@jqfmt_vfsv0}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}]}, 0x3, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='27', 0x2)
r2 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x82, 0x108}, 0x18)
unlinkat(r2, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0)
unlinkat(r1, 0x0, 0x200)
mount$nfs(0x0, &(0x7f0000000280)='.\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000540)=ANY=[])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
write$P9_RMKDIR(r3, &(0x7f0000000c80)={0x14, 0x49, 0x1, {0x43, 0x0, 0x4}}, 0x14)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r5 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000091112f000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
syz_pidfd_open(r5, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r4, 0xffffffffffffffff, 0x0)

1m30.38020902s ago: executing program 0 (id=205):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x309})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1})
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000280)=""/224, 0x20}], 0x1000000000000108)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001, 0x201a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

1m29.869209938s ago: executing program 0 (id=209):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0)
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1484a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x28f4f8, 0x0, 0x0, 0x0, &(0x7f0000000140))
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8, &(0x7f0000000800)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
removexattr(&(0x7f0000000840)='./file0/file1\x00', &(0x7f0000000880)=@known='system.posix_acl_access\x00')

1m29.731344385s ago: executing program 0 (id=211):
syz_mount_image$ext4(&(0x7f00000024c0)='ext4\x00', &(0x7f0000002500)='./file0\x00', 0x2a0471a, &(0x7f0000002540)={[{@prjquota}]}, 0x82, 0x4a4, &(0x7f0000002580)="$eJzs3M9vFFUcAPDvTH+AQKEqKiDRKjE2/mhpQeXgxUQTDxhN9IB6qm0hhEINrYklBKoxeDExJHpWjyb+Bd68mOjJxMST3jwYEqJcQONhzezOwO6201+2u4X9fJJl39s3s/O+++btvH2PaQAdayD7J4nYERG/RsSuWrZxg4Ha041r58f/vnZ+PIlK5fU/k+p216+dHy82LfbbnmcG04j0oyQ/SKOZuXOnxqamJs/m+eHZ0+8Oz8yde/rk6bETkycmz4weOXL40Mhzz44+sy5xZnFd33dhev/el9+8/Mr4scvv/PBNVt8deXl9HGvSu/ClgSzwvypVzWWPxV3/63CbTV9dOuluY0VYla6IyJqrJ+v/lUrlYl3ZrnjpwzzZU7L79hZUEdgg2bVpS12+uIzl18X5SqlkyVLgdpBEu2sAtEdx3c9+/xaPFg9B2urqC7UfQFncN/JHraQ70nybnqbft+tpICKOzf/zRfaI9ZiHAABYxifjnx+NpxYb/6Vxf912O/M1lP6IuDsi7omIeyNid0TcF1Hd9oGI2LOSg9YtEDQvDS0c/6RX1h7d8rLx3/P52lbj+K8Y/UV/V57rq8bfkxw/OTV5MP9MBqNnS5YfWeIY373486dlZfXjv+yRHb8YC+b1uNK9pXGfibHZsdIZ+VW6+kHEvu74t1KpNMWfRNFKSUTsjYh9q3vrndXFhYg4+cTX+8s2Wj7+W2+3wDqsM1W+ini81v7z0RR/IVm4Ptnbd2t9cnhrTE0eHC7OioV+/OnSa2XHX3n8GyNr/22N539e8uVcnuh/u369diZKVi53lB7j0m8fZ5/p1sXK1nr+9yZvVL+Pivnq98dmZ8+ORPQmR6v5htdHb+1b5Ivts/gHD2QlRfzFnmn1Oy7y9n8wIvbn62UPRcTDed0fiYhHI+JAafQRvy9Rthnaf6Ku/ZNoPv/3XKg9F+0/t+pE16nvvy07fkn8dadY1v6Hq6nB/JXq998yVlrBtX9yAAAAcPtIqzM3STp0M52mQ0O1/9i7O7alU9Mzs08en37vzERthqc/etJipmtX3XzoSDKfv2MtP5rPFRflh/J548+6opofGp+emmhz7NDptpf0/8wfXe2uHbDhFltHG13khjbgztPc/9PG7MVXW1kZoKXcrw2da5n+n7aqHkDruf5D51qs/19sylsLgDtT3v/79HHoPMb/0Ln0f+hctf5/8/7srvilnbUBWmQNt/NLSMzMnYt0U1RjRYmV/z2IjU68tTmqsYJEu7+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1sd/AQAA///Kzuud")
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000002c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000480)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000540)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f0000000580)="fe112162c63e6da8bc8432294ef18af53cc330a64c2c7035246635093ba4d30fcf19a90804f04a10939db8f4e1b4acab11d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a51db7555c3b49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f0000000000eba1ada452cfe17b0000096f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d87120000000000007077ea7362eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9623810aca432a0415ad7e85dfafe625ad68f8fd9ef5c5dd59296895d1672efa7072477de47b1aec5a72376e7b0b558765ec7435f5aa572dc93b407411a3faad6b07cf54ab3cafcec4347f48120cea1ee1bb51e5c5f429fa352fb21dc81666b3b1e48a01976654c3a54eaca18432e45e25622e1f67f81ec2ac12796efffdc3a92efb57590a8a18a3f974b4a8b90f4c63b9a74ab91d44ac075b94e90bfb43983aa2e048ce4ebee34bdb97f41f645e5f8e540e39d33fc4c6a", 0x259}], 0x4}, 0x20004000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f00000009c0), 0x1, 0x5a8, &(0x7f0000000a00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='.\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000001000)=""/48, 0x30)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="20000000100001070000000000000a00997d0615fcffffffffffff1f0c0002006e6c446fb21587626783229d030002564c64aa85f204db5f819dbe25db623bcb2347590000fe3140916e9d840afdf951d6a3b0f4cc64dd06874772df6df468557b124dca5af77e2b13ce14d4b1bde3dc135fd750c1eeef665b71215cba943692bea5898c5590f94b53483cf543cca04c9490aa8d11e82c4e5859a9aa7ad8f22e167c88cc4c0484022bdeaaa7decbec0dd1cc"], 0x20}}, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001003, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000003dc0)={0x40, 0x2, 0x2, 0x0, 0xa})
capset(&(0x7f0000000240)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4})
syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x1000010, &(0x7f00000010c0)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_mixed}, {@fat=@nfs}, {@utf8}, {@numtail}, {@utf8no}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_winnt}, {@shortname_winnt}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uni_xlate}, {@shortname_win95}]}, 0x7, 0x2a6, &(0x7f00000011c0)="$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")
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001480)='.\x00', 0x101000, 0x108)
getdents64(r5, &(0x7f00000014c0)=""/4096, 0x1000)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_SCRNMAP(r6, 0x4b41, 0xffffffffffffffff)
ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000000c0)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
socket$inet6(0xa, 0x4d4f70a471b579ae, 0x401)
r7 = syz_open_dev$usbfs(0x0, 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000840)=@abs, 0x6e)
readv(r2, &(0x7f0000003d40)=[{&(0x7f0000002a40)=""/116, 0x74}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/145, 0x91}, {&(0x7f0000003b80)=""/187, 0xbb}, {&(0x7f0000003c40)=""/145, 0x91}, {&(0x7f0000003d00)=""/59, 0x3b}], 0x6)
sendmmsg$unix(r9, &(0x7f00000008c0), 0x651, 0x0)
ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000000))

1m28.893458942s ago: executing program 0 (id=218):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='syz_tun\x00', 0x8)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000012000103000000000000000002000000000000000000000000000000000000000000000000000000000000000000000006000000", @ANYRES32=0x0, @ANYBLOB="0000000000f91900ffffffef00000000140001000710100002200000ffffffff"], 0x60}}, 0x0)

1m28.333166363s ago: executing program 0 (id=221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, &(0x7f0000000440)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
write(r4, &(0x7f0000000480)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x35)

1m27.86036095s ago: executing program 33 (id=221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, &(0x7f0000000440)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
write(r4, &(0x7f0000000480)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x35)

54.541032957s ago: executing program 3 (id=432):
r0 = socket(0x40000000015, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b7050000000000007910a800000000005d0a0000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000480)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x1f3, 0x10, &(0x7f0000000580), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x51}, 0x2a)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000180)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000680)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f0000000a80)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000ac0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c4}, 0x0)
mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x1000001, 0x32, 0xffffffffffffffff, 0x3000)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x40)
r1 = io_uring_setup(0x1aa7, &(0x7f00000003c0)={0x0, 0xfb71, 0x38c1, 0x7, 0xf0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000100)})
io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1)

54.466909492s ago: executing program 3 (id=433):
socket$rds(0x15, 0x5, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000440)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r0, r0, 0x2) (async)
close_range(r0, r0, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
syz_io_uring_setup(0xd3a, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x0) (async)
r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1c, 0x0, 0x51)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x27}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x27}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fstat(r2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x6) (async)
socket$inet(0x2, 0x1, 0x6)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x8000, 0x7800, 0x26c6, 0x6, {{0x2c, 0x4, 0x1, 0x27, 0xb0, 0x68, 0x0, 0x6, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp={0x44, 0x10, 0xdd, 0x0, 0x5, [0x4, 0x7, 0x7fff]}, @rr={0x7, 0x2b, 0x42, [@empty, @broadcast, @broadcast, @loopback, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1, @private=0xa010102, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x8, 0x3, 0x1, [{@multicast2}, {@empty, 0x1ff}, {@loopback, 0x3}]}, @noop, @generic={0x86, 0x4, "4fd5"}, @cipso={0x86, 0x3d, 0x3, [{0x7, 0xf, "bf8df178dde59e2710116e53aa"}, {0x7, 0xe, "30009463af3a8eee763bd726"}, {0x5, 0x6, "1a64123f"}, {0x7, 0x9, "a4faa21b673698"}, {0x1, 0xb, "496653546205aaec92"}]}]}}}}})
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
connect$unix(r2, &(0x7f0000000340)=@file={0x1, './sys\x00'}, 0x6e) (async)
connect$unix(r2, &(0x7f0000000340)=@file={0x1, './sys\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbc], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa], [0x0, 0x0, 0x0, 0x91e]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0xa8}}, 0x0)

54.359003557s ago: executing program 3 (id=434):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0x0, &(0x7f0000001b00)='comm\x00')
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@multicast2, @multicast1, 0x1, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x0, 0x7}, 0x3c)
setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0xfffe, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900", 0x7}, 0x3c)

52.510895544s ago: executing program 3 (id=440):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x404, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}]}, 0x3, 0x439, &(0x7f0000002380)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20034, 0x0, 0x1, 0x0, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000380)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x10142, 0x1)
write$UHID_INPUT(r1, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69)
r2 = fcntl$getown(r0, 0x9)
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r2})

51.87996625s ago: executing program 3 (id=446):
syz_emit_ethernet(0xb7, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tipc={{0x24, 0x4, 0x3, 0x8, 0xa9, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@ssrr={0x89, 0xb, 0xbd, [@broadcast, @rand_addr=0x64010102]}, @timestamp={0x44, 0x10, 0x41, 0x0, 0x3, [0x9, 0xff, 0x2]}, @rr={0x7, 0xf, 0xf8, [@multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x1, [0x4, 0x6, 0x8000]}, @generic={0x83, 0x5, "b3fed6"}, @generic={0x7, 0xd, "b20463af7e49eee272d038"}, @ssrr={0x89, 0xf, 0x84, [@multicast2, @dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x37}]}, @lsrr={0x83, 0x1f, 0xa7, [@rand_addr=0x64010100, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @remote, @private=0xa010102]}]}}, @payload_conn={{{0x19, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x2, 0xc, 0x0, 0x3, 0xe, 0x5, 0x0, 0x6, 0x8, 0x2, 0x4e23, 0x4e22}}, [0x0]}}}}}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0)
r1 = signalfd4(r0, &(0x7f0000000180)={[0x8]}, 0x8, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000001c0)={@hyper})
write(r0, &(0x7f0000000100)="30313a38303a651e3a046dac127c74bd3a", 0x11)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'})

50.237835668s ago: executing program 3 (id=456):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000400, 0x0, 0x0, 0x20000430, 0x20000460], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000f10000feffffff0000000000000000000000000000000000000000000000000000000000060000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x138)

49.731318686s ago: executing program 34 (id=456):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000400, 0x0, 0x0, 0x20000430, 0x20000460], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000f10000feffffff0000000000000000000000000000000000000000000000000000000000060000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x138)

4.492256466s ago: executing program 6 (id=826):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000e30f000000000002000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000638c04000095"], &(0x7f0000000780)='syzkaller\x00', 0x8, 0xdf, &(0x7f00000007c0)=""/223, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94)

4.30793901s ago: executing program 6 (id=831):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18f51a000000e30f000000000002000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30018000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94)

4.251118952s ago: executing program 4 (id=832):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="4c0000001000010600000000000000000000000000c3000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0)

4.173125075s ago: executing program 6 (id=833):
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/83, 0x34000}], 0x1}, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000380)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mlockall(0x3)
open_tree(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000340)=0x7fff0000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='numa_maps\x00')
ioctl$COMEDI_BUFCONFIG(r2, 0x8020640d, &(0x7f0000000000)={0x1, 0x30, 0xffffffc0, 0x1})
mremap$dontunmap(&(0x7f0000a14000/0x3000)=nil, 0x3000, 0x3000, 0xf58d32d40c7fe00f, &(0x7f000048b000/0x2000)=nil)
read$FUSE(r2, &(0x7f00000031c0)={0x2020}, 0x2020)

4.172771578s ago: executing program 7 (id=834):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2020000000000015000200071b1750bd030100000000009500000002010000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb3d6dd5582203865}, 0x48)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

3.855211323s ago: executing program 4 (id=835):
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14, 0x80000)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000004c0)=0x5, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x4}, 0x10)
r3 = socket$tipc(0x1e, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x41}, 0x10)
r4 = syz_open_dev$dvb_demux(&(0x7f0000000280), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000002c0)={0x1, 0xfd8cb4561f58893f, 0x0, 0x11})
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r4, 0x40026f34, &(0x7f0000000340)=0x1)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x41, 0x0, 0x2}, 0x1be)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000500)={0xb7f, 0x0, 0x3, 0xb, 0x4})
bind$tipc(r5, 0x0, 0x0)
sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4801}, 0x4080)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b00)=@generic={&(0x7f0000000b40)='./file0\x00', r6}, 0x18)
r7 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8})
io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f00009e1000/0x2000)=nil, 0x2000, 0x2201e061825c6e74, 0x4010, r8, 0x4b085000)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, &(0x7f00000003c0)={0x0, 0x0, 0x40, 0x2}, 0x1)
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000380))
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000540)={0x1, 0xffff, 0x10001, 0x3}, 0x10)

3.836038555s ago: executing program 5 (id=836):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000280)="21000000470010aaaaaaaaaa000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000600"/76, 0x4d)

2.996998992s ago: executing program 5 (id=838):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="39298ee609"], 0x20)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000080)="21000000470010aaaaaaaaaa0000000000000000000000000000000300000000000000000000000000000000000300"/76, 0x4d)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000100)={0x1, 0x7, 0x3})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000)
r3 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffe0, 0xa}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x60, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x8, 0x7, 0x84, 0xfffffffb}, {0x2, 0x1, 0x2, 0x3, 0xff60, 0xa}, 0x8, 0x1ff, 0x907}}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x3, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0xffffffff, 0x7, 0x3aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc1}, 0x400c810)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x0, 0x5002)
syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) (async)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="39298ee609"], 0x20) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r1, &(0x7f0000000080)="21000000470010aaaaaaaaaa0000000000000000000000000000000300000000000000000000000000000000000300"/76, 0x4d) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000100)={0x1, 0x7, 0x3}) (async)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) (async)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffe0, 0xa}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x60, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x8, 0x7, 0x84, 0xfffffffb}, {0x2, 0x1, 0x2, 0x3, 0xff60, 0xa}, 0x8, 0x1ff, 0x907}}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x3, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0xffffffff, 0x7, 0x3aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc1}, 0x400c810) (async)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x0, 0x5002) (async)

2.661337705s ago: executing program 2 (id=840):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x88002, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0x15)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000280)={0xc0002009})
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f00000002c0)=0x4, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="f585fb", 0x3}, {0x0}], 0x2)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a"], 0x4c}, 0x1, 0x0, 0x0, 0x40008009}, 0x40040c4)

2.528719432s ago: executing program 7 (id=841):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000))

2.393312584s ago: executing program 4 (id=842):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000e30f000000000002000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000c300001a9604000095"], &(0x7f0000000780)='syzkaller\x00', 0x8, 0xdf, &(0x7f00000007c0)=""/223, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94)

2.245340058s ago: executing program 2 (id=843):
r0 = socket$inet6(0xa, 0x3, 0xff)
sendto$inet6(r0, &(0x7f00000005c0)="6000000000143340000000000000000000000000000000010000000800fec0ffffffffffff0000013b01", 0x2a, 0x4040, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c)

2.190983439s ago: executing program 7 (id=844):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000010101000000000000001000050000080c001980080002000006000004000280"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4004014) (async, rerun: 32)
r1 = syz_io_uring_setup(0x601, &(0x7f0000000340)={0x0, 0xf6e9, 0x800, 0x2, 0x3a7}, &(0x7f00000002c0), &(0x7f0000011000), &(0x7f0000000100)) (rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18) (async)
r2 = getpgid(0x0)
kcmp(0x0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff}) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)="f7a870330f90675343f272b39acb3161053ed5897a7776a8f873", 0x1a}, 0x68) (async, rerun: 32)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) (async, rerun: 32)
recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x20, 0x0) (rerun: 32)
syz_emit_ethernet(0x19, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c2deff00ffffffffffff88a8100088a8"], 0x0)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
write$UHID_INPUT(r7, &(0x7f0000000740)={0x8, {"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", 0x1000}}, 0x1006) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r5, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000680)={0x3ff, <r8=>r3, 0x80001})
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r8, 0x10f, 0x84, &(0x7f00000006c0), &(0x7f0000000700)=0x4) (async, rerun: 64)
close(0x3) (async, rerun: 64)
r9 = socket(0x200000000000011, 0x2, 0x0)
setsockopt$packet_fanout(r9, 0x107, 0x12, 0x0, 0x0) (async, rerun: 32)
getsockopt$XDP_STATISTICS(r9, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x30) (async, rerun: 32)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[]) (async, rerun: 64)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='autofs\x00', 0x201000c, &(0x7f0000000140)) (async, rerun: 64)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x62000, 0xc1)
ioctl$AUTOFS_IOC_PROTOSUBVER(r10, 0xc0089364, &(0x7f00000001c0)) (async)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20)

2.168331852s ago: executing program 4 (id=845):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000b40)={0x4, 0xb, "ff382a", 0xf7, 0xc})
r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)=0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x18, 0x33, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x404, &(0x7f0000000180), 0x1, 0x76a, &(0x7f00000001c0)="$eJzs2E9rXFUYB+D33kxi2sZOqi6sm4oVWpBO/rWhqZvWhSAIFgquVAx2koZMmpJJ0WSV4lIXLgQVEbQbFyLNQuhGNCD4AXRjv4IgKrpwIYzcySQN6SSNdeKh6fPAyZxz37n5vWeGucydAB5YTxZ/soi+iBiMiHLreB4RPc1Zb8TS6vNujCxfKkYWjcaFX7PitLg+snxp7X9lrccD0TwljkfEc89n8ejbd+bWFxanx2u16lxrPTA/c2WgvrB4YmpmfLI6Wb08PHz61NjJodHRsY7tdWggXvvuq7MvL527+uXgK7PTRb99rdrGfXRS1uZYKSJe3Y2wBLpa++nacCwrJWwIAIBtFd/zH4mIp5rf4crRFbe/vJXj1rdJmwMAAAA6onGkAQAAAOxxqX9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/tBoZNEAAAAA9rTUvz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB/uT6yfGlt/J+5v5yLiP7V/ButsVopxVLzsTe6I2L/H1mUNpyXRcRgB/KXrkXE4+32nzXz+6O3udqcn0fE+cT5r3cgHx5kK8X152y7z1++fv2JNp+/0upp/9na9e/GHde/2/ldW1z/ruww4/MfX3p3y/xrEU+U2uVn6/nZFvlLO8z/5sXDH21Va3wWcSza52/MGpifuTJQX1g8MTUzPlmdrF4eHj59auzk0Ojo2MDEVK06uPq3bcYnX7zz/Xb7379Vfhbbvv7v7XD/Rw89+/Wn2+QfP7r9+9/u9S96Wt5h/u8/HPx7q1qRf3GL/d/t/V/ZYf4LN8/f3OFTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYI/KI6Issr6zP87xSiTgQEY/F/rw2W59/ZmL26uWLRS2iP7rzialadTAiyqvrrFgPNee318Ob1iMRcSgi3i/va64rb8zWLqbePAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOsORERfZHklIvKI+LOc55VK6q4AAACAjutP3QAAAACw69z/AwAAwN7n/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddujIyq0sIpbO7GuOQk+r1p20M2C35akbAJLpSt0AkEwpdQNAMu7xgewu9d57qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw9xw7vHIri4ilM/uao9DTqnUn7QzYbXnqBoBkulI3ACRTSt0AkIx7fCC7S733HioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7D19zZHllYjIm/M8r1QiHo6I/ujOJqZq1cGIOBgRP5W7HyrWQ6mbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOPqC4vT47Vadc7ExMRkfZL6ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAr1hcXp8VqtOldP3QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABp5T9nEVGMY+Wn+zZXe7K/ys3HiHjz4wsfvDU+Pz83VBz/bf34/Iet48Mp+gcAAAA2W7tPX7uPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Kn6wuL0eK1WndvFSeo9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zj8BAAD//5GsoMo=")
fallocate(0xffffffffffffffff, 0x10, 0x0, 0x8)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='.\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000b80)={0x2, 0x18189ca9, 0x3, 0x1, 0x1, @discrete={0x7}})
openat(0xffffffffffffff9c, 0x0, 0x52142, 0x8)
r4 = socket$unix(0x1, 0x1, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000980)='system.posix_acl_access\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x3c, 0x3)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2)
ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0)=0x3842fb)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xa, 0x3, 0x7, 0xfffffffe}})

2.085338346s ago: executing program 5 (id=846):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="b70200000af40000bfa3000000000000b70400000000000085000000b500000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.084321693s ago: executing program 2 (id=847):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000200))
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000002680)={0x1, &(0x7f0000006900)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x8)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0)
lsetxattr$security_capability(0x0, &(0x7f0000002400), 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000002580), 0x0, &(0x7f00000025c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}})
lgetxattr(&(0x7f0000002640)='./file0\x00', &(0x7f0000002680)=ANY=[], 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006940), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000006980)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000069c0)={0x0, 0x0, &(0x7f0000006a00)={&(0x7f0000006a40)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8, 0x3, r5}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x8000)
syz_fuse_handle_req(r2, &(0x7f00000026c0), 0x2000, &(0x7f00000046c0)={&(0x7f0000004780)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000004800)="8b7b874dfc0eb58d1b1d1d73877bbfd0d4fc38bc32dd5d58c8c75eabde38b6cf83d2d265c05424bb00ff20b0e0c8d843f1685e0528f9e7c14c63b93352477099f20952bf4f03f6e46cafc6fd6776795f4c1c9b904a0d3a179a50b89418f18550e11237847d7261644c10a76f950e5bde3387c6efcc9afddaedbe10c6fc60793a52177eb01d7e5f2b52e304bd02d704663f7acdf9679ad8c91715453ad4669b711c0430b82bc277abc1ca2cee5e9d60153210bf01f9dbda9b4d61a61e01bd4c213ffccafc393a06e6782e6c2cd194f92f1f6a04bccef14d6afd125da9b19911d2af54dfae5c64b9c68d9572381b4cc4492dfd901a778c0ffa87a6884c7aafc12dbe84d9b3758e952e2c028b931ce700c1c527faf09dd973e654bb7aa5c99bc03d6c8102615474b56f3a7f8cc6b49d039c60ca4be0bc5d5c4a26038918c45f64a20b389c58430ae88541cf317279ea032df929915578127ce6e4c4f8d20a789e1021f28114dd3744cdfe44959f7dd5f719f9672b25ce0150866c80557d2e8f358a7e238372798a1b5248a06c9056e4a351b41c229c061a309956f9742d29cb37b4feab6ce0486899679d54e99d3d5a2294c247045aa46c034386c80b90ba5b004d25c36dfe2c7f2f7127e3ccea8b8bfe455680ff1506826c5539d51de8583dc592669dd135e8f8c7948bb745f692a9f6ebab65b15d41a54ab5f61f11d5b5298005943fefb8b0c0918f3d803f6ed5c47d52f8bb3f02a3465fea19b2d67362b9e55d923ed17695bfe83e14a365635231a36217d9e5284c1c5981e988602d629da3382370786d7bc5f04e33b6690fc203db42ac10cdb68fbe1d5fde5d6857f8ef348ea980768d632da0970402377f4eca48730c5aaeb3f13b8f0c955cf073d833a57beccccdec79f3bd50868d30364607d327f2dc29ab6c604b68b602d4bfd7c77e955b06dc72a0fdfe9d481df7dca3a22a84d0993bb7ee828033b756e8018fc2aa04a7facb82cc06d150532e38a19e163933d5ebb339992a5a1d2f37a9c84b04c6515dd4311d9466aebe383d9320c05ca3050d339638d0c0c1dea9d0f2195c2e1b12f0dc1ddd20b9510c80220d6f72153fb3165340e9938b5cdff0e39f412b21e6bd4fc2b8793da92dd81885dfa7075be805c797faa067e22ae551724c17fc630353b6f787428c06e3e7165bc17b7926e7d136b38aeffa8abf77f5bb03e4bf84309ac785c4424525ec496269f0853ff8b1f9b5a3711467d614f4537fa7011a0e08b5f40fbb0328a7aaca8b2123a511dcd0064538ac8949d63ee45410a6f595aaa9de608f356cb555e68d37e8744daadaf477bfed5b54851ce3e36241ef025442b34b7652ae19ee324f7e784cf566d787dca46bd2209a841d8c3dd0a9ac6731d4a0b757595e2dc3b57da3be9cc7ffadef567b6d7f713837c4ff04b8ad6bbcebf810a2b07a14dfa069275f33936e30737fc2de5af537c24924fcd7d58bb3c8ca7263647783526d69c3fc83c2bdce2acd2a673c3e4ed7befba9fe67ae366e37e5cdee4ea298cde2982e77b59d9669dec1f34fafb96854c9e7d7bbd906273176a5fa2c7b10256c3bb08c1afcf83429d9a93dd6295607886789a50f06fb38dd523e25554438871906d34f152897b8e2fa33be701f8eda38081f82289352eb4e8542b514f477bda5274e3925729bbe1f68f870ed55ef2e45c42bd2b5c4ea9f406c3cdf689ef7367abf8225b3e8e69ac03dcd9db5bfa52505a0547e3fe4da69c0cd9a7d02c97039bf9a8e426d13ca01dff26e04fc93948004cb8e0e1d34a6925c9fc72c85b1824af2113536624821b0890f5f157ce13bec320361209ddfb51c94fdf31e836ad8257803c81a7450060d2d52de04a639502abceb97c3e12cbb6b861a2e937bc4116f6c6c24a96837a541572e9389d2fc8239d19da35a0d208690afc50ddc05408bd745758238e43cfc1496a38ce4ad42cf510f00c60c6b0ae0977555fb8ffa26eb0e80c510b77d288cdae0e4ae272a1cdb322881e9fd35679be4cfdf5d36122716161cc50e03693eef1467c8ac29864aa701ad9fb20db01a2d9fa3dfec290bb4dbb3718ae9181c172edb258065eed91e42694ae296961907678e9bdb4cd552a9cf61282e47fe48ca06fe0ed1a96a8347011dc30870cc26c22470f6749c18e25d22c9edba20749b541c1be0067abca3449edd9e772d191ac48911b2de511261f333e9062135b19e152caa826c85d0c2ef3df8c0fc20555845f9b2745e277fbcfe92af577fa01567a0c8836b3409850fe94482a8a43024ae20e410fe4227a32b837796187207cab941b3f4c12344cfba6036c29a8e997f10bac7b0dc6116f04924c621bf78c4c3902dc8afc2437f62cc3874c3cd7c6e0f1e2b5ffb11c6b29d76cdb4a915c1b060b3d3fd04c391d2ace6cc8f6bdf049ccadc7066208a0dc2d8a49770143d5e2bcc0aa94e57784c1cc35261bb631afa30f91e17500b2d63a5ba3211a65b701e32abbfb1bf4988ce9abdf5e184086948b06f929bb655845086be5ffa05a7441141953ec28143d9efe58a6dd28b688e188dd53986f45d871de6e35a9b7b199d209ce101015e4a4f807c06d2071839895a9f7596797eec781ce987993329fc924e3e8e692246d9a5e3622413507e977ae58dbd490d33252333608e3791333794ddda936dcfd06e1f5e58a3856770a9997a92a4aa6f5d48f2b441c8399386aec662a90ecf17c7f402bb66bd2a994f820c563ca5ef4c994ec9f1d6fb27dda8e02ff225d646c46cb62aa550849af8068647b91bbe813a64adcad06dd8ed72a3d5e0623d8106d984fdc317f2701b74e97f14046b97d6eb40c4ad73dc16e93e703c282bb2ad22abf230f0dc8ad0d60e44cedd591c68125b968f28e605ade40cf7a0cd784b19ae81af1e1e317a0d0906fcb247f61ff2af6c612423c519f03f4985fcf37830a9ec686119dded0bbf029c04c6fc33b7b6e8688ffa269b55cfb0a2684067d059e83f9d788dbe21876dcf9b50ec04031b65518d933d4d41fb4581361a6c519a5a29116529132c9def03d3d56fd2aec1f6f557f6e1834d7070b997b95176cacf2c31bad61ae0b4778504b8768c46aae7b80153c9c93c53293a22bbbc49a702ad6ba345b8cf0582d276e6e56c6050846016d4f72bd46bf951497b08118f1ef84e83d5ff352f25d00fa0283823343d637ae14d3bce89615fda073b94e195a8f7d8c7fbc59f9a03072dd6a94f5e013db8973bd1d982a604f7a279009d8bb85a8f8ebad03b10605920fb93eb797477d7a56a43288915a23a2be0091fa4791b3a1073c32a9bfec4da713f896b52faaca0f723724fc03d738f7c83a73ed1a8f874e42edf7667a8b218c8c1584ab034aad2891740ec83f6f3fddd45e0e668d54294fe46995928d2d16c2c32cc69170c9fa984de7093af06c3b03012814a9f4eef0cf34ba3f8f6b6413003c97643c0aff2dad16a44c3ab39c392fc9eff1e37e1731f95e97622239aa26f20b64d4e733a53c38d8f6ab5b178ddf238e361ad7719a4f42d5ff383a4c89af3c951f5cee378bb29988bf32e445c7d21da12d8d9bbbed1fba00d88b06503c38b1dc59732d5e464a2ff347eb6475fed64f4de29fe87f73f302fde6e82954639d0a9472713f9a311ff13ab4c3c0a9fbd2a298ed3805d1c495839e2eb4a010e1266511e5025938df9303e7b0a9a15dcc3724e4d5573aac237d5ccaad194fab36d646b07537e4c1577d6ce0196f2d1fd37dbfece6e3d56a8d4774bd431ee6e3315112e5852e9ed6488898b1e3848c68af6f43245230bb29c099221b5875dfc111fa09e3cd183e6a315eb3faa018b6086b067cc589927e629f05aab2a52846024c682b4840cceba87ce7722b04ec7afb7d7efb01bfbcf848ea6a45ee7b97c1ada8c099028e73483e6ec52b624554a7a854be7643a0a8c8734ee86f9c4bdad045e3c32995f16905048057ce3580edb792e4016b558e753ee1e8b664f6bd7c46e176470366ac40f6be747c49046b266ad6ab13221f2c22f2588c2094e97804b7139c48e39cab60ba39259add21a3027188a7071405959e5072835f1080577cf39afdfcb9f25f6a5d1ab00ef6d077baa17a1b76406e508f009046f076489d1d102315758d691b9e7b2ce807ae18efcbb04106d41f23877f763099e99fd4e48d4478b646733bbb176065f3d01b69304489a6fa09c23457aa22cdf18fa191f206934139e792825a34a5b91fb7971eb16d67b5322a4c7946b74a3fd1cccbdbb0a7799802304227d8513dc23372b83ce7b6982de8bbd1b1272868373f3df9e591c4b01bcb64eb1db7dcb3c7a0fbff13e8769e7c8f139d1987e4e72c4679a65597a32761b9e61cc03a65b8e42e218f6b920893d4c0a9d5398183c280fdc752384ca562e475d7a8317c1a6a7e1b25a9442c5c4a8ef5b9fa012a472c9758ef9ba5bcb952bdc158e37d88b2fc96bca352587bcbf2e2713d3a9c8237e9c10dc2fcedc8911f0507160ac2ef901941b0482b2b1c5db71c05b81e7a9111703fc27b95ccdd8fdc91676bf5f435e0a845c39dc1507e85db10afdb2b5892f5b383d3509ab8828fffb08d40ca476c3c6b8a4b5e6fbb011f1676bee9c479763faf23009464ea2da850a916550fc1a7d59d82b87a8eaf604d1019075564a468837b0e5b658e00a2c777aa27e29f9ed955929985e3389a0e57dd1b12483a74a0264f42cd4baea44c3e88dad4aa5bedd6738d5403b8a4bb4212ae94d0b4f7cc8d22be934e74000af363b64c9559bc53bcc9c221462939a78cf44dc792fc2b48ea349da9567ab1f52efca23e522f4feb7a2f4bacff17152c93645c46cf2cbe61f2c7a4e55d21aa0fd4b2bd793974a3e6ed88f65e4d46c768042377ba28293536f5d1f8a5625521932fc3715364f954b9db5b5aa5daafad48cf5f1883a88b719b9286533ba4d42e28cd7220d91d69cd7ac2e0007382da21026323fa0b26ddbf1ac67cdcb27ab1970cc821423bfc4c42e017e16c972aaebd54a5dde9578d257897311e06277c584f732ca4c5c65f8a812fcbc8e96ede66dece553c6e71a3fa26f7390c23842927852a90a1990702a4da94b945df5f0a646a6011a3f3caf5211392a510b35f20df946562cbaab0d522ecc02dbae4e20606a0e7b19b919f08671ad38c14f0f16f400edb7c4d00192c8e09d3259dfc3e95558eaa7bbd792141ef38d7c0515b8226957cbcdfcac6062cdbfce8d7ababc306dc8d4c0868977e230ebe356aa009e425af8f140d7707fd81c05aa141504003cb1ba95dff7a52770d5efa7ef107f2a385765559f2121cd9ec8bf8fa5e8f2d0fef073c99e4c064920648065fb2acb11e368fb7e9a37239012131909eaadfbe8cfaa5dca35a8f3d47f40ab6e40198212f12c06b9ae4827f50c37329ae77e963d9c54da8ce0907c575918ad324158f5cccbf691f514e44ecfbb26e319323a4866ed288d28639b71857e0d72e40c46878eff37f4e8818625d0a1004e2cb7842a37bc9bf7ef4a282d4b20649d7454398c94057940753af3935c9819805e4391ebe86e497da1d23496812516702b9f964e0c97a43f9cad8f4884dcb9ddd0f5b5db55f4acb50cecf8e5fa6cb14a88a1b864eea4706d780afceb52cd7df626aff3cd1501d5f470c085b3eaae9bd0944e5df09a68e8d00c84a91b8a4965d3a74ae4cb4e1caaaa2e8ce4e58dc069afdebc203647a218907015c92399e06ba3ef3d8b90afe550de7cc1d1b2c512a66688660938520d22c490c76dbe2a23158b4923f6c3e0bcec0093ae9fd0627ec351ebc34cb1518ade376663029d0d2df6f05a61415f2ef96e07b8285485013c97188f800005701207985aab77bf314a433c7462220ffa38ea0c3f46601c9da2f98ac23e97e6a2fc41922aba97849244c9769931e3d07a7b726525c801dbae9b3a89f3ef06c92d7ae69b27abecc506ac72bfbcc0fd8c3fb2dd4a40b7ecccf8d6eef3072200eace62eef20c38a7a3f34d9b7d4c644f06844e0e7fe991c415dbd93e2b2fe7ff02e30a02c2ab35908646b38f3802ed2e21d9f0c0d378c75b3b30a83cf350ad5f9dedb87475772a3945485b80373c5976dd67b56bec51f79e4106cacc4efa993e2ad30add411f5432518be218517b9d6b0a7503c8b7a4886c942fff13bc7b5aa221fc3722419fb4d06d6e2b3d53f7d4b61daf41fda7d5b36a4bbe72ad5cec842c524396f5eda1f04ce4971555a0023d7ce8d51b70d1ce039e4c3e71f5b17c8de53501273fa3ba886e5528d5d5937141d4d483f6d6cd72ba36eedeaaf1fcb7f226af9c700d677a0a17d097d57e53bb2e376cb756080fffc31d7144141f56cb02488b8c76a7c6ccc7dcbd6ef9251aaa8b4c38a7695add3d3465f2c457ea0fd286f0e40bfd8f84badd2520aef5599d6ec0d3e8702d87a395e0cb12ab5c24bbd7993c3ab97e2f5d800810e018ea860ce80589b591996d81616f1034b2f9a508d9f4bd6581d723e3f74de2f10e83c1f3feed67542ba8ff4e01a4081dff26b2ac9fd98d06725dd4d43c4da4f6dd95d3bb075f25f03da6e250ce849a5e2ed8da1c0f170bfec0c7d16ebd9fd7032c2a159c997715dc38937571ae73a312f73d7cde070c75cff6f8e001993cc1c87053fd3fd57251c5f2ed27d2525a58d1d3ec26c057bef2255f612d3d307458431cd59b4c5df95254a80a78c58fce8f180d2eed0ed4bc33a87fbeef63ba77824ebb875093b9ee1243c47683e70d2ce379606783e8584272ee34e8fb8598d4b9f8368dcd8440b5566a5f7e63b54dbbb8d3bbe87e4d8c758a006357c8af4e82a6d2be1e1be07cd5267bed97c970156dd408b706dd8d2fe9f05718808b79b9081304814d76f26c29fb42b390560c75bb63bdcb4daff0dbfef04b5e2d6bab84922a4ed08f5fb59acdfa67f633304c9b9889d49f1988236866fc12a8b21b5a7b07c9e2b9af0f167685f472b32cb423655ce1ddcef8780f36d8a1e8e616d594c5e1c42ff4108ff77b7316ebd2beaf848a05d1f1c88310789977934dfd142fc78722c8c7fc113f1d940ddca2675d0803f09ac016b5ca3187d1894c95eb9df81ab5dcb3272e63cff04c51a409c4ef8fbd6659c4c0bfb139cc219f23136a031a3e6f7c820b4f35fbf5292d17f5e50bb66e40cfc398a3288985776764f3db6ce5ddc0648c4fa83a3c3a7bc4e141566b67c8726cf3eae6dd75e7e3c460b2f1955d9537f22a4202dd2188197b2197c1735dc9ae1ffad75c6c5c48785d0d0740431410e99adc11b225eb1eb1aee66078e6d0018b4fa4d6abf44b364fd708b3e52690b154ab79a1be25267028f11c8eac16337cc98c3b7bdc5fb7e90a33ea7549d70fab71474ef06190eb77fd9e2ccc91e565d738cdfec456a7bc2ed109798848a793ecd12efcae869b3f17d7be68d1f3df65fd4c2280f79fd62e4f34a00c9d6a39cbc6a3c79eec40cb67cbfee6668429610fa78d59eeab65aa41d6fdc2209b01a4f029fa28223414bdf00e3f7365150092d66c98c84d56f775f552b41c5377561348e7e39812df6d3e75e77ec9bb0dfe533275ac507d997d964911f6af6d61ff45cf2240f4baaf7236712fd5f5082429757c6bc21a6c8aaa86c57acb8c6a5580bdf8f69d671731652af19dfecec76d85a3f961cca26d98fa317278933bae49b841951f83312263f4c7d5c70c7652f54aaf96a61f29b430a89cb356591849340e388fec84dd91bdc85251241206759e06a0e38567d404193d1080c675edea8bfafd91e969631cce54b55c57fccb7170bb79f32e845b039cc80ebea77ed4d110830e39e00515053aa6afeca4d52812bfc91e5c302284a56de5b9db9ea4a0ce4c9bfef5d5885288e2bbf4a2bd4a13adf35ab1287a2fcb19eab824358986d3c0622a2f5a5d8e618f496837938a6090bebad45f163982a3afc8a99fc64670ca5ea6abf66de8515f77abfd4d8696629bb931508f03367c04b57a61ab0393cef908732743b3ece84426bbc0a57befa7e2825060372b38c561ffbb5aefaf680462c1a2da6b80b9c659f116d2366bee3d757d05b51f09078b771c084169aeb88c6c28448ba844ce984a6cb70dca25cdd17bb00ba76c013d0c7fb4ed2a259bc9811f0db5e21ab1cd1f43e6b73e292e31755c4e6271cbfe1c390e39c8c39fecac2e047f57974c2b48dafdfcc1c2ef7fe7999a637d27b78b036d4091e1995e98f7d7c09e5c96d9cacd77707406fdd030d83cd16d5f3200d62ea38617de89772373c7c39cf69aed9dfaa82b7a9f86f73c0d47eea5b4428f2da67f0f592f209687c72b6c2d28f39f26ba012190ef94116bc52cd64f8708ba9dfb41400bdd553e2384588336bad540b8fe5e9e38c93751ba4306330f0906fdaf4cb4359a1e30b6f82f0bfb5ad963a91e0fd1d8406cfacfd62e31c070bff60ce12d0943f36fad1c47619daad67c4b844249fc46278e3fb29884ae949051b9071406e904d5163dd344f0593cd031c8a0629ea524b119171bc39998488c9359db7c7e708ddbe0e8b0a1c16d23a606a406ea824e5b712e8f9966f82281faca062ef34a728f2ea55e7645d900e3cf72b5b6a30fe1fefe5a33ea82aafe4d5fa4fd7a5e32a27c8ab2167e97a6c6265c675cc3ea3f92bf556b94e6cf1f3e383458708e1c2155acc842ae459fbbe219ff29c37c7032bc8549ffde0d3a5cf03d2cf7474fd0493ea68e75a970af0f65fb23ea86fd8f254eca22c6d1f8fb6d980676916bfebae7c97889f1ee6ddb4016c6963939605b3ead437f0355c44158bfc9b52e397ae2a0b380a1ea0cc01546f990671bb664f4338d81eff0bc34b2aafc56db260c4ebabe4eb1c0883a4246677eb708b8946cf3fc4b10c095bcb8c2ecd3db8d3168f4d928ffa4df0b08c784c8fc5aeb67feda9442d762a4ae17539fdf37ea295c26ad0e76f96b64b2983e51f3644ac585724bfc8b94de463c6f83431754b1ee77deb6f4b08f95ec2880cfb403ca0c0341bfae487e758933c8db45b00c031489cd325be0234ecc88180b8092fe24bd8fcba59bd7f71f526d8b322e2c3856459626e04e80dd734e66e25d7705121c8f9ac3d0111d48bab2ac8c46d948ebe0d25a56eb5d2c32ac65a8ac3ef56bc23134fc107f08f8631343180fe92b7a232fbc7bd9c96707db4d07739f99dc8b6cc5edf2a8ce5f34e3c2437035fb7785421d49186fd653603673985e442ee0b80b2d3311b167c54c195c877bf7daf4854c9a8dc00eb644b9a832e62ef14bb5e7cee72db4f1db8703aa004011d9dadef6b5896c19e173df079e86cbd151cb5fb53c890d6774e168f70abc21f9a36531c20087f59c7f8d8751e69069f58310b4749d5425e2b617415599d440af034444684c4b579f5c1c3c2db80b51691c797d061d30a91b2dd41ddd2f7fbffa17b17279b47f1e8896f998e649864ef7cc0177072d1b25b74bdd845e61dc71a999cde02103607b33973d2f43bfc44465c30ade800f123c39b71ad69cbef201d13c920d14a9fb668d6c9f9b2a4e0fdc86c65488e65c3c2ee53e563999c460970751add4397caaf1e539f89fa8738a50b919a6ab86ea3d41349f6d6679ae00955e303c2a4e5011a3c47caf22ac1691e6786965b6359c1331c7fa6f128267ecb1e984b58c0da7989d5ced6bbe27b72ba22b1d9af025ef45f088d0466813941f75bb8e867e09b293653374c39c2646bb7caa33e5ab9841b78fae31ec81849cf651ffb23cd3a04879e1574babf06a553eb44bb8cbc80d64a637be9e36b17f051ab0ff8170185c3e08590641dbe293d79ae37192560365deff45a4fae1f6247b28cd8a6750458f5cde0a9d9602d234edf7c89a2a6982e3eb0f63bdf34686adb949f80c4108baeb84249b0a6c13fbf9eb8b7a19dcbd240b39678a32320876934aa07d67b9f481c13da2d255c58dd6170c13c67a64c8b2e7560c44b4b54b16e7622536dcfff3ee9767bd98971ffc99992514a9419c25a8ed80850eb44385a885c05aaaf56195dfd965598e0b906176edd06e5f51826141f9d3958b462a4da0a1eafa9bd827941f3243385e5f5e24a69e862c7dbaea6f3e8937e5a5169b3910b583cd367484286bf833ce789e6575a529b68224424a6724a188762ed233d2af9b6b964f8e2697c17e96d1c019317e3d4f05d0ec02cbe12555e64b70cee7aad2ec4ff89486d7c31904ecd49cc4328232dcb5e51e519b1bc4e2e381c0c1b4d8586c092ea6ccdf6ed1ce2f42afbfda2f743fb90ab31586bf0fd81b2e3fc9df89f02a79aa8592cb4e36d98b58ef212bcbefc01a98984a6931fcaedd635a1e324aeb37f37ebc604844eab547d240dcf2e58fd6aca68bf9e7de73fea9a3f74fb2f599588c27e6e6d4aa3951e8e6127b54dfb0f6959ce1704aea7c3c15933ecd61cafb3b4e6875b1fe579abea3c47ac43ecaf5132b3ab4b47ed21b0a6f846cfdcdc59d559f1c8badf715bd8e9bdbaa21c6bde526476a45a0d93b5e070b6496730d77f80c16686ca8f7d775cb3a25d21c3ef1fa66c60dc16c2816bdb1c48659905f9991d16e7b8c7b8849ead7e94c7fe49183d119a8cca3c86c825c5abb7c82cdb0b306cfd206e4d18d6ebc0d5bc5d90c6ca442adaabe795f98a77b367566004df68cae795a690a34859e1c4de1753481a4c21cc8c55c1c18e8cfb414d9d0fcea0222ef6ae9e723ff9aaec0588ce700f120047ed92fbc19e6c9ca28d6c5ab8f33237992481fa4b3cc02a1c9f82245ae6363adef84e30640c3a3f9b673b973194584ca72fa9713049a65cbabb9dfe8e8045a37e1084e14e2da79b13ef1cae879301055b158396217b3a86d6982c7071b8cf9675ec369485e27d39f023e14aa8feea76e43a680f15fa735b914c3609a7026d48465c87a75b9ef0a38d04861c56bfd69df93e46162e5e801484800ea22e6b8b4063817feec3576eac6d322bd8e621a1da13855e6df4028f1d77b8f29331ae84356ddbd52f7482f38b10f44838a980cde1b3fad43f94ca0f659261108357f32cb34dbb449476bd515aaf4029951441b2c77ae6cc159e3f3dc02d3a0e875942e6d35fea44f0838be1b5f91a4da4da8b4c979708807d589f8559b995719746b6a6397b84c53d2b93a8b127ae526620e8ded54d8692e69990c12dad241cba9944410738b8d932f5e6dcb627a881d39061b4e456fd5860b752b1e646686c30ac46c159f2b5dffc45cff921c6b1326bf57cd8292bfeaea502e32d20df1ea252625e4ce5765d8436162aa91b1f62a579f67d1f1d0bfb331ef26b846a5f7740ddc89aac75ff2bf1f151763bb1d52b784571fb37d525bd734899a2d8ca8556efd67b029d703c880bf2c7f1a634fdf86f4bfa628603b62f325bea04007ae7c496955a6d7fdd88206ba056675b6b30bea9861c6dfcc5c054a2fd5c2f31f0081dd4e1836d59efd90573864224f76385c8f1d6b4345e27304d1ab34d9c52cd76ced6ab45915590c261b46813421a0d0d20ebe19c161f6121012b55d073ed8a75f5b5b5ae3b24f0a1c9dc64a8182dcc6efac12c793966700dd7474b72ff81c8cbb076f1d2b271fcd1f9e92a0f23ef5473a2c31523ee8e5a8e74a02b3915fa05b148e59d522ba7b7116a3f12b13d12b8980ab5e3e6ca9af4152", 0x2000, &(0x7f0000006800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000068c0)={0x18, 0x0, 0x9, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000002c0)="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", 0x2000, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount(0x0, &(0x7f0000002380)='./dev/mapper/control\x00', &(0x7f00000000c0)='msdos\x00', 0x2000, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r6, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00")
write(r6, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00snapshot\x00\x00\x00\x00\x00\x00\x00\x007:0 7:1 N 8\x00\x00\x00\x00\x00', 0x38)
ioctl(r6, 0xc138fd09, &(0x7f0000002440)="0400000000000000000000007001000038010000010000000000000000000000000000000000000000000000000000000000706f6f6c00fec7831370eaaaec98048de1abc09b2751ab977b9ebd31fdfada36736042c0099648f523f6c615a682b25d2bf5f525da869b5b01d2f96a57074ef5951cfe4ad754d1b1c12a45c86186c37c48049f5a772528f7fbe9ee41d3ed8643c8d723434ff84a81cef5a8242511c6edbf7044ef75a31190e60244f78ecfa114e327f4ab05717fa55e60adcfbd30791f014544ffec40a4061c6541319d0058586c340ddbd7161097fd686ba96de915a9d84dc7187bb51e712185e7d43eb949f1")

1.826134258s ago: executing program 4 (id=848):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, 0xfffffffffffffffe)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
ioprio_set$pid(0x1, r2, 0x2004)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="50010000100001002cbc700000000000ffffffff000000000000000000000000e00000020000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fefffffffffffffffeffffffe325ffff030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000001000000000000000008400000000000090000000000000092020000000000000010000000000000000000000000000007350000020004002c00000000000000600002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000006e00002000ff80"], 0x150}}, 0x44050)

1.808201724s ago: executing program 5 (id=849):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0c040000100001040000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d7fff000000e4031680e00301800c00070000000000adffffff0c00", @ANYRES32=r0], 0x40c}}, 0x0)

1.565299866s ago: executing program 2 (id=850):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003100000018010000202070250000000fd82020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x21600, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)

1.478183813s ago: executing program 4 (id=851):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2020000000000015000200071b1750bd030100000000009500000001020000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb3d6dd5582203865}, 0x48)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

1.473795617s ago: executing program 5 (id=852):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x0)
ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffe4)

1.341323873s ago: executing program 6 (id=853):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000400, 0x0, 0x0, 0x20000430, 0x20000460], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000f10000feffffff0000000000000000000000000000000000000000000000000000000000f10000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x138)

1.340696377s ago: executing program 2 (id=854):
capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000480)={0x200002, 0x200003, 0x801, 0x4, 0x7})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup, 0x1, 0x0, 0x50d6, 0x0, 0xff85, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x8dff}, {}, {}, {0xdd86}, {0x8, 0x22eb, 0x7ffffff}}}}}}}, 0x0)
r0 = fsopen(&(0x7f0000000500)='esdfs\x00', 0x1)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0xec}, {{0x0, 0x0, &(0x7f0000000c40)=[{0xffffffffffffffff}], 0x1}, 0x9}], 0x2, 0x40010001, 0x0)
ppoll(&(0x7f0000000c80)=[{r1, 0xd073}], 0x1, &(0x7f0000000cc0), 0x0, 0x0)
r2 = fsmount(r0, 0x1, 0x33)
syz_emit_ethernet(0x393, &(0x7f0000000040)={@random="4ba57046a00c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "b8eefc", 0x35d, 0x0, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[@srh={0x3a, 0x2, 0x4, 0x1, 0x3, 0x40, 0x5, [@mcast2]}, @hopopts={0x0, 0xe, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x6c, "0a84af375bc10f65af55834c5225fdd3f3a7ac85fd6ffa6f873c73075020283c20a38c444a0c05c83014cd6aefef015892f4f146d28985103e16d0a086a5c1d7b944b70dbb53345d047513b6a02f5549da5478ec8e2f727bf532ded295fb6ccd9813271c1e2ba50eaa259c31"}]}, @srh={0x3a, 0x4, 0x4, 0x2, 0xfd, 0x38, 0x64, [@empty, @loopback]}, @dstopts={0x3c, 0x1f, '\x00', [@jumbo={0xc2, 0x4, 0x237}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @jumbo={0xc2, 0x4, 0x35dc7a87}, @calipso={0x7, 0x38, {0x3, 0xc, 0x5, 0x1800, [0x200, 0x0, 0x98a8, 0x7, 0x10001, 0x7]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x3, 0x4, [0x7fff, 0x6]}}, @jumbo={0xc2, 0x4, 0xe}, @calipso={0x7, 0x28, {0x0, 0x8, 0x1, 0x2, [0x9, 0x4, 0x401, 0x9]}}, @generic={0x5, 0x56, "8a77ad35d5f303f61faf37d86f14013eda58312ba60eb53b1e36160ccd844f01c13ebdd8145fa71e78eaef0d0406bd2f9ee84046bc5289925707d7a56ab0805c1567d5eee474684e5527408a444f5ba9725147b2235b"}]}, @dstopts={0x2c, 0x12, '\x00', [@generic={0x1, 0x4, "a77a62a7"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x7f, 0x3, [0x9, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x28, {0x3, 0x8, 0xfa, 0xaa60, [0x0, 0x0, 0x2, 0x2]}}, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0xc, 0x9, [0x6, 0x9, 0x4, 0x57, 0x4, 0x8]}}]}, @routing={0x2b, 0xa, 0x0, 0x1, 0x0, [@loopback, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @hopopts={0x67, 0x6, '\x00', [@ra={0x5, 0x2, 0xff}, @calipso={0x7, 0x30, {0x0, 0xa, 0x2, 0x0, [0x6, 0x97, 0x5, 0x3, 0x80]}}]}, @fragment={0x2b, 0x0, 0x7, 0x1, 0x0, 0x1, 0x64}], "76d115f1edf3646588fe2b0518f5929f334652756428136240490bb5503358152ccf463be67c2ff8bf4ddb60bf1ab5516bb3f85cdd25adfebce33dfdfcd73e7017cceb78aafd035a121542fc17252b701914131b1c"}}}}}, &(0x7f0000000400)={0x1, 0x2, [0xe8b, 0x9e6, 0x588, 0xfd3]})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f00000008c0), 0x4)
openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x80000, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)=@newsa={0x140, 0x1a, 0x1, 0x70bd2b, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0x8, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xad25, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8024}, 0x844)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$qrtrtun(r2, &(0x7f0000000540)=""/196, 0xc4)
ioctl$UBLK_U_CMD_START_DEV(r2, 0xc0207506, &(0x7f0000000940)={0x0, 0xffff, 0x0, 0x0, <r6=>0x0})
syz_open_procfs(r6, &(0x7f0000000b80)='net/ip_vs_stats\x00')

1.281338829s ago: executing program 6 (id=855):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000e30f000000000002000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000000010095"], &(0x7f0000000780)='syzkaller\x00', 0x8, 0xdf, &(0x7f00000007c0)=""/223, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94)

1.249273416s ago: executing program 5 (id=856):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000100001002abd70000000000400000000", @ANYRES32=0x0, @ANYBLOB="a22104000000000014000300776c616e3000"/27], 0x34}, 0x1, 0x0, 0x0, 0x100000}, 0x0)

292.993105ms ago: executing program 7 (id=857):
r0 = socket$inet6(0xa, 0x3, 0xff)
sendto$inet6(r0, &(0x7f00000005c0)="6000000000143340000000000000000000000000000000010000000800feffffffffffffff0000013b01", 0x2a, 0x4040, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c)

283.838203ms ago: executing program 2 (id=858):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x4)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x10, &(0x7f00000004c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000540)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4)

129.178396ms ago: executing program 7 (id=859):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="b70200000af40000bfa3000000000000b70400000000000085000000b500000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

94.109685ms ago: executing program 7 (id=860):
setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "cc4656e2d8745ba12a422b1d770669"}, 0x10, 0x0)
r0 = syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x40400, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'security.evm\x00'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}}, 0x1, 0x0, &(0x7f00000002c0)="0589c0639199b77fed382b7d2075d1dfcd5f44b4e1ee69f76b8f3bb1a70a69ff43486d61b803ac421134cc8313005884358f0b36092d712983970eecb04f89dee99c43b38f13b3019e3405ebf1a16f808e18a5d2487bd1f30fd79b47779c2d1ecbef09670d237575b179b2bbde5f419038e1d86ecb41d7fb1e3fcdf2d78a72548903de0129af98591a0de8021ed3231ca6407bb22a3831b034abe6b4b5cd4937b4b44ceb117d5ef46a47e31214c8a9e1b3d53b26d6d8121f3f7aa4f535e4ffaf96e416470a872b30d8a5bf1f4401a72a48835f206c1fcd4da2f3f2bd90465e2be799215b44526663390402241062f6424c52d94d941976a54de0909b72906a2948ab687f8b84fdac0e81c4460fd42352716b622e1af8b65cedf565ff213d2dfb2e49fa2c14d0bbeb4cade7b3e531dbad18f6dd02ea1962231e3311dcce0e9aaad74a3ee004feca17a5d31a679272b8de0879824d1974b2580171c9da86da4ebc2ac8855dbb9726ab3fdbb292507313eae1fce53de5c0a6a510f6b0cdf181da48c686a39bf6de375b0749328d6ce71d458a3a738b4f8c475cff1c89b6326d896a9fdba42e3c14b258a4081f9a50dc18e5218fe066ca95273cdd4882e3da032c6cb9cd1bd7a404cfaf86de9abb418c45ba4ea5511122a23807c217805699290ef10563a7ee96b48f5bef463ce26b198034f72eef0334b9ae078e7b30209b16cb160837f5616c6005082f65d3259bdc7ecda81bd2568313ccba1f499f88f488b7215cf9b5e1db17db88de5ae9f702137db5c06c3691680f4737e8325f582317ed2ee55e959b479b0c57c7d2281b52bfe01dd8d24846179dd4994b466c9d302f30bd67c9dd14e6d0f39f912cefea4f57b91b1c6e7c674b258f913a7b8c5a9dba7256334f5e9e419102b8d9dc79c3ce4a050fd8d1bcacc86708baf31535e3ddf6c506e1ceed039e038de59105077b58a1ed178345adeda90d07c22f3f5096367dfae3d52bf7ee8a400bd9b58f0361421c94644e913ce6187c00edef53d17245b4e1cfbe2da67bc1bbfc5314ab1a9e29bd45b4318116d127c764c406d6faf1b0b55134e84419018192ae184e718e45e845f77feb435dcc397f7f4582d45b09099a8c15b1bf63dcdeae43a55fdf68e4899cb300a5bb192100a9647d7cd0187a3e613e654fe2c87be4ce72803cea566fbb19593980bfac29b5bd405a37586d9aacbde828c84151d4ca1549e31b0f8c7b725381a129caf8f80c9d2de195f62c10277d53e865179b91370610dc3f222e728c78678a4c115148b7a3b420ebebb947d269f5dd5a16b2c1ab937fad8e0d7dc85695d4ce80641b0778505b8e565be08d55a65e17df08a36985cfb9479de2d2a1094968dbdfba69ddae31e51bcf665df5e21c655aebf12c33c54fd7073722e13d5963f96c0a32b8f5070818fb6f9e624d0cb228e58fd6af52e5d91f08cd26704acdc89a72c4c9abe496a9cf8b60d154694815b1b04c071b02d1092f06231c909d964f55dbba03d1867e17b606bddf35020d988db8644ca9afd58f0454c3b9b28494bf9536933fe6fc3592d600fc6d0af286863061717620198abac670bf0b7d09772b8a91449a97d4e797cf692cbb9781042a75dd9bdeabd40fe8260b3c7fee2f23a53214549ca804a07f3ef90e9e7a528979a64ce9e1ac98e3c3fa7bf214070b07b286ceafa25cca5e7f2dcbf4faabadf786523c985d7802d86bf0edbb46452fe50fc27b865c70ee8f1461f4c22a3c6f5b7ca09c2b3d58aa6eb0e9bff8482a2c3fe82c3d2ca79ef59bce0aca1d6c06be341e6adb3af83556f895eda9007619baeff9c9ab2b3dc35960ed9b4f481ebca6c8c8ab709ebcb73524a282851b64339685dc7a004288ed337ed1f61e59f58fd551781e1408617e92417b6acab1d77e5ebf534cbf3a7a1ed0763a540b2abdab6339e5f37e7bac40678ee3aa25728ab2f3377e051ca5ce425a9909ff48441a1586a304413c51a77776832b3d2f49949f211db72b1a98b400ab7d7465a2db54f92d91620a81f61c178cd313ff7be3650e366ce2b3270b960b6156231d32d360aeb4c8efda4f0f017727dfa86249da81761d0078287b069056859f054d85e4e8566dad38f8279222eea8f59ff0a016f19cc8e7c207edad7c86104d23d0d5abb190fc9535c58654de6849891a7b98d89a345c5309ecea3f55ffada754244405e0046f614d11a9b4cea74829193439311abfc6f031a48a2a079965660abe51eb785a16b3ea3665f26fbbb28356d92d413b33e8394ae42846c056869b5976d96813248a11e839dc95eacd03aa954222319a08792bd458b8472690d7105e6f0bf7c6f3fa09e92f5223c0d11363c8102365d4b8acd5f9dffc3f222df68d3932fa0f7e96adbaab708f674264d63b82c8295c8ed88eec27989dc0dc194d1ea914fce8ee5794bc9c44249d2caf951c1c93dd3e516a26e052811eeaa7d65fbeaf128e0472027a487656c35ab165656dc5108904d3177a12df4c4cc33a268f273399ff3f914325428e0ef0ce5a1569d3479fc3e9b2bd98ae1b037429b1a8c7c9b6e5709283472ce3a5458448b858d7199741e08a4a10e97e24c8970625bd365c8a0df6636e8a1a4290cdcfc883b1081550c9b69a16a49afedf28630d906556808d21f69a47f96706a3261e217c174f1b8803775082ce1484db93641a58432ef046e48b40ee40d141d644f675ff5bb47992e38a702a5d79d783ea71da10f34fe55ae76a18f4aa0924f40de75dbeb56f71f804e3d28ddd5600076aab0a8513db108f8df2e707f11173e0a5134a0044a831c9ce86869be28f12c2b8e9f2df86489f1b65d8f853d80d2a218ed2c5611d598afbde5b23a39420327391ef785a5ce2d9d368ecdefe00a9dc1d614369dbc7f9a227af7c644dc7af08f5b51a86dabc6c8cf17a732398678587896b1275a0d8886f2bffc0f108a148a50b214b159e3df7dd671d26c8e1b7be21764b5bbaf4cdb2d64d2a24e8ff3772dd4a7d7a4c4e93ff2be52674682b123acfc3657c4276daee71fc25f990cfa44c70f38e65742029bea440cd085854f1306195844832c1a16c48257f16a600b53102e5616ffd0e64c2be37e4cf03ca4011640ee9dce196c377a6be8828a54bdde354081d53a7b44550c8e8d16cf7f718ee3f3ae30095d789be7153b2bf8def801ce6cb98ed39dbd75506a0d4c54d7a95eb794115dbaac3f3ea11af3fcaadb000ae07091ecef5f358ab93bdf5eddaba504ecca302f831dd319864a2fcc47bb68cecd074ba211f8228e5a3b723976bbbe2844c4d1952463670d88820cfb8c48dbe47d809a755ba4bff963781ba0432f483e9befbcf7bfd7a04abbdedf022f9e05bca9d6ec30f96e083f5e66f4d69b52b257900ec3a4cd462b86746caa9102726c3c055d3388f2dea3da3a5576cb87dd8fc87f2b578d61dccf84356e5205853693e70542a2d8b6deff8fef6551ce384301bf8c1d0b52af2af177a1288ee7ee5a8643ff08c71f66c46ed4404c7b423709eb3e3877a273ecfbe0361d9cc6022efc60b9cc9d29efe59d9057a0455def2aecec0c2f32ac20dec959051e7ea2b45f0aaf46d6e63b3f0ec9e13d844f81a57bf57b924a214f07b8cab62c9a397a0c77bb7105155364e0c7e45b84128f295e3cc6cc800cc76880522642a5aaf723daa334d4bf54704370c31cc7f10f4edf8c70c9c9be86967dc6db7d7a58a9116dddda7c714b55c4fea48d65a5dde7e25dacf20f98937e7feb12dea5dda261c95ebb1b77cdb2e6eb506c12791ce4559c03dcda88eac4b4ac1e5ae2f0573adcfa5175ec01e21a19313018d755bc3d5aa730be8390b2760e6a085e77f3ba2ce4c217a04e2bba3f8423f4a017986ae426039fd57a9f8e234025609b36c46345e412ac145f214ea23d715df9b5ff97da8a1a6d5b977e0f76d324e1bd1c0fa454da0836c85f263ffc3a85599c01c51574f89ccb92f0f31bb587b583f9486af15b996cd21bfa39c3b0d2dc0689830d1fc2bb2750498bf94a6508b3936e4e408032994dab122d24d89aecc6563c2e0fab931fb84388a25c938c4375cdfe1d024b790c033b8a5780c4aa3f18735d1610f8339478703b797f815e0595f481c2508f2c2807aea5585ade65aaca220d1af13437ddd3f2d576d9900277b88074cf8976956652879025b66d68454f116a0fa2e9caa2e8aa94a524407df9d628ffe08790781c39b9505c994d5c5ceaaaf1cc80330893d998a2f2f0834a3e47d8c1f6331eef50d0949247d6db938073be5379eaaeadab6aee33e1eee9cddd94febfd67573dd38dc1ff2922b5504b9760d988c1b8f83ca3bc66f0b60d5bc1935d7f8c6f33cb6ad7774a9fd77370ace4ec4eabdb74f31a814bf0915d5780c28754fe38573432d5f81298f35fca3170232a378fbdea82077f73cd5ff1930f7dd98e735058704ca11b26c928351936a727ea4ccc7fe3fdfb88da8b77fd3131edb7e203c27dc3d826d1e84f7f6fa84a6b17a76cc761dd491ab4155db7c24eadb2d035a74335da6df2f01bea60a4b88e472bb394391977a85d445ef0859ef74f3fec305fce77a0b82dc10c67511167f9642f88ab6659665785a69d6ab6fe52ccbdc480d79a79a32a4d1e294a41ab0b36a358eb3fb3b0317647b64bd6f1b329b803f9ece9153c1157b97fcd0ca45c3f902ff1dbdd61592b2de84799aa38344a1637ec1d4859c46386445e1dc049ac59069d00de5ef8121e762ba3d4cef497baa77303eea0bbf210d334454291e2a6487a57d867f05e32d4dcd47ccecb0fd4563763bf3efbf78a0337238bebf9c0c3f157b7d3724f90a1afc0d56dd555d85af171b1ff667fd37b949d93c8a9992f13393f5fad1f7a339479ef8b9cd5800e1316f8d5a44e8b50cf6507def5663830044cfd791833f7883def0c687628a60f29dc7cc5a30b94645ed0076891fc046892e99a41c62102c0ddfbd900b5c5c4ff49274852c478a4d06e4b28d80091f3f064e4ad795fe55187adbc21088d4c80b7dbac32b22b6037374a1a88dc702f4d315889ae0cf4108ce443d9bc864428185ee8641f2d9280dae5da60acf183dd9f73cd0a10e4e19b39105df4edc3dde94df052e1fcea1a8dfec22a00138334ecf94b6150f2aeaee8253e65dcea89e32880afd1422554a7c36558b66fa86a957bf7eec524a2cfc398c7bdaf823fdbdff2dcafce1eb2eb1552ffbec46c1a974cb8752d4cca9d569e4e125a476faf1fdeb93bf68694fcc7b4ac57d167c64ee79d34c9e0d844861cffdcdd483a526d8652c2c62ac414cad7088c834ff98990288f3f50dc296084a4b0f0d713485bcc90421c73029ac3d75123cae47f84b621aae8044433a893925ffa303f06aeb866ddee5e48b63f12977dae062886621bae112477ad24706af35d65bf9a51aef378cc3a61b5ec28a7c99a3d54de0484fc067d92ab7a2ac5e2c94fb53de7334b32e6538fee949dc69ac7d464b835b3b487410bed282bf9fb898455d55940aff3a048cace0bdead751953ec9b98fd624fbc966957efccdcef617216308425be83e358f00440b42c39db5c8eec0bf28b2136c79ef9a03c8809d4bbb3c9734b12dd3a97be6c1bac0de7f43da1453e09056a1aa4f461709be13f01ecd42ea40a8aa6439acbb569439d360fa8455afbd4684c7275f8724b82891b1bcc9d4a571c25ffb95efdfee518aacd9b11840a2fc353a8e5ef953adc4b873bda2384719dfd78f97341bd7f69125849a16937ad86810f6cb5965b43278e4d023d8cb0b0a68f65766e832539ca86d701ec2f9769fa24f8")
statx(r0, &(0x7f00000012c0)='./file0\x00', 0x4000, 0x40, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}) (async)
statx(r0, &(0x7f0000001400)='./file0\x00', 0x400, 0x80, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}) (async)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001580)={0x0, 0x10000, 0x8}, 0xc)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000015c0)=@generic={&(0x7f0000001540)='./file0\x00', r5}, 0x18) (async)
r6 = signalfd4(r0, &(0x7f0000001600)={[0x8]}, 0x8, 0x81000)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001640)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001680)={r6, r7, 0x32, 0x0, @void}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001800)={'sit0\x00', &(0x7f0000001740)={'sit0\x00', <r9=>0x0, 0x40, 0x10, 0x81, 0x46520e88, {{0x1a, 0x4, 0x0, 0x2, 0x68, 0x65, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x17, 0xe7, [@empty, @private=0xa010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @lsrr={0x83, 0x1f, 0x2f, [@private=0xa010102, @local, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @lsrr={0x83, 0x1b, 0xad, [@empty, @multicast2, @private=0xa010101, @local, @remote, @empty]}, @end]}}}}}) (async)
r10 = syz_open_dev$vcsu(&(0x7f0000001840), 0x95, 0x20000) (async)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001940)=@generic={&(0x7f0000001900)='./file0\x00', 0x0, 0x8}, 0x18) (async)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000001a80)={<r12=>r5, &(0x7f0000001980)='fuse\x00', 0x100, &(0x7f00000019c0)={@_ha_fsid={[0xd17]}, {0x0, 0x60, 0x4182ac84, 0x9}}, 0x7fffffff, &(0x7f0000001a00)={@_ha_fsid}, &(0x7f0000001a40)})
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x8, 0x2, &(0x7f00000016c0)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], &(0x7f0000001700)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', r9, @fallback, r10, 0x8, &(0x7f0000001880)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x1, 0x9, 0x10000, 0x3}, 0x10, 0xffffffffffffffff, r6, 0x1, &(0x7f0000001ac0)=[r6, r6, r6, r11, r12], &(0x7f0000001b00)=[{0x3, 0x1, 0x10, 0x4}], 0x10, 0x1}, 0x94)
write$cgroup_subtree(r6, &(0x7f0000001c00)={[{0x2d, 'freezer'}, {0x2d, 'net_prio'}, {0x2d, 'devices'}]}, 0x1c) (async)
setsockopt$packet_int(r12, 0x107, 0x12, &(0x7f0000001c40)=0x9, 0x4)
r14 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001c80), 0x80440, 0x0) (async)
r15 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000001cc0)='/sys/fs/smackfs/load\x00', 0x2, 0x0)
sendfile(r15, r8, &(0x7f0000001d00)=0x6, 0x9) (async)
chdir(&(0x7f0000001d40)='./file0\x00')
getsockopt$inet_mptcp_buf(r10, 0x11c, 0x1, &(0x7f0000001d80), &(0x7f0000001dc0)) (async)
ioctl$XFS_IOC_COMMIT_RANGE(r5, 0x40585883, &(0x7f0000001e00)={r10, 0x0, 0x4, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x1, [0x3, 0xc2e, 0x8, 0x4, 0xb, 0x8000000000000001]}) (async)
r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(r10, &(0x7f0000002000)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f00)={0xb0, r16, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5d5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
r17 = epoll_create1(0x80000) (async)
r18 = syz_clone3(&(0x7f00000028c0)={0x2020a000, &(0x7f0000002600), &(0x7f0000002640), &(0x7f0000002680), {0x31}, &(0x7f00000026c0)=""/176, 0xb0, &(0x7f0000002780)=""/207, &(0x7f0000002880)=[0xffffffffffffffff, 0x0], 0x2, {r7}}, 0x58) (async)
r19 = syz_clone(0x50024000, &(0x7f0000002940)="d9d17e4ba47cf9cf320371ad8333b3068816f68552e600eb9c61004984c783d48df5704b0569a1de7b5b7d8dbdca3b96bcb917eda66228fad9674465250911df75a7301e03d0d97f9cbe57e4f856687654bf23b888fd49a6b61082b0cfa60e0e45faa9c0af2a93e18d3a51de5a52d363e1b03b95000794ee6b63431d87f5b749a9a4778fb265e383b296b6981f0b911e660d223f3b53c575c73562a9cbfe50140cb29868b75dd3b494b39b310c99fb4cec46f49679120904bd00e842509cdb6beb6ae460ce8a7cfc594d4c3a", 0xcc, &(0x7f0000002a40), &(0x7f0000002a80), &(0x7f0000002ac0)="fead3756af0c734fb2750e9a3f8d27f4ec366b54b7c86f7953db7e1ffd7b67902a1e12759ac3cf671197c19281c1693239afd5d03a7a965c83e5cff0473f1858ed3e7049cdbc04b4fc7d8f07f08f6c153878") (async)
fstat(r6, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0}) (async)
r21 = getpgid(0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f0000002040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f00000020c0)="5dec74e7b8db8f7bbd5cbe50be4d5f16e7c2b0819fa22f6632147ad907b719b8c2baca8d179a9f2951795dc10131de950a72cd175f30538885bd", 0x3a}, {&(0x7f0000002100)="df9ac75d25689004ca6153e1f6bff1e210b6872fbec37e43321d5abb2eee6f90338b7be8ebaa", 0x26}, {&(0x7f0000002140)="cd7f87e6115702115a23fca780591100cae8c4abac9aa3547d3ac9ae3d92a2aa84f864cdfe43135b90a366dd36584a36c26043472f720d2eeffbffa2a34230668e642e629ec3", 0x46}, {&(0x7f00000021c0)="8dc935cea3883515095f8073f2d31cb2cf23cc761c2b4e51595bde560fe0cc830be98a60a226e77510e6d15b2e29f0078b84ad0541362028ab19cfaf5f9fd5a80ac7215397bce615dedae98252a99d153dfbd77de0ef4671db2e", 0x5a}, {&(0x7f0000002240)="f08f66db36fd83155203dfda45abc506ae16c9d63f826714fa9cf093bd3c6f3879465f729173af04aa837846a67e375af0f36c180c1acc751a981b631c80784399088a7a045601212a5a2171aaf3c9b63e25ef6c6735221298018a1ec34d00bf084db02f2e111b513590c0742d1447afc928ed639228", 0x76}, {&(0x7f00000022c0)="5738838f595556c0206998074967733ca248f536db3e4a7c5c5c1ce03bc850bc973f11c6630583299356bf8afaf8d2423e4933e0659135e26b2f376cbb8987bb60787d967b57ebdad045311719dad81f2dd8d446a70dbbc15b6bd0c89d21ff3728eebf732bacb93202241208278d97116f109fe0f6c81ef53e6fb8019073456320de06df770ee620bd6c43a37441bff0a30e3b7c94d578affb29f6787122a183897a5de30910180e1b3cdac8ee35cacbf43d9036c7b8c6cf", 0xb8}, {&(0x7f0000002380)="34369c75eca1a909186ba11d2f240a0ad4537e617710ed2f4c6e4195cc9f42e767783eb9fc", 0x25}, {&(0x7f00000023c0)="cd694387049e3bd72f18b6c2b5c767bc333d270876210672eaf89f32ebd4ba11ed8bd648e1a8bef8d5603f0c870cdfbe41cbe77b365be8c7bd70da6b3e9ef62aebf6cd205b33e48cdba4ba0c83daf1fb40b5d395b7b40e3eab35ab8d1810bdd019f1bd94463d8f2cdeed159a8885493c294216fb40580b0fdf54ac7d83a3253da145eb211751fed2adfff56c36f9883206a29eb9e822fd24b5ab69bdfda0d43f017fb96ce84fcc39edd034fc7b782a3d865369e202d38d90101a916d0d42fc6a1ad3a3b64533071380d8134888f999602e3e38390816a6c188ce2f6ceaf4", 0xde}, {&(0x7f00000024c0)="e626589b78b4304787ce585b027f84f29abd4aba446205e251336da8e9ec1b39b7e43225327a79e5ea8e90bddc941b89926ff19dcd747b59972cb15ea55b25f9a275a14ed59497e69afd4ab6641b619024e5c73c4dc1cb12a2d559a5a36ffc", 0x5f}], 0x9, &(0x7f0000002bc0)=[@rights={{0x14, 0x1, 0x1, [r12]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r2}}}, @rights={{0x2c, 0x1, 0x1, [r12, r7, 0xffffffffffffffff, 0xffffffffffffffff, r17, r10, r10]}}, @rights={{0x1c, 0x1, 0x1, [r15, r8, r8]}}, @cred={{0x1c, 0x1, 0x2, {r18, r3}}}, @rights={{0x2c, 0x1, 0x1, [r7, r13, r7, r7, r12, 0xffffffffffffffff, r14]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r2}}}, @rights={{0x1c, 0x1, 0x1, [r6, r10, r8]}}, @cred={{0x1c, 0x1, 0x2, {r19, r3, r20}}}], 0x138, 0x80}}, {{&(0x7f0000002d00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002d80)="2bc13f8842ed1b3c981866c71924f090262058128450493fccd5f2e01f6fc2708cd8fecfa9b565e029b4a36c06f39b3894dee4153d9f66306df1a996ccb63a608312bc2c057c513567cab8d726ca05134ba449c18bc5bf2542b0c810e1be62844771dbd8487fc742be7e2ea00fedb7a9fd1ecd55a4f4c9e0624f688522e253c65ef77610645cbe5f1ba4e3e0c4378d2a95b206056da4ccdb621bf860b5265d670bc888d0ba4808867538ad5c4fbc5b4f", 0xb0}, {&(0x7f0000002e40)="240f430407acd8716e2c278666d01da557d24305373d548f1b433744", 0x1c}], 0x2}}, {{&(0x7f0000002ec0)=@abs={0x479ac5c11516fae6, 0x0, 0x4e22}, 0x6e, &(0x7f0000003100)=[{&(0x7f0000002f40)="b29c29d465436e222ecdbc4db45f335ab21bb9f8ca19615bf00c2b8b36b1d41eca2542966cd9f89a3b54e4dfc7c79e39736e23990402291a6e7457a9f4e607f49b4ea96db46d3b9dfc7f3ac86fbb89c1a20b4351af7cd34a59c042a5be59bc6dbe690046704555239b33b7eb8911ec2935da33b1706fe8a87bd5ba59b38ebb35856e50d691554a339cbcd61ad4bc888315c849526c9a03530a3e9eb56777f91c837b4546d31a1bd97a73d2ef", 0xac}, {&(0x7f0000003000)="879bfab3e119aa1627e05828e5c713b8060c843835cf8d13515769010715", 0x1e}, {&(0x7f0000003040)="de81987e3d6a5d37ffaceb1fe4088ff3a4d39129d4cbbc78616cb8cfcadcad81507987efc99eb683c56b4ad71b0f4ccb6de43bc8522dbdc5d574a26523b9aaa07082043a6b26d6efe39800f6fc8a306ed548773cde9a0aa89b096419caa7faa1dbcfd93f13fce1e82aa86a1d572e5f554dad6c16df3b3fd6dcb4af713ad66cb1ad27c8eff2fbcdd36a50c2e522dffc2ebff1532d36dff65ce24b2a19a85ed83c335a06a83b9ad226d4c7f4f674cc", 0xae}], 0x3, &(0x7f0000003340)=[@cred={{0x1c, 0x1, 0x2, {r21, r3, r2}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r4}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r12]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}, @rights={{0x20, 0x1, 0x1, [r10, r10, r7, r12]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, r0, r5]}}, @rights={{0x20, 0x1, 0x1, [r11, r13, r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}], 0x100, 0x20008044}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003440)="6ea57fd4184cf615cad0288211b07a0dfdb5d466944d3715e7b5b69cd640e563968fc09de005cfc13c59aa832ee8529f", 0x30}, {&(0x7f0000003480)="33c064f71cf4f2e2dd2a47f624aaff710806aaf4b4688323fdc73af0e61e1e3b796008ed0711daf99288eda91d613840b9518c7749716e69c08a7cde104fe1f3a15211685409500195a21d990175c40ef7c1b5c7b85240d6efcd27a008c51e59713bb50470641b5fb6e5d5fdeb1e67531fe29f4632db7981b7fe0186c06525d9a31c0db1f47dc6b8124fc413e38ca2ff054dd4c60c60ef9f318ae7ee3ab5c2442fd0f57178065897337ee85edb9e10ab5c3d882ec16e7b2192e607f2e8e067fdb02bbedd761c9d8810c881a42e0b5544482428afdfeec22c016f037bd647cef2", 0xe0}, {&(0x7f0000003580)="2995e6200a2608", 0x7}, {&(0x7f00000035c0)="676c72d82cff06778a02f1e29948e8383c0ebb10d1e14b800cb22f495e0ac7af942d7e7d328783447308d3dfa8e3bc802103d3772b0159eb6278c2e362f7191f1f8affa797cbd97cdd548854b0d9ca32d17adf10b985b5809c8b9a49fdb4b2bd120208d85c04a823383b8f29a7be38a5cfaa398f17aa60d27ae34e4115d7983cf3c5f77195a4105ba48a597543f3eb6abef27e1644fe", 0x96}, {&(0x7f0000003680)="2761997155a7c7438473b09f4a4112117a68e0afc6096a1d3bec78ef6b1c5e474658ae07ecb26bb75824ba204478a5ad14d350d93ba770e0108634c33424d06670c9b1ded00065135bbc1b70256ed0c4de296702cd12186e1f4febd95192429cd521fa474ae102e71c9840a61e3b5b5853aafb101740d4dbf6b6618d62daa85f7af3e6684a494ac09bf637369738dc64f4e5db020ea32f909dd4b96d9fe8a6e4d65b5490d9142a26a0d7ecc4211623bc8afad393dc0416d5f4f094f4cee0c03293f05e95963c", 0xc6}], 0x5}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003800)="470fc8324f54004af335c93c53209d151b18b9709ee3e3a540b3403a0c5fc9559ee0167b06beb65b2e3f587a83ac21369e1ce162ed114ca2ffaccfa3bc48c55d2fe7eb155066f7a93626c6c1079f4a62120f0afd49c87e2e2b32ad2db7246f9e1d3625d5a7f4778910ca606f24b4dcc00dcab826d726c5d8343069d40966ff49e827c7b36591668aedfed8292119ec967df1782b15b19fba6d259dc09f5df2323c07ace2358597c52c4b6936189641b3ef8728e46ff3dfe48652f4e9bc234823810ddaee5a322ab2bd4c22f6130d5579ec05ad5ca63caf85d5e6", 0xda}, {&(0x7f0000003900)="7fd76810d8ca580cb05bf9191018f3eeb7fd43c6b0037360736b8347", 0x1c}, {&(0x7f0000003940)="fa456ac323768aa77dce79707ea2eaa1610852a509906dd3f9ffe82dc8716850c09894a5e9fac19d2c1f04e678b8de4294f8c1411882420d9526de405bd5d62353ff8a76bef3cdba2d20e3c7820f6554593de450f779e5a0c80d79f9b20f82cb692ad885f13cb6c936ef972968bb4a588e899e52ed5e4cfd6ee4e83d81825f05807f58661a820eac1142e4b8564b756828f82d26", 0x94}, {&(0x7f0000003a00)="1d5a2dd4ebfe9d9e236a342a67ff5da03f3480cedaa6e51409ddfea4388aea0e9894a03defe9e76badaebd4456874060638bdfd4f06abb16280d8c8ab9ed33ecaaeec046856ed9bc4765e4d233a253077a6fbeaacfd5c1bf4a745e1bad8a0b1f15390e98779159b7362e490f51edc2c11bb3344e623aa85a7f6ea2a5e5b709ded4f0c88f1566b6d981da3d6c478ae4937b772990860182de07", 0x99}], 0x4, &(0x7f0000003c40)=[@rights={{0x28, 0x1, 0x1, [r13, r13, r10, 0xffffffffffffffff, r6, r14]}}], 0x28, 0x10}}, {{&(0x7f0000003c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004280)=[{&(0x7f0000003d00)="e46426ee31b0ee565c0e9697e98351d70b11c55ea5c3b5973d76095bea08b3aef90c5413cc2d4c9dc26eb0c0b68d0c2a4dba4a5690618a7e51214066388a50b80820d490208f0cd672e0b5e6523b554a33844703de60527b4f241b7e1d2b0e7918f472825fa8669058b437ed559ad0d3c4c3fa90d0cd70fdffd816a6300e9218d4b42e9216a2b7c627f291f739061b7b4c6188adec8e2fb6594c374139b726ae656cfa63fa8611d08d42cb96984b0c505fb6d6586bb756fb7bfc3f5e76927d2f439f4e84c4eb6ed65494f1c4063271fe6118cae487f6edf020bdcd94a534dcf520dd96cc0d", 0xe5}, {&(0x7f0000003e00)="29ee6048da74b1000d90bbeb8a4f7998f8bf75106f7899659bec53fd50e23c1874ea50b6111ba12667f4c97b476e953e4dd6f3365ff7fc4a8a1b9390c8d09b3b897a2dd292d99fdd17b557ada155cc9e8a20bbae2e9b7549abd01a4fd710baf198d330ec777a6f090f53953cb919bc3381f47ad3417f104049d1236b6d128bb97aadc55ab39df9e820fe097b5f5e4c9f1b42c3cf82f5d7c0bdac2ea73e8d11c7853f397a3110e3828390cb57", 0xac}, {&(0x7f0000003ec0)="70b45adf3ce6f94ca1e9261ecf12d1606259ac53b2b0f862f584272c45d859a2be5b9962e1cfa7e384e2b96d0d", 0x2d}, {&(0x7f0000003f00)="a7e93ebd5b12aae0df6aebf9cdf26791548d5e73c5b5cfc1876518f14bbec463347a0450490bcec563f7a2bb9e0574ebeaae6779fbf931ba57be730dbb444104c5d4e3d595221b746b978bb6f90164145a809173b4aea0fe1706aa1ab7159385c19e0e81282b274f69790567697ccf108fda3427827fab6e77bac0abae65f93509d18dfb0d6953db8cc685cdfd0179c6b17594b82caad560536d3542c7eca76f1941188b645693571c510e2fc82e23aac92f8409b063674bf3f57411d5a9abfb0e0ecc027a5c", 0xc6}, {&(0x7f0000004000)="7a0802bf09c90c62e9c5a5710482c8eba35720ebe6ac7a9f516a4131783b447f253129fc2f", 0x25}, {&(0x7f0000004040)="87742b71debe717aeaf6a98ced3ee9fa729286b77ba07ba747dc493ddbf7b3c57fffe4ed6aa5c3b594997d1070aa2eb8471f55accbd04a0ee9edc5ded9ed7bbc81b2468901327d2bd0f206b6251645782d79fe11460682190d95cb78729a3c80c114424b28a04bb70be50f7be4703a69ef71557ae6209f6030d08fa1ad0383a67e6ca3265d081d704710d175d7fc7c3a7d3a7d01f731ab7c0875ab35fedf912dc9479e6b8602b977791a831de03e923a", 0xb0}, {&(0x7f0000004100)="c9474cfbc74837b08a3582e6bdef344feb5b53dee137e59ef899ca5f33435d569b89024462a94c22b32b754a852fc97a3015d2d8cbf69557dacfc4bba43619b11dec738cd73f3894da04a2", 0x4b}, {&(0x7f0000004180)="cc3d83b1887b8d51499c970fbb1dc65d4dcfdf0ed8a69178f37208ea3add053d356108ac53613954768488cbecbf3805b97a16fd4d2746465ff01db39d1be313265b3ba51871333407bdd7af3a50d468d465f68164270152fc37de10c8d4a0128f5bcdb9298a64d27aa2532e394226be7e6f54f60980b5a304b301e376c5c8c762370a49a8a70478211b4d651038feabceb6aef5", 0x94}, {&(0x7f0000004240)="1303aed7eac2e72aa2f6357632b1886aef1530ef77", 0x15}], 0x9, 0x0, 0x0, 0x15}}], 0x6, 0x45)

0s ago: executing program 6 (id=861):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x5}, 0x0)
inotify_init1(0x80800)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000100001002cbc700000000000ffffffff000000000000000000000000e00000020000000000000000000000000000ecdf000000000a00000000000000", @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fefffffffffffffffeffffffe325ffff030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000001000000000000000008400000000000090000000000000092020000000000000010000000000000000000000000000007350000020004002c00000000000000600002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000006e00002000ff80"], 0x150}}, 0x44050)

kernel console output (not intermixed with test programs):

  32.981698][ T4997]  __arm64_sys_pwrite64+0xa8/0xc0
[   32.981706][ T4997]  invoke_syscall+0x98/0x244
[   32.981719][ T4997]  el0_svc_common+0xec/0x23c
[   32.981731][ T4997]  do_el0_svc+0x4c/0x5c
[   32.981742][ T4997]  el0_svc+0x60/0x1d8
[   32.981751][ T4997]  el0t_64_sync_handler+0x44/0x104
[   32.981759][ T4997]  el0t_64_sync+0x198/0x19c
[   33.102603][ T5004] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   33.252227][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.313202][ T5008] loop1: detected capacity change from 0 to 256
[   33.317418][ T5008] vfat: Unknown parameter 'noi_xlat'
[   33.407743][ T5023] capability: warning: `syz.1.39' uses 32-bit capabilities (legacy support in use)
[   33.452886][ T5032] loop1: detected capacity change from 0 to 2048
[   33.478072][ T5032] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.41: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2727(2727)
[   33.478104][ T5032] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[   33.478310][ T5032] EXT4-fs (loop1): get root inode failed
[   33.478317][ T5032] EXT4-fs (loop1): mount failed
[   33.625328][ T5065] netlink: 'syz.2.51': attribute type 1 has an invalid length.
[   33.627835][ T5065] loop2: detected capacity change from 0 to 512
[   33.633896][ T5065] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   33.639973][ T5065] EXT4-fs (loop2): 1 truncate cleaned up
[   33.640433][ T5065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.648758][ T5069] FAULT_INJECTION: forcing a failure.
[   33.648758][ T5069] name failslab, interval 1, probability 0, space 0, times 0
[   33.648776][ T5069] CPU: 1 UID: 0 PID: 5069 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT 
[   33.648788][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   33.648793][ T5069] Call trace:
[   33.648797][ T5069]  show_stack+0x2c/0x3c (C)
[   33.648820][ T5069]  __dump_stack+0x30/0x40
[   33.648831][ T5069]  dump_stack_lvl+0xd8/0x12c
[   33.648841][ T5069]  dump_stack+0x1c/0x28
[   33.648851][ T5069]  should_fail_ex+0x418/0x58c
[   33.648858][ T5069]  should_failslab+0xc4/0x120
[   33.648866][ T5069]  kmem_cache_alloc_noprof+0x94/0x5d4
[   33.648874][ T5069]  skb_clone+0x1ac/0x320
[   33.648885][ T5069]  __netlink_deliver_tap+0x364/0x6f4
[   33.648896][ T5069]  netlink_deliver_tap+0x1d8/0x1dc
[   33.648905][ T5069]  __netlink_sendskb+0x78/0xd0
[   33.648914][ T5069]  netlink_sendskb+0x2c/0xdc
[   33.648922][ T5069]  netlink_unicast+0x2c0/0x7f8
[   33.648931][ T5069]  netlink_ack+0x570/0x890
[   33.648940][ T5069]  netlink_rcv_skb+0x21c/0x414
[   33.648949][ T5069]  rtnetlink_rcv+0x28/0x38
[   33.648958][ T5069]  netlink_unicast+0x600/0x7f8
[   33.648967][ T5069]  netlink_sendmsg+0x648/0x948
[   33.648976][ T5069]  __sock_sendmsg+0xc8/0x17c
[   33.648985][ T5069]  ____sys_sendmsg+0x3d0/0x6c8
[   33.648994][ T5069]  ___sys_sendmsg+0x198/0x224
[   33.649003][ T5069]  __sys_sendmsg+0x158/0x204
[   33.649013][ T5069]  __arm64_sys_sendmsg+0x88/0x9c
[   33.649022][ T5069]  invoke_syscall+0x98/0x244
[   33.649032][ T5069]  el0_svc_common+0xec/0x23c
[   33.649042][ T5069]  do_el0_svc+0x4c/0x5c
[   33.649051][ T5069]  el0_svc+0x60/0x1d8
[   33.649059][ T5069]  el0t_64_sync_handler+0x44/0x104
[   33.649066][ T5069]  el0t_64_sync+0x198/0x19c
[   33.652976][ T5065] bridge1: entered promiscuous mode
[   33.679489][ T5071] loop0: detected capacity change from 0 to 512
[   33.680336][ T5071] EXT4-fs: Ignoring removed i_version option
[   33.684416][ T5071] EXT4-fs (loop0): 1 orphan inode deleted
[   33.685202][ T5071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.791593][ T5071] EXT4-fs error (device loop0): __ext4_add_entry:2414: inode #2: comm syz.0.53: Directory hole found for htree leaf block 0
[   33.819951][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.850786][ T4715] Bluetooth: hci0: command tx timeout
[   33.887070][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.917156][ T5085] mmap: syz.2.55 (5085) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   33.925568][ T5088] overlayfs: conflicting lowerdir path
[   33.934069][ T4713] Bluetooth: hci3: command tx timeout
[   33.934092][ T4713] Bluetooth: hci4: command tx timeout
[   33.934109][ T4713] Bluetooth: hci1: command tx timeout
[   33.934197][ T4715] Bluetooth: hci2: command tx timeout
[   33.934624][ T5083] loop3: detected capacity change from 0 to 512
[   33.941862][ T5083] EXT4-fs (loop3): bad s_want_extra_isize: 1414
[   33.970406][ T5091] loop0: detected capacity change from 0 to 512
[   33.972833][ T5091] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   33.972842][ T5091] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   33.972849][ T5091] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   33.989645][ T5091] EXT4-fs (loop0): 1 truncate cleaned up
[   33.990108][ T5091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.018530][ T5094] vfat: Unknown parameter 'Utf8'
[   34.026313][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.145750][ T5110] Bluetooth: MGMT ver 1.23
[   34.163832][ T5111] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd23
[   34.304575][ T5137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.319981][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.350364][ T3522] IPVS: starting estimator thread 0...
[   34.369287][ T5150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[   34.398661][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   34.431975][ T5151] IPVS: using max 61 ests per chain, 146400 per kthread
[   34.473448][ T5168] binder: 5167:5168 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   34.473468][ T5168] binder: 5167:5168 ioctl c0306201 20000040 returned -22
[   34.474841][ T5168] binder: 5167:5168 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   34.474854][ T5168] binder: 5168 RLIMIT_NICE not set
[   34.524116][ T5172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.564002][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   34.775519][ T4716] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   34.820512][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.635817][ T5221] fuse: Bad value for 'fd'
[   35.931303][ T4715] Bluetooth: hci0: command tx timeout
[   35.934009][ T5241] binder: 5239:5241 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   35.934041][ T5241] binder: 5239:5241 ioctl c0306201 20000040 returned -22
[   35.935564][ T5240] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   35.948663][ T5241] binder: 5239:5241 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   35.952710][ T5241] binder: 5241 RLIMIT_NICE not set
[   35.986684][ T5240] GUP no longer grows the stack in syz.2.92 (5240): 20004000-2000a000 (20002000)
[   35.986711][ T5240] CPU: 1 UID: 0 PID: 5240 Comm: syz.2.92 Not tainted syzkaller #0 PREEMPT 
[   35.986726][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   35.986734][ T5240] Call trace:
[   35.986739][ T5240]  show_stack+0x2c/0x3c (C)
[   35.986768][ T5240]  __dump_stack+0x30/0x40
[   35.986786][ T5240]  dump_stack_lvl+0xd8/0x12c
[   35.986803][ T5240]  dump_stack+0x1c/0x28
[   35.986819][ T5240]  gup_vma_lookup+0x1ac/0x1cc
[   35.986834][ T5240]  __get_user_pages+0x2b4/0x13b0
[   35.986848][ T5240]  get_user_pages_remote+0x278/0x83c
[   35.986863][ T5240]  __access_remote_vm+0x1d8/0x68c
[   35.986880][ T5240]  access_remote_vm+0x48/0x60
[   35.986897][ T5240]  proc_pid_cmdline_read+0x4cc/0xa14
[   35.986915][ T5240]  do_loop_readv_writev+0x24c/0x3dc
[   35.986929][ T5240]  vfs_readv+0x258/0x520
[   35.986942][ T5240]  do_preadv+0x11c/0x224
[   35.986955][ T5240]  __arm64_sys_preadv+0xac/0xc4
[   35.986968][ T5240]  invoke_syscall+0x98/0x244
[   35.986986][ T5240]  el0_svc_common+0x19c/0x23c
[   35.987003][ T5240]  do_el0_svc+0x4c/0x5c
[   35.987019][ T5240]  el0_svc+0x60/0x1d8
[   35.987032][ T5240]  el0t_64_sync_handler+0x44/0x104
[   35.987045][ T5240]  el0t_64_sync+0x198/0x19c
[   36.013267][ T4719] Bluetooth: hci1: command tx timeout
[   36.013314][ T4719] Bluetooth: hci4: command tx timeout
[   36.013351][ T4719] Bluetooth: hci3: command tx timeout
[   36.013623][ T4715] Bluetooth: hci2: command tx timeout
[   36.087687][ T5246] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   36.087714][ T5246] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   36.114588][ T4716] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   36.264403][ T5250] EXT4-fs (loop2): Test dummy encryption mode enabled
[   36.268926][ T5250] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[   36.269021][ T5250] System zones: 1-3, 19-19, 35-36
[   36.272385][ T5250] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   36.315696][ T5250] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   36.345601][ T5250] FAULT_INJECTION: forcing a failure.
[   36.345601][ T5250] name failslab, interval 1, probability 0, space 0, times 0
[   36.345630][ T5250] CPU: 1 UID: 0 PID: 5250 Comm: syz.2.96 Not tainted syzkaller #0 PREEMPT 
[   36.345643][ T5250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   36.345650][ T5250] Call trace:
[   36.345655][ T5250]  show_stack+0x2c/0x3c (C)
[   36.345679][ T5250]  __dump_stack+0x30/0x40
[   36.345695][ T5250]  dump_stack_lvl+0xd8/0x12c
[   36.345712][ T5250]  dump_stack+0x1c/0x28
[   36.345727][ T5250]  should_fail_ex+0x418/0x58c
[   36.345741][ T5250]  should_failslab+0xc4/0x120
[   36.345754][ T5250]  __kmalloc_cache_noprof+0x94/0x5fc
[   36.345768][ T5250]  nfs_init_fs_context+0x68/0x10dc
[   36.345785][ T5250]  alloc_fs_context+0x7d8/0xba4
[   36.345799][ T5250]  fs_context_for_mount+0x34/0x44
[   36.345813][ T5250]  do_new_mount+0x158/0x538
[   36.345829][ T5250]  path_mount+0x5f0/0xa88
[   36.345844][ T5250]  do_mount+0xe8/0x148
[   36.345859][ T5250]  __arm64_sys_mount+0x33c/0x388
[   36.345875][ T5250]  invoke_syscall+0x98/0x244
[   36.345892][ T5250]  el0_svc_common+0x19c/0x23c
[   36.345908][ T5250]  do_el0_svc+0x4c/0x5c
[   36.345924][ T5250]  el0_svc+0x60/0x1d8
[   36.345937][ T5250]  el0t_64_sync_handler+0x44/0x104
[   36.345950][ T5250]  el0t_64_sync+0x198/0x19c
[   36.434885][ T5250] fscrypt: AES-256-XTS using blk-crypto-fallback
[   36.560106][ T5250] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   36.790510][ T4715] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1
[   36.803625][ T5270] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   36.873089][ T5272] __nla_validate_parse: 83 callbacks suppressed
[   36.873107][ T5272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'.
[   36.904748][ T5272] 8021q: adding VLAN 0 to HW filter on device macsec1
[   36.905640][   T10] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   37.003447][ T5274] set_capacity_and_notify: 8 callbacks suppressed
[   37.003466][ T5274] loop4: detected capacity change from 0 to 256
[   37.381831][ T5282] loop0: detected capacity change from 0 to 8
[   38.065335][ T4715] Bluetooth: hci0: command tx timeout
[   38.071582][ T5280] ftl_cs: FTL header not found.
[   38.091492][ T4715] Bluetooth: hci3: command tx timeout
[   38.091540][ T4715] Bluetooth: hci4: command tx timeout
[   38.091577][ T4715] Bluetooth: hci1: command tx timeout
[   38.628581][ T5280] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6]
[   39.037964][ T5298] xt_hashlimit: size too large, truncated to 1048576
[   39.129140][ T5278] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   39.429493][ T5307] netlink: 'syz.1.115': attribute type 3 has an invalid length.
[   39.503823][ T5309] loop0: detected capacity change from 0 to 128
[   39.513014][ T5309] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[   39.560367][ T5309] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[   39.573946][ T5314] binder: 5310:5314 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   39.573979][ T5314] binder: 5310:5314 ioctl c0306201 20000040 returned -22
[   39.574394][ T5314] binder: 5310:5314 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[   39.574408][ T5314] binder: 5310:5314 ioctl c0306201 20000640 returned -22
[   39.578465][ T5314] binder: 5310:5314 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   39.578485][ T5314] binder: 5314 RLIMIT_NICE not set
[   39.578500][ T5314] binder: 5310:5314 ioctl c0306201 200001c0 returned -11
[   39.665679][ T5309] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (30846!=65535)
[   39.733649][ T4710] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   40.031045][ T5323] loop3: detected capacity change from 0 to 512
[   40.067685][ T5323] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   40.154361][ T5323] EXT4-fs (loop3): 1 orphan inode deleted
[   40.182084][ T4713] Bluetooth: hci3: command tx timeout
[   40.182533][ T3522] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   40.182647][ T3522] EXT4-fs error (device loop3): ext4_release_dquot:7106: comm kworker/u8:9: Failed to release dquot type 1
[   40.182665][ T3522] loop3: lost filesystem error report for type 5 error -117
[   40.196342][ T5323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.202039][ T5340] loop0: detected capacity change from 0 to 2048
[   40.222051][ T5347] 8021q: adding VLAN 0 to HW filter on device macsec1
[   40.222881][   T26] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[   40.295863][ T5340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.439865][ T5351] loop4: detected capacity change from 0 to 512
[   40.450427][ T5351] EXT4-fs (loop4): Test dummy encryption mode enabled
[   40.470399][ T5351] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.128: inode has both inline data and extents flags
[   40.470429][ T5351] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   40.470808][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   40.470821][    C1] EXT4-fs (loop4): initial error at time 40: ext4_orphan_get:1403: inode 15
[   40.470846][    C1] EXT4-fs (loop4): last error at time 40: ext4_orphan_get:1403: inode 15
[   40.471094][ T5351] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.128: couldn't read orphan inode 15 (err -117)
[   40.471112][ T5351] loop4: lost filesystem error report for type 5 error -117
[   40.488660][ T5351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.649382][ T4710] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   40.799276][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.822182][ T4713] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   40.822230][ T4713] Bluetooth: hci2: Injecting HCI hardware error event
[   40.822800][ T4713] Bluetooth: hci2: hardware error 0x00
[   40.884837][ T5361] FAULT_INJECTION: forcing a failure.
[   40.884837][ T5361] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   40.884863][ T5361] CPU: 1 UID: 0 PID: 5361 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT 
[   40.884874][ T5361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   40.884881][ T5361] Call trace:
[   40.884885][ T5361]  show_stack+0x2c/0x3c (C)
[   40.884906][ T5361]  __dump_stack+0x30/0x40
[   40.884920][ T5361]  dump_stack_lvl+0xd8/0x12c
[   40.884933][ T5361]  dump_stack+0x1c/0x28
[   40.884947][ T5361]  should_fail_ex+0x418/0x58c
[   40.884960][ T5361]  should_fail+0x14/0x24
[   40.884970][ T5361]  should_fail_usercopy+0x20/0x30
[   40.884981][ T5361]  simple_read_from_buffer+0xc4/0x238
[   40.884996][ T5361]  proc_fail_nth_read+0x1a8/0x248
[   40.885009][ T5361]  vfs_read+0x230/0x8c8
[   40.885021][ T5361]  ksys_read+0x12c/0x228
[   40.885031][ T5361]  __arm64_sys_read+0x84/0x98
[   40.885042][ T5361]  invoke_syscall+0x98/0x244
[   40.885056][ T5361]  el0_svc_common+0x19c/0x23c
[   40.885070][ T5361]  do_el0_svc+0x4c/0x5c
[   40.885083][ T5361]  el0_svc+0x60/0x1d8
[   40.885095][ T5361]  el0t_64_sync_handler+0x44/0x104
[   40.885106][ T5361]  el0t_64_sync+0x198/0x19c
[   40.912998][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.154582][ T5371] binder: 5365:5371 got transaction to invalid handle, 1
[   41.154657][ T5371] binder: 5365:5371 cannot find target node
[   41.154685][ T5371] binder: 5365:5371 transaction call to 0:0 failed 8/29201/-22, code 0 size 72-0 line 3253
[   41.155820][ T5372] binder: 5365:5372 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   41.155837][ T5372] binder: 5372 RLIMIT_NICE not set
[   41.157131][ T5366] binder: 5365:5366 got reply transaction with no transaction stack
[   41.157162][ T5366] binder: 5365:5366 transaction reply to 0:0 failed 10/29201/-71, code 0 size 0-0 line 3156
[   41.159644][ T5369] binder: 5365:5369 tried to acquire reference to desc 0, got 1 instead
[   41.187229][ T5366] loop4: detected capacity change from 0 to 512
[   41.199533][ T5366] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.132: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[   41.199561][ T5366] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   41.200011][ T5366] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.132: couldn't read orphan inode 11 (err -117)
[   41.200028][ T5366] loop4: lost filesystem error report for type 5 error -117
[   41.200394][ T5366] EXT4-fs (loop4): 1 truncate cleaned up
[   41.203571][ T5370] binder: 5364:5370 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   41.203601][ T5370] binder: 5364:5370 ioctl c0306201 20000040 returned -22
[   41.207490][ T5370] binder: 5364:5370 ioctl c0306201 20000640 returned -22
[   41.238816][ T5366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.239551][ T5370] binder: 5364:5370 ioctl c0306201 200001c0 returned -11
[   41.279025][   T10] binder: undelivered TRANSACTION_ERROR: 29201
[   41.443555][ T1026] binder: undelivered TRANSACTION_ERROR: 29201
[   41.466878][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.736506][ T5381] loop1: detected capacity change from 0 to 512
[   41.788641][ T5390] Zero length message leads to an empty skb
[   41.814950][ T5388] loop0: detected capacity change from 0 to 512
[   41.820350][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.838968][ T5388] EXT4-fs (loop0): invalid journal inode
[   41.839051][ T5388] EXT4-fs (loop0): can't get journal size
[   41.856033][ T5388] EXT4-fs (loop0): 1 truncate cleaned up
[   41.858480][ T5388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.032454][ T5381] FAULT_INJECTION: forcing a failure.
[   42.032454][ T5381] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   42.032486][ T5381] CPU: 0 UID: 0 PID: 5381 Comm: syz.1.135 Not tainted syzkaller #0 PREEMPT 
[   42.032500][ T5381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   42.032508][ T5381] Call trace:
[   42.032513][ T5381]  show_stack+0x2c/0x3c (C)
[   42.032537][ T5381]  __dump_stack+0x30/0x40
[   42.032554][ T5381]  dump_stack_lvl+0xd8/0x12c
[   42.032570][ T5381]  dump_stack+0x1c/0x28
[   42.032586][ T5381]  should_fail_ex+0x418/0x58c
[   42.032599][ T5381]  should_fail_alloc_page+0xec/0x10c
[   42.032613][ T5381]  prepare_alloc_pages+0x194/0x484
[   42.032626][ T5381]  __alloc_frozen_pages_noprof+0x180/0x578
[   42.032640][ T5381]  alloc_pages_mpol+0x1fc/0x3d0
[   42.032654][ T5381]  alloc_frozen_pages_noprof+0xc4/0x10c
[   42.032669][ T5381]  alloc_pages_noprof+0x30/0x148
[   42.032684][ T5381]  folio_alloc_noprof+0x2c/0x148
[   42.032698][ T5381]  filemap_alloc_folio_noprof+0x108/0x424
[   42.032715][ T5381]  __filemap_get_folio_mpol+0x444/0x1054
[   42.032731][ T5381]  block_write_begin+0x74/0x124
[   42.032745][ T5381]  cont_write_begin+0x5d0/0x89c
[   42.032757][ T5381]  fat_write_begin+0x7c/0xc4
[   42.032774][ T5381]  cont_write_begin+0x26c/0x89c
[   42.032786][ T5381]  fat_write_begin+0x7c/0xc4
[   42.032802][ T5381]  generic_cont_expand_simple+0x130/0x208
[   42.032815][ T5381]  fat_cont_expand+0x70/0x1f0
[   42.032831][ T5381]  fat_fallocate+0x1f8/0x2bc
[   42.032846][ T5381]  vfs_fallocate+0x514/0x650
[   42.032862][ T5381]  ksys_fallocate+0x58/0xa4
[   42.032878][ T5381]  __arm64_sys_fallocate+0xa8/0xc4
[   42.032894][ T5381]  invoke_syscall+0x98/0x244
[   42.032911][ T5381]  el0_svc_common+0x19c/0x23c
[   42.032927][ T5381]  do_el0_svc+0x4c/0x5c
[   42.032943][ T5381]  el0_svc+0x60/0x1d8
[   42.032956][ T5381]  el0t_64_sync_handler+0x44/0x104
[   42.032969][ T5381]  el0t_64_sync+0x198/0x19c
[   42.033082][ T5381] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   42.033096][ T5381] FAT-fs (loop1): Filesystem has been set read-only
[   42.033123][ T5381] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   42.292531][ T4715] Bluetooth: hci3: command tx timeout
[   42.374171][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.410200][ T5406] overlayfs: statfs failed on './file0'
[   42.569771][ T4708] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   42.570126][ T4708] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   42.851344][ T5415] netlink: 184 bytes leftover after parsing attributes in process `syz.4.144'.
[   42.855881][ T5415] loop4: detected capacity change from 0 to 128
[   42.897722][ T5415] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   43.133331][ T4713] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   43.282544][ T5424] fuse: Bad value for 'fd'
[   43.736639][ T5433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.148'.
[   43.785697][ T4720] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   43.988931][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.026360][ T5441] netlink: 'syz.0.153': attribute type 10 has an invalid length.
[   44.026381][ T5441] netlink: 40 bytes leftover after parsing attributes in process `syz.0.153'.
[   44.026566][ T5441] team0: entered promiscuous mode
[   44.026577][ T5441] team_slave_0: entered promiscuous mode
[   44.026723][ T5441] team_slave_1: entered promiscuous mode
[   44.026868][ T5441] team0: entered allmulticast mode
[   44.026876][ T5441] team_slave_0: entered allmulticast mode
[   44.026890][ T5441] team_slave_1: entered allmulticast mode
[   44.027542][ T5441] bridge0: port 3(team0) entered blocking state
[   44.027744][ T5441] bridge0: port 3(team0) entered disabled state
[   44.037487][ T5441] bridge0: port 3(team0) entered blocking state
[   44.037550][ T5441] bridge0: port 3(team0) entered forwarding state
[   44.088197][ T5444] netlink: 'syz.0.153': attribute type 10 has an invalid length.
[   44.088221][ T5444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.153'.
[   44.132624][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.301942][ T5454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'.
[   44.301966][ T5454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'.
[   44.308852][ T5450] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   44.317050][ T5452] loop4: detected capacity change from 0 to 1024
[   44.324908][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.330966][ T4713] Bluetooth: hci3: command tx timeout
[   44.334930][ T5452] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   44.367272][ T5452] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6055c01c, mo2=0002]
[   44.367342][ T5452] System zones: 0-1, 3-36
[   44.370593][ T5452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.422625][ T5454] loop3: detected capacity change from 0 to 512
[   44.794995][ T5454] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   44.795025][ T5454] EXT4-fs (loop3): invalid inodes per group: 4072
[   45.643577][ T4715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.648208][ T4715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.648917][ T4715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.660969][ T4715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.664762][ T4715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.725187][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.160432][   T12] bridge_slave_1: left allmulticast mode
[   46.160477][   T12] bridge_slave_1: left promiscuous mode
[   46.161432][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.214730][   T12] bridge_slave_0: left allmulticast mode
[   46.214760][   T12] bridge_slave_0: left promiscuous mode
[   46.214913][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.284622][ T5488] loop3: detected capacity change from 0 to 512
[   46.520798][ T4713] Bluetooth: hci3: command tx timeout
[   46.618437][ T5488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.939382][ T5488] CUSE: unknown device info ""
[   46.939398][ T5488] CUSE: unknown device info "Ö"
[   46.939406][ T5488] CUSE: unknown device info "ÚË"
[   46.939413][ T5488] CUSE: unknown device info ""
[   46.939420][ T5488] CUSE: unknown device info ""
[   46.939427][ T5488] CUSE: unknown device info ""
[   46.939433][ T5488] CUSE: unknown device info "þ"
[   46.939440][ T5488] CUSE: unknown device info ""
[   46.939446][ T5488] CUSE: unknown device info "@"
[   46.939453][ T5488] CUSE: unknown device info "ÿ
"
[   46.939459][ T5488] CUSE: unknown device info ""
[   46.939467][ T5488] CUSE: unknown device info "#Û"
[   46.939473][ T5488] CUSE: unknown device info "ÿÿÿÿ"
[   46.939480][ T5488] CUSE: unknown device info ""
[   46.939486][ T5488] CUSE: unknown device info "€"
[   46.939493][ T5488] CUSE: DEVNAME unspecified
[   46.945190][ T5488] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #12: comm syz.3.164: corrupted xattr block 6: invalid header
[   46.947059][ T5488] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #12: comm syz.3.164: corrupted xattr block 6: invalid header
[   46.947586][ T5488] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #12: comm syz.3.164: corrupted xattr block 6: invalid header
[   46.948073][ T5488] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #12: comm syz.3.164: corrupted xattr block 6: invalid header
[   47.239364][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   47.275413][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   47.335388][   T12] bond0 (unregistering): Released all slaves
[   47.568436][ T4709] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #12: comm syz-executor: corrupted xattr block 6: invalid header
[   47.568489][ T4709] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   47.577919][ T4709] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117)
[   47.578253][ T4709] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header
[   47.579856][ T4709] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header
[   47.581816][ T4709] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header
[   47.582940][ T4709] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #15: comm syz-executor: corrupted xattr block 33: invalid header
[   47.591108][ T4709] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   47.592590][ T4709] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117)
[   47.623439][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.690802][ T4713] Bluetooth: hci0: command tx timeout
[   48.289093][   T12] hsr_slave_0: left promiscuous mode
[   48.289757][ T5532] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   48.293231][   T12] hsr_slave_1: left promiscuous mode
[   48.299121][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.299154][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   48.303712][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.303731][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.341546][   T12] veth1_macvtap: left promiscuous mode
[   48.341622][   T12] veth0_macvtap: left promiscuous mode
[   48.341756][   T12] veth1_vlan: left promiscuous mode
[   48.341862][   T12] veth0_vlan: left promiscuous mode
[   48.570880][ T4713] Bluetooth: hci3: command tx timeout
[   48.761044][ T5540] netlink: 100 bytes leftover after parsing attributes in process `syz.0.174'.
[   48.761076][ T5540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'.
[   48.853597][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.150034][   T12] team0 (unregistering): Port device team_slave_1 removed
[   49.178840][ T5548] binder_user_error: 3 callbacks suppressed
[   49.178857][ T5548] binder: 5545:5548 got transaction to invalid handle, 536870913
[   49.178874][ T5548] binder: 5545:5548 cannot find target node
[   49.178900][ T5548] binder: 5545:5548 transaction async to 0:0 failed 14/29201/-22, code 0 size 88-24 line 3253
[   49.195987][ T5548] binder: 5545:5548 ioctl c014563b 20000540 returned -22
[   49.196801][   T12] team0 (unregistering): Port device team_slave_0 removed
[   49.211665][ T5548] binder: 5545:5548 ioctl c0306201 200002c0 returned -14
[   49.216443][ T5548] binder: 5545:5548 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   49.216467][ T5548] binder: 5548 RLIMIT_NICE not set
[   49.299624][ T5551] netlink: 48 bytes leftover after parsing attributes in process `syz.4.179'.
[   49.463026][ T5542] fuse: Bad value for 'group_id'
[   49.463044][ T5542] fuse: Bad value for 'group_id'
[   49.467167][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0
[   49.486073][ T5553] loop4: detected capacity change from 0 to 512
[   49.490580][ T5553] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   49.490595][ T5553] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   49.503542][ T5553] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.180: invalid indirect mapped block 4294967295 (level 0)
[   49.503572][ T5553] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   49.504908][ T5553] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.180: invalid indirect mapped block 4294967295 (level 1)
[   49.504935][ T5553] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   49.506619][ T5553] EXT4-fs (loop4): 1 orphan inode deleted
[   49.506633][ T5553] EXT4-fs (loop4): 1 truncate cleaned up
[   49.560179][ T5553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.602356][ T5553] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.180: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0
[   49.696934][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.771211][ T4713] Bluetooth: hci0: command tx timeout
[   49.838712][ T5561] Bluetooth: (null): Too short H5 packet
[   49.890354][ T5563] fuse: Unknown parameter '¢0x0000000000000003'
[   49.906824][ T4797] binder: undelivered TRANSACTION_ERROR: 29201
[   50.081835][ T5467] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.081965][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.082147][ T5467] bridge_slave_0: entered allmulticast mode
[   50.084374][ T5467] bridge_slave_0: entered promiscuous mode
[   50.097704][ T5467] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.103664][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.103885][ T5467] bridge_slave_1: entered allmulticast mode
[   50.105935][ T5467] bridge_slave_1: entered promiscuous mode
[   50.161898][ T5467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.165203][ T5467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.195779][ T5467] team0: Port device team_slave_0 added
[   50.200122][ T5467] team0: Port device team_slave_1 added
[   50.230291][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.230307][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.230325][ T5467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.244224][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.244242][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.244258][ T5467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.293889][ T5467] hsr_slave_0: entered promiscuous mode
[   50.294960][ T5467] hsr_slave_1: entered promiscuous mode
[   50.295657][ T5467] debugfs: 'hsr0' already exists in 'hsr'
[   50.295678][ T5467] Cannot create hsr debugfs directory
[   50.660900][ T4713] Bluetooth: hci3: command tx timeout
[   51.502807][ T5467] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   51.505489][ T5600] random: crng reseeded on system resumption
[   51.750107][ T5467] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   51.755076][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1
[   51.761122][ T5467] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   51.804703][ T5467] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   51.809101][ T5467] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   51.861026][ T4713] Bluetooth: hci0: command tx timeout
[   51.881811][ T5467] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   51.882583][ T5467] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   51.888729][ T5467] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   52.160455][ T5467] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.184788][ T5467] 8021q: adding VLAN 0 to HW filter on device team0
[   52.196382][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.196433][ T3303] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.222093][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.222144][ T3303] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.264691][ T5623] loop4: detected capacity change from 0 to 512
[   52.289764][ T5467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   52.289785][ T5467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.570632][ T5638] loop4: detected capacity change from 0 to 512
[   52.637902][ T5638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.742951][ T4713] Bluetooth: hci3: command tx timeout
[   52.764609][ T5649] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   52.773902][ T5650] loop0: detected capacity change from 0 to 128
[   52.796337][ T5650] EXT4-fs (loop0): Test dummy encryption mode enabled
[   52.819800][ T5650] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[   52.819869][ T5650] System zones: 1-3, 19-19, 35-36
[   52.876657][ T5650] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   52.993451][ T5650] FAULT_INJECTION: forcing a failure.
[   52.993451][ T5650] name failslab, interval 1, probability 0, space 0, times 0
[   52.993480][ T5650] CPU: 1 UID: 0 PID: 5650 Comm: syz.0.199 Not tainted syzkaller #0 PREEMPT 
[   52.993493][ T5650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   52.993501][ T5650] Call trace:
[   52.993506][ T5650]  show_stack+0x2c/0x3c (C)
[   52.993529][ T5650]  __dump_stack+0x30/0x40
[   52.993546][ T5650]  dump_stack_lvl+0xd8/0x12c
[   52.993562][ T5650]  dump_stack+0x1c/0x28
[   52.993578][ T5650]  should_fail_ex+0x418/0x58c
[   52.993592][ T5650]  should_failslab+0xc4/0x120
[   52.993606][ T5650]  __kmalloc_cache_noprof+0x94/0x5fc
[   52.993620][ T5650]  nfs_init_fs_context+0x68/0x10dc
[   52.993636][ T5650]  alloc_fs_context+0x7d8/0xba4
[   52.993651][ T5650]  fs_context_for_mount+0x34/0x44
[   52.993664][ T5650]  do_new_mount+0x158/0x538
[   52.993680][ T5650]  path_mount+0x5f0/0xa88
[   52.993696][ T5650]  do_mount+0xe8/0x148
[   52.993711][ T5650]  __arm64_sys_mount+0x33c/0x388
[   52.993727][ T5650]  invoke_syscall+0x98/0x244
[   52.993744][ T5650]  el0_svc_common+0x19c/0x23c
[   52.993760][ T5650]  do_el0_svc+0x4c/0x5c
[   52.993776][ T5650]  el0_svc+0x60/0x1d8
[   52.993789][ T5650]  el0t_64_sync_handler+0x44/0x104
[   52.993803][ T5650]  el0t_64_sync+0x198/0x19c
[   53.001181][ T5660] binder: 5659:5660 IncRefs 0 refcount change on invalid ref 0 ret -22
[   53.151562][ T5662] syzkaller0: entered promiscuous mode
[   53.151586][ T5662] syzkaller0: entered allmulticast mode
[   53.284663][ T5467] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.299864][ T5665] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   53.608641][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2
[   53.700247][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.736611][ T5692] loop3: detected capacity change from 0 to 512
[   53.792842][ T5692] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.207: bad orphan inode 15
[   53.792872][ T5692] loop3: lost filesystem error report for type 5 error -117
[   53.800813][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   53.800831][    C1] EXT4-fs (loop3): initial error at time 53: ext4_orphan_get:1429
[   53.800850][    C1] EXT4-fs (loop3): last error at time 53: ext4_orphan_get:1429
[   53.812192][ T5688] fuse: Bad value for 'fd'
[   53.815567][ T5692] ext4_test_bit(bit=14, block=18) = 1
[   53.815589][ T5692] is_bad_inode(inode)=0
[   53.815599][ T5692] NEXT_ORPHAN(inode)=1023
[   53.815608][ T5692] max_ino=32
[   53.815615][ T5692] i_nlink=0
[   53.830919][ T5692] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #15: comm syz.3.207: corrupted xattr block 19: invalid header
[   53.830950][ T5692] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   53.840918][ T5692] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117)
[   53.843469][ T5692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[   53.941975][ T4713] Bluetooth: hci0: command tx timeout
[   54.066323][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[   54.101135][ T5467] veth0_vlan: entered promiscuous mode
[   54.106734][ T5467] veth1_vlan: entered promiscuous mode
[   54.165101][ T5467] veth0_macvtap: entered promiscuous mode
[   54.196442][ T5467] veth1_macvtap: entered promiscuous mode
[   54.213901][ T5706] loop0: detected capacity change from 0 to 512
[   54.219467][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.258992][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.275812][ T5707] binder: 5705:5707 IncRefs 0 refcount change on invalid ref 0 ret -22
[   54.276756][ T5706] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.211: iget: bad extended attribute block 134217728
[   54.276780][ T5706] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   54.278126][ T5706] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.211: couldn't read orphan inode 15 (err -117)
[   54.278146][ T5706] loop0: lost filesystem error report for type 5 error -117
[   54.282594][ T5706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.390989][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.391943][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.391979][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.392010][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.455245][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.455265][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.466599][ T5706] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.211: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[   54.487180][ T5285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.487196][ T5285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.603110][ T5706] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.211: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[   54.793017][ T4710] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[   54.798741][ T4710] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz-executor: iget: bad extended attribute block 134217728
[   54.800123][ T4710] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz-executor: iget: bad extended attribute block 134217728
[   54.813857][ T4713] Bluetooth: hci3: command tx timeout
[   54.822637][ T5731] loop5: detected capacity change from 0 to 2048
[   54.924573][ T5731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.239735][ T5467] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   55.276386][ T5725] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.398020][ T5467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.480501][   T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.663603][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3
[   55.675737][ T5761] netlink: 100 bytes leftover after parsing attributes in process `syz.5.220'.
[   55.675765][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.220'.
[   55.702704][ T5760] loop3: detected capacity change from 0 to 512
[   55.712598][ T5760] EXT4-fs: Ignoring removed bh option
[   55.747668][ T5760] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   55.798783][ T5760] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   55.803278][ T5760] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.222: bg 0: block 248: padding at end of block bitmap is not set
[   55.803311][ T5760] loop3: lost filesystem error report for type 5 error -117
[   55.804938][ T5760] Quota error (device loop3): write_blk: dquota write failed
[   55.805007][ T5760] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[   55.805052][ T5760] EXT4-fs error (device loop3): ext4_acquire_dquot:7070: comm syz.3.222: Failed to acquire dquot type 1
[   55.805069][ T5760] loop3: lost filesystem error report for type 5 error -28
[   55.807058][ T5760] EXT4-fs (loop3): 1 truncate cleaned up
[   55.809270][ T5760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   55.842692][   T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.966638][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   56.120305][   T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.129341][ T5773] process 'syz.5.225' launched './file0' with NULL argv: empty string added
[   56.207785][ T5771] loop5: detected capacity change from 0 to 512
[   56.238723][ T5771] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.225: Unimplemented hash flags: 0x0001
[   56.238746][ T5771] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.225: Corrupt directory, running e2fsck is recommended
[   56.255722][ T5771] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[   56.258901][ T5777] loop3: detected capacity change from 0 to 1024
[   56.265577][ T5771] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.225: corrupted in-inode xattr: invalid ea_ino
[   56.265602][ T5771] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   56.268268][ T5771] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.225: couldn't read orphan inode 15 (err -117)
[   56.268289][ T5771] loop5: lost filesystem error report for type 5 error -117
[   56.272552][ T5777] EXT4-fs: Ignoring removed bh option
[   56.291364][ T4715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.291368][ T5771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.296547][ T4715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.297473][ T4715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.306663][ T4715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.311813][ T4715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.325944][ T5771] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.326070][   T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.354769][ T5777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   56.525712][ T5777] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.227: lblock 3 mapped to illegal pblock 3 (length 3)
[   56.542137][ T5777] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   56.542166][ T5777] EXT4-fs (loop3): This should not happen!! Data will be lost
[   56.542166][ T5777] 
[   56.546024][ T5777] EXT4-fs error (device loop3): ext4_ext_remove_space:2977: inode #15: comm syz.3.227: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   56.584081][ T5777] EXT4-fs error (device loop3) in ext4_setattr:6247: Corrupt filesystem
[   56.594171][ T5777] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.227: lblock 0 mapped to illegal pblock 0 (length 1)
[   56.606361][ T5777] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   56.606389][ T5777] EXT4-fs (loop3): This should not happen!! Data will be lost
[   56.606389][ T5777] 
[   56.854382][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   56.916826][ T4715] Bluetooth: hci3: command tx timeout
[   57.096082][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.229'.
[   57.219909][ T5792] usb usb8: usbfs: process 5792 (syz.4.223) did not claim interface 7 before use
[   57.259359][   T41] bridge0: port 3(team0) entered disabled state
[   57.266834][   T41] bridge_slave_1: left allmulticast mode
[   57.266857][   T41] bridge_slave_1: left promiscuous mode
[   57.267020][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.289167][   T41] bridge_slave_0: left allmulticast mode
[   57.289193][   T41] bridge_slave_0: left promiscuous mode
[   57.289336][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.541176][ T4715] Bluetooth: hci2: command tx timeout
[   58.684945][ T5819] loop3: detected capacity change from 0 to 2048
[   58.996078][ T5819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.141465][ T4715] Bluetooth: hci3: command tx timeout
[   59.261005][ T5826] netlink: 100 bytes leftover after parsing attributes in process `syz.5.234'.
[   59.261037][ T5826] netlink: 12 bytes leftover after parsing attributes in process `syz.5.234'.
[   60.167458][ T5825] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   60.543697][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'.
[   60.765310][ T4715] Bluetooth: hci2: command tx timeout
[   60.879262][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   60.922462][ T5838] loop5: detected capacity change from 0 to 1024
[   60.924121][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   60.962006][   T41] bond0 (unregistering): Released all slaves
[   61.046503][ T5841] FAULT_INJECTION: forcing a failure.
[   61.046503][ T5841] name failslab, interval 1, probability 0, space 0, times 0
[   61.046530][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz.4.239 Not tainted syzkaller #0 PREEMPT 
[   61.046542][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   61.046549][ T5841] Call trace:
[   61.046554][ T5841]  show_stack+0x2c/0x3c (C)
[   61.046575][ T5841]  __dump_stack+0x30/0x40
[   61.046590][ T5841]  dump_stack_lvl+0xd8/0x12c
[   61.046604][ T5841]  dump_stack+0x1c/0x28
[   61.046618][ T5841]  should_fail_ex+0x418/0x58c
[   61.046630][ T5841]  should_failslab+0xc4/0x120
[   61.046642][ T5841]  __kmalloc_noprof+0x108/0x6c8
[   61.046654][ T5841]  bpf_test_init+0xa8/0x154
[   61.046667][ T5841]  bpf_prog_test_run_skb+0x2a0/0x1ed0
[   61.046679][ T5841]  bpf_prog_test_run+0x1e0/0x250
[   61.046692][ T5841]  __sys_bpf+0x6bc/0x82c
[   61.046704][ T5841]  __arm64_sys_bpf+0xd0/0xec
[   61.046716][ T5841]  invoke_syscall+0x98/0x244
[   61.046730][ T5841]  el0_svc_common+0x19c/0x23c
[   61.046743][ T5841]  do_el0_svc+0x4c/0x5c
[   61.046757][ T5841]  el0_svc+0x60/0x1d8
[   61.046769][ T5841]  el0t_64_sync_handler+0x44/0x104
[   61.046780][ T5841]  el0t_64_sync+0x198/0x19c
[   61.364036][ T4715] Bluetooth: hci3: command tx timeout
[   61.434619][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'.
[   61.624845][ T5850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.625571][ T5850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.639968][ T5850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.640633][ T5850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.699600][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.699658][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.699843][ T5782] bridge_slave_0: entered allmulticast mode
[   61.701831][ T5782] bridge_slave_0: entered promiscuous mode
[   61.716496][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.716537][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.716710][ T5782] bridge_slave_1: entered allmulticast mode
[   61.718967][ T5782] bridge_slave_1: entered promiscuous mode
[   61.757082][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.766054][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.799556][ T5782] team0: Port device team_slave_0 added
[   61.804875][ T5782] team0: Port device team_slave_1 added
[   61.833192][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.833208][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.833225][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.847603][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.847616][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.847634][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.889827][ T5838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.581603][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.711178][ T5782] hsr_slave_0: entered promiscuous mode
[   62.732087][ T5782] hsr_slave_1: entered promiscuous mode
[   62.732722][ T5782] debugfs: 'hsr0' already exists in 'hsr'
[   62.732743][ T5782] Cannot create hsr debugfs directory
[   63.190947][ T4715] Bluetooth: hci2: command tx timeout
[   63.597912][ T4715] Bluetooth: hci3: command tx timeout
[   64.090147][ T5875] Bluetooth: MGMT ver 1.23
[   64.334923][ T5467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.797254][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4
[   64.945217][   T41] hsr_slave_0: left promiscuous mode
[   64.962033][   T41] hsr_slave_1: left promiscuous mode
[   64.962901][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.962919][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.978674][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.978698][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.018324][   T41] veth1_macvtap: left promiscuous mode
[   65.018384][   T41] veth0_macvtap: left promiscuous mode
[   65.018510][   T41] veth1_vlan: left promiscuous mode
[   65.018662][   T41] veth0_vlan: left promiscuous mode
[   65.044332][ T1593] ieee802154 phy0 wpan0: encryption failed: -22
[   65.044400][ T1593] ieee802154 phy1 wpan1: encryption failed: -22
[   65.045624][   T24] cfg80211: failed to load regulatory.db
[   65.297947][ T5918] loop4: detected capacity change from 0 to 1024
[   65.375537][ T5918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.383375][ T4715] Bluetooth: hci2: command tx timeout
[   65.811835][ T4715] Bluetooth: hci3: command tx timeout
[   66.775552][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.781561][   T41] team_slave_1 (unregistering): left promiscuous mode
[   66.781588][   T41] team_slave_1 (unregistering): left allmulticast mode
[   66.798435][   T41] team0 (unregistering): Port device team_slave_1 removed
[   66.852287][   T41] team_slave_0 (unregistering): left promiscuous mode
[   66.852318][   T41] team_slave_0 (unregistering): left allmulticast mode
[   66.866674][   T41] team0 (unregistering): Port device team_slave_0 removed
[   67.186792][ T5782] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   67.201972][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   67.202720][ T5782] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   67.215656][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   67.284450][ T5914] veth2: entered allmulticast mode
[   67.429180][ T5935] loop4: detected capacity change from 0 to 512
[   67.430217][ T5935] EXT4-fs: Ignoring removed mblk_io_submit option
[   67.588447][ T5935] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.261: corrupted in-inode xattr: e_value size too large
[   67.588579][ T5935] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   67.596058][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   67.596073][    C1] EXT4-fs (loop4): initial error at time 66: ext4_iget_extra_inode:5210: inode 15
[   67.596098][    C1] EXT4-fs (loop4): last error at time 66: ext4_iget_extra_inode:5210: inode 15
[   67.611571][ T5935] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.261: couldn't read orphan inode 15 (err -117)
[   67.611592][ T5935] loop4: lost filesystem error report for type 5 error -117
[   67.755672][ T5935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.278877][ T4715] Bluetooth: hci3: command tx timeout
[   68.565804][ T5919] kthread_run failed with err -4
[   68.571114][ T5782] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   68.593092][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.593862][ T5782] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   68.615639][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.813798][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.998396][ T5962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.264'.
[   69.006293][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.264'.
[   69.032504][ T5965] netlink: 36 bytes leftover after parsing attributes in process `syz.5.265'.
[   69.081601][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.117443][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'.
[   69.139746][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[   69.247707][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.247762][ T5820] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.250186][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.250229][ T5820] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.265572][ T5976] netlink: 36 bytes leftover after parsing attributes in process `syz.5.265'.
[   69.384760][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.270'.
[   69.644606][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'.
[   69.725183][ T6007] FAULT_INJECTION: forcing a failure.
[   69.725183][ T6007] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   69.725214][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.5.274 Not tainted syzkaller #0 PREEMPT 
[   69.725227][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   69.725234][ T6007] Call trace:
[   69.725239][ T6007]  show_stack+0x2c/0x3c (C)
[   69.725272][ T6007]  __dump_stack+0x30/0x40
[   69.725290][ T6007]  dump_stack_lvl+0xd8/0x12c
[   69.725307][ T6007]  dump_stack+0x1c/0x28
[   69.725323][ T6007]  should_fail_ex+0x418/0x58c
[   69.725336][ T6007]  should_fail+0x14/0x24
[   69.725348][ T6007]  should_fail_usercopy+0x20/0x30
[   69.725361][ T6007]  copy_from_sockptr+0x7c/0x1e0
[   69.725378][ T6007]  ipv6_set_opt_hdr+0x1b8/0x664
[   69.725392][ T6007]  do_ipv6_setsockopt+0xefc/0x2ba8
[   69.725407][ T6007]  ipv6_setsockopt+0x68/0x16c
[   69.725422][ T6007]  udpv6_setsockopt+0xa8/0xc0
[   69.725438][ T6007]  sock_common_setsockopt+0xb0/0xcc
[   69.725454][ T6007]  do_sock_setsockopt+0x1f0/0x330
[   69.725470][ T6007]  __sys_setsockopt+0x104/0x170
[   69.725486][ T6007]  __arm64_sys_setsockopt+0xc8/0xe4
[   69.725502][ T6007]  invoke_syscall+0x98/0x244
[   69.725519][ T6007]  el0_svc_common+0x19c/0x23c
[   69.725535][ T6007]  do_el0_svc+0x4c/0x5c
[   69.725551][ T6007]  el0_svc+0x60/0x1d8
[   69.725565][ T6007]  el0t_64_sync_handler+0x44/0x104
[   69.725578][ T6007]  el0t_64_sync+0x198/0x19c
[   69.732291][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5
[   69.791180][ T6007] loop5: detected capacity change from 0 to 2048
[   69.809792][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'.
[   69.998530][ T6017] overlay: filesystem on ./file0 is read-only
[   70.211577][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.430750][ T4715] Bluetooth: hci3: command tx timeout
[   70.461489][ T6043] netlink: 16 bytes leftover after parsing attributes in process `syz.5.280'.
[   70.587418][ T6050] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   70.715202][ T5782] veth0_vlan: entered promiscuous mode
[   70.742356][ T5782] veth1_vlan: entered promiscuous mode
[   70.769831][ T5782] veth0_macvtap: entered promiscuous mode
[   70.786150][ T5782] veth1_macvtap: entered promiscuous mode
[   70.849136][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.852349][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.881636][ T1145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.889038][ T1145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.889752][ T1145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.893247][ T1145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.080862][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6
[   72.382224][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.382240][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.443275][   T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   72.446838][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.446853][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.467986][   T24] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   72.628794][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'.
[   72.652919][ T4715] Bluetooth: hci3: command tx timeout
[   72.815322][ T6092] binder: 6091:6092 IncRefs 0 refcount change on invalid ref 0 ret -22
[   73.197661][ T6083] hid-generic 0000:0000:0000.0001: pid 6083 passed too short report
[   73.214788][ T6103] loop6: detected capacity change from 0 to 512
[   73.215782][ T6103] journal_path: Lookup failure for './sys'
[   73.215810][ T6103] EXT4-fs: error: could not find journal device path
[   73.684118][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7
[   74.163431][ T6145] binder: 6141:6145 IncRefs 0 refcount change on invalid ref 0 ret -22
[   74.477354][ T6157] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   74.707061][ T6167] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   74.887394][ T4715] Bluetooth: hci3: command tx timeout
[   74.960732][ T6176] loop3: detected capacity change from 0 to 1024
[   74.971640][ T6176] EXT4-fs: Ignoring removed bh option
[   75.006869][ T6174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.242425][ T6176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.290492][ T6176] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   75.456545][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.613732][ T6199] binder: 6198:6199 IncRefs 0 refcount change on invalid ref 0 ret -22
[   75.636648][ T6201] __nla_validate_parse: 2 callbacks suppressed
[   75.636665][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'.
[   76.485314][ T6229] syzkaller0: entered promiscuous mode
[   76.485339][ T6229] syzkaller0: entered allmulticast mode
[   76.891916][ T6239] fuse: Bad value for 'fd'
[   76.903102][ T6239] FAULT_INJECTION: forcing a failure.
[   76.903102][ T6239] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   76.903124][ T6239] CPU: 0 UID: 0 PID: 6239 Comm: syz.4.325 Not tainted syzkaller #0 PREEMPT 
[   76.903136][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   76.903142][ T6239] Call trace:
[   76.903147][ T6239]  show_stack+0x2c/0x3c (C)
[   76.903167][ T6239]  __dump_stack+0x30/0x40
[   76.903182][ T6239]  dump_stack_lvl+0xd8/0x12c
[   76.903196][ T6239]  dump_stack+0x1c/0x28
[   76.903209][ T6239]  should_fail_ex+0x418/0x58c
[   76.903221][ T6239]  should_fail+0x14/0x24
[   76.903236][ T6239]  should_fail_usercopy+0x20/0x30
[   76.903248][ T6239]  _inline_copy_to_user+0x3c/0x144
[   76.903262][ T6239]  generic_map_update_batch+0x818/0x9ac
[   76.903274][ T6239]  bpf_map_do_batch+0x2f0/0x4d0
[   76.903287][ T6239]  __sys_bpf+0x7b4/0x82c
[   76.903299][ T6239]  __arm64_sys_bpf+0xd0/0xec
[   76.903311][ T6239]  invoke_syscall+0x98/0x244
[   76.903325][ T6239]  el0_svc_common+0x19c/0x23c
[   76.903339][ T6239]  do_el0_svc+0x4c/0x5c
[   76.903352][ T6239]  el0_svc+0x60/0x1d8
[   76.903364][ T6239]  el0t_64_sync_handler+0x44/0x104
[   76.903375][ T6239]  el0t_64_sync+0x198/0x19c
[   77.103070][ T4715] Bluetooth: hci3: command tx timeout
[   78.896496][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'.
[   78.931120][ T6277] loop3: detected capacity change from 0 to 4096
[   78.973817][ T6277] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   78.973841][ T6277] EXT4-fs (loop3): Test dummy encryption mode enabled
[   78.999923][ T6277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.007662][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.335'.
[   79.147866][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.147895][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.149180][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.149198][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.323958][ T4715] Bluetooth: hci3: command tx timeout
[   79.350162][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.361689][ T6292] loop4: detected capacity change from 0 to 8
[   79.374025][ T6292] loop4: detected capacity change from 0 to 8
[   79.378809][ T6292] loop4: detected capacity change from 0 to 8
[   79.383878][ T6292] loop4: detected capacity change from 0 to 8
[   79.511617][ T6292] loop4: detected capacity change from 0 to 8
[   79.514564][ T6292] loop4: detected capacity change from 0 to 8
[   79.550361][ T6292] loop4: detected capacity change from 0 to 8
[   79.553289][ T6292] loop4: detected capacity change from 0 to 8
[   79.587184][ T6292] loop4: detected capacity change from 0 to 8
[   79.607470][ T6298] binder: 6295:6298 ioctl 4018620d 0 returned -22
[   79.618529][ T6298] binder: 6295:6298 IncRefs 0 refcount change on invalid ref 0 ret -22
[   79.643637][ T6298] binder: 6295:6298 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   79.643673][ T6298] binder: 6295:6298 ioctl c0306201 20000040 returned -22
[   79.653680][ T6298] binder: 6295:6298 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[   79.653701][ T6298] binder: 6295:6298 ioctl c0306201 20000640 returned -22
[   79.674120][ T6298] binder: 6295:6298 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   79.674147][ T6298] binder: 6298 RLIMIT_NICE not set
[   79.674323][ T6298] binder: 6295:6298 ioctl c0306201 200001c0 returned -11
[   80.239960][ T6315] ext4: Unknown parameter 'nouser_xattr'
[   80.291292][ T6320] cgroup: Invalid name
[   80.291523][ T6320] cgroup: Invalid name
[   80.291745][ T6320] cgroup: Invalid name
[   80.291955][ T6320] cgroup: Invalid name
[   80.292225][ T6320] cgroup: Invalid name
[   80.292436][ T6320] cgroup: Invalid name
[   80.292655][ T6320] cgroup: Invalid name
[   80.292856][ T6320] cgroup: Invalid name
[   80.293060][ T6320] cgroup: Invalid name
[   80.293265][ T6320] cgroup: Invalid name
[   80.293473][ T6320] cgroup: Invalid name
[   80.293671][ T6320] cgroup: Invalid name
[   80.293876][ T6320] cgroup: Invalid name
[   80.294075][ T6320] cgroup: Invalid name
[   80.294298][ T6320] cgroup: Invalid name
[   80.294497][ T6320] cgroup: Invalid name
[   80.294700][ T6320] cgroup: Invalid name
[   80.294899][ T6320] cgroup: Invalid name
[   80.295107][ T6320] cgroup: Invalid name
[   80.295313][ T6320] cgroup: Invalid name
[   80.295518][ T6320] cgroup: Invalid name
[   80.295717][ T6320] cgroup: Invalid name
[   80.295922][ T6320] cgroup: Invalid name
[   80.296123][ T6320] cgroup: Invalid name
[   80.296354][ T6320] cgroup: Invalid name
[   80.322916][ T6320] cgroup: Invalid name
[   80.323140][ T6320] cgroup: Invalid name
[   80.323351][ T6320] cgroup: Invalid name
[   80.323738][ T6320] cgroup: Invalid name
[   80.325374][ T6320] cgroup: Invalid name
[   80.325594][ T6320] cgroup: Invalid name
[   80.325811][ T6320] cgroup: Invalid name
[   80.326020][ T6320] cgroup: Invalid name
[   80.626757][ T6317] bridge1: entered promiscuous mode
[   80.626817][ T6317] bridge1: entered allmulticast mode
[   80.642169][ T6317] team0: Port device bridge1 added
[   80.758842][ T6323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.042103][ T5467] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   81.146670][ T5467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.305849][ T6356] binder: 6353:6356 ioctl 4018620d 0 returned -22
[   81.311863][ T6356] binder: 6353:6356 IncRefs 0 refcount change on invalid ref 0 ret -22
[   81.322688][ T6356] binder: 6353:6356 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   81.322919][ T6356] binder: 6353:6356 ioctl c0306201 20000040 returned -22
[   81.326498][ T6356] binder: 6353:6356 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[   81.326515][ T6356] binder: 6353:6356 ioctl c0306201 20000640 returned -22
[   81.328444][ T6356] binder: 6353:6356 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   81.328467][ T6356] binder: 6356 RLIMIT_NICE not set
[   81.328484][ T6356] binder: 6353:6356 ioctl c0306201 200001c0 returned -11
[   81.553147][ T4715] Bluetooth: hci3: command tx timeout
[   81.640378][ T6363] netlink: 774 bytes leftover after parsing attributes in process `syz.5.357'.
[   81.723632][   T30] audit: type=1326 audit(80.062:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6365 comm="syz.3.358" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa71788e8 code=0x7ffc0000
[   81.723681][   T30] audit: type=1326 audit(80.062:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6365 comm="syz.3.358" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa71788e8 code=0x7ffc0000
[   81.724132][   T30] audit: type=1326 audit(80.062:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6365 comm="syz.3.358" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa71788e8 code=0x7ffc0000
[   81.724169][   T30] audit: type=1326 audit(80.062:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6365 comm="syz.3.358" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa71788e8 code=0x7ffc0000
[   81.727965][   T30] audit: type=1326 audit(80.062:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6365 comm="syz.3.358" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa71788e8 code=0x7ffc0000
[   81.753852][   T30] audit: type=1326 audit(80.100:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6365 comm="syz.3.358" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa71788e8 code=0x7ffc0000
[   81.755141][   T30] audit: type=1326 audit(80.100:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6365 comm="syz.3.358" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa71788e8 code=0x7ffc0000
[   81.755371][   T30] audit: type=1326 audit(80.100:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6365 comm="syz.3.358" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa71788e8 code=0x7ffc0000
[   81.755672][   T30] audit: type=1326 audit(80.100:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6365 comm="syz.3.358" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa71788e8 code=0x7ffc0000
[   81.978528][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'.
[   82.082411][ T6377] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   82.206194][ T6381] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   82.291915][ T6383] EXT4-fs: Ignoring removed bh option
[   82.292623][ T6383] EXT4-fs: Invalid want_extra_isize 212
[   82.543159][ T6389] binder: 6388:6389 ioctl 4018620d 0 returned -22
[   82.574620][ T6389] binder: 6388:6389 ioctl c0306201 20000040 returned -22
[   82.575029][ T6389] binder: 6388:6389 ioctl c0306201 20000640 returned -22
[   82.576524][ T6389] binder: 6388:6389 ioctl c0306201 200001c0 returned -11
[   82.588843][ T6391] vfat: Unknown parameter 'Utf8'
[   82.734542][ T6393] netlink: 55 bytes leftover after parsing attributes in process `syz.2.369'.
[   82.772847][ T6393] netlink: 'syz.2.369': attribute type 4 has an invalid length.
[   83.772972][ T4715] Bluetooth: hci3: command tx timeout
[   83.797667][ T6420] netlink: 964 bytes leftover after parsing attributes in process `syz.2.378'.
[   84.275691][ T6442] netlink: 'syz.3.386': attribute type 1 has an invalid length.
[   84.304903][ T6447] set_capacity_and_notify: 17 callbacks suppressed
[   84.304921][ T6447] loop4: detected capacity change from 0 to 1024
[   84.333365][ T6447] EXT4-fs: Ignoring removed bh option
[   84.336461][ T6447] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled
[   84.371333][ T6442] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.376069][ T6442] netlink: 'syz.3.386': attribute type 1 has an invalid length.
[   84.376217][ T6442] netlink: 'syz.3.386': attribute type 1 has an invalid length.
[   84.376357][ T6442] netlink: 'syz.3.386': attribute type 1 has an invalid length.
[   84.376487][ T6442] netlink: 'syz.3.386': attribute type 1 has an invalid length.
[   84.376614][ T6442] netlink: 'syz.3.386': attribute type 1 has an invalid length.
[   84.376748][ T6442] netlink: 'syz.3.386': attribute type 1 has an invalid length.
[   84.376873][ T6442] netlink: 'syz.3.386': attribute type 1 has an invalid length.
[   84.376999][ T6442] netlink: 'syz.3.386': attribute type 1 has an invalid length.
[   84.381642][ T6447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.410355][ T6449] vlan2: entered promiscuous mode
[   84.410375][ T6449] bond1: entered promiscuous mode
[   84.410511][ T6449] vlan2: entered allmulticast mode
[   84.410520][ T6449] bond1: entered allmulticast mode
[   84.516102][ T6447] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #12: block 7: comm syz.4.387: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   84.531734][ T6447] EXT4-fs (loop4): Remounting filesystem read-only
[   84.703933][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.738563][ T6458] loop5: detected capacity change from 0 to 2048
[   84.770064][ T6458] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=4
[   84.770184][ T6458] EXT4-fs warning (device loop5): ext4_enable_quotas:7305: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   84.770733][ T6458] EXT4-fs (loop5): mount failed
[   85.080078][ T6458] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.086570][ T6458] team0: Port device bond0 added
[   85.188849][ T6469] loop5: detected capacity change from 0 to 2048
[   85.213183][ T6469] EXT4-fs warning (device loop5): ext4_enable_quotas:7305: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   85.213640][ T6469] EXT4-fs (loop5): mount failed
[   85.781427][ T6486] ieee802154 phy0 wpan0: encryption failed: -22
[   85.996063][ T4715] Bluetooth: hci3: command tx timeout
[   86.145128][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'.
[   86.150830][ T6501] loop4: detected capacity change from 0 to 1024
[   86.161071][ T6501] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   86.181698][ T6501] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.405: lblock 2 mapped to illegal pblock 2 (length 1)
[   86.181728][ T6501] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   86.183705][ T6501] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz.4.405: Invalid inode table block 1 in block_group 0
[   86.183728][ T6501] loop4: lost filesystem error report for type 5 error -117
[   86.184040][ T6501] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem
[   86.184055][ T6501] loop4: lost filesystem error report for type 5 error -117
[   86.184295][ T6501] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.405: mark_inode_dirty error
[   86.184313][ T6501] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   86.184541][ T6501] EXT4-fs error (device loop4): ext4_acquire_dquot:7070: comm syz.4.405: Failed to acquire dquot type 0
[   86.184556][ T6501] loop4: lost filesystem error report for type 5 error -117
[   86.187062][    C1] EXT4-fs (loop4): error count since last fsck: 5
[   86.187076][    C1] EXT4-fs (loop4): initial error at time 84: ext4_map_blocks:790: inode 3: block 2
[   86.187108][    C1] EXT4-fs (loop4): last error at time 84: ext4_acquire_dquot:7070
[   86.221021][ T6501] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem
[   86.221042][ T6501] loop4: lost filesystem error report for type 5 error -117
[   86.223389][ T6501] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.405: mark_inode_dirty error
[   86.223408][ T6501] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   86.228472][ T6501] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[   86.228571][ T6501] EXT4-fs (loop4): 1 orphan inode deleted
[   86.234811][ T6501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.255696][ T5820] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1)
[   86.261119][ T5820] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #3: comm kworker/u8:11: ES cache extent failed: add [0,1,48,0x1] conflict with existing [0,1,48,0x12]
[   86.261119][ T5820] 
[   86.261267][ T5820] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #3: block 48: comm kworker/u8:11: lblock 0 mapped to illegal pblock 48 (length 1)
[   86.273116][ T5820] EXT4-fs error (device loop4): ext4_release_dquot:7106: comm kworker/u8:11: Failed to release dquot type 0
[   86.273503][ T6501] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.405: lblock 0 mapped to illegal pblock 48 (length 1)
[   86.427535][ T6508] loop5: detected capacity change from 0 to 2048
[   86.515007][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.530742][ T4720] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[   86.530765][ T4720] loop4: lost filesystem error report for type 5 error -117
[   86.534742][ T6508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.535752][ T4720] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem
[   86.535769][ T4720] loop4: lost filesystem error report for type 5 error -117
[   86.548939][ T4720] EXT4-fs error (device loop4): ext4_quota_off:7354: inode #3: comm syz-executor: mark_inode_dirty error
[   86.548970][ T4720] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   86.554364][ T4720] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[   86.554388][ T4720] loop4: lost filesystem error report for type 5 error -117
[   87.983865][ T6528] ip_tables: iptables: counters copy to user failed while replacing table
[   88.047762][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'.
[   88.218326][ T4715] Bluetooth: hci3: command tx timeout
[   88.592261][ T5467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.031968][ T6562] validate_nla: 26 callbacks suppressed
[   89.031989][ T6562] netlink: 'syz.5.423': attribute type 10 has an invalid length.
[   89.048646][ T6562] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.054067][ T6562] team0: Port device netdevsim1 added
[   90.585816][ T4715] Bluetooth: hci3: command tx timeout
[   90.667054][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.435'.
[   90.813014][ T6597] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size.
[   90.826086][ T6597] loop4: detected capacity change from 0 to 128
[   90.876116][ T6597] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   90.911375][ T6597] fscrypt (loop4, inode 12): Unsupported encryption flags (0x08)
[   91.272883][ T4720] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   91.425087][ T6612] loop3: detected capacity change from 0 to 512
[   91.456578][ T6612] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   91.456595][ T6612] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   91.496087][ T6612] EXT4-fs (loop3): 1 truncate cleaned up
[   91.499000][ T6612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.840567][ T6623] FAULT_INJECTION: forcing a failure.
[   91.840567][ T6623] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   91.840592][ T6623] CPU: 0 UID: 0 PID: 6623 Comm: syz.6.444 Not tainted syzkaller #0 PREEMPT 
[   91.840603][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   91.840609][ T6623] Call trace:
[   91.840614][ T6623]  show_stack+0x2c/0x3c (C)
[   91.840634][ T6623]  __dump_stack+0x30/0x40
[   91.840649][ T6623]  dump_stack_lvl+0xd8/0x12c
[   91.840663][ T6623]  dump_stack+0x1c/0x28
[   91.840676][ T6623]  should_fail_ex+0x418/0x58c
[   91.840688][ T6623]  should_fail+0x14/0x24
[   91.840698][ T6623]  should_fail_usercopy+0x20/0x30
[   91.840711][ T6623]  _inline_copy_from_user+0x3c/0x174
[   91.840724][ T6623]  __sys_bpf+0x1b4/0x82c
[   91.840736][ T6623]  __arm64_sys_bpf+0xd0/0xec
[   91.840747][ T6623]  invoke_syscall+0x98/0x244
[   91.840762][ T6623]  el0_svc_common+0x19c/0x23c
[   91.840775][ T6623]  do_el0_svc+0x4c/0x5c
[   91.840788][ T6623]  el0_svc+0x60/0x1d8
[   91.840800][ T6623]  el0t_64_sync_handler+0x44/0x104
[   91.840811][ T6623]  el0t_64_sync+0x198/0x19c
[   91.901898][ T4709] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[   91.910175][ T4709] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[   92.101846][ T6632] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.447'.
[   92.231617][ T6638] loop4: detected capacity change from 0 to 512
[   92.252421][ T6638] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   92.303053][ T6638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.394558][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.783938][ T4715] Bluetooth: hci3: command tx timeout
[   93.741360][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.163520][ T6685] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.462'.
[   94.590945][ T6696] WARNING! power/level is deprecated; use power/control instead
[   94.987722][ T4715] Bluetooth: hci3: command tx timeout
[   95.160617][ T6699] loop5: detected capacity change from 0 to 8
[   95.443164][ T4713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.444173][ T4713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.446274][ T4713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.453754][ T4713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.458308][ T4713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.592982][ T6706] netlink: 'syz.2.467': attribute type 4 has an invalid length.
[   96.341012][ T6730] netlink: 36 bytes leftover after parsing attributes in process `syz.6.471'.
[   96.587428][ T6745] gadgetfs: bound to dummy_udc driver
[   96.726496][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'.
[   97.226312][ T4713] Bluetooth: hci3: command tx timeout
[   98.053940][ T4713] Bluetooth: hci1: command tx timeout
[   98.733537][ T6797] FAULT_INJECTION: forcing a failure.
[   98.733537][ T6797] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   98.733563][ T6797] CPU: 1 UID: 0 PID: 6797 Comm: syz.5.483 Tainted: G             L      syzkaller #0 PREEMPT 
[   98.733576][ T6797] Tainted: [L]=SOFTLOCKUP
[   98.733581][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   98.733587][ T6797] Call trace:
[   98.733591][ T6797]  show_stack+0x2c/0x3c (C)
[   98.733612][ T6797]  __dump_stack+0x30/0x40
[   98.733626][ T6797]  dump_stack_lvl+0xd8/0x12c
[   98.733640][ T6797]  dump_stack+0x1c/0x28
[   98.733653][ T6797]  should_fail_ex+0x418/0x58c
[   98.733666][ T6797]  should_fail+0x14/0x24
[   98.733677][ T6797]  should_fail_usercopy+0x20/0x30
[   98.733688][ T6797]  _copy_from_iter+0x188/0x1064
[   98.733700][ T6797]  netlink_sendmsg+0x570/0x948
[   98.733715][ T6797]  __sock_sendmsg+0xc8/0x17c
[   98.733729][ T6797]  ____sys_sendmsg+0x3d0/0x6c8
[   98.733742][ T6797]  ___sys_sendmsg+0x198/0x224
[   98.733755][ T6797]  __sys_sendmsg+0x158/0x204
[   98.733769][ T6797]  __arm64_sys_sendmsg+0x88/0x9c
[   98.733782][ T6797]  invoke_syscall+0x98/0x244
[   98.733796][ T6797]  el0_svc_common+0x19c/0x23c
[   98.733810][ T6797]  do_el0_svc+0x4c/0x5c
[   98.733823][ T6797]  el0_svc+0x60/0x1d8
[   98.733836][ T6797]  el0t_64_sync_handler+0x44/0x104
[   98.733847][ T6797]  el0t_64_sync+0x198/0x19c
[   98.750191][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'.
[   98.782482][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.477'.
[   98.935057][ T6702] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.947170][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.947391][ T6702] bridge_slave_0: entered allmulticast mode
[   98.949437][ T6702] bridge_slave_0: entered promiscuous mode
[   98.954170][ T6702] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.957509][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.957703][ T6702] bridge_slave_1: entered allmulticast mode
[   98.959664][ T6702] bridge_slave_1: entered promiscuous mode
[   99.061330][ T6702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.087439][ T6702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.272899][ T6702] team0: Port device team_slave_0 added
[   99.276143][ T6702] team0: Port device team_slave_1 added
[   99.410423][ T6702] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.410441][ T6702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.410456][ T6702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.422929][ T4713] Bluetooth: hci3: command tx timeout
[   99.442390][ T6702] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.442406][ T6702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.442428][ T6702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.615713][ T6702] hsr_slave_0: entered promiscuous mode
[   99.617074][ T6702] hsr_slave_1: entered promiscuous mode
[  100.277833][ T4713] Bluetooth: hci1: command tx timeout
[  100.412191][ T6702] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  100.430348][ T6702] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.433020][ T6702] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  100.446414][ T6702] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  100.453099][ T6702] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  100.458572][ T6702] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  100.465374][ T6702] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  100.480622][ T6702] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  100.768765][ T6702] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.838720][ T6702] 8021q: adding VLAN 0 to HW filter on device team0
[  100.846918][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.846965][ T3303] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.866621][ T6837] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.866680][ T6837] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.883486][ T6866] FAULT_INJECTION: forcing a failure.
[  100.883486][ T6866] name failslab, interval 1, probability 0, space 0, times 0
[  100.883513][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.4.494 Tainted: G             L      syzkaller #0 PREEMPT 
[  100.883526][ T6866] Tainted: [L]=SOFTLOCKUP
[  100.883531][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  100.883537][ T6866] Call trace:
[  100.883542][ T6866]  show_stack+0x2c/0x3c (C)
[  100.883563][ T6866]  __dump_stack+0x30/0x40
[  100.883577][ T6866]  dump_stack_lvl+0xd8/0x12c
[  100.883591][ T6866]  dump_stack+0x1c/0x28
[  100.883604][ T6866]  should_fail_ex+0x418/0x58c
[  100.883617][ T6866]  should_failslab+0xc4/0x120
[  100.883629][ T6866]  kmem_cache_alloc_noprof+0x94/0x5d4
[  100.883641][ T6866]  xfrm_state_alloc+0x2c/0x270
[  100.883654][ T6866]  xfrm_add_sa+0xfa4/0x2fe8
[  100.883665][ T6866]  xfrm_user_rcv_msg+0x4e0/0x950
[  100.883676][ T6866]  netlink_rcv_skb+0x238/0x414
[  100.883690][ T6866]  xfrm_netlink_rcv+0x80/0x9c
[  100.883701][ T6866]  netlink_unicast+0x600/0x7f8
[  100.883714][ T6866]  netlink_sendmsg+0x648/0x948
[  100.883727][ T6866]  __sock_sendmsg+0xc8/0x17c
[  100.883740][ T6866]  ____sys_sendmsg+0x3d0/0x6c8
[  100.883754][ T6866]  ___sys_sendmsg+0x198/0x224
[  100.883767][ T6866]  __sys_sendmsg+0x158/0x204
[  100.883781][ T6866]  __arm64_sys_sendmsg+0x88/0x9c
[  100.883794][ T6866]  invoke_syscall+0x98/0x244
[  100.883809][ T6866]  el0_svc_common+0x19c/0x23c
[  100.883822][ T6866]  do_el0_svc+0x4c/0x5c
[  100.883835][ T6866]  el0_svc+0x60/0x1d8
[  100.883847][ T6866]  el0t_64_sync_handler+0x44/0x104
[  100.883858][ T6866]  el0t_64_sync+0x198/0x19c
[  101.010982][ T6702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  101.345977][ T6875] loop5: detected capacity change from 0 to 512
[  101.360343][ T6875] EXT4-fs: user quota file already specified
[  101.524939][ T6881] loop4: detected capacity change from 0 to 512
[  101.544556][ T6881] loop4: detected capacity change from 0 to 512
[  101.585416][ T6881] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.499: bad orphan inode 13
[  101.585447][ T6881] loop4: lost filesystem error report for type 5 error -117
[  101.587439][ T6881] ext4_test_bit(bit=12, block=4) = 1
[  101.587461][ T6881] is_bad_inode(inode)=0
[  101.587469][ T6881] NEXT_ORPHAN(inode)=0
[  101.587477][ T6881] max_ino=32
[  101.587485][ T6881] i_nlink=1
[  101.589699][ T6881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.645753][ T4713] Bluetooth: hci3: command tx timeout
[  101.683917][ T6891] tmpfs: Bad value for 'mpol'
[  101.748539][ T6893] ip_tables: iptables: counters copy to user failed while replacing table
[  101.749709][ T6893] C: renamed from lo (while UP)
[  101.761723][ T6893] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  101.937707][ T6896] EXT4-fs warning (device loop4): dx_probe:813: inode #2: comm syz.4.499: Hash code is SIPHASH, but hash not in dirent
[  101.937734][ T6896] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.499: Corrupt directory, running e2fsck is recommended
[  101.950536][ T6887] tipc: Enabling of bearer <eth:syz_tu> rejected, failed to enable media
[  101.951756][ T6896] xt_connbytes: Forcing CT accounting to be enabled
[  101.952207][ T6885] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  101.952371][ T4713] Bluetooth: hci3: unexpected event 0x1c length: 7 > 5
[  102.103428][ T6896] xt_CT: No such helper "snmp"
[  102.274176][ T6906] loop5: detected capacity change from 0 to 2048
[  102.302958][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.508'.
[  102.302992][ T6911] netlink: 'syz.2.508': attribute type 26 has an invalid length.
[  102.312676][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.6.507'.
[  102.326372][ T6906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.361797][ T6702] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.474637][ T5467] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  102.512368][ T4713] Bluetooth: hci1: command tx timeout
[  102.537653][ T5467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.858496][ T6702] veth0_vlan: entered promiscuous mode
[  102.883598][ T6702] veth1_vlan: entered promiscuous mode
[  102.956082][ T6702] veth0_macvtap: entered promiscuous mode
[  102.967494][ T6702] veth1_macvtap: entered promiscuous mode
[  103.000291][ T6702] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.019308][ T6702] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.084204][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.106764][ T3303] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.126290][ T3303] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.144655][ T6817] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.144705][ T6817] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.211657][ T6820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.211677][ T6820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.289548][ T3303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.289567][ T3303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.501414][ T6953] FAULT_INJECTION: forcing a failure.
[  103.501414][ T6953] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  103.501440][ T6953] CPU: 1 UID: 0 PID: 6953 Comm: syz.7.459 Tainted: G             L      syzkaller #0 PREEMPT 
[  103.501453][ T6953] Tainted: [L]=SOFTLOCKUP
[  103.501458][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  103.501464][ T6953] Call trace:
[  103.501468][ T6953]  show_stack+0x2c/0x3c (C)
[  103.501489][ T6953]  __dump_stack+0x30/0x40
[  103.501504][ T6953]  dump_stack_lvl+0xd8/0x12c
[  103.501517][ T6953]  dump_stack+0x1c/0x28
[  103.501531][ T6953]  should_fail_ex+0x418/0x58c
[  103.501543][ T6953]  should_fail+0x14/0x24
[  103.501553][ T6953]  should_fail_usercopy+0x20/0x30
[  103.501566][ T6953]  simple_read_from_buffer+0xc4/0x238
[  103.501580][ T6953]  proc_fail_nth_read+0x1a8/0x248
[  103.501593][ T6953]  vfs_read+0x230/0x8c8
[  103.501605][ T6953]  ksys_read+0x12c/0x228
[  103.501615][ T6953]  __arm64_sys_read+0x84/0x98
[  103.501626][ T6953]  invoke_syscall+0x98/0x244
[  103.501640][ T6953]  el0_svc_common+0x19c/0x23c
[  103.501654][ T6953]  do_el0_svc+0x4c/0x5c
[  103.501667][ T6953]  el0_svc+0x60/0x1d8
[  103.501680][ T6953]  el0t_64_sync_handler+0x44/0x104
[  103.501690][ T6953]  el0t_64_sync+0x198/0x19c
[  103.614054][ T6954] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  103.713418][ T6959] loop7: detected capacity change from 0 to 128
[  103.817105][ T6959] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  103.871524][ T4713] Bluetooth: hci3: command tx timeout
[  104.033658][ T6702] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  104.034708][ T6963] binder_user_error: 5 callbacks suppressed
[  104.034723][ T6963] binder: 6961:6963 tried to acquire reference to desc 0, got 1 instead
[  104.035312][ T6963] binder_alloc: 6961: binder_alloc_buf, no vma
[  104.035329][ T6963] binder: cannot allocate buffer: vma cleared, target dead or dying
[  104.035419][ T6963] binder: 6961:6963 transaction call to 6961:0 failed 20/29189/-3, code 0 size 88-24 line 3409
[  104.151069][   T24] binder: undelivered TRANSACTION_ERROR: 29189
[  104.281915][ T6970] Invalid option length (1048488) for dns_resolver key
[  104.328427][ T6975] loop6: detected capacity change from 0 to 512
[  104.344582][ T6970] loop7: detected capacity change from 0 to 1024
[  104.346280][ T6975] EXT4-fs (loop6): Invalid log cluster size: 196609
[  104.361746][ T6970] EXT4-fs (loop7): bad geometry: first data block is 0 with a 1k block and cluster size
[  104.493671][ T6980] bridge0: entered allmulticast mode
[  104.495377][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.529'.
[  104.950842][ T7012] loop4: detected capacity change from 0 to 128
[  104.956771][ T7012] EXT4-fs (loop4): Test dummy encryption mode enabled
[  104.959115][ T7012] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  104.959177][ T7012] System zones: 1-3, 19-19, 35-36
[  104.962169][ T7012] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  105.020966][ T7012] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.160744][ T7017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.540'.
[  105.363507][ T7023] loop6: detected capacity change from 0 to 1024
[  105.439730][ T7023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.471783][ T7023] FAULT_INJECTION: forcing a failure.
[  105.471783][ T7023] name failslab, interval 1, probability 0, space 0, times 0
[  105.471810][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: syz.6.543 Tainted: G             L      syzkaller #0 PREEMPT 
[  105.471823][ T7023] Tainted: [L]=SOFTLOCKUP
[  105.471828][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  105.471834][ T7023] Call trace:
[  105.471839][ T7023]  show_stack+0x2c/0x3c (C)
[  105.471860][ T7023]  __dump_stack+0x30/0x40
[  105.471874][ T7023]  dump_stack_lvl+0xd8/0x12c
[  105.471888][ T7023]  dump_stack+0x1c/0x28
[  105.471901][ T7023]  should_fail_ex+0x418/0x58c
[  105.471913][ T7023]  should_failslab+0xc4/0x120
[  105.471925][ T7023]  __kmalloc_noprof+0x108/0x6c8
[  105.471937][ T7023]  tomoyo_encode2+0x10c/0x330
[  105.471952][ T7023]  tomoyo_encode+0x34/0x50
[  105.471965][ T7023]  tomoyo_mount_permission+0x5d0/0x7e4
[  105.471979][ T7023]  tomoyo_sb_mount+0x48/0x60
[  105.471993][ T7023]  security_sb_mount+0xfc/0x308
[  105.472005][ T7023]  path_mount+0xb8/0xa88
[  105.472018][ T7023]  do_mount+0xe8/0x148
[  105.472031][ T7023]  __arm64_sys_mount+0x33c/0x388
[  105.472045][ T7023]  invoke_syscall+0x98/0x244
[  105.472059][ T7023]  el0_svc_common+0x19c/0x23c
[  105.472073][ T7023]  do_el0_svc+0x4c/0x5c
[  105.472086][ T7023]  el0_svc+0x60/0x1d8
[  105.472098][ T7023]  el0t_64_sync_handler+0x44/0x104
[  105.472109][ T7023]  el0t_64_sync+0x198/0x19c
[  105.611477][ T7024] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  106.114653][ T4713] Bluetooth: hci3: command tx timeout
[  106.358984][ T5782] EXT4-fs error (device loop6): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /23/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  106.359552][ T5782] EXT4-fs (loop6): Remounting filesystem read-only
[  106.465864][ T7038] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.548'.
[  106.465889][ T7038] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  106.491792][ T5782] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.644721][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  106.644740][   T30] audit: type=1326 audit(103.363:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.5.537" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed788e8 code=0x7fc00000
[  107.027927][ T7044] gre1: entered promiscuous mode
[  107.068579][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.549'.
[  107.068625][ T7048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.549'.
[  107.439437][ T7077] 9p: Bad value for 'rfdno'
[  107.607741][ T7076] bridge_slave_0: left allmulticast mode
[  107.607770][ T7076] bridge_slave_0: left promiscuous mode
[  107.607933][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.665646][ T7076] bridge_slave_1: left allmulticast mode
[  107.665678][ T7076] bridge_slave_1: left promiscuous mode
[  107.665847][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.725928][ T7076] bond0: (slave bond_slave_0): Releasing backup interface
[  107.770436][ T7076] bond0: (slave bond_slave_1): Releasing backup interface
[  107.818934][ T7076] team0: Port device team_slave_0 removed
[  107.830146][ T7076] team0: Port device team_slave_1 removed
[  107.831344][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.831363][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.841177][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.841195][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.848451][ T7076] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  107.861464][ T7079] team0: Mode changed to "random"
[  107.869871][ T7081] vlan0: entered promiscuous mode
[  107.874763][ T7087] tipc: Started in network mode
[  107.874786][ T7087] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  107.874939][ T7087] tipc: Enabled bearer <eth:team0>, priority 0
[  107.891194][ T7090] syz.2.564 uses obsolete (PF_INET,SOCK_PACKET)
[  108.031294][ T7098] netlink: 976 bytes leftover after parsing attributes in process `syz.7.568'.
[  108.217408][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.571'.
[  108.338285][ T4713] Bluetooth: hci3: command tx timeout
[  108.685251][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.578'.
[  108.750504][ T7126] overlay: ./file0 is not a directory
[  108.901369][ T7132] trusted_key: encrypted_key: insufficient parameters specified
[  109.296610][ T4797] tipc: Node number set to 11578026
[  109.376109][ T7148] netlink: 144 bytes leftover after parsing attributes in process `syz.4.590'.
[  109.388367][ T7149] rnbd_client L610: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0)
[  109.392687][ T7149] rtrs_client L2101: <s0>: Failed to resolve address, err: -ENODEV
[  109.392878][ T7149] rtrs_client L2646: <s0>: init_conns() failed: err=-ENODEV path=<invalid address family>@ip:127.0.0.1 [:0]
[  110.056157][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.594'.
[  110.175601][ T7164] can: request_module (can-proto-0) failed.
[  110.259683][ T7170] 8021q: adding VLAN 0 to HW filter on device macsec1
[  110.260138][   T26] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  110.274173][ T7167] loop7: detected capacity change from 0 to 4096
[  110.299837][ T7167] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (25205!=55237)
[  110.299863][ T7167] EXT4-fs (loop7): group descriptors corrupted!
[  110.547546][ T4713] Bluetooth: hci3: command tx timeout
[  110.835579][ T7185] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20002
[  110.867560][ T7189] netlink: 774 bytes leftover after parsing attributes in process `syz.5.605'.
[  112.355823][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.609'.
[  112.365086][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.610'.
[  113.114374][ T7234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.616'.
[  113.259131][ T7227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.614'.
[  113.874450][ T7250] batman_adv: batadv0: Adding interface: syzkaller0
[  113.874469][ T7250] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  113.874494][ T7250] batman_adv: batadv0: Interface activated: syzkaller0
[  113.991668][ T7253] __nla_validate_parse: 1 callbacks suppressed
[  113.991688][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'.
[  114.265971][ T7249] batman_adv: batadv0: Interface deactivated: syzkaller0
[  114.413568][ T7249] batman_adv: batadv0: Removing interface: syzkaller0
[  114.544409][ T7277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.940595][ T7290] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma?
[  115.263397][ T7309] dlm: non-version read from control device 8224
[  115.626826][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'.
[  115.626890][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'.
[  116.437523][ T7336] loop7: detected capacity change from 0 to 128
[  116.445687][ T7336] EXT4-fs (loop7): Test dummy encryption mode enabled
[  116.458192][ T7336] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  116.458281][ T7336] System zones: 1-3, 19-19, 35-36
[  116.466593][ T7336] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  116.486327][ T7336] FAULT_INJECTION: forcing a failure.
[  116.486327][ T7336] name failslab, interval 1, probability 0, space 0, times 0
[  116.486354][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.7.647 Tainted: G             L      syzkaller #0 PREEMPT 
[  116.486368][ T7336] Tainted: [L]=SOFTLOCKUP
[  116.486373][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  116.486380][ T7336] Call trace:
[  116.486385][ T7336]  show_stack+0x2c/0x3c (C)
[  116.486408][ T7336]  __dump_stack+0x30/0x40
[  116.486425][ T7336]  dump_stack_lvl+0xd8/0x12c
[  116.486441][ T7336]  dump_stack+0x1c/0x28
[  116.486457][ T7336]  should_fail_ex+0x418/0x58c
[  116.486471][ T7336]  should_failslab+0xc4/0x120
[  116.486484][ T7336]  kmem_cache_alloc_noprof+0x94/0x5d4
[  116.486498][ T7336]  mb_cache_entry_create+0x158/0x8a8
[  116.486512][ T7336]  ext4_xattr_block_cache_insert+0xb8/0x118
[  116.486529][ T7336]  ext4_xattr_block_set+0x1c80/0x2218
[  116.486544][ T7336]  ext4_xattr_set_handle+0xa28/0xe7c
[  116.486558][ T7336]  ext4_set_context+0x228/0x4f8
[  116.486575][ T7336]  fscrypt_set_context+0x27c/0x32c
[  116.486588][ T7336]  __ext4_new_inode+0x2820/0x3320
[  116.486602][ T7336]  ext4_create+0x1f4/0x408
[  116.486617][ T7336]  lookup_open+0xafc/0x1180
[  116.486632][ T7336]  path_openat+0x50c/0x18f0
[  116.486646][ T7336]  do_file_open+0x1c8/0x2e8
[  116.486661][ T7336]  do_sys_openat2+0x114/0x1e8
[  116.486678][ T7336]  do_sys_open+0xb0/0xe0
[  116.486694][ T7336]  __arm64_sys_openat+0xa8/0xc4
[  116.486711][ T7336]  invoke_syscall+0x98/0x244
[  116.486727][ T7336]  el0_svc_common+0x19c/0x23c
[  116.486744][ T7336]  do_el0_svc+0x4c/0x5c
[  116.486760][ T7336]  el0_svc+0x60/0x1d8
[  116.486773][ T7336]  el0t_64_sync_handler+0x44/0x104
[  116.486786][ T7336]  el0t_64_sync+0x198/0x19c
[  116.545279][ T6702] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  116.928307][ T7352] loop7: detected capacity change from 0 to 128
[  116.930381][ T7352] EXT4-fs (loop7): Test dummy encryption mode enabled
[  116.935541][ T7352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  116.935622][ T7352] System zones: 1-3, 19-19, 35-36
[  116.938259][ T7352] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  117.017487][ T7352] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.219634][ T7357] overlayfs: cannot append lower layer
[  117.772232][ T7369] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  118.077764][ T7282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  119.638213][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'.
[  119.771713][ T7388] loop5: detected capacity change from 0 to 128
[  119.819285][ T7386] FAULT_INJECTION: forcing a failure.
[  119.819285][ T7386] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.819315][ T7386] CPU: 1 UID: 0 PID: 7386 Comm: syz.6.663 Tainted: G             L      syzkaller #0 PREEMPT 
[  119.819330][ T7386] Tainted: [L]=SOFTLOCKUP
[  119.819335][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  119.819342][ T7386] Call trace:
[  119.819347][ T7386]  show_stack+0x2c/0x3c (C)
[  119.819371][ T7386]  __dump_stack+0x30/0x40
[  119.819388][ T7386]  dump_stack_lvl+0xd8/0x12c
[  119.819404][ T7386]  dump_stack+0x1c/0x28
[  119.819420][ T7386]  should_fail_ex+0x418/0x58c
[  119.819433][ T7386]  should_fail+0x14/0x24
[  119.819446][ T7386]  should_fail_usercopy+0x20/0x30
[  119.819459][ T7386]  _inline_copy_from_user+0x3c/0x174
[  119.819474][ T7386]  __sys_bpf+0x1b4/0x82c
[  119.819488][ T7386]  __arm64_sys_bpf+0xd0/0xec
[  119.819501][ T7386]  invoke_syscall+0x98/0x244
[  119.819518][ T7386]  el0_svc_common+0x19c/0x23c
[  119.819538][ T7386]  do_el0_svc+0x4c/0x5c
[  119.819555][ T7386]  el0_svc+0x60/0x1d8
[  119.819568][ T7386]  el0t_64_sync_handler+0x44/0x104
[  119.819581][ T7386]  el0t_64_sync+0x198/0x19c
[  119.852637][ T7388] EXT4-fs (loop5): Test dummy encryption mode enabled
[  119.880518][ T7388] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  119.880604][ T7388] System zones: 1-3, 19-19, 35-36
[  119.900193][ T7388] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  119.957885][ T7386] loop6: detected capacity change from 0 to 1024
[  120.017983][ T7386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.039106][ T7386] EXT4-fs error (device loop6): ext4_lookup:1787: comm syz.6.663: inode #12: comm syz.6.663: iget: illegal inode #
[  120.056538][ T7386] EXT4-fs (loop6): Remounting filesystem read-only
[  120.174219][ T7394] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.542225][ T5782] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.754729][ T7405] netlink: 'syz.4.672': attribute type 2 has an invalid length.
[  120.784222][ T7405] |2ö;: entered promiscuous mode
[  120.878976][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'.
[  121.128499][ T7418] loop6: detected capacity change from 0 to 4096
[  121.187901][ T7418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.384130][ T7418] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  121.541894][ T7427] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  121.603874][ T5782] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.654258][ T7437] overlayfs: cannot append lower layer
[  123.642735][ T7453] netlink: 100 bytes leftover after parsing attributes in process `syz.2.687'.
[  123.642767][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.687'.
[  125.101440][ T7478] netlink: 16 bytes leftover after parsing attributes in process `syz.6.697'.
[  125.638683][ T7501] netlink: 20 bytes leftover after parsing attributes in process `syz.6.704'.
[  125.757384][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'.
[  126.095922][ T7531] netlink: 16 bytes leftover after parsing attributes in process `syz.5.713'.
[  126.762761][ T7562] 8021q: adding VLAN 0 to HW filter on device macsec1
[  126.763221][   T26] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  126.872845][ T7559] netlink: 'syz.4.723': attribute type 10 has an invalid length.
[  127.862719][ T7559] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  127.876169][ T7559] team0: Port device netdevsim1 added
[  128.196940][ T7583] netlink: 36 bytes leftover after parsing attributes in process `syz.7.730'.
[  128.197688][ T7583] netlink: 36 bytes leftover after parsing attributes in process `syz.7.730'.
[  128.198121][ T7583] netlink: 36 bytes leftover after parsing attributes in process `syz.7.730'.
[  128.198545][ T7583] netlink: 36 bytes leftover after parsing attributes in process `syz.7.730'.
[  128.198963][ T7583] netlink: 36 bytes leftover after parsing attributes in process `syz.7.730'.
[  128.219094][ T7580] 8021q: VLANs not supported on wg1
[  128.221774][ T7583] netlink: 36 bytes leftover after parsing attributes in process `syz.7.730'.
[  128.327646][ T7582] ipt_rpfilter: unknown options
[  128.679456][ T7606] overlayfs: failed to clone lowerpath
[  129.091330][ T7614] overlayfs: failed to resolve './file0': -2
[  129.112130][ T7616] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  130.714395][ T7627] __nla_validate_parse: 27 callbacks suppressed
[  130.714414][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.6.736'.
[  130.735642][ T1593] ieee802154 phy0 wpan0: encryption failed: -22
[  130.735695][ T1593] ieee802154 phy1 wpan1: encryption failed: -22
[  130.744261][ T7627] geneve2: entered promiscuous mode
[  130.744278][ T7627] geneve2: entered allmulticast mode
[  131.417837][ T7639] fuse: Bad value for 'fd'
[  131.455336][ T7642] netlink: 100 bytes leftover after parsing attributes in process `syz.7.749'.
[  131.455367][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.7.749'.
[  131.566323][ T7645] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  131.758600][ T7650] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  131.797093][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.7.755'.
[  131.923315][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.755'.
[  131.931898][ T7655] hsr_slave_1 (unregistering): left promiscuous mode
[  131.951394][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.758'.
[  131.951414][ T7668] netlink: 24 bytes leftover after parsing attributes in process `syz.5.758'.
[  133.179779][ T7696] netlink: 100 bytes leftover after parsing attributes in process `syz.2.764'.
[  133.179810][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.764'.
[  133.664963][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'.
[  133.863564][ T7707] Injecting memory failure for pfn 0x144000 at process virtual address 0x20000000
[  133.998124][ T7707] Memory failure: 0x144000: recovery action for dirty LRU page: Recovered
[  134.180754][ T7720] 8021q: adding VLAN 0 to HW filter on device bond1
[  134.354632][ T7728] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available
[  134.357618][ T6818] IPVS: starting estimator thread 0...
[  134.445625][ T7739] IPVS: using max 12 ests per chain, 28800 per kthread
[  135.006903][ T7765] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  135.010560][ T7765] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  137.001741][ T7809] netlink: 'syz.6.802': attribute type 4 has an invalid length.
[  137.031191][ T7809] __nla_validate_parse: 6 callbacks suppressed
[  137.031210][ T7809] netlink: 60 bytes leftover after parsing attributes in process `syz.6.802'.
[  137.062033][ T7811] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  137.250199][ T7814] loop6: detected capacity change from 0 to 4096
[  137.257886][ T7814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  137.296890][ T7809] EXT4-fs error (device loop6): ext4_quota_enable:7257: comm syz.6.802: Bad quota inum: 131076, type: 1
[  137.297403][ T7809] EXT4-fs warning (device loop6): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=131076). Please run e2fsck to fix.
[  137.382064][ T5782] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.834307][ T7848] binder: 7848 RLIMIT_NICE not set
[  138.658207][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.817'.
[  138.658240][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.817'.
[  138.986646][   T30] audit: type=1326 audit(133.623:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7864 comm="syz.5.821" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed788e8 code=0x0
[  139.564200][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'.
[  141.384259][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'.
[  141.767628][   T30] audit: type=1326 audit(136.224:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf788e8 code=0x7ffc0000
[  141.772923][   T30] audit: type=1326 audit(136.233:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf788e8 code=0x7ffc0000
[  141.774899][   T30] audit: type=1326 audit(136.233:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf788e8 code=0x7ffc0000
[  141.775104][   T30] audit: type=1326 audit(136.233:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf788e8 code=0x7ffc0000
[  141.775713][   T30] audit: type=1326 audit(136.233:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffff9cf788e8 code=0x7ffc0000
[  141.775758][   T30] audit: type=1326 audit(136.233:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf788e8 code=0x7ffc0000
[  141.775842][   T30] audit: type=1326 audit(136.233:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf788e8 code=0x7ffc0000
[  141.776186][   T30] audit: type=1326 audit(136.233:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf788e8 code=0x7ffc0000
[  141.776414][   T30] audit: type=1326 audit(136.233:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf788e8 code=0x7ffc0000
[  141.843511][ T7939] fuse: Bad value for 'fd'
[  142.036870][ T7943] autofs: Unknown parameter 'ì'
[  142.037173][ T7943] autofs: Unknown parameter 'ì'
[  142.037402][ T7943] autofs: Unknown parameter 'ì'
[  142.037613][ T7943] autofs: Unknown parameter 'ì'
[  142.037832][ T7943] autofs: Unknown parameter 'ì'
[  142.038046][ T7943] autofs: Unknown parameter 'ì'
[  142.038271][ T7943] autofs: Unknown parameter 'ì'
[  142.038479][ T7943] autofs: Unknown parameter 'ì'
[  142.038706][ T7943] autofs: Unknown parameter 'ì'
[  142.038923][ T7943] autofs: Unknown parameter 'ì'
[  142.039139][ T7943] autofs: Unknown parameter 'ì'
[  142.039357][ T7943] autofs: Unknown parameter 'ì'
[  142.039580][ T7943] autofs: Unknown parameter 'ì'
[  142.039789][ T7943] autofs: Unknown parameter 'ì'
[  142.040001][ T7943] autofs: Unknown parameter 'ì'
[  142.040210][ T7943] autofs: Unknown parameter 'ì'
[  142.040441][ T7943] autofs: Unknown parameter 'ì'
[  142.040649][ T7943] autofs: Unknown parameter 'ì'
[  142.040872][ T7943] autofs: Unknown parameter 'ì'
[  142.041079][ T7943] autofs: Unknown parameter 'ì'
[  142.041296][ T7943] autofs: Unknown parameter 'ì'
[  142.041527][ T7943] autofs: Unknown parameter 'ì'
[  142.041743][ T7943] autofs: Unknown parameter 'ì'
[  142.041950][ T7943] autofs: Unknown parameter 'ì'
[  142.042162][ T7943] autofs: Unknown parameter 'ì'
[  142.042371][ T7943] autofs: Unknown parameter 'ì'
[  142.042582][ T7943] autofs: Unknown parameter 'ì'
[  142.042789][ T7943] autofs: Unknown parameter 'ì'
[  142.043002][ T7943] autofs: Unknown parameter 'ì'
[  142.043207][ T7943] autofs: Unknown parameter 'ì'
[  142.043424][ T7943] autofs: Unknown parameter 'ì'
[  142.043630][ T7943] autofs: Unknown parameter 'ì'
[  142.043842][ T7943] autofs: Unknown parameter 'ì'
[  142.044059][ T7943] autofs: Unknown parameter 'ì'
[  142.044299][ T7943] autofs: Unknown parameter 'ì'
[  142.044509][ T7943] autofs: Unknown parameter 'ì'
[  142.087084][ T7943] autofs: Unknown parameter 'ì'
[  142.087312][ T7943] autofs: Unknown parameter 'ì'
[  142.087547][ T7943] autofs: Unknown parameter 'ì'
[  142.087774][ T7943] autofs: Unknown parameter 'ì'
[  142.087992][ T7943] autofs: Unknown parameter 'ì'
[  142.092846][ T7943] autofs: Unknown parameter 'ì'
[  142.093083][ T7943] autofs: Unknown parameter 'ì'
[  142.093305][ T7943] autofs: Unknown parameter 'ì'
[  142.093528][ T7943] autofs: Unknown parameter 'ì'
[  142.093739][ T7943] autofs: Unknown parameter 'ì'
[  142.093967][ T7943] autofs: Unknown parameter 'ì'
[  142.094191][ T7943] autofs: Unknown parameter 'ì'
[  142.094420][ T7943] autofs: Unknown parameter 'ì'
[  142.094626][ T7943] autofs: Unknown parameter 'ì'
[  142.094855][ T7943] autofs: Unknown parameter 'ì'
[  142.095062][ T7943] autofs: Unknown parameter 'ì'
[  142.095290][ T7943] autofs: Unknown parameter 'ì'
[  142.095509][ T7943] autofs: Unknown parameter 'ì'
[  142.095734][ T7943] autofs: Unknown parameter 'ì'
[  142.095940][ T7943] autofs: Unknown parameter 'ì'
[  142.096164][ T7943] autofs: Unknown parameter 'ì'
[  142.096379][ T7943] autofs: Unknown parameter 'ì'
[  142.096601][ T7943] autofs: Unknown parameter 'ì'
[  142.096807][ T7943] autofs: Unknown parameter 'ì'
[  142.097051][ T7943] autofs: Unknown parameter 'ì'
[  142.097260][ T7943] autofs: Unknown parameter 'ì'
[  142.097483][ T7943] autofs: Unknown parameter 'ì'
[  142.097689][ T7943] autofs: Unknown parameter 'ì'
[  142.097912][ T7943] autofs: Unknown parameter 'ì'
[  142.124379][ T7948] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.849'.
[  143.797138][    C0] ------------[ cut here ]------------
[  143.797152][    C0] WARNING: net/mac80211/rx.c:5601 at ieee80211_rx_list+0x216c/0x3000, CPU#0: syz.4.851/7965
[  143.800086][    C0] Modules linked in:
[  143.800856][    C0] CPU: 0 UID: 0 PID: 7965 Comm: syz.4.851 Tainted: G             L      syzkaller #0 PREEMPT 
[  143.802837][    C0] Tainted: [L]=SOFTLOCKUP
[  143.803608][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  143.805430][    C0] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[  143.806830][    C0] pc : ieee80211_rx_list+0x216c/0x3000
[  143.807825][    C0] lr : ieee80211_rx_list+0x216c/0x3000
[  143.808813][    C0] sp : ffff80008f7e7aa0
[  143.809560][    C0] x29: ffff80008f7e7cc0 x28: dfff800000000000 x27: ffff0000f2280fc0
[  143.811083][    C0] x26: ffff700011efcf6c x25: 1fffe00018b09fab x24: 0000000000000001
[  143.812565][    C0] x23: ffff0000f22832c8 x22: ffff80008f7e7d40 x21: ffff0000f2280940
[  143.814080][    C0] x20: ffff0000f228177d x19: ffff0000c584fc80 x18: 1fffe000349f7028
[  143.815547][    C0] x17: 3004320000020601 x16: 01032418120c968b x15: 0000000000000001
[  143.815843][ T7961] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  143.818256][    C0] x14: 0000000000995def x13: 0000000000000009 x12: 0000000000000009
[  143.819810][    C0] x11: 0000000009528823 x10: ffff0000f2281010 x9 : 0000000000000101
[  143.821337][    C0] x8 : 0000000000000000 x7 : ffff8000861ced14 x6 : 0000000000000000
[  143.822915][    C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000861cbd4c
[  143.824516][    C0] x2 : 0000000000000000 x1 : ffff0000d9309d80 x0 : 0000000000000000
[  143.826128][    C0] Call trace:
[  143.826781][    C0]  ieee80211_rx_list+0x216c/0x3000 (P)
[  143.827868][    C0]  ieee80211_rx_napi+0x18c/0x370
[  143.828797][    C0]  ieee80211_handle_queued_frames+0xc8/0x17c
[  143.829921][    C0]  ieee80211_tasklet_handler+0x20/0x30
[  143.830967][    C0]  tasklet_action_common+0x1dc/0x278
[  143.831979][    C0]  tasklet_action+0x68/0x8c
[  143.832790][    C0]  handle_softirqs+0x324/0xcbc
[  143.833670][    C0]  __do_softirq+0x14/0x20
[  143.834461][    C0]  ____do_softirq+0x10/0x1c
[  143.835271][    C0]  call_on_irq_stack+0x30/0x48
[  143.836131][    C0]  do_softirq_own_stack+0x1c/0x28
[  143.837058][    C0]  __irq_exit_rcu+0x10c/0x318
[  143.837925][    C0]  irq_exit_rcu+0x14/0x84
[  143.838758][    C0]  el1_interrupt+0x40/0x60
[  143.839562][    C0]  el1h_64_irq_handler+0x18/0x24
[  143.840432][    C0]  el1h_64_irq+0x78/0x7c
[  143.841153][    C0]  _raw_spin_unlock_irqrestore+0x44/0x98 (P)
[  143.842221][    C0]  __skb_try_recv_datagram+0x148/0x404
[  143.843166][    C0]  __unix_dgram_recvmsg+0x240/0x85c
[  143.844121][    C0]  unix_dgram_recvmsg+0xcc/0xe4
[  143.845067][    C0]  sock_recvmsg_nosec+0x94/0x130
[  143.845998][    C0]  ____sys_recvmsg+0x4fc/0x608
[  143.846879][    C0]  ___sys_recvmsg+0x16c/0x1f4
[  143.847735][    C0]  do_recvmmsg+0x288/0x7d4
[  143.848536][    C0]  __sys_recvmmsg+0x1e0/0x270
[  143.849383][    C0]  __arm64_sys_recvmmsg+0xe0/0x108
[  143.850313][    C0]  invoke_syscall+0x98/0x244
[  143.851114][    C0]  el0_svc_common+0x19c/0x23c
[  143.851944][    C0]  do_el0_svc+0x4c/0x5c
[  143.852684][    C0]  el0_svc+0x60/0x1d8
[  143.853401][    C0]  el0t_64_sync_handler+0x44/0x104
[  143.854297][    C0]  el0t_64_sync+0x198/0x19c
[  143.855125][    C0] irq event stamp: 161267
[  143.855905][    C0] hardirqs last  enabled at (161266): [<ffff8000868a18b4>] _raw_spin_unlock_irqrestore+0x38/0x98
[  143.857803][    C0] hardirqs last disabled at (161267): [<ffff80008687d42c>] el1_brk64+0x20/0x54
[  143.859438][    C0] softirqs last  enabled at (159802): [<ffff80008030ae38>] handle_softirqs+0xb2c/0xcbc
[  143.861191][    C0] softirqs last disabled at (161027): [<ffff8000800203f0>] __do_softirq+0x14/0x20
[  143.862889][    C0] ---[ end trace 0000000000000000 ]---
[  143.947860][ T7980] netlink: 96 bytes leftover after parsing attributes in process `syz.6.861'.